Earlier quoted context omitted.
Although, that'd be an increase in expenses, not lost revenue...
If you're nitpicking, then I guess technically it's a loss on profit ...
EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
81–90 of 112 posts
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#82Earlier quoted context omitted.
> The proper way to implement a promo code is logical: when the user attempts to apply a promo code, the server checks, has the user used this promo code before? by querying SELECT FROM transactions WHERE user_id = current_user AND promo_code = “OS3874XVC”. If the result set is empty, then the user hasn’t used the code, and everything’s good to go. Be very careful here, it's not as simple as it looks. If you don't do…
... That's not a timing attack. A timing attack involves measuring the time taken to return an invalid response to a password attempt and, given enough tries, figure out the password based on this. It usually takes advantage of the way that string-matching code is written in libraries. Preventing this is not nearly as simple as you may think; for example, recent research shows that over a long enough period of time a…
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#83Earlier quoted context omitted.
in the meantime, I enabled zoom for mobile devices. Whoever turned it off in the first place was a bad person, and should feel bad for doing so.
Having zoom enabled and changing device rotation can cause formatting issues on some devices. The mobile (smartphone) websites of TechCrunch, Yahoo, Cnet, Mashable, etc. all disable mobile zoom. Tablets appear to be a different story though, and zoom might need to be enabled there.
Seems best to let users choose to not zoom if their devices are broken, than to tell devices to turn off features. It is a sad bug that my Browser respects requests from web sites to hobble itself. I would rather pan and scan then stare at tiny text.
Your site works with zoom now, thank you!
TC etc are all websites I don't read on my phone (or at all, generally).
Also, your site disabled zoom even when I requested the Desktop version. If you inherited that bug from Bootstrap, that is awful of bootstrap to do.
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#84"pretty embarrassing for an exploit that causes a significant amount of lost revenue" I doubt much revenue was lost. How many of these people were going to buy the game in the first place? None of them were hot new games, were they?
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#85"One, if EA is technically incompetent enough to allow such a severe bug to exist, they won’t have the technical skills to discern who used the promo code more than once." Not necessarily true - we don't have insight in to how their system is setup; and while it may not be tracking redemption of the codes on that level, it could also be attached to any transactional data that they have in place (for reporting purpose…
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#86Your proposed solution is not that simple. You make it sound like EA simply used the wrong query. > One, if EA is technically incompetent enough to allow such a severe bug to exist, they won’t have the technical skills to discern who used the promo code more than once. The bug was not that obvious, and doesn't necessarily imply lack of technical skill. On the other hand, finding out who used a promo code more than on…
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#87Earlier quoted context omitted.
Dragon Age 1 and Mass Effect 1 & 2 are still available on Steam. Interestingly, they pulled Crysis 2 then a few months later added Crysis 2 Maximum Edition. For Dragon Age 2 and Mass Effect 3, I agree with their reasoning. Steam doesn't allow in-app purchases that circumvent their distribution system, and that's a load of crap.
Steam doesn't allow in-app purchases that circumvent their distribution system, and that's a load of crap. The idea there is probably something along the lines of preventing developers from selling their game for $0.99 and "unlocking" it in-app for $59.00.
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#88Earlier quoted context omitted.
in the meantime, I enabled zoom for mobile devices. Whoever turned it off in the first place was a bad person, and should feel bad for doing so.
The "bad person" here is whoever decided to let websites turn off mobile zoom. My web browser on my device is mine , dammit, and it'll render websites the way I want. Web site creators have no right to control my user experience.
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#89Earlier quoted context omitted.
If you're nitpicking, then I guess technically it's a loss on profit ...
No, the point is that for these users, the vendor loses the $1 or whatever worth of hosting costs, not the $50 or whatever retail price.
Say a total of 5,000 downloads are from this "free" coupon for any specific game title. Would $500 or $5000 sound closers to the actually hosting/support cost that the publisher has.
Re: EA “Gives Away” 1000s Of Free Games Due To No Server-Side Validation
#90So because of DRM, they're fully capable of taking those games "back" (removing them from accounts), right? I mean, if VALVe one day decided I no longer can have TF2 they can simply strip it from account, is that how their terms work?
Yes and yes. Valve has been known to remove games from Steam accounts in cases of abuse, e.g. credit-card fraud or stolen license keys.
It's a blanket policy and a reason why I never use Paypal for Steam, use a real or "throw-away" credit card for Steam purchases. Alternatively, you could not buy from Steam at all, I don't anymore but it's too late for me. I already have over 200 games with them and worry about losing access to everything.