Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Memory Hack Vulnerability #4

Open
briveramelo opened this issue Feb 2, 2020 · 1 comment
Open

Memory Hack Vulnerability #4

briveramelo opened this issue Feb 2, 2020 · 1 comment

Comments

@briveramelo
Copy link

public async Task<string> SubmitScoreAsync(int score)

This is still subject to a memory hack (modifying the int score passed into this function) with a tool like Cheat Engine and more. See https://github.com/dsasmblr/game-hacking

Given this significant vulnerability, what problem does the blockchain solve?

@juanfranblanco
Copy link
Member

juanfranblanco commented Feb 2, 2020

This is a sample, of how you can use the blockchain to store permanently your gamer profile, scores, purchases, etc. This is not a sample on gaming security, actually I wanted to see if anybody will tell me if they have hacked the http://flappyeth.nethereum.com/, as you have said tampering the score, finding the private key etc.

Of course this is easily hacked, it can be easily decompiled the app too. A more complex solution will be to combine the game play with state channnels, and server side step by step validation of play.

Of course it also depends on your scenario. If your intention is to build your reputation as a gamer. Once you you attach your identity (gamer player avatar across different games), would you want to be known as a cheat ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants