if you pick up a weapon you can only harm people who friended you (if your friends disagree with being killed, they can unfriend, and unfriended people aren't affected by one's bullets) - but if you find anything that harms others even when not friended, please give us some time to fix it and disclose it privately to: (we do have server-side checks for such things, so if something is not working there, we'd really appreciate the tip) We aren't perfect and private disclosure is very much appreciated. Now as far as tweaking things which are harmful to others go, we try to base it on friendship - so e.g. (If people find someone doing something which somehow ruins things for them, they may flag report a person though.) At rank 2, try creating an Interacting block to see some of the things you can do. When you have a need, we try if possible to make it a feature, by integrating it in the Interacting language. Some early players may have grabbed many plots of land, then sold them to late comers, and during the game's early weeks many land sale advertisements. We also added flying mountables, triple jump wearables, parachutes, insta-teleporting, a 100% invincibility armor, and everything one might want to do. Thanks for these details! We added a client-side scripting option to specifically increase your jumps, so if you want you can create an Interacting for that. Just wanted to bring the issue up to you guys after finding it. To go further on it, I would have it produce the obfuscated names randomly on each load of the game script so they're not easily referred to. Second I would try obfuscating all variable names that you can, especially the class definitions like EntityPlayer. Even if you left all your code in plain text, any modification someone tried to make from the client would be seen, verified, and handled accordingly by the server. I would suggest first and foremost to do the server side checks. The second thing I see is just obfuscating the code more. Now the player can super jump and the server is fine with it (verified by numerous 'holy sh !' and 'wtf!?' comments from other players). To change player jump height for example, all it would take is this piece of JavaScript: It was also easy, for the most part, to identify what certain variables did as they were in plain text. Once the player object was found, it's easy to modify the variables and the world (server side) accepts it. This name for this player object is also static for every game instance, so it's easily referred to every time. I only tested this out on the player object as a PoC, but it only takes changing a variable within the player object to modify things like player speed, mountable craft speed, etc.įor instance, while you obfuscated the name of the player object within the ig.game object, it was easily found by checking for modifications to the health variable, where another function listed it as ig.game.O1376. Probably the biggest issue I see is the lack of server side checks against changes coming from the client. I wanted to notify you guys though of some security flaws within the game. Our top priority always is all of your happiness! We’ll refuse to go compromised “pay to win” routes… let us show the world we can have a universe that’s both sustainable and makes all of us proud! Over 100 million blocks have been placed by all of us already, but we’re waiting for one more person: you.Saw this posted over on PH and checked it out, extremely impressive game and I'm sure there's a ton of dev time on this. Lets download Manyland and enjoy the fun time. We’re two indie developers and this is our labor of love. Download and play Manyland android on PC will allow you have more excited mobile experience on a Windows computer. “The most exciting game I’ve played so far mainly because of its freedom to shape your world.” -Cosminĭraw