Manipulate data?

[zilveer]

Hi,
This seems to be an amazing work !

But a question about security, can someone manioukythe data when playing and change the positions of the chess players?

Regards Zilveer

[Happy0]

@zilveer - thank you :). Are you on scuttlebutt? Would you like a game with it?

Yes, for now there is no validation that your opponent hasn't just changed the board position to be whatever they like as their move (by manually posting a chess_move type message. I do have some ideas about how to prevent this (or at least display on the interface that it has happened) but I haven't felt any immediate urgency to do so because:

• Games are between friends or friends of friends that have been made via the scuttlebutt application (patchbay)
• If someone does cheat with their friend at best it would be funny and it worst it would be rude and they'd incur the social stigma of their friends (just like you it if you moved pieces around on the board like in real life with your friend.) It's kind of like the social graph discourages you from cheating =p.
• I've yet to see anyone do it, and I've yet to have anyone report to me that someone has done it

It's not really like an online chess service like https://lichess.org where people want to boost their ratings, annoy strangers and stuff by cheating. It's more like a nice little chess club between friends and I (although I hope there will be some people out there using this that I don't know about some day :P.)

Like I said, there are some things that could be done to stop cheating in this app but I just haven't had the motivation to do it yet.

[zilveer]

@Happy0 actually I am not but I will definitely join it after reading about it. How can I find you there ?

I haven't tested it but I will definitely test the chess game as well as testing some hacks just to see if it is possible.

I also have some ideas, let's talk about it there ;))

See you there soon;))

[zilveer]

@Happy0 is it okey if I email you ?

Regards