4 ms·
You can submit the input sequence used along with the high score. You've then transformed the problem for the attacker from simply sending up an artificial scor
by rictic 14y ago
You can submit the input sequence used along with the high score. You've then transformed the problem for the attacker from simply sending up an artificial score to writing a program to solve the game, which is harder and was an existing vulnerability already.
- thom 14y agoI thought this was my exact point. I was responding to a comment that replacing the database connection with an API would solve the problem. It wouldn't. Accepting a score from the client is insecure by design.