exclamation-circle Lackey Vulnerabilities

27 Apr 2021 08:43 #102166 by Ankha
Replied by Ankha on topic Lackey Vulnerabilities

Hey Katricz I want to ask about this:

02 - No Shuffle

In the main folder of the plugin, which is at:
(...) \ LackeyCCG \ plugins \ vtes \
has a file called plugininfo.txt with the settings for shuffling the deck, marked as Yes. If you , the decks will not be shuffled when imported, allowing the user to choose the order of the cards he will draw (order that was placed in the deck creation).

So if player switch to No,what happen if you use to shufle his crypt/library,can you shufle it?

You can ask players to reveal their library and crypt to themselves, and then hide & shuffle.
Both operations will appear in the log and prove the deck is indeed shuffled.

Prince of Paris, France
Ratings Coordinator, Rules Director
The following user(s) said Thank You: Joscha, Vlad, Hakuron, beslin igor

Please Log in or Create an account to join the conversation.

More
27 Apr 2021 08:45 - 27 Apr 2021 08:46 #102167 by Ankha
Replied by Ankha on topic Lackey Vulnerabilities

01 - Cancel Draw

The Cancel Draw button returns the leftmost card to the library, if the cards are changed order in your hand, Cancel Draw will return the wrong card.

03 - Disconect and Load Game Offline

the user can disconnect in a match, go offline and use the Load Game. With that he restores the same game table online.
That user will be able to see his hands and all his library before resuming to the online game, giving them an unlawful advantage.

04 - Cain Mode

When passing the turn, Lackey generates an autosave file in the \ LackeyCCG \ plugins \ vtes \ saved \

This file contains all the information of the table, such as hand, libray, crypta, pool of all players.
Although the card is in code, it is easily possible to make the corresponding name for that code.

It is not need to map all the cards to have extraneous advantages, just know that the X, Y, Z codes are deflection cards and the T card is Archon, to be able to use that bleed of 07 without worry.

I mapped all cards ID and Names to show how this work, and I will gladly show you.
After start a game and pass turn, I can tell all hand, livrary order, crypt for all players.


05 - Revert to Autosave

The Autosave file can be changed before using Revert to Autosave. It is possible to change the pool, the cards, the library before using Revert to Autosave.
I prefer to divulge to everyone about them and ask the community for help in finding solutions.

 

Those don't have solutions. 1/ because changing the card order in the hand doesn't appear in the log, and the other points because offline manipulations can't be controlled.
Only 2/ can be circumvented using the technique I exposed before.

Lackey is a proprietary program. Its source code is not available and cannot be changed by us.

Prince of Paris, France
Ratings Coordinator, Rules Director
Last edit: 27 Apr 2021 08:46 by Ankha.
The following user(s) said Thank You: Hakuron

Please Log in or Create an account to join the conversation.

More
27 Apr 2021 09:50 #102169 by Vlad
Replied by Vlad on topic Lackey Vulnerabilities
Thanks Vincent for the Shuffling at the beginning méthod.

I will enforce it on my tournaments.

Pentex Board of Directors

Prince of Oye Plage
Alastor Grand Nord

:gang:

:ani: :cel: :chi: :FOR: :PRO:

Please Log in or Create an account to join the conversation.

More
28 Apr 2021 04:29 #102179 by Katricz
Replied by Katricz on topic Lackey Vulnerabilities
I dont know

Please Log in or Create an account to join the conversation.

More
28 Apr 2021 08:03 - 28 Apr 2021 08:05 #102181 by mondragon
Replied by mondragon on topic Lackey Vulnerabilities
I Will try to put suggestion to solve the problems.
01 - Cancel Draw

This can be solved by reprograming lackey log messages
Should appears in log when a player move card position in hand, and diferent message for cancel draw and put choice card from hand to library 

02 - No Shuffle

This can be solved just shufling at start

03 - Disconect and Load Game Offline

Hard.
Maybe can be fixed with reprograming. If only Host get autosaves, at least only one player (or judge in events) can get access to the files.

04 - Cain Mode


Same repply as 03

05 - Revert to Autosave

Same repply as 03
Last edit: 28 Apr 2021 08:05 by mondragon.
The following user(s) said Thank You: Katricz

Please Log in or Create an account to join the conversation.

More
28 Apr 2021 13:47 - 28 Apr 2021 13:47 #102183 by Katricz
Replied by Katricz on topic Lackey Vulnerabilities

I Will try to put suggestion to solve the problems.
01 - Cancel Draw

This can be solved by reprograming lackey log messages
Should appears in log when a player move card position in hand, and diferent message for cancel draw and put choice card from hand to library 

02 - No Shuffle

This can be solved just shufling at start

03 - Disconect and Load Game Offline

Hard.
Maybe can be fixed with reprograming. If only Host get autosaves, at least only one player (or judge in events) can get access to the files.

04 - Cain Mode


Same repply as 03

05 - Revert to Autosave

Same repply as 03


Do we know who own Lackey? If he can fix the code?

If no:
01 - Cancel Draw
If someone draws wrong, put a random card in the library and shuffle. He get a warning (maybe).

02 - No Shuffle
This can be solved just shufling at start

03 - Disconect and Load Game Offline
Do not pass the turns.
Cons: The game will not be saved.

Have a non-player who will be the Host to manually save the game and not pass the turns
Cons: Each table will need 1 more person just to do this manual process

04 - Cain Mode
Same as 03

05 - Revert to Autosave
Same as 03
Last edit: 28 Apr 2021 13:47 by Katricz.
The following user(s) said Thank You: mondragon

Please Log in or Create an account to join the conversation.

More
Moderators: AnkhaKraus
Time to create page: 0.092 seconds
Powered by Kunena Forum