Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Biderman]

The subject says it all... I keep getting server errors when I try to regester or play a game. Can't regester with fb either.

[D Bo]

I can't even get into the website - apparently it's forbidden at the moment for me.

Really not sure why I keep bothering today...I'm sure it will be more consistent in a couple days...(hopefully)

[Captain_Frisk]

I can't even get into the website - apparently it's forbidden at the moment for me.

Really not sure why I keep bothering today...I'm sure it will be more consistent in a couple days...(hopefully)

The behavior today has been reasonably consistent.  95% of the time you can't get in.  95% of the time you get in - you can't play.

[zazas]

Was able to log in at day while was at work using FB, now managed to get into page after 2-4hours, but cannot register

[Tdog]

I'm on the page, and played part of a game earlier. But, now nothing will work. Ugh.

[jmieden]

Been trying for apx 4 hours today off and on. The farthest I got was in "Adventures." I got all the way to the loading screen for the first game. It took too long to load the game state, so I was forced to resign as soon as I got in. It did let me play 1 copper before kicking me though

Now I can't log in at all.

[blueblimp]

I can't get past the captcha. So annoying. Console says:

Code: [Select]

XMLHttpRequest cannot load http://webapps.goko.com/WebApps/bus/. Origin http://www.goko.com is not allowed by Access-Control-Allow-Origin.


[Insomniac]

I can't get past the captcha. So annoying. Console says:

Code: [Select]

XMLHttpRequest cannot load http://webapps.goko.com/WebApps/bus/. Origin http://www.goko.com is not allowed by Access-Control-Allow-Origin.


LOL they don't have the header information to allow requests on goko.com from other servers and the two apps aren't on the same namespace

[Kirian]

I can't get past the captcha. So annoying. Console says:

Code: [Select]

XMLHttpRequest cannot load http://webapps.goko.com/WebApps/bus/. Origin http://www.goko.com is not allowed by Access-Control-Allow-Origin.


LOL they don't have the header information to allow requests on goko.com from other servers and the two apps aren't on the same namespace

Amateur hour.

Edit: oh wait, no, an actual amateur has an actual working version!  So these guys haven't quite made amateur hour yet.  Little league perhaps?

[adf]

Assuming you're talking about dougz, given his employer, I think it's a little unfair to call him an amateur.

[jonts26]

Your assumption would be faulty. They are referring to the goko dev team. We all think dougz is brilliant.

[Kirian]

Assuming you're talking about dougz, given his employer, I think it's a little unfair to call him an amateur.

In the case of dougz, I was meaning amateur in terms of "not getting paid."  In terms of programming in general, dougz is a pro, of course, but in terms of programming Dominion, dougz is an Olympic "amateur."

Or more properly:  we have a professional being paid like an amateur, and a bunch of amateurs being paid like pros.

[Insomniac]

Personally I'd like to be able to get in now so that I can reserve my name, but as long as its up by the 22nd I don't particularily care, sure I'd love to register and play dark ages now so I can try and prove cultist > witch but I can't

[Biderman]

I can't get past the captcha. So annoying. Console says:

Code: [Select]

XMLHttpRequest cannot load http://webapps.goko.com/WebApps/bus/. Origin http://www.goko.com is not allowed by Access-Control-Allow-Origin.


LOL they don't have the header information to allow requests on goko.com from other servers and the two apps aren't on the same namespace

Amateur hour.

Edit: oh wait, no, an actual amateur has an actual working version!  So these guys haven't quite made amateur hour yet.  Little league perhaps?

It's actually worse than that. I got in earlier today and what I learned scared the shit out of me. The emails they send you are all plain-text, which almost certainly means that the databases are plaintext too (as translating into plaintext for emails is simultaneously stupid and time consuming). So, all our log in data, email addresses, and <<CREDIT CARD INFO>> are effectively saved in .txt files. That sounds real secure >.>

But wait, there's more! The standard interface allows you're directly connect with your opponents computer, and enter computer code. To test how far this goes, I played myself on two computers. From computer A I forced computer B to shut down, simply by typing into the game.

At this point I have decided I have absolutely no interest any more. Before today I would have said that no computer programmer would ever make either of these mistakes. Now I'm forced to wonder what idiots work on this site.

tdlr: DO NOT PLAY ON THIS SITE UNLESS YOU WIDH TO HAVE YOUR COMPUTER HACKED BY YOUR OPPONENT.

[blueblimp]

But wait, there's more! The standard interface allows you're directly connect with your opponents computer, and enter computer code. To test how far this goes, I played myself on two computers. From computer A I forced computer B to shut down, simply by typing into the game.

Wait what

You mean you closed the website on the other computer, or literally shut down the computer? I don't see how the latter is possible, but I am not much of a hacker!

Edit: Yeah so I guess I am calling shenanigans on this. The client is written in Javascript and HTML. Unless you're exploiting some vulnerability in the browser too, then I don't see how this is possible at all.

[IamOBESE]

But wait, there's more! The standard interface allows you're directly connect with your opponents computer, and enter computer code. To test how far this goes, I played myself on two computers. From computer A I forced computer B to shut down, simply by typing into the game.

Wait what

You mean you closed the website on the other computer, or literally shut down the computer? I don't see how the latter is possible, but I am not much of a hacker!

Edit: Yeah so I guess I am calling shenanigans on this. The client is written in Javascript and HTML. Unless you're exploiting some vulnerability in the browser too, then I don't see how this is possible at all.

Pretty obviously fake. There's no way he got goko to work on TWO computers at once..

[ftl]

If he's in the beta, the beta still worked as of recently.

[Schlippy]

Pretty obviously fake. There's no way he got goko to work on TWO computers at once..

I liked that post. I liked it so much that I'd like to post a rofl smiley, but there seems to be none and I don't like writing rofl.

So yeah, lol or something. :>

[Biderman]

"Shut down" is the wrong phrase. What I actually did was crash it. People have been discussing how you can run javascript on the opponents computer. It's not that hard to write some code that just crashes.

[eHalcyon]

"Shut down" is the wrong phrase. What I actually did was crash it. People have been discussing how you can run javascript on the opponents computer. It's not that hard to write some code that just crashes.

There are far more malicious things you can do besides just crashing it.

[Robz888]

We are truly living in the end times.

[Robz888]

"When that day comes, you will cry out because of the king whom you have chosen for yourselves."

- 1 Samuel 8:18

[stevemarks]

we have a professional being paid like an amateur, and a bunch of amateurs being paid like pros.

Very well said.

[Biderman]

"Shut down" is the wrong phrase. What I actually did was crash it. People have been discussing how you can run javascript on the opponents computer. It's not that hard to write some code that just crashes.

There are far more malicious things you can do besides just crashing it.

Oh, I am perfectly aware of this. I have send several long emails to Goko with the details of everything that I have figured out how to break/hack on their site. Took me about two hours to write. The only reason it was not longer is I am no longer even going to the main page.

The hacker in me is interested in the possibilities of actually running a program, rather than a line of code, on the opponents computer, and is curious about how secure their databases really are...

[rspeer]

"Shut down" is the wrong phrase. What I actually did was crash it. People have been discussing how you can run javascript on the opponents computer. It's not that hard to write some code that just crashes.

The part about "translating into plaintext" didn't make much sense either. I suspect what we have here is the Goko debacle's first fan fiction.