Live data from Hacker News

Pokemon Go, Security, and Obsolescence

community.rapid7.com

41–50 of 109 posts

Re: Pokemon Go, Security, and Obsolescence

#41
When I have a choice between Pokemon Go or root, I choose root every single time. I loathe Niantic for this stupid decision. The equivalent would be if Riot decided that League of Legends can only be played on PCs with a guest account and not an admin account. Completely pointless and dumb. I can't believe I bought some stuff in the Pokemon Go store, I want a refund. They robbed me, a legitimate and paying customer, of the ability to play the game on my device. This borders on fraud.

This practice needs to be stopped. There needs to be a simple app that can be installed that completely shields from, blocks and stumps this fascist SDK that detects root. And every custom ROM should have it installed by default. The problem is obviously bigger than Niantic. The problem is that people think we shouldn't fully own our phones and that such a mindset is acceptable.

Re: Pokemon Go, Security, and Obsolescence

#42

I bought 3 times from the in game store and then later got banned. I later requested a refund but they don't even answer any mail. Classic piece of shit company.

Were you "cheating" according to their definition? Why should they reply or give you your money back? Classic entitlement.

Wait. When did expecting delivery of the product or service you paid for become "classic entitlement"?

Re: Pokemon Go, Security, and Obsolescence

#43

Earlier quoted context omitted.

Furthermore, you can buy GPS spoofing devices anwyay which you can just carry around with you in your pocket.

Is that really something that's available? Nothing turned up on a cursory web search, aside from a story about students building their own with $3,000 dollars worth of equipment (and it sure didn't fit in a pocket) edit: And Wikipedia says "GPS spoofing attacks had been predicted and discussed in the GPS community previously, but no known example of a malicious spoofing attack has yet been confirmed"

It's cheaper than that. A HackRF and some sort of better clock and you're done.

http://www.rtl-sdr.com/cheating-at-pokemon-go-with-a-hackrf-...

Re: Pokemon Go, Security, and Obsolescence

#44

For all I want a good tracker, and the sympathy I have for friends I have with rooted devices who can no longer play... Niantic is not beholden to anyone to release anything, add any features, or do anything. Its their game. If you don't like it, either a) don't play, or b) make something better. It's a testament to the compellingness of the AR game genre, and the brand recognition that Pokemon has they so many peopl…

>Niantic is not beholden to anyone to release anything, add any features, or do anything.

I disagree. Some people with rooted devices paid money for this game and now they can no longer play it. In any other industry, this would give rise to a series of lawsuits and the company doing it would be in big trouble. Somehow, though, for games, it's acceptable to just take away the thing you paid for.

Re: Pokemon Go, Security, and Obsolescence

#45
post #4
post #2

Now Niantic's decision to disallow root devices, imo, is pretty regretful, as serious botters will likely be able to get around that restriction regardless. This only serves to punish users who are stuck between having a root-enabled custom ROM or a stock ROM where critical root exploits may exist. One thing that I observed is that no one seems to be interested in producing a ROM that is both stable, has a variety of…

I wrote this about Android a while back: http://penguindreams.org/blog/android-fragmentation/ The TLDR is that it'd be nice if Android was more like Windows/Intel: install the OS (i.e. AOSP), drivers (or binary driver package format and an SDK to auto-build it) and boom you're done. Clean, stock, standard. Same with many Linux distros on x86/64. I need to write an update to the article though. Lately I've been strugg…

> Any ARM hardware people care to chime in?

It's not really about the CPU architecture, but the peripherals of the devices. In the x86 world, the peripherals are governed by the "PC" standard, which these days is implemented by the chipset on your motherboard. They all have similar functionality, although you still do need some chipset-specific drivers in your kernel.

In the ARM world, the landscape is different. There has never been a de facto standard configuration of an ARM computer like the PC was/is for x86. There are ARM computers that are more like a micro controller and there are tablet/mobile devices based on ARM that have a system on chip (SoC) that's got all the peripherals, including GPUs, network adapters, etc. Every SoC is pretty different, there's a bunch of devices connected with i2c, spi and other buses. These are required to control the power and clock management and all the I/O devices.

