Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[DerWaldschrat]

It distracts from the much larger, more important problems for which communication actually does something important.

Like the fact that they have BASICALLY NO SECURITY AT ALL

Well, thats definitely a point which they have to fix in the future...

[Grujah]

or that almost nothing works, at least right now. Couldn't start SP or Adventure.. now it's black screen, hopefully the MP game will start today.

[DStu]

It distracts from the much larger, more important problems for which communication actually does something important.

Like the fact that they have BASICALLY NO SECURITY AT ALL

Well, thats definitely a point which they have to fix in the future...

...or, better, in the past.

[Watno]

Or at least in the present

[Captain_Frisk]

Or at least in the present

They have some great security in place now - not enough server capacity to handle the load - so nobody can do anything insecure.

[polonkus]

Or at least in the present

Maybe in an alternate dimension?

[ashersky]

Someone remind me, which card is it that gives the player:

+1 Neverending Status Bar
Trash your computer.  If Goko Online Dominion Starts, you win.  Forever.

[syzygy]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

[DerWaldschrat]

Well, nothing to add to the attached image...

[jsh357]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

Right now, unless they actually fixed the bug it's possible to write functioning javascript in the chat.  That alone makes me not want to even consider paying for anything.  I would not trust this company with any personal information just yet.

[DStu]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

http://forum.dominionstrategy.com/index.php?topic=4136.0
http://forum.dominionstrategy.com/index.php?topic=4095.0

[Captain_Frisk]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

As far as I understand it the following are concerns:

1. Passwords are sent in plain text (so don't do this on public wifi folks)
2. javascript in the chat lobby isn't escaped - so you can execute JS on everyone elses machines
3. the game server doesn't validate messages from the client - so you can do things like play bridges from the supply that you don't own - or just buy colonies without enough money for them.
4. full game state is sent to your client - so you can see whats in your opponents hand

[ashersky]

Adventure Mode Level 1:

Base Set: Act 1, Game 1

Only yesterday you were a mere heir, but today you are ruler of the kingdom!  Your parents, the Prince and Princess, met mysterious deaths while vacationing at Chesmarsh Villa in the countryside.  Your kingdom may be small, with only three Estates and a small supply of Copper, but it's now yours to command.

That's what I can see.  I also think it's played against "Alice the Serf" and has some kingdom cards, neither of which will load.  It's ranked three stars, whatever that means.  The begin button is sad and unresponsive.

[PenPen]

I'm patiently waiting for the thing to load...waiting...waiting...argh.

[Grujah]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

As far as I understand it the following are concerns:

1. Passwords are sent in plain text (so don't do this on public wifi folks)

Whaoh.

[polonkus]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

As far as I understand it the following are concerns:

1. Passwords are sent in plain text (so don't do this on public wifi folks)
2. javascript in the chat lobby isn't escaped - so you can execute JS on everyone elses machines
3. the game server doesn't validate messages from the client - so you can do things like play bridges from the supply that you don't own - or just buy colonies without enough money for them.
4. full game state is sent to your client - so you can see whats in your opponents hand

Hadn't seen 4 before.
This is like a laundry list of worst mistakes from Web Dev 101.

[andwilk]

I haven't heard the security concerns before.  Is the concern about individual accounts or more general server hacking?

As far as I understand it the following are concerns:

1. Passwords are sent in plain text (so don't do this on public wifi folks)
2. javascript in the chat lobby isn't escaped - so you can execute JS on everyone elses machines
3. the game server doesn't validate messages from the client - so you can do things like play bridges from the supply that you don't own - or just buy colonies without enough money for them.
4. full game state is sent to your client - so you can see whats in your opponents hand

[PenPen]

The game...thing loads really slowly for me and then pops up a few connections lost.

Now I can get into the game! But then I can't start any games. It lags like hell when I click on anything.

I think I'll wait for a few days and try again.

[zazas]

hmm, by the comments and first look isotropic is a lot of times more advanced and executed better than goko now :? Didnt they tryed to ask/hire Dougz for help, because now it looks childish with all these bugs/not finished things popping out :?

[jotheonah]

Just popping in without reading. Did anyone "that's what she said" the thread title yet? Because, that's what she said.

[jonts26]

Just popping in without reading. Did anyone "that's what she said" the thread title yet? Because, that's what she said.

Well it went up, but it's having trouble staying up. Apparently everyone is trying to get on at the same time. And it just can't handle the load.

[theory]

Ahh, if only FunSockets had built online Dominion on yo momma instead of Goko. 

[Bondles]

As far as I understand it the following are concerns:

1. Passwords are sent in plain text (so don't do this on public wifi folks)
2. javascript in the chat lobby isn't escaped - so you can execute JS on everyone elses machines
3. the game server doesn't validate messages from the client - so you can do things like play bridges from the supply that you don't own - or just buy colonies without enough money for them.
4. full game state is sent to your client - so you can see whats in your opponents hand

Oh wow.  I really don't mind the payment model - but this?  This is a pooch, thoroughly screwed.

[ashersky]

And...it's down.  "Service Unavailable."

[PSUmvp]

Im pretty sure the first acheivement badge should be getting the thing to load...  second one appears to be properly entering the capture text.

These seem pretty much unattainable, not certain they need to develop any further badges.