Slitherine

quote:

ORIGINAL: bresh
A preset list of dice rolls can be misused to. So you know the next roll is 6. ok, skip reinforce/guards, and keep that for the combat...
And would also need new code to do battles.

Regards
Bresh

quote:


1a. Combat phase - Non trivial combat. Simple way of doing it:
a) The attacker choses his chits and sends to the defender.
b) The defender choses his cheats and the program generates the needed die rolls. None of them are shown (so no reload is possible), and the file is sent back to the attacker.
c) Results of the first turn are shown to the attacker, he decides about guard commitment and sends back to the defender.
d) The defender receives, check for first turn results and decides about guard commitment. Needed die rolls are secretly generated and stuff his sent back to attacker...
Go on until the end of the combat. No way of cheating here, large battles are often the crucial and more important ones in a game
and are now secured. Moreover, no more file exchanges then now are required.

quote:

ORIGINAL: bresh
Its more reliable to me. And possibly easier to implement.
A preset list of dice rolls can be misused to. So you know the next roll is 6. ok, skip reinforce/guards, and keep that for the combat...
And would also need new code to do battles.

quote:

ORIGINAL: Ashtar

quote:

ORIGINAL: bresh
A preset list of dice rolls can be misused to. So you know the next roll is 6. ok, skip reinforce/guards, and keep that for the combat...
And would also need new code to do battles.

Regards
Bresh

I do not want to be harsh, but I wonder again if people bother to read post before posting themselves. If you read, you will notice there is no way of doing what you fear and no need to write a radically new code for battles:

quote:


1a. Combat phase - Non trivial combat. Simple way of doing it:
a) The attacker choses his chits and sends to the defender.
b) The defender choses his cheats and the program generates the needed die rolls. None of them are shown (so no reload is possible), and the file is sent back to the attacker.
c) Results of the first turn are shown to the attacker, he decides about guard commitment and sends back to the defender.
d) The defender receives, check for first turn results and decides about guard commitment. Needed die rolls are secretly generated and stuff his sent back to attacker...
Go on until the end of the combat. No way of cheating here, large battles are often the crucial and more important ones in a game
and are now secured. Moreover, no more file exchanges then now are required.

quote:

ORIGINAL: Jimmer

By the way, if this IS a true security breach, it would be fairly easy to correct:

Create a registry key that has a non-descriptive name or whose value is encrypted. This registry key contains a "heartbeat". Every so often (probably 5 or 10 seconds), the key is updated to state how much time has passed in the game.

In addition, there is a matching value in the saved files for the game that is also updated at each heartbeat.

So, player opens the game files. < heartbeat > Player picks his chit. < heartbeat > Player notices his chit choice was a bad one. < heartbeat >

Player shuts down the game (abnormally or not -- makes no difference) and attempts to open the game files again. Game files list three fewer heartbeats than the local registry does. Game informs the host at next contact and/or sends an immediate email to host. Host must restart game due to player attempting to cheat. Use of guillotine reinstated. You get the idea.

There would be ways around this, but it would require placing a second instance of the game onto some system, and that's usually not a viable solution for most cheaters.

quote:

ORIGINAL: dodod

won't work, to easy to break password files...proved by another player in a game who actually asked us to send him one which he broke in about 5 seconds.

what is wrong with letting the attacker open the file with the picked chit, after they have been picked, and letting the next phasing player see the prior player computer roll for both?

Isn't this full proof?