auto-win for avatar arena?

[Raivu]

Well I've been on hackthissite.org a lot lately, and I jsut got a thought (I haven't tried it yet. I plan to later)

One of the missions on hackthissite (the first realistic mission) requires you to change the value of a vote. (change "5" to "5000000000" when you're voting).

I have firebug, so flash and html isn't a problem, but do you think it would work if I changed the value of the highest vote in the avatar arena from "10" to say...150? Would we be able to force a win with this?
has anyone tried this yet?

discuss...

[Artificial]

99.99% chance wouldn't work.

[Raivu]

99.99% chance wouldn't work.

I figured as much. ^_^ I'll try it later anyway though.

Why don't you think it will work?

[Artificial]

They wouldn't put the vote value in the page source, would all be handled by the server.

[Raivu]

They wouldn't put the vote value in the page source, would all be handled by the server.

Aaah I get it now. that makes a lot of sense. So basically to do that we'd have to get into the server which we still haven't figured out how to do...(to my knowledge at least)

[Kint]

Aaah I get it now. that makes a lot of sense. So basically to do that we'd have to get into the server which we still haven't figured out how to do...(to my knowledge at least)

I don't think getting in is the problem, It is what will happen once you get in....

[BooBearSH]

I don't think getting in is the problem, It is what will happen once you get in....

You have no idea what the hell you're talking about.

[Kint]

You have no idea what the hell you're talking about.

explain then ?

Either way, If you do that, I am sure gaia would notice so its not like it would be too helpful in the end

[-mc-roge]

You have no idea what the hell you're talking about.

Same here
----

[TEMPTii]

The data that would be sent [150] would be handled by the server but a simple security feature wouldn't log it because it's not a value of 1-5 [0-4 in an array] and you'd probably be flagged or something (:

[Eli]

It's a great idea, and can probably be modified so that you do win. Just don't change the value to 99999..... Just make it higher than the past winners
I'll be looking in the arena for you, and shouldn't this be in bronze UG?

[TEMPTii]

It's not going in UG because it just wouldn't work. You can send the data to the server just fine but it won't accept it.

99.99% chance wouldn't work.

[Nat]

This won't work. Vote values are obviously limited. Just cause you got through like challenge 2...

[Hazerofdoom]

It wouldn't work.
Tried before.
Also you CAN delete comments for other peoples submissions etc.
Same with normal profile comments too.

[Raivu]

You:
Send a vote of 5 for Avatar 1234523.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234523.
Otherwise, do nothing.
(vote of 5 saved)

You:
Send a vote of 150 for Avatar 1234567.

Server:
If the vote is greater than 0 and less than 6, process it for Avatar 1234567.
Otherwise, do nothing.
(nothing is saved)

That's how it would be processed. That's why it doesn't work. Gaia's not idiots. Only time ratings can be jacked like that is on shitty sites with low security (usually newly made sites with amateur programmers).

Yeah I can see why it wouldn't work now. @_@ But if it ever were trk by some different method or approach alltogether, I wouldn't want to change the vote by TOO much. just enough to give a big boost.

[TEMPTii]

Yeah I can see why it wouldn't work now. @_@ But if it ever were trk by some different method or approach alltogether, I wouldn't want to change the vote by TOO much. just enough to give a big boost.

You just can't. There is no solution in giving a rating higher than 5.
You're better off just grabbing a bunch of mules and making a program that auto votes 5 for a specified avatar.

[Souleater]

wow, no one has learned how to read i guess. Alex already explained why this whole idea wouldnt work. the avatar arena is server based not flash, html, or any other source based thing, it is all server controled. the onyl way to change the value would to have you hack into the server, or get an admin account. either way, its not going to happen, at least not without the feds knocking your door down.

read the damn posts before you post.

[TEMPTii]

wow, no one has learned how to read i guess. Alex already explained why this whole idea wouldnt work. the avatar arena is server based not flash, html, or any other source based thing, it is all server controled. the onyl way to change the value would to have you hack into the server, or get an admin account. either way, its not going to happen, at least not without the feds knocking your door down.

read the damn posts before you post.

He still thinks there's an exploit for this, that's the only reason this thread isn't closed D<

[Souleater]

He still thinks there's an exploit for this, that's the only reason this thread isn't closed D<

there is no exploit for a server based program like the avatar voting system in in the avatar arena. there are value edits on the page, but there wont be for the server.

and like i said, the only way you will be able to change the value is if you get into the server or hack an admin both ways would get you arrested and thrown in the brig.

think about it, why would gaia allow there to be an exploit like that, that is 100% under their control? there are no ways.

[Raivu]

there is no exploit for a server based program like the avatar voting system in in the avatar arena. there are value edits on the page, but there wont be for the server.

and like i said, the only way you will be able to change the value is if you get into the server or hack an admin both ways would get you arrested and thrown in the brig.

think about it, why would gaia allow there to be an exploit like that, that is 100% under their control? there are no ways.

Gaia would possibly (I say possibly) allow it, because there's no such thing as something that's 100% secure. I'm sure there's a way to do it, and this way I was thinking just isn't actually THE way. I think the auto-voter that TEMPTii suggested would be a good idea. Don't you win gold or some shit if you win, anyway? o.O

If someone wants to close this thread, go for it. I was just asking a question and throwing out an idea. Maybe someone would like to contribute other ideas or alternatives to achieving this goal while they're here.