Bug Leaderboard exploit discussion

[inspector42]

Yeah. The hacking clearly goes beyond the bug based on this.

 

[ER777]

Yeah. The hacking clearly goes beyond the bug based on this.

Check out the #10 (as of this post) score on Gorgar from Verarscht Mich R: 3,776,592.. now how did that 2 get there? Hmmmm..

 

[Luobo]

Email just received.....

Thank you very much for bringing this to our attention. We have
confirmed the bug and are going to put a fix in for it asap.

Please respond to this message if more information is requested or required.

Thank you,
Pinball Arcade Support

I wouldn't hold my breath. Bug's been around for who knows how long (six months? longer?) and I got in touch with FS two patches ago. Bug's still there.

 

[Luobo]

After the latest update I can no longer abuse the bug.

-fix android back button before table loads issue that was causing the wrong logo to be displayed and scores to be posted.

Cat's officially out of the bag then I guess, and we're free to discuss how the bug actually worked. All it took was the press of a single button (1!) while the game was loading to totally mess up the leader board of every table in the game.

Since the menu system is so clumsy - you can't simply tap the table you want to play, you must scroll through the list of tables until the one you want to play appears in the center, and then tap it - I'm surprised not everyone ended up discovering the bug after accidentally loading the wrong table and immediately pressing the back button.

The bug had two major "benefits": 1) You could load up AFM, cancel, go to another table, which would make AFM start, but with the logo and scoring going towards the last selected table, for easy high scores. You'd get the HofF-points as well.

2) Or you could go to a table you hadn't purchased (shown below, I didn't own WH20), and play it for basically as long as you wanted without having to worry about hitting the scoring limit.

 

[neglectoid]

why, how and what gets you off by posting bogus scores? pathetic.

 

[sotie]

why, how and what gets you off by posting bogus scores? pathetic.

He wasn't taking advantage of this. Read the very first post of this thread.

 

[TomL]

He wasn't taking advantage of this. Read the very first post of this thread.

more importantly, he's confirmed that this exploitable bug has been fixed by trying it out on the latest v ersion.

 

[Man-Machine]

Luobo is the whistleblower on this and should be thanked.
But a lot of people have been using the bug to inflate their scores.

 

[Sean DonCarlos]

why, how and what gets you off by posting bogus scores? pathetic.

Calm down, sir! Even the very title of the thread shows he's not trying to pull a fast one on anybody. As others have said, he's the one who first reported the issue so that it could be fixed.

 

[shutyertrap]

Glad that they fixed the bug...too bad they'll never reset the scores.

 

[Fungi]

I did notice some offender's names are gone tho'. Like "okurgaaah" and "dumbass admin". That last one is such an a-hole, he did that just to spite this forum. In all of the internets, this little forum was his target. Talk about pathetic.

 

[Jeff Strong]

Now that the bug is fixed can someone tell me what it was? I'm quite curious after reading this thread.

Check the last page:

http://digitalpinballfans.com/showt...cially-not-mine!?p=82946&viewfull=1#post82946

 

[Clawhammer]

Check the last page.

Haha, yup. Deleted my post for that reason. Derp!

 

[Mayuh]

So this was android only?

 

[MontanaFrank]

That was not the way I accidentally transposed my score from CCanyon to SpShuttle in the tournament before last. I hope they fixed the way I did it.

 

[Clawhammer]

That was not the way I accidentally transposed my score from CCanyon to SpShuttle in the tournament before last. I hope they fixed the way I did it.

The plot thickens.

 

[MontanaFrank]

Everything is fine. I tried to low ball my Central Park score to BOP and didn't work. I think the leaderboards are trustworthy now.

That is great news.

 

[smbhax]

Good to know this is fixed! Looks like they've cleared out most of the really obviously bug-generated scores from the leaderboards, too. : )

 

[Fungi]

Speaking of which. In the latest newsletter, they've announced the winners of the most recent tournament. With the rampant score faking, I wonder how FS filtered out the badguys.

 

[SKILL_SHOT]

I have a problem with the thread title to not trust ANY highscores thats some BS! my scores are legit easy way to tell if thier a HACK (mobile) is by it if only the leaderboards were seperate.