[HN Gopher] How to find exploits in video games
       ___________________________________________________________________
        
       How to find exploits in video games
        
       Author : shalzuth
       Score  : 22 points
       Date   : 2024-11-08 18:04 UTC (3 days ago)
        
 (HTM) web link (shalzuth.com)
 (TXT) w3m dump (shalzuth.com)
        
       | shalzuth wrote:
       | I wrote a short blog post about my thought process on how I
       | reverse engineer video games and build tools that enable me to do
       | security testing on them. It's a bit brief on purpose, as reading
       | the code is expected. Let me know your thoughts and what would
       | make it better.
        
         | shipscode wrote:
         | Thanks for the write up! This is really interesting and a great
         | piece of knowledge to have out there. Funnily it similar to
         | mobile app reverse engineering workflows.
        
       | joshua_delgad0 wrote:
       | Do you have permission to do security testing on this game, or at
       | least to reverse engineer it? Or did you casually document your
       | illegal activity, and uploaded it online?
        
         | alphan0n wrote:
         | In most cases, in the US, reverse engineering is not illegal.
        
           | joshua_delgad0 wrote:
           | Interesting. Do terms of service not apply to US citizens?
        
             | alphan0n wrote:
             | Are you under the belief that terms of service can dictate
             | or supersede US law? Thankfully that is not the case.
        
             | shipscode wrote:
             | Terms of service breaches are not typically a criminal
             | manner in the USA. Perhaps it could be a civil matter if
             | you create financial damages. Even in that area, the cases
             | are usually decided in the courts on a case-by-case basis.
             | 
             | Generally, code is free speech, and the right to free
             | speech protects this in America.
        
         | 123yawaworht456 wrote:
         | why are you larping a lawyer, bro
        
           | joshua_delgad0 wrote:
           | It just doesn't seem like ethical behavior to me. He clearly
           | mentions that they don't have a bug bounty program, then why
           | try to break it? Is this a beg bounty attempt
           | (https://www.troyhunt.com/beg-bounties/)?
        
             | 123yawaworht456 wrote:
             | for the hell of it?
             | 
             | and even if it was unethical, unethical !== illegal.
        
         | brokenmachine wrote:
         | My PC my choice.
        
       ___________________________________________________________________
       (page generated 2024-11-11 23:00 UTC)