839 reputation
311
bio website boardspace.net
location
age
visits member for 3 years, 3 months
seen Nov 22 at 3:07

I develop games for fun.


Aug
18
awarded  Yearling
Aug
18
awarded  Nice Question
Aug
18
comment Cheating or service disruption by altering client-side code
then how would you recommend detecting that a client is attempting to tamper? I'm soliciting better ideas.
Aug
15
comment email on hosting company's site hacked?
I think changing browsers is a plausible suggestion for any problem involving use of a browser. IE used to be a seething pit of security flaws, and all browsers have their share of unexplained behaviors. If your browser is compromised, misconfigured, or just plain broken, changing it will frequently "fix" the problem.
Aug
15
answered Cheating or service disruption by altering client-side code
Aug
14
revised Cheating or service disruption by altering client-side code
change the headline to "cheating" instead of "command injection"
Aug
14
comment Cheating or service disruption by altering client-side code
Thanks, you've added a lengthy exposition of what I took as a given, and omitted in the interests of keeping the posting brief. The ideas in the "mitigation" link you provided are the kind of thing I was looking for.
Aug
14
comment Cheating or service disruption by altering client-side code
Absolutely not. The server interprets the command stream as a private stream of requests, and as noted in the original post, it's very careful about invalid requests. This is about the client attempting to inject extra requests. Imagine in a shooter game the client adding extra bullets.
Aug
14
comment Cheating or service disruption by altering client-side code
Not forms, discreet commands in a continuous TCP steam
Aug
14
comment Cheating or service disruption by altering client-side code
"Command Injection" is adding his own items to the communications stream from client to server.
Aug
13
awarded  Promoter
Aug
11
comment Top 10 dangerous mistakes in C programming?
My list andromeda.com/people/ddyer/topten.html
Aug
10
comment Cheating or service disruption by altering client-side code
the "so what" is, as an alternative to finding a different line of work, to make cheating more trouble than it is worth.
Aug
10
comment Cheating or service disruption by altering client-side code
We're not on the same page. If the client is a game, and the client could use the exploit to cheat, for example.
Aug
10
comment Cheating or service disruption by altering client-side code
I think I adequately indicated awareness of all that in the original post. I'm interested in detecting such exploits and making them harder to do and less likely to be successful and/or undetected.
Aug
10
asked Cheating or service disruption by altering client-side code
Jul
28
accepted Odd “duplicate” HTTP requests
Jul
28
comment Odd “duplicate” HTTP requests
I think you're correct, but think about how silly this is. Malware can use POSTS too, so if malware could escape scrutiny so easily, their detection strategy would be seriously flawed.
Jul
27
revised Odd “duplicate” HTTP requests
added 88 characters in body
Jul
27
comment Odd “duplicate” HTTP requests
A replay attack is what the server thought it was detecting, but the context makes it unlikely that was actually the intent.