auto-win for avatar arena?

Printable View

06 Jan. 2010, 02:25pm
Raivu

auto-win for avatar arena?

Well I've been on hackthissite.org a lot lately, and I jsut got a thought (I haven't tried it yet. I plan to later)

One of the missions on hackthissite (the first realistic mission) requires you to change the value of a vote. (change "5" to "5000000000" when you're voting).

I have firebug, so flash and html isn't a problem, but do you think it would work if I changed the value of the highest vote in the avatar arena from "10" to say...150? Would we be able to force a win with this?
has anyone tried this yet?

discuss...
06 Jan. 2010, 02:27pm
Artificial

99.99% chance wouldn't work.
06 Jan. 2010, 02:28pm
Raivu

Quote:

Originally Posted by Artificial

99.99% chance wouldn't work.

I figured as much. ^_^ I'll try it later anyway though.

Why don't you think it will work?
06 Jan. 2010, 02:33pm
Artificial

They wouldn't put the vote value in the page source, would all be handled by the server.
06 Jan. 2010, 02:46pm
Raivu

Quote:

Originally Posted by Artificial

They wouldn't put the vote value in the page source, would all be handled by the server.

Aaah I get it now. :) that makes a lot of sense. So basically to do that we'd have to get into the server which we still haven't figured out how to do...(to my knowledge at least)
06 Jan. 2010, 08:55pm
Kint

Quote:

Originally Posted by Raivu

Aaah I get it now. :) that makes a lot of sense. So basically to do that we'd have to get into the server which we still haven't figured out how to do...(to my knowledge at least)

I don't think getting in is the problem, It is what will happen once you get in....
06 Jan. 2010, 08:56pm
BooBearSH

Quote:

Originally Posted by Kint

I don't think getting in is the problem, It is what will happen once you get in....

You have no idea what the hell you're talking about.
06 Jan. 2010, 08:58pm
Kint

Quote:

Originally Posted by BooBearSH

You have no idea what the hell you're talking about.

explain then ?

Either way, If you do that, I am sure gaia would notice so its not like it would be too helpful in the end
06 Jan. 2010, 09:04pm
-mc-roge

Quote:

Originally Posted by BooBearSH

You have no idea what the hell you're talking about.

Same here
----
06 Jan. 2010, 09:08pm
TEMPTii

The data that would be sent [150] would be handled by the server but a simple security feature wouldn't log it because it's not a value of 1-5 [0-4 in an array] and you'd probably be flagged or something (:
07 Jan. 2010, 02:00am
Eli

It\'s a great idea, and can probably be modified so that you do win. Just don\'t change the value to 99999..... Just make it higher than the past winners
I\'ll be looking in the arena for you, and shouldn\'t this be in bronze UG?
07 Jan. 2010, 02:02am
TEMPTii

It\'s not going in UG because it just wouldn\'t work. You can send the data to the server just fine but it won\'t accept it.

Quote:

Originally Posted by Artificial

99.99% chance wouldn't work.
07 Jan. 2010, 04:51am
Nat

This won't work. Vote values are obviously limited. Just cause you got through like challenge 2...
07 Jan. 2010, 05:53pm
Hazerofdoom

It wouldn't work.
Tried before.
Also you CAN delete comments for other peoples submissions etc.
Same with normal profile comments too.
07 Jan. 2010, 09:51pm
GAMEchief

You:
Send a vote of 5 for Avatar 1234523.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234523.
Otherwise, do nothing.
(vote of 5 saved)

You:
Send a vote of 150 for Avatar 1234567.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234567.
Otherwise, do nothing.
(nothing is saved)

That's how it would be processed. That's why it doesn't work. Gaia's not idiots. Only time ratings can be jacked like that is on shitty sites with low security (usually newly made sites with amateur programmers).
09 Jan. 2010, 01:44pm
Raivu

Quote:

Originally Posted by GAMEchief

You:
Send a vote of 5 for Avatar 1234523.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234523.
Otherwise, do nothing.
(vote of 5 saved)

You:
Send a vote of 150 for Avatar 1234567.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234567.
Otherwise, do nothing.
(nothing is saved)

That's how it would be processed. That's why it doesn't work. Gaia's not idiots. Only time ratings can be jacked like that is on shitty sites with low security (usually newly made sites with amateur programmers).

Yeah I can see why it wouldn't work now. @_@ But if it ever were to work by some different method or approach alltogether, I wouldn't want to change the vote by TOO much. just enough to give a big boost.
09 Jan. 2010, 05:22pm
TEMPTii

Quote:

Originally Posted by Raivu

Yeah I can see why it wouldn't work now. @_@ But if it ever were to work by some different method or approach alltogether, I wouldn't want to change the vote by TOO much. just enough to give a big boost.

You just can't. There is no solution in giving a rating higher than 5.
You're better off just grabbing a bunch of mules and making a program that auto votes 5 for a specified avatar.
09 Jan. 2010, 05:29pm
Souleater

wow, no one has learned how to read i guess. Alex already explained why this whole idea wouldnt work. the avatar arena is server based not flash, html, or any other source based thing, it is all server controled. the onyl way to change the value would to have you hack into the server, or get an admin account. either way, its not going to happen, at least not without the feds knocking your door down.

read the damn posts before you post.
09 Jan. 2010, 05:32pm
TEMPTii

Quote:

Originally Posted by ~Souleater~

wow, no one has learned how to read i guess. Alex already explained why this whole idea wouldnt work. the avatar arena is server based not flash, html, or any other source based thing, it is all server controled. the onyl way to change the value would to have you hack into the server, or get an admin account. either way, its not going to happen, at least not without the feds knocking your door down.

read the damn posts before you post.

He still thinks there's an exploit for this, that's the only reason this thread isn't closed D<
09 Jan. 2010, 05:51pm
Souleater

Quote:

Originally Posted by TEMPTii

He still thinks there's an exploit for this, that's the only reason this thread isn't closed D<

there is no exploit for a server based program like the avatar voting system in in the avatar arena. there are value edits on the page, but there wont be for the server.

and like i said, the only way you will be able to change the value is if you get into the server or hack an admin both ways would get you arrested and thrown in the brig.

think about it, why would gaia allow there to be an exploit like that, that is 100% under their control? there are no ways.
10 Jan. 2010, 03:33am
Raivu

Quote:

Originally Posted by ~Souleater~

there is no exploit for a server based program like the avatar voting system in in the avatar arena. there are value edits on the page, but there wont be for the server.

and like i said, the only way you will be able to change the value is if you get into the server or hack an admin both ways would get you arrested and thrown in the brig.

think about it, why would gaia allow there to be an exploit like that, that is 100% under their control? there are no ways.

Gaia would possibly (I say possibly) allow it, because there's no such thing as something that's 100% secure. I'm sure there's a way to do it, and this way I was thinking just isn't actually THE way. I think the auto-voter that TEMPTii suggested would be a good idea. Don't you win gold or some shit if you win, anyway? o.O

If someone wants to close this thread, go for it. I was just asking a question and throwing out an idea. Maybe someone would like to contribute other ideas or alternatives to achieving this goal while they're here.