3 ms·

I'd think you'd want to make a signed hash of each request, so the server can verify it came untampered from the client.

• gibybo 13y ago
  Candy crush does this, and circumventing it was one of the points of the article. It is hashed with a secret key from the flash client. He just extracted the key from the client and started signing the requests himself.
  • ry0ohki 13y ago
    True, although it seems not all of the calls are like that, for example the number of lives.
  • gknoy 13y ago
    He signed the requests. I think they'd need some sort of way to ensure that the level's initial settings were also used.