Security Basics mailing list archives

Re: Securing Flash Games.


From: "NixDevs | Feeyo" <feeyo () nixdevs com>
Date: Thu, 11 Dec 2008 08:53:15 -0100 (CET)

This is correct. It it is about the scores and of course not to mention I
do not want to have a lets say automated macro running that "players" can
run so that it plays the flash game with a perfect score. But this is my
last concern. The main concern is the score manipulation in the memory.

I want to thank you all for the fast answers. I will try to have most of
the data running on the server side it self. This should be the best
option. Although it will be a little bit slower, but we can accept that.

Greetings,
Feeyo

On Wed, December 10, 2008 23:27, Razi Shaban wrote:
On Wed, Dec 10, 2008 at 10:03 PM, Michal Lovas <lovas.michal () gmail com>
wrote:
that hacking engine is a nice piece of software. anyway, with proper
data checking you should be able to prevent a misuse of your software.
you should never rely on what you get from a client browser.

you dont say what kind of technology is running on a server side. you
should do all the calculations on a server side of the software.
whether youre communicating with a telnet session, php script etc..


He's talking about flash games. What he wants to secure are the scores
stored in memory, so that people cannot fake their scores when they're
submitted to the high scores database.




Current thread: