5 ms·

What about people who do this 10x a day to play free games forever?

by srcreigh 5y ago

ric2b 5y ago
Force brand new accounts with no purchase history to wait for the transaction to confirm?
Siira 5y ago
The UX sucks sufficiently that it shouldn't affect their bottom line.
naniwaduni 5y ago
How much worse is this than people who do this 0.5x a day with 48-hour returns?
gambiting 5y ago
You let the user do it twice then ban them from using bitcoin payments?
- SkittyDog 5y ago
  They already answered this question in their previous post... The fraudster scales up their account creation. You ban then after 2, they switch to a new account... which you ban after 2, and they switch to another new account, which you ban after 2... and so on, ad infinitum.
  - miracle2k 5y ago
    Accounts here can be blocked after an average of 10 minutes.
  - stale2002 5y ago
    But then what? Someone downloads and plays a game for an hour, gets banned, then goes through the whole process of having to do all that again? Doesn't seem like a good user experience. All to get a free hour of gameplay? There are easier ways of pirating games. The only possible usecase for this kind of fraud would be if you can buy digital items, transfer and then sell those digital items. But even then, that might be difficult to do all in 10 minutes.
    - SkittyDog 5y ago
      I don't care how well it would work, and I'm not arguing any of your points... I don't even understand why you people like these video games, so I'm the last person who should opine on what constitutes a good UX. My comment was intended to point out that it's parent comment didn't bother to read the grandparent comment, which had clearly answered the question it was asking. But then the parent comment author edited themself, I assume to avoid looking foolish. So I guess it's irrelevant now.
      - stale2002 5y ago
        > I don't care how well it would work Ok, so then I guess it isn't really a problem then. The whole just ban them "ad infinitum", is totally a reasonable solution to all of this.
        SkittyDog 5y ago
        ...or so say the guys sitting in the cheap seats. In practice, it may well be more complicated than that, and involve all sorts of other tradeoffs. It usually is.
        stale2002 5y ago
        > In practice, it may well be more complicated than that No, its not. If an account gets banned after an hour, all that happened is that the user got is 1 free hour of playing a video game. There are easier ways of pirating videos games than that. So really, thats good enough. You tried to claim "The fraudster scales up their account creation". And I am telling you, that if a fraudster wants to play a video game for free, there are much easier ways of doing so. By just pirating the game, for example. So that specific point is wrong. > or so say the guys sitting in the cheap seats Actually, it seems like you are the one sitting in cheap seats. Because you have already straight up admitted that you don't really know much about the industry. Whereas, people like me, who do work in the games industry, do know about what a good user experience is for people playing video games, actually know more about this than you do. So, in other words, you actually should "care how well it would work". Because how well it would work, is integral to the attack vector.
  - lifeformed 5y ago
    Making new accounts isn't trivial. You can add friction from suspicious attempts like requiring a phone number or making them wait some time. Some determined attackers might slip through but at the end of the day all you are losing is some bandwidth.
rebuilder 5y ago
Seems pretty marginal - you’d have to restart, on average, every 10 minutes.
nurettin 5y ago
Are you suggesting that there may be a human being on earth who has the tenacity to enjoy games while creating new accounts, pulling off successful bitcoin heists every 1-2 hours and risking losing their save games? And doing that forever? This website is just surreal.
- dragonwriter 5y ago
  > Are you suggesting that there may be a human being on earth who has the tenacity to enjoy games while creating new accounts, pulling off successful bitcoin heists every 1-2 hours and risking losing their save games? Most of the “tenacity” parts implied there are automatable, so it's mostly about “can people enjoy the paid-for experience of a game with ephemeral rather than durable accounts”, which, well, really depends on the design of the game.
  - nurettin 5y ago
    You don't know what implied means.

What about people who do this 10x a day to play free games forever?

ric2b 5y ago

Force brand new accounts with no purchase history to wait for the transaction to confirm?

Siira 5y ago

The UX sucks sufficiently that it shouldn't affect their bottom line.

naniwaduni 5y ago

How much worse is this than people who do this 0.5x a day with 48-hour returns?

gambiting 5y ago

You let the user do it twice then ban them from using bitcoin payments?

SkittyDog 5y ago
They already answered this question in their previous post... The fraudster scales up their account creation. You ban then after 2, they switch to a new account... which you ban after 2, and they switch to another new account, which you ban after 2... and so on, ad infinitum.
- miracle2k 5y ago
  Accounts here can be blocked after an average of 10 minutes.
- stale2002 5y ago
  But then what? Someone downloads and plays a game for an hour, gets banned, then goes through the whole process of having to do all that again? Doesn't seem like a good user experience. All to get a free hour of gameplay? There are easier ways of pirating games. The only possible usecase for this kind of fraud would be if you can buy digital items, transfer and then sell those digital items. But even then, that might be difficult to do all in 10 minutes.
  - SkittyDog 5y ago
    I don't care how well it would work, and I'm not arguing any of your points... I don't even understand why you people like these video games, so I'm the last person who should opine on what constitutes a good UX. My comment was intended to point out that it's parent comment didn't bother to read the grandparent comment, which had clearly answered the question it was asking. But then the parent comment author edited themself, I assume to avoid looking foolish. So I guess it's irrelevant now.
    - stale2002 5y ago
      > I don't care how well it would work Ok, so then I guess it isn't really a problem then. The whole just ban them "ad infinitum", is totally a reasonable solution to all of this.
      - SkittyDog 5y ago
        ...or so say the guys sitting in the cheap seats. In practice, it may well be more complicated than that, and involve all sorts of other tradeoffs. It usually is.
        stale2002 5y ago
        > In practice, it may well be more complicated than that No, its not. If an account gets banned after an hour, all that happened is that the user got is 1 free hour of playing a video game. There are easier ways of pirating videos games than that. So really, thats good enough. You tried to claim "The fraudster scales up their account creation". And I am telling you, that if a fraudster wants to play a video game for free, there are much easier ways of doing so. By just pirating the game, for example. So that specific point is wrong. > or so say the guys sitting in the cheap seats Actually, it seems like you are the one sitting in cheap seats. Because you have already straight up admitted that you don't really know much about the industry. Whereas, people like me, who do work in the games industry, do know about what a good user experience is for people playing video games, actually know more about this than you do. So, in other words, you actually should "care how well it would work". Because how well it would work, is integral to the attack vector.
- lifeformed 5y ago
  Making new accounts isn't trivial. You can add friction from suspicious attempts like requiring a phone number or making them wait some time. Some determined attackers might slip through but at the end of the day all you are losing is some bandwidth.

rebuilder 5y ago

Seems pretty marginal - you’d have to restart, on average, every 10 minutes.

nurettin 5y ago

Are you suggesting that there may be a human being on earth who has the tenacity to enjoy games while creating new accounts, pulling off successful bitcoin heists every 1-2 hours and risking losing their save games? And doing that forever? This website is just surreal.

dragonwriter 5y ago
> Are you suggesting that there may be a human being on earth who has the tenacity to enjoy games while creating new accounts, pulling off successful bitcoin heists every 1-2 hours and risking losing their save games? Most of the “tenacity” parts implied there are automatable, so it's mostly about “can people enjoy the paid-for experience of a game with ephemeral rather than durable accounts”, which, well, really depends on the design of the game.
- nurettin 5y ago
  You don't know what implied means.