Wanted: TheEmperor/Explorer

[jorb]

Most likely it wasn't intentional on his part. He probably just stumbled across a bug.

[Spiff]

This wasn't a simple macro, rinse repeat to hit those numbers. Potentially he found some way to send information to the server side and entered an arbitrarily high number in to achieve that? Otherwise there just isn't enough time to hit numbers that high through conventional logic.

I remember reading somewhere that someone once did something like this with carrots.

Coal actually.

[Mashadar]

This wasn't a simple macro, rinse repeat to hit those numbers. Potentially he found some way to send information to the server side and entered an arbitrarily high number in to achieve that? Otherwise there just isn't enough time to hit numbers that high through conventional logic.

The client doesn't tell the server much aside from "user clicked this" and "user clicked there". Everything else is controlled by the server.
Even the GUI in H&H seems to be handled by the server, which is unusual for an online game.

[boshaw]

This wasn't a simple macro, rinse repeat to hit those numbers. Potentially he found some way to send information to the server side and entered an arbitrarily high number in to achieve that? Otherwise there just isn't enough time to hit numbers that high through conventional logic.

From my understanding after reviewing alot of the client source code in my own journey in modifying it 90% of the things are all server side and thus not exploitable. The client doesn't send raises in LP from my understanding, only clicks and gob hits which are then processed server side. I would assume with this all LP gain is done on the server side.


Using the carrots for example:
You could make a simple script that tells the server you clicked/tried to harvest 100 carrot crops, but it won't give you the LP automatically. It'll just see that you clicked on the gob id which is a carrot object and send your character onto that spot and then begin the loading bar. once that's done you then get the LP.

tl;dr -> Client is just a renderer and IO processor which sends the data to server to be processed so i highly doubt someone exploited it via that.


If someone better understands the client and I'm wrong then please do correct me .

[loftar]

If someone better understands the client and I'm wrong then please do correct me :).

Your are correct, but that's not to say that more localized bugs cannot exist. For example, some people discovered early on in world 1 that you could try to buy stats higher than ~46340 which would cause an integer overflow to the negative side on the server when it calculated the LP cost (46341^2 > 2^31), giving both the stat and billions of LP. That has since been fixed, however.

[Sarchi]

.

[Mopstar]

1.6 billion eh?

Challenge accepted

[chaosovum]

Couldn't you guys put up a test server with a world maybe 1/20th the size of normal?

[fart69]

Couldn't you guys put up a test server with a world maybe 1/20th the size of normal?

For what...?

[chaosovum]

To.....test changes. The size? Would require a much less robust server.....