bug-gnubg
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-gnubg] Bot Abuse


From: Rod Roark
Subject: [Bug-gnubg] Bot Abuse
Date: Thu, 29 May 2003 13:35:58 -0700
User-agent: KMail/1.4.3

Is your FIBS robot vulnerable to this attack?

(1) Start a new match against the bot.

(2) If you are winning the match, finish it and go to (1).

(3) Drop the match that you are about to lose.

(4) Send the bot "invite botname" followed immediately by
    "invite botname 7".

(5) The bot thinks you are resuming the match and sends
    "join yourname", however in the meantime FIBS cancels
    the first invitation and replaces it with the second.
    The bot just allowed you to start a new match.

(6) Start playing your brand-new match and go to (2).

Suggested defense: Don't use "join" to respond to an
invitation to resume a match.  Use "invite" instead.

-- Rod





reply via email to

[Prev in Thread] Current Thread [Next in Thread]