所有案件
DIG UP Adventure的案件
#97992: "Secret cards from other player are leaked "
#97992: "Secret cards from other player are leaked "
这个案件是关于哪方面的？
发生什么事? 请从下方选择
规则：有一条游戏规则没写进游戏程序里
发生什么事? 请从下方选择
规则：有一条游戏规则没写进游戏程序里
请检查是否已有同课题案件
若肯定，请「投票」给这桩案件。最高票的案件将「优先」处理！
| # | Status | Votes | Game | Type | Title | Last update |
|---|
细节描述
• 如果有的话，请将你在屏幕上所看到的错误信息粘贴出来.
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 请说明你当时想做什么，你做了什么，然后发生了什么
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请以英文复制／粘贴显示文字而非你的语言。 如果你有这个系统漏洞发生时的屏幕截图(画质不要太差)，你可以使用Imgur.com来把它上传到网络，然后将链接复制/粘贴到这里来。
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 这段文本在翻译系统中吗？如果存在，它被翻译是否已超过二十四小时？
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请简明而精确地解释您的建议，以便让人明白您想表达的意思。
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 您正使用哪一款浏览器呢？
Google Chrome v116
• 当你被封锁的时候，屏幕上出现了些什么呢？(空白的屏幕？部分游戏平台画面？错误的信息？)
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 您正使用哪一款浏览器呢？
Google Chrome v116
• 哪个规则没有被BGA的设计小组写进游戏里？
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 在游戏回放中，是否有不符合游戏规则的地方？如果有的话，请问是在哪一步呢？
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 您正使用哪一款浏览器呢？
Google Chrome v116
• 你当时是想做哪个游戏行动？
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 你在想做什么的时候，触发了这个游戏选项？
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 当你想这么做时，发生了什么事(错误信息，游戏状态信息，......)？
• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请问这个问题发生在游戏的哪个阶段(当前的游戏说明是什么)？
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 当你想进行一个游戏行动时，发生了什么事(错误信息，游戏状态信息，......)？
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请描述一下显示画面上面的问题。 如果你有这个系统漏洞发生时的屏幕截图(画质不要太差)，你可以使用Imgur.com来把它上传到网络，然后将链接复制/粘贴到这里来。
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请以英文复制／粘贴显示文字而非你的语言。 如果你有这个系统漏洞发生时的屏幕截图(画质不要太差)，你可以使用Imgur.com来把它上传到网络，然后将链接复制/粘贴到这里来。
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 这段文本在翻译系统中吗？如果存在，它被翻译是否已超过二十四小时？
Each time a player put a card on the mine, getting a hidden one, it is temporarily visible with the animation.• 您正使用哪一款浏览器呢？
Google Chrome v116
• 请简明而精确地解释您的建议，以便让人明白您想表达的意思。
Secret cards from other players can be seen, because they are sent to the browsers of each player. This allows any cheater to get access to a lot of data (didn't check to which extent, but I suppose most of the stuff is accessible).
It is even leaked very shortly by some animations (that's how I got the idea to check).• 您正使用哪一款浏览器呢？
Google Chrome v116
案件历史
2023年9月 8日 20:09 • JustinFernal • 漏洞尚未被修复:
The messages corresponding to other players actions can be easily intercepted in the network console of any browser.
I don't know if everything is accessible or only certain moves related to the mine (quick look at the Websocket frames makes me think that it is everything, but not sure yet : I didn't try to understand them fully).
Advice : a security check should be done for this game, and then probably a big refactoring, as any information not visible to a player should NOT be sent at all to this player, even if not displayed.
I don't know if everything is accessible or only certain moves related to the mine (quick look at the Websocket frames makes me think that it is everything, but not sure yet : I didn't try to understand them fully).
Advice : a security check should be done for this game, and then probably a big refactoring, as any information not visible to a player should NOT be sent at all to this player, even if not displayed.
2024年1月31日 11:08 • El_Guigui_13 • 漏洞尚未被修复:
All the time when a face-down card is replaced by a face-up card, the animation allows the face-down card to be seen.
This is a violation of the rules of the game. It should not be possible for the opponent to see the replaced card.
This is a violation of the rules of the game. It should not be possible for the opponent to see the replaced card.
2024年1月31日 12:10 • totem54 • 漏洞尚未被修复:
el guigui 13 m'a demandé de signaler le bug c'est donc ce que je fais mais je n'ai pas attention au bug durant la partie.
2024年1月31日 14:37 • El_Guigui_13 • 漏洞尚未被修复:
Here's an example: the card in position 8 is hidden; when it's replaced by the red 8, the opponent can clearly see that it's a skeleton.
imgur.com/a/2ILsd4n
imgur.com/a/2ILsd4n
增加一些新内容到这篇报告
任何可能重现这项漏洞或了解你的建议之相关资讯，都请在此填写:
- 其他的游戏桌 ID / 移动 ID
- 按 F5 是否解决了这个问题？
- 问题是否发生了好几次？还是每次都发生？还是时好时坏？
- 如果你有这个系统漏洞发生时的屏幕截图(画质不要太差)，你可以使用Imgur.com来把它上传到网络，然后将链接复制/粘贴到这里来。
更改案件状态为：
bug?id=97992
