How I Cheated Mozilla's New HTML5 Game - Browser Quest

http://www.raymondcamden.com/index.cfm/2012/3/28/How-I-cheated-Mozillas-new-HTML5-Game

by Garbage • 14 years ago

47 24 14 years ago

stcredzero• 14 years ago

Neat! One can also just walk north without passing next to a monster, waltz into the throne room and wait until the crowd there starts killing the big boss. Chances are, you get to pick up the sword and armor in a matter of minutes.

0x006A• 14 years ago

might even be faster, but its an html5 game so you have to play with the html5 tech in it(i.e. localStorage).

arocks• 14 years ago

As the author himself comments "To be honest, I don't think I would have done it any better. There is no player on player fighting, so my cheating only ruined the game for myself. It didn't really do anything else."

vog2• 14 years ago

Is it just me, or do the graphics of that game look extraordinarily similar to "The Legend of Zelda: A Link to the Past"? I'm not saying it is a rip-off, or that creating a clone of a popular game is bad at all. But the extreme similarity is very confusing. It's not only the graphic tiles, but also the map, the characters, everything.

rprime2• 14 years ago

The use of pixel art is very common, and well, as far as I know they wanted a Zelda like game, just because are similar dosen't mean is a copy. They weren't trying to make an original game just demonstrate a point.

vog2• 14 years ago

It's not just the pixel art. It's the style of houses, grass, the color scheme, and the whole map. It's not that I think they deserve to be sued! But the similarity is so high, it is simply confusing to play this when you have played Zelda a lot in the past.

TazeTSchnitzel• 14 years ago

It's probably just inspired by it. But many games have similar styles. Some aspects of it remind me of Pokemon, for instance.

rprime2• 14 years ago

I don't know why this hit the front page, shouldn't that be a logical thing to assume when it comes to HTML5 games? That HTML5 games are not secure and in order to get what you want you just need to have some Google Dev tools skills.

nkassis2• 14 years ago

No that's not the problem. This is no different than what game such as World of Warcraft have to deal with, you can't trust the client. The server should be validating the players moves, gear etc.

Sure you can hack the javascript easier than you can a compiled program but that never stopped modders.

starwed• 14 years ago

>The server should be validating the players moves, gear etc.

Well, only if it matters. Here it just doesn't.

clippit• 14 years ago

It's just a demo so there's no strange at all, IMHO

reustle• 14 years ago

Every time I tried this, chrome would "oh snap".

why-el• 14 years ago

Just curious, are there any good practices that would minimize the damage?

YmMot• 14 years ago

Don't trust the game client.

naeem• 14 years ago

Just store it on the server. There was no reason for inventory information to be hosted client-side. If the data was stored on the server and fed real-time you wouldn't have the security issue. What you WOULD have is latency issues, which is the primary issue with Node-based games (from my own experience), so that's probably why they avoided it. In a real game, that's how you'd have to do it.

troygoode• 14 years ago

The reason it is stored client-side is that it is just a demo app - there is no login, no truly persistent characters (I can't play the character I started at work from home), and no PvP.

DasIch• 14 years ago

You just have to validate everything on the server.

capsule_toy• 14 years ago

You can also do this with most Flash games. A few companies encrypt the data, but in theory, the encryption key can still be reverse-engineered since it's on the client side. It just usually isn't worth the effort.

necenzurat• 14 years ago

Watch out, we got a local storage cheater bad ass over here. Now seriously, people had cheats on games like WOW, Lineage etc witch are online (DB is online) and could cheat. The best ideea is NOT TO TRUST the client. But still is just a proof of concept and playing and not cheating was nice, 30 minutes tops to finish it (all achievements)

theunixbeard• 14 years ago

Am I doing something really stupid, or is this not working anymore????

How I Cheated Mozilla's New HTML5 Game - Browser Quest

Related Stories