Visi raportai
digupadventure_displayed pranešimai
#97992: "Secret cards from other player are leaked "
Apie ką šis pranešimas?
Kas nutiko? Pasirinkite iš žemiau esančio sąrašo
Taisyklės: Nebuvo laikytasi žaidimo taisyklių
Detalus apibūdinimas
• Į kurias taisykles neatsižvelgiama BGA žaidimo versijoje
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• Ar taisyklių pažeidimas matomas žaidimo atkartojime? Jeigu taip, kuris veiksmo numeris?
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• Kokia tavo naršyklė?
Google Chrome v116
Raportų istorija
JustinFernal • Klaida dar neištirta programuotojų:
2023 rugs. 8. 20:09 • The messages corresponding to other players actions can be easily intercepted in the network console of any browser.
I don't know if everything is accessible or only certain moves related to the mine (quick look at the Websocket frames makes me think that it is everything, but not sure yet : I didn't try to understand them fully).
Advice : a security check should be done for this game, and then probably a big refactoring, as any information not visible to a player should NOT be sent at all to this player, even if not displayed.
I don't know if everything is accessible or only certain moves related to the mine (quick look at the Websocket frames makes me think that it is everything, but not sure yet : I didn't try to understand them fully).
Advice : a security check should be done for this game, and then probably a big refactoring, as any information not visible to a player should NOT be sent at all to this player, even if not displayed.
El_Guigui_13 • Klaida dar neištirta programuotojų:
2024 saus. 31. 11:08 • All the time when a face-down card is replaced by a face-up card, the animation allows the face-down card to be seen.
This is a violation of the rules of the game. It should not be possible for the opponent to see the replaced card.
This is a violation of the rules of the game. It should not be possible for the opponent to see the replaced card.
totem54 • Klaida dar neištirta programuotojų:
2024 saus. 31. 12:10 • el guigui 13 m'a demandé de signaler le bug c'est donc ce que je fais mais je n'ai pas attention au bug durant la partie.
Jack Cannon • Klaida dar neištirta programuotojų:
2024 saus. 31. 14:17 • I confirm the problem and wish that can be solved soon
El_Guigui_13 • Klaida dar neištirta programuotojų:
2024 saus. 31. 14:37 • Here's an example: the card in position 8 is hidden; when it's replaced by the red 8, the opponent can clearly see that it's a skeleton.
imgur.com/a/2ILsd4n
imgur.com/a/2ILsd4n
Papildyti šį raportą
Pridėkite čia viską, kas atrodo svarbu, kad atkurti šią klaidą arba suprasti jūsų pasiūlymą:
- Kitas stalo ID / ėjimo ID
- Ar F5 išsprendė šią problemą?
- Ar problemos atsirado keletą kartų? Kiekvieną kartą? Atsitiktiniu metu?
- Jei turite klaidos nuotrauką (rekomenduojama padaryti), galite panaudoti Imgur.com bei nuotrauką įkelti bei čia įklijuoti nuorodą.