#129385: "It is possible to see other players' destinations by inspecting the websocket connection"

• Jei ekrane matote kokį nors klaidos pranešimą, įklijuokite jį čia.
Each player's destinations should only be made known to them.
• Prašome paaiškinti, ką norėjote padaryti, ką padarėte ir kas atsitiko
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kokia tavo naršyklė?
Google Chrome v126

• Prašome nukopijuoti / įklijuoti tekstą, rodomą anglų kalba, o ne savo kalba. Jei turite klaidos nuotrauką (rekomenduojama padaryti), galite panaudoti Imgur.com bei nuotrauką įkelti bei čia įklijuoti nuorodą.
Each player's destinations should only be made known to them.
• Ar šis tekstas yra translation system? Jei taip, ar jis buvo išverstas daugiau nei 24 valandas?
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kokia tavo naršyklė?
Google Chrome v126

• Prašome paaiškinti siūlomą pakeitimą tiksliai ir glaustai, kad būtų kuo lengviau suprasti, ką jūs siūlote.
Each player's destinations should only be made known to them.
• Kokia tavo naršyklė?
Google Chrome v126

• Kas buvo pavaizduota ekrane, tave užblokavus (juodas ekranas? Nepilna žaidimo sąsaja? Klaidos pranešimas?)
Each player's destinations should only be made known to them.
• Kokia tavo naršyklė?
Google Chrome v126

• Į kurias taisykles neatsižvelgiama BGA žaidimo versijoje
Each player's destinations should only be made known to them.
• Ar taisyklių pažeidimas matomas žaidimo atkartojime? Jeigu taip, kuris veiksmo numeris?
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kokia tavo naršyklė?
Google Chrome v126

• Kurį žaidimo veiksmą norėjai atlikti?
Each player's destinations should only be made known to them.
• Ką reikia padaryti, kad iššauktum šį žaidimo veiksmą?
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kas įvyko kai bandei tai padaryti (klaidos pranešimas, žaidimo būsenos pranešimas, ...)?
• Kokia tavo naršyklė?
Google Chrome v126

• Kuriuo žaidimo metu problema atsirado (koks buvo tuometinis žaidimo nurodymas)?
Each player's destinations should only be made known to them.
• Kas įvyko kai bandei atlikti žaidimo veiksmą (klaidos pranešimas, žaidimo būsenos pranešimas, ...)?
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kokia tavo naršyklė?
Google Chrome v126

• Aprašykite rodomą problemą. Jei turite klaidos nuotrauką (rekomenduojama padaryti), galite panaudoti Imgur.com bei nuotrauką įkelti bei čia įklijuoti nuorodą.
Each player's destinations should only be made known to them.
• Kokia tavo naršyklė?
Google Chrome v126

• Prašome nukopijuoti / įklijuoti tekstą, rodomą anglų kalba, o ne savo kalba. Jei turite klaidos nuotrauką (rekomenduojama padaryti), galite panaudoti Imgur.com bei nuotrauką įkelti bei čia įklijuoti nuorodą.
Each player's destinations should only be made known to them.
• Ar šis tekstas yra translation system? Jei taip, ar jis buvo išverstas daugiau nei 24 valandas?
It is visible on game replay, and also visible when playing a new game.

How to reproduce:
1. Start/Join a new game.
2. Open the Chrome devtools to the Network tab.
3. Refresh the game webpage.
4. Find the websocket connection that contains moves (websocket connections are easily identified by status code 101 (protocol upgrade); there should be two websockets and the one that contains moves is the second one).
5. Click on it to look at the incoming websocket packets.
6. Keep some destinations using the game UI.
7. Observe that a websocket packet will be received containing some JSON, which contains `\"type\":\"destinationsPicked\"`. This same packet also contains the pairs of cities that form each destination you picked. They look like `\"from\":6,\"to\":31`, where "6" and "31" will be replaced by the actual destinations you picked. These numbers are the cities on the map. While it isn't possible to match numbers to cities right now, it is possible once you have played enough games.
8. Go back to step 1, and repeat until you have figured out which destination each number refers to.
9. Go back to step 1, but now observe that for step 7, you actually receive a packet anytime any player chooses their cards, and the packet contains the player's username as well as the destinations that they have to connect.

Now I have not built a game on BGA before, but a quick read of boardgamearena.com/doc/Tutorial_hearts suggests that it is possible to notify just one player (to tell them their private information). If that is implementable, it should be implemented to prevent cheating.
• Kokia tavo naršyklė?
Google Chrome v126

• Prašome paaiškinti siūlomą pakeitimą tiksliai ir glaustai, kad būtų kuo lengviau suprasti, ką jūs siūlote.
Each player's destinations should only be made known to them.
• Kokia tavo naršyklė?
Google Chrome v126

Apie ką šis pranešimas?

Kas nutiko? Pasirinkite iš žemiau esančio sąrašo

Kas nutiko? Pasirinkite iš žemiau esančio sąrašo

Patikrinkite, ar jau yra pranešimas apie tą patį dalyką

Detalus apibūdinimas

Raportų istorija

Papildyti šį raportą

Pakeisti raporto būseną į:

Pagalba

Prisidėti

Sekite mus