How to prank village members(exploit)

[shadyg0d]

Sorry if this doesn't belong here but I thought it didn't fit anywhere else.

I reported this "exploit" 3 times. No responses over time. So I guess it's legit? Maybe it's not on the list of priorities considering it's more of social engineering than an exploit.

I've already showed a few people. It's only a matter of time before word gets out and people start abusing it. Anyways I just thought it was a cool exploit and felt like sharing.

In theory this works on anyone with a barter stand, but is much easier to pull off in your own village. I have in fact been successful with it 3 times, but I was nice enough to admit to testing it and returned the stolen items.

Basically all you need is:
-trespassing on the victims claim(not necessarily. I could have sworn it worked once without trespassing, but was unable to recreate the circumstances)
-"renting" a barter stand. (Acquiring the red/green hands from your victim)

This allows you to walk into the victims claim, drop the hand in one of their cupboards and buy everything remotely. Thus bypassing theft and villager. In a village environment where trespassing is generally enabled on eachothers' claims, this is highly abusable. One can also imagine this could be abused by convincing a trading post to lend you one of their stands, and trespassing to access the stand, etc... Not very likely, but very possible.

In the case of my village, we were only permitted one stand per person(retarded), so that made renting a stand a viable excuse.

[Granger]

So your point is that you can work around the visitor debuff from the pclaim this way?

[shadyg0d]

So your point is that you can work around the visitor debuff from the pclaim this way?

Yes. You could potentially steal someones most valuable items using a game mechanic nobody would ever anticipate. Completely bypasses theft/visitor which people assume is keeping them safe.

[MagicManICT]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

[Ysh]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

Exploit or not, I think game mechanic should try to be with intuition.

[Granger]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

As far as I got it it boils down to being able to add hands to a container on a claim and then transfer out the contents of that container without theft.

This would be IMHO quite serious.

[Ysh]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

As far as I got it it boils down to being able to add hands to a container on a claim and then transfer out the contents of that container without theft.

This would be IMHO quite serious.

This is how I am understands it, yes. Being able to ''sell'' item from stand that you do not have theft permission to take in first place. Seems to be flaw in system to me.

[shadyg0d]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

I see what you're saying, and I think the devs probably thought the same thing. The difference is you know that you are putting yourself at risk by giving out your bank card and PIN. By lending a barter stand to somebody you wouldn't assume they were trying to steal unless they acted shady to begin with.

Anyways I'm glad to see some other people see this as an issue.

[shadyg0d]

I'd call it purely social engineering. I wouldn't give a stranger on the street my bank card and PIN number. I certainly wouldn't do such a thing here with my 'valuable' barter stand goods.

Maybe there is something that can be done in code to stop this application of the game mechanic, but as is I don't see an exploit in your description.

As far as I got it it boils down to being able to add hands to a container on a claim and then transfer out the contents of that container without theft.

This would be IMHO quite serious.

Now just keep in mind it does not work with your own barter stand. I tested it it and it does indeed detect theft if you use your own stand. That is the one thing that makes it less serious and possibly not worth fixing.

Still I think it should be fixed considering I used it to steal from people who had no idea what I was trying. If anything I'd consider it an exploit that requires social engineering. It's still an exploit IMO

[Granger]

Now just keep in mind it does not work with your own barter stand. I tested it it and it does indeed detect theft if you use your own stand.

Did you test it with your stand and 3rd party character acting as buyer?