ARM (the company) doesn't really design these, they just license ARM (the architecture) to a SoC manufacturer and call it a day. This leads to a very diverse and fragmented landscape.

The ARM world has been making strides to reduce the amount of chip-specific code. One good example is the device-tree configuration which, in theory, allows running the same kernel binary on different devices. With device-tree, you pass a config file from the bootloader to the kernel, which contains configuration (i/o memory maps, etc) of the peripherals (which you'd query from the hw/firmware in a x86 machine). This is a huge improvement over what was before it, but there's still a long way to go. And there's still plenty of older ARM SoCs out there that don't support this.

But yes, it's pretty much a mess. There's a lot of duplicate work that every ARM SoC manufacturer has to go through. Given that the mobile world is financed by a planned obsolescence cycle where they expect customers to upgrade every few years, I find it unlikely that this issue will be solved any time soon.

Re: Pokemon Go, Security, and Obsolescence

#46
post #45
post #4

Earlier quoted context omitted.

I wrote this about Android a while back: http://penguindreams.org/blog/android-fragmentation/ The TLDR is that it'd be nice if Android was more like Windows/Intel: install the OS (i.e. AOSP), drivers (or binary driver package format and an SDK to auto-build it) and boom you're done. Clean, stock, standard. Same with many Linux distros on x86/64. I need to write an update to the article though. Lately I've been strugg…

> Any ARM hardware people care to chime in? It's not really about the CPU architecture, but the peripherals of the devices. In the x86 world, the peripherals are governed by the "PC" standard, which these days is implemented by the chipset on your motherboard. They all have similar functionality, although you still do need some chipset-specific drivers in your kernel. In the ARM world, the landscape is different. The…

To be honest, x86 seems to be heading in the same direction these days. It generally has enough of an emulation of traditional PC architecture for boot purposes, but look at - for example - how CPU power saving on modern Intel chips requires the co-operation of stuff like the SATA links, or how traditional PC interfaces like PS/2 for keyboard/mouse and HD Audio are being replaced with more embedded-like interfaces such as I2C touchpads and I2S audio links connected to vendor-specific controllers.

Re: Pokemon Go, Security, and Obsolescence

#47
post #2

Now Niantic's decision to disallow root devices, imo, is pretty regretful, as serious botters will likely be able to get around that restriction regardless. This only serves to punish users who are stuck between having a root-enabled custom ROM or a stock ROM where critical root exploits may exist. One thing that I observed is that no one seems to be interested in producing a ROM that is both stable, has a variety of…

I honestly would be very happy with a ROM that copies stock Android entirely, without any added features or customizations, rather focusing solely on stability, security, supporting a wide range of devices, and tracking the official Android release schedule as closely as possible.

Can someone point me to a ROM like this if one already exists?

Re: Pokemon Go, Security, and Obsolescence

#48

Earlier quoted context omitted.

Were you "cheating" according to their definition? Why should they reply or give you your money back? Classic entitlement.

Wait. When did expecting delivery of the product or service you paid for become "classic entitlement"?

Maybe my comment was unnecessarily rude, but demanding a refund and calling a company a piece of shit because you got banned for cheating is absolutely entitlement. Just because you spend money on a service does not entitle you to have unlimited access against TOS.

Re: Pokemon Go, Security, and Obsolescence

#49
After Niantic's move to "encrypt" API calls (which was broken a few days after, btw), I'm not surprised they would arbitrarily block some devices based on phony explanations.

Bear in mind, bots have little to no effects on the game itself because you have little to no virtual interactions with other players. It's not like you were able to trade Pokémons you caught with someone else.

Re: Pokemon Go, Security, and Obsolescence

#50
post #49

After Niantic's move to "encrypt" API calls (which was broken a few days after, btw), I'm not surprised they would arbitrarily block some devices based on phony explanations. Bear in mind, bots have little to no effects on the game itself because you have little to no virtual interactions with other players. It's not like you were able to trade Pokémons you caught with someone else.

You do interact with other players via gym battles, and if gyms are dominated by cheaters it ruins the game for everyone else.
Post reply on HN