You are currently looking at Flamebate, our community forums. Players can discuss the game here, strategize, and role play as their characters.
You need to be logged in to post and to see the uncensored versions of these forums.
Congrats to Zagerblag for making this site better [Haxxploitation Award]
|
|||||||
|---|---|---|---|---|---|---|---|
|
I just wanted to take a moment to congratulate Zagerblag on finding and reporting a pretty serious bug. Evil Trout has awarded him the Haxxploitation E-Peen (and currently only 34 players possess this, making it pretty exclusive) for finding one of the most interesting bugs I’ve seen on this site.
If ET gives the approval, then Zagerblag & I can openly discuss it, but as some of you had already seen, during the testing phase, Zagerblag & I was able to determine a way that a single player could do many potential disruptive things, including bidding on their own Kyoubai Auctions. The potential for abuse right there was significant, and it’s very good that we’ve tightened up the security a little bit further now.
On a side note, I also did receive the Haxx Peen, but I wanted to stress that Zagerblag was the Primary on this by finding the bug and doing the first test, and I simply was his bumistant, running multiple other tests that he was unable to perform.
Again, CONGRATULATIONS ZAGERBLAG! |
||||||
| Posted On: 03/28/2009 7:43AM |
Rate this Post: -5
View Acid Flux's Profile
|
#
  |
||||||
|
Sure, go ahead and explain the bug. It’s been fixed now. |
||||||
| Posted On: 03/28/2009 10:31AM |
Rate this Post: 0
View Evil Trout's Profile
|
#
|
||||||
|
Is this bug so special it deserves a congratulations from a Mod and a thread in GD? |
||||||
| Posted On: 03/28/2009 10:38AM |
Rate this Post: 0
View Inertia's Profile
|
#
|
||||||
|
Inertia Posted:
It’s a bug that lets you bid on your own auction. |
||||||
| Posted On: 03/28/2009 10:46AM |
Rate this Post: 0
View quangntenemy's Profile
|
#
|
||||||
|
I remember trying to outbid him for his own auction, and reporting it. |
||||||
| Posted On: 03/28/2009 10:48AM |
Rate this Post: 0
View Dunatis's Profile
|
#
|
||||||
|
Inertia Posted:
It potentially could have broken ItemBuildr, ForumBuildr, Kyoubai and Domination if it had been used in an improper manner, and could have done so ‘under the radar’ for a long time.
First off, less than 35 Haxx Peens have been awarded during this site’s entire history. Any awarding of this Peen is a fairly rare event, and warrants some level of temporary exposure.
Second, more common Peen announcements have been placed in GD before, including the “I’m Gay” Peen, which is completely random. Have you lodged a public or private protest about those?
Third, I posted this as Acid Flux intentionally to avoid any insinuation that it was done ‘as a Mod’. We were working on this bug before I was made a Moderator, and I was posting a congratulation to a fellow player & friend.
Fourth, please tell me which sub-forum you feel this would have been more appropriate for this thread, and if I agree, I’ll move it. |
||||||
| Posted On: 03/28/2009 10:53AM |
Rate this Post: 0
View Sergeant Cid's Profile
|
#
|
||||||
|
Sergeant Cid Posted:
GOTO 10
But I don’t really care Inertia edited this message on 03/28/2009 10:58AM |
||||||
| Posted On: 03/28/2009 10:54AM |
Rate this Post: 0
View Inertia's Profile
|
#
|
||||||
|
quangntenemy Posted: Actually, it did far more than that, see above. The glitch involved logging into a new account that was not yet fully active, while still logged in to your ‘Primary’ account. This allowed you to act as if you were two different players, but from the same account. Therefore, you could bid on your own Auctions, bid on your Alt’s auctions, and vote multiple times on every single ForumBuildr & ItemBuildr submissions. I believe that it would also have allowed you to vote multiple times on your own INCIT submissions as well as allow you to buy cards in Domination without paying for them, but the bug was fixed before I had a chance to test that theory. Even so, being able to upvote your own submissions as well as downvote your competitors, multiple times, was potentially catastrophic. The power of ‘illegal Klan voting’ in the hands of a single player. I performed a number of Auction tests before anyone even noticed. It was only after an extremely large and obvious test (to very the correct amounts of Flezz were transferring and being refunded) did anyone file a ‘report’.
In the wrong hands, it could have been very, very damaging for a long time, and I think Zagerblag showed excellent character by reporting it immediately. |
||||||
| Posted On: 03/28/2009 11:00AM |
Rate this Post: 0
View Sergeant Cid's Profile
|
#
|
||||||
|
Good job! So, if you made a illegal alt(if it does I do realize this was for testing purposes ONLY)it would allow you to do this glitch before it was fixed? Or was it just a alt thing?
Also, every time ET makes something new, make sure you you look and try tons of stuff with it, there seems to be always 1 thing wrong with it to get you haxl. |
||||||
| Posted On: 03/28/2009 11:06AM |
Rate this Post: 0
View CrinkzPipe's Profile
|
#
|
||||||
|
Inertia Posted:
GOTO 10 is an RP forum, and I didn’t feel like inviting Trolling. |
||||||
| Posted On: 03/28/2009 11:16AM |
Rate this Post: 0
View Sergeant Cid's Profile
|
#
|
||||||
|
CrinkzPipe Posted: It involved having a separate new account (i.e., “illegal alt” ), and after you setup your email & pbumword, but before you actually named your character, that account was in sort of a ‘limbo’ state. If you attempted to log into this new account without logging out of your ‘primary’, then this is when the glitch occurred. Zagreblag was white-hat bug searching and came across this glitch.
This is true, which is why he encourages the bug-hunting, so long as it’s done for Good Purposes. Sergeant Cid edited this message on 03/28/2009 11:24AM |
||||||
| Posted On: 03/28/2009 11:23AM |
Rate this Post: 0
View Sergeant Cid's Profile
|
#
|
||||||
|
Sergeant Cid Posted:
I tried the INCIT thing; it seemed to work, although I didn’t get around to trying it with enough limbo accounts at the same time to be certain. I never tried buying Dom cards while the glitch was active. |
||||||
| Posted On: 03/28/2009 2:37PM |
Rate this Post: 0
View zagerblag's Profile
|
#
|
||||||
|
interesting bug. congratulations. |
||||||
| Posted On: 03/28/2009 2:39PM |
Rate this Post: 0
View Montressor's Profile
|
#
|
||||||
|
Montressor Posted:
Thanks. |
||||||
| Posted On: 03/28/2009 2:57PM |
Rate this Post: 0
View zagerblag's Profile
|
#
|
||||||
