I am tired of hackers hacking my maps. It took me 1 hour of work today just to re-do a few elements on my crypt to prevent hackers. It doesn't matter how much I protect! My custom map Debates has more than 10 different crypts that decrypt separately and the results must match, but hackers are still downloading my LOCKED maps and studying my decrypt code. They are only being able to hack because locked maps are not locked at all.
In other words, it's being annoying to keep protecting my online ranking and changing crypt. This is the second time that it happens. Blizzard should make the banks server-sided or at LEAST crypt the locked maps.
Ps.: Before trolling that I'm just not protecting enough, see the screenshot attached of one of the 10 decrypt triggers.
In this case, the thing that does not have enough protection is the way map is locked, not your simple encryption. As long as they can access the code, they can know how to exploit their bank file.
I'm not sure about this but are you sure your map is locked ? And are you sure your bank data is not predictable enough for ppl to guess without even opening the map ?
If I was making a map that had locks and such in it I wouldn't set it so it was set in stone for each play, I would make it so at the map initialization each code was randomized.
I'm using a protected Top10 high scores page as well since beta phase 1.
Use a constant seed to generate the parity check, and when that happens, you just need to upload the map again to reset all high scores and let them spread again. If you wish, hardcode the old ones first. It will come down to whoever gets bored first, except they will need create new values all over again while you only need a few clicks.
That's the best you can do until Blizzard decides to make Banks server-side or encrypt maps for real.
I read all suggestions above and I already have some of them and many more. I can reset my whole ranking in seconds, but this is not right with the other players, so I have to clean it manually. Also, each Debates player has a 22-digits ID that must match. There's also many other things I won't talk, but it took me a lot of work. I am 100% sure they read my triggers.
I'm not sure about this but are you sure your map is locked ? And are you sure your bank data is not predictable enough for ppl to guess without even opening the map ?
Yes, my map is locked, 100% sure.
My bank is totally unpredictable. It has a weird name and well protected. If you change a single number in the bank, it will corrupt it and reset your score. It's also impossible to swap scores because each value has its own crypt. To change you score, you have to change almost everything.
RSA works SOMEHOW with random numbers.... just saying.
Basically, go look up private/public key encryption w/ a random seed tacked in. Right now all someone has to do is see how your bank file changes PER SCORE CHANGE to see how you encrypt. More effort than I would like to see people wasting... but meh...
Then even trying to encrypt it is a tremendous waste of time. You will NEVER beat out the dedicated white/black hat who decides they want to be at the top of your list, especially when it's handled client side. Of course, you COULD always set a standard and encrypt based off the rotation/position of a quantum particle. [/sarcasm]
lol, yeah banks will always be able to be hacked, just as any video game can be hacked and crack... theres nothing we can do about it... However, blizz could do something to make it a good deal harder for the normal user to edit it {aka you cant just open it with a text file lol}. Best solution would be server side... but that most likley wont happen. -sigh-
Right now all someone has to do is see how your bank file changes PER SCORE CHANGE to see how you encrypt. More effort than I would like to see people wasting... but meh...
He will just see 10-20 digits being randomly changed to another digit when he scores. It's impossible to track down because there's more than 4 distinct math functions on it.
2 "known" data points are not necessarily related.
3 "known" data points are a pattern.
If you generate even Score = 1, 2, and 3 respectively, you can break the algorithm. Period. No if, ands, or buts. Without a random seed, you only have weak encryption, based on the hope that no one DOES generate any three known values. So please, save yourself time and stop trying to encrypt it.
I sure know hacking is possible. However I just have doubt why would they bother hacking into a locked maps and how protective it is. So we're all just raising possibilities for easier method.
I sure know hacking is possible. However I just have doubt why would they bother hacking into a locked maps and how protective it is. So we're all just raising possibilities for easier method.
locked maps are not protected at all. It's all on your pc, you can just open with the script editor on the map editor.
By the way, my crypt includes a random 22-digits number that I call Debates' player ID. Each player has one id that is also mixed together with the score.
Couldn't you save it with like... lets say you are trying to save 3 single numbers, can't you add like a random generated numbers between them and just read the ones you know are it? Like, You're value to save is 666. It saves to the bank as, ====66====6== , ofc the = would be real numbers. Also make sure they can't save the same thing to the bank. So the score always changes. Wouldn't that work? I haven't messed with banks, but... sounds good?
I am tired of hackers hacking my maps. It took me 1 hour of work today just to re-do a few elements on my crypt to prevent hackers. It doesn't matter how much I protect! My custom map Debates has more than 10 different crypts that decrypt separately and the results must match, but hackers are still downloading my LOCKED maps and studying my decrypt code. They are only being able to hack because locked maps are not locked at all.
