1
Goko Dominion Online / Re: Do we know when exactly it's going up?
« on: August 20, 2012, 11:52:12 am »As far as I understand it the following are concerns:
1. [...]
3. the game server doesn't validate messages from the client - so you can do things like play bridges from the supply that you don't own - or just buy colonies without enough money for them.
Just to put things into perspective, here is a post from dougz from april 2012, proving that isotropic (even recently!) had also quite severe bugs (similar to 3. above):
Turns out that (until last night) the server didn't actually check to see if you had enough money to buy the card you asked to buy. Normally it's not a problem because the interface only makes cards clickable if you can afford them, but if you hack the javascript, or insert a proxy that modifies the request on the way to the server (as bdhcompany did) it would happily sell you any card in the supply whether you had the money for it or not. Whoops!