Ed McMillen: Ubuntu Store Sold Super Meat Boy Without Permission, Has Yet To Pay

Re:Ed McMillen: Ubuntu Store Sold Super Meat Boy Without Per... by rictic on Sunday December 23, 2012 @11:06PM (#4961813)

You can submit the input sequence used along with the high score. You've then transformed the problem for the attacker from simply sending up an artificial score to writing a program to solve the game, which is harder and was an existing vulnerability already.

[ Parent | on HN ]

Re:Ed McMillen: Ubuntu Store Sold Super Meat Boy Without Per... by thom on Monday December 24, 2012 @05:54AM (#4962499)

I thought this was my exact point. I was responding to a comment that replacing the database connection with an API would solve the problem. It wouldn't. Accepting a score from the client is insecure by design.

[ Parent | on HN ]