Rosenberg Clinic vulnerabilities on purpose?

Comments

• Ruke_Unlimited Member Posts: 9

  June 2014

  Personally I (and though I won't vouch for all, I think many of the users in irc) think that hacking the site is a legit way to play the game. 

   

  The game is to access the information contained in the website. One way to do that is to solve a puzzle (one of which we already have), the other way is to break into the site. I think both paths should be trod simultaneously. 

   

  If you want my opinion, go in as far as you can.
• Vismal Member Posts: 9

  June 2014

  Any in-game sites should be fine IMHO.

  What we have to be careful of is the non game-related-only sites.

  Like, ok for rosenbergclinic.com ... but not ok for humanequations.co .

   

  I don't remember, but I believe I saw a post officially mentioning this very step you are about to undertake and the, erm, encouragement to do it.
• Santiak Member Posts: 130

  June 2014

  I wonder, then, if Human Equation will eventaully consider it okay to hack agents?

   

  I reckon that'll be part of being clearence level yellow - if they'll still be relevant
• nikeliz Member CommonPosts: 51

  June 2014

  Sure, I think this is a valid route. Go for it unless HE says otherwise!

   

  I will say though, that I feel that brute-forcing a password at the release of a mission kinda defeats the spirit of the game. If its been a while, ok, but we should learn to not depend on brute-forcing.

  A.K.A. nikel
• Santiak Member Posts: 130

  June 2014

  Originally posted by nikeliz

  Sure, I think this is a valid route. Go for it unless HE says otherwise!

   

  I will say though, that I feel that brute-forcing a password at the release of a mission kinda defeats the spirit of the game. If its been a while, ok, but we should learn to not depend on brute-forcing.

  I agree - it all depends on what information we have from the puzzle at hand, in my opinion.

   

  If the information available to us primarily hints at there being some logical way to proceed; researching an item, concept, person, what not, then that's the way to go.

  If the "information" available to us instead includes a console, or somehow alludes to forced entry is the way to go, then that's the avenue we persue.

   

  Some degree of consideration towards what is the intent of the current mission should be maintained, I feel, or TBW might ultimately [dons pessimist hat] "devolve" into a contest of who's the better hacker/anti-hacker. [/dons pessimist hat]

   

  After all, some of the most memorable times during past ARGs have been during the "gaps"; not the ones where we were working on the solution to a puzzle, but as to where or what the next puzzle was.

   

  Kumquat! A4! Ogallala!
• Anashel Member UncommonPosts: 200

  June 2014

  Originally posted by Santiak

  I wonder, then, if Human Equation will eventaully consider it okay to hack agents?

  No we wont. This is where the line is drawn. Official forums and official website will be consider an illegal cyber-attack. That goes to mailchimp. We ask people to NOT leave any confidential information and we will use third party log-in like google to handle the security. On our side we only host token and variable.

   

  It is a sensitive topic, we want to let hacker user their real life skill but if you recalls end of days, we were down multiple times due to people doing brute force attack the site, preventing all other player to enjoy the game.

  For now we request people to NOT brute force site or take them down by flooding. This is not hacking, it doenst show any skill aside being a script kiddies able to run automated hacking software so let me make it clear: IT IS NOT TOLERATED.

  On the other hand if you hack you way trough an open port that give you access to vulnerable page, etc: ths is tolerated for fake site like Rosenberg or FSB building. But you will always have clues either in the code source or in the vulnerable page we left behind that give you clear insight that this is a path to follow.

   

  It is obvious that we going to have to come up with a clear rules to properly inform our hacker on what can be hack (and was design to be hack) versus what can't....

   

  Hope that clear up the subject.
• Gr3ylok Member UncommonPosts: 8

  June 2014

  Got it, no cracking it is.

  Then I wonder if Admiral1 is onto something with Wilder Penfield.

  We were discussing his findings and altho they are scattered, they seem to related somehow.

  Didn't hear any other agents about Wilder yet so that might be something to look into.

  https://docs.google.com/spreadsheets/d/1qwI1-dhICLm7wIM89r_Qp8WSLR5saZiw0VJGPKPs0QE/edit#gid=0
• ellobo29 Member UncommonPosts: 423

  June 2014

  Originally posted by Anashel

  Originally posted by Santiak

  I wonder, then, if Human Equation will eventaully consider it okay to hack agents?

  No we wont. This is where the line is drawn. Official forums and official website will be consider an illegal cyber-attack. That goes to mailchimp. We ask people to NOT leave any confidential information and we will use third party log-in like google to handle the security. On our side we only host token and variable.

   

  It is a sensitive topic, we want to let hacker user their real life skill but if you recalls end of days, we were down multiple times due to people doing brute force attack the site, preventing all other player to enjoy the game.

  For now we request people to NOT brute force site or take them down by flooding. This is not hacking, it doenst show any skill aside being a script kiddies able to run automated hacking software so let me make it clear: IT IS NOT TOLERATED.

  On the other hand if you hack you way trough an open port that give you access to vulnerable page, etc: ths is tolerated for fake site like Rosenberg or FSB building. But you will always have clues either in the code source or in the vulnerable page we left behind that give you clear insight that this is a path to follow.

   

  It is obvious that we going to have to come up with a clear rules to properly inform our hacker on what can be hack (and was design to be hack) versus what can't....

   

  Hope that clear up the subject.

  What if you have absolutely no hacking skills whatsoever? Will a player be left out of much of the content if he cant contribute in this way?

  http://medias.luna-atra.fr/gw2/char_tool/CT_imageGenerator.php?pseudo=Centurion Mikal&lang=EN&code=&code=TSwtLDUsLSw2LC0sMjksOSwyMiwyMywyNCwtLDEwMiwzNiw4MSw4NCw4OQ==
• Santiak Member Posts: 130

  June 2014

  Originally posted by ellobo29

  Originally posted by Anashel

  Originally posted by Santiak

  [...]

  [...]

  What if you have absolutely no hacking skills whatsoever? Will a player be left out of much of the content if he cant contribute in this way?

  From what Anashel wrote, I would think not.

  While that does, of course, leave one avenue of solving a puzzle closed to some of us - myself included - the fact that the game is very much centered around the community, not the individual (and I apologize if you're already aware of this fact), means that regardless of whether or not you posess a certain skillset, you will never truly be left behind.

  For example, once the hackers break through, and pave the way for the rest of us, you might be the one who targets the correct file, which shouldn't be far above anyones skillset.

   

  That said, it would be like missions requiring knowledge about music to solve; they happen, but intermittently, so not knowing anything about music won't leave you in the dust, just with a longer ways to go, or more reliant on other players, during the missions that do rely on your musical or music related knowledge.