Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

minimaxir.com

Post reply on HN
Print view View original

41–50 of 112 posts

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#41

Post by oakwhiz »

rabidsnail wrote: post #39
tantalor wrote: post #29

IANAL, but it's possible that these users are now liable to pay for the extra games. They knew that the code was only usable once, yet used it multiple times. EA might ask for the games back or charge the users. (I'm not taking EA's side, I'm just pointing out some possible consequences.)

If they did try to charge for the games they would get enough chargebacks that they would have a hard time processing credit card payments for a while. And with chargeback penalties they might actually lose money. The only sensible options are a) do nothing or b) revoke games purchased with these codes. If I were them I would do nothing and treat it as an unplanned pricing experiment. Since a lot of these games have…

I doubt there would be chargebacks since a valid credit card was not even asked for during the process of entering the code.

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#42

Post by skymt »

prezjordan wrote: post #38

So because of DRM, they're fully capable of taking those games "back" (removing them from accounts), right? I mean, if VALVe one day decided I no longer can have TF2 they can simply strip it from account, is that how their terms work?

Yes and yes. Valve has been known to remove games from Steam accounts in cases of abuse, e.g. credit-card fraud or stolen license keys.

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#43

Post by rabidsnail »

oakwhiz wrote: post #41
rabidsnail wrote: post #39

Earlier quoted context omitted.

If they did try to charge for the games they would get enough chargebacks that they would have a hard time processing credit card payments for a while. And with chargeback penalties they might actually lose money. The only sensible options are a) do nothing or b) revoke games purchased with these codes. If I were them I would do nothing and treat it as an unplanned pricing experiment. Since a lot of these games have…

I doubt there would be chargebacks since a valid credit card was not even asked for during the process of entering the code.

But presumably you have to have a credit card associated with your account, right?

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#45

Post by potatolicious »

rabidsnail wrote: post #43
oakwhiz wrote: post #41

Earlier quoted context omitted.

I doubt there would be chargebacks since a valid credit card was not even asked for during the process of entering the code.

But presumably you have to have a credit card associated with your account, right?

Even if that's the case, it would be unwise for EA to pursue this money. All anyone would have to do is issue a chargeback - which by the way incurs penalty fees for EA. More than that, it costs $25 for EA to file a challenge to a chargeback, making it completely not worthwhile.

Going after this money would be a PR disaster, a legal quagmire, financially negative in all likelihood, and permanently damage their relationship with their payment processors.

I would instead invest more money in hiring proper architects.

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#46

Post by [deleted] »

SquareWheel wrote: post #35

This article missed the earlier Reddit thread where a separate exploit was discovered, that the coupon applied to every item in the basket. $20 off of everything. Coupled with a coupon from a different forum you could add tens or maybe hundreds of games to your account for free in one large bundle. I'm really curious to see EA's response.

[deleted]

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#47

Post by dfox »

ricksta wrote: post #20

I'm not sure if op's solution is optimal. But why not use unique promo code?

Unique promo codes have to be generated somehow. Integrating that generation into probably outsourced survey mechanism is likely not exactly trivial and may (if not done right) open ways for anyone to generate any amount of promo codes they want.

This is one kind of problems you get when you start separating different functionality into separate applications that don't known about other parts.

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#49

Post by fwr »

SquareWheel wrote: post #35

This article missed the earlier Reddit thread where a separate exploit was discovered, that the coupon applied to every item in the basket. $20 off of everything. Coupled with a coupon from a different forum you could add tens or maybe hundreds of games to your account for free in one large bundle. I'm really curious to see EA's response.

Do you have a link to the earlier reddit thread?

Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation

#50

Post by dagrz »

Is it me or does the author of this article, and the abusers of the exploits he writes about, land on the wrong side of both the law and common morality?

Surely EA being a "terrible company" has nothing to do with whether it is okay to steal their products? Moreover, just because there was a coding error/oversight, again doesn't mean it is okay to steal their products? If you have a complaint about a company or discover an exploit, surely there are other more ethical channels to pursue the matters?

For the record, I dislike some of EA's conduct as much as the next person.

Post reply on HN