In other words, it's being annoying to keep protecting my online ranking and changing crypt. This is the second time that it happens. Blizzard should make the banks server-sided or at LEAST crypt the locked maps.
Ps.: Before trolling that I'm just not protecting enough, see the screenshot attached of one of the 10 decrypt triggers.
@RodrigoAlves: Go
WTF are you talking about?
In this case, the thing that does not have enough protection is the way map is locked, not your simple encryption. As long as they can access the code, they can know how to exploit their bank file.
I'm not sure about this but are you sure your map is locked ? And are you sure your bank data is not predictable enough for ppl to guess without even opening the map ?
If I was making a map that had locks and such in it I wouldn't set it so it was set in stone for each play, I would make it so at the map initialization each code was randomized.
Hes talking about the biggest problem we have with banks right now... we have no way to protect them correctly.
Zeroame I dont think you understand what the problem is, this is how he codes the info in the banks, you cant have that change each time rofl,
I'm using a protected Top10 high scores page as well since beta phase 1.
Use a constant seed to generate the parity check, and when that happens, you just need to upload the map again to reset all high scores and let them spread again. If you wish, hardcode the old ones first. It will come down to whoever gets bored first, except they will need create new values all over again while you only need a few clicks.
That's the best you can do until Blizzard decides to make Banks server-side or encrypt maps for real.
...Add a random seed to your encryption.
Won't work. The map needs to know the exact seed the savefile was generated with.
@UltiDrgn: Go
if its random, you cant load them correctly?
edit: I was beat to it =P
I read all suggestions above and I already have some of them and many more. I can reset my whole ranking in seconds, but this is not right with the other players, so I have to clean it manually. Also, each Debates player has a 22-digits ID that must match. There's also many other things I won't talk, but it took me a lot of work. I am 100% sure they read my triggers.
Yes, my map is locked, 100% sure. My bank is totally unpredictable. It has a weird name and well protected. If you change a single number in the bank, it will corrupt it and reset your score. It's also impossible to swap scores because each value has its own crypt. To change you score, you have to change almost everything.
Here is a copy of my bank (Score = 0):
@WhiskeeGX: Go
RSA works SOMEHOW with random numbers.... just saying.
Basically, go look up private/public key encryption w/ a random seed tacked in. Right now all someone has to do is see how your bank file changes PER SCORE CHANGE to see how you encrypt. More effort than I would like to see people wasting... but meh...
@UltiDrgn: Go
they are "set" random numbers im sure, you cant have something like this 100% random...
Point being tho... something needs to be done with these banks for sure.
@Molsterr: Go
Then even trying to encrypt it is a tremendous waste of time. You will NEVER beat out the dedicated white/black hat who decides they want to be at the top of your list, especially when it's handled client side. Of course, you COULD always set a standard and encrypt based off the rotation/position of a quantum particle. [/sarcasm]
@UltiDrgn: Go
lol, yeah banks will always be able to be hacked, just as any video game can be hacked and crack... theres nothing we can do about it... However, blizz could do something to make it a good deal harder for the normal user to edit it {aka you cant just open it with a text file lol}. Best solution would be server side... but that most likley wont happen. -sigh-
He will just see 10-20 digits being randomly changed to another digit when he scores. It's impossible to track down because there's more than 4 distinct math functions on it.
@RodrigoAlves: Go
I must say im impressed with your encryptions RodrigoAlves
@RodrigoAlves: Go
2 "known" data points are not necessarily related. 3 "known" data points are a pattern.
If you generate even Score = 1, 2, and 3 respectively, you can break the algorithm. Period. No if, ands, or buts. Without a random seed, you only have weak encryption, based on the hope that no one DOES generate any three known values. So please, save yourself time and stop trying to encrypt it.
I sure know hacking is possible. However I just have doubt why would they bother hacking into a locked maps and how protective it is. So we're all just raising possibilities for easier method.
locked maps are not protected at all. It's all on your pc, you can just open with the script editor on the map editor.
By the way, my crypt includes a random 22-digits number that I call Debates' player ID. Each player has one id that is also mixed together with the score.
Couldn't you save it with like... lets say you are trying to save 3 single numbers, can't you add like a random generated numbers between them and just read the ones you know are it? Like, You're value to save is 666. It saves to the bank as, ====6
6====6== , ofc the = would be real numbers. Also make sure they can't save the same thing to the bank. So the score always changes. Wouldn't that work? I haven't messed with banks, but... sounds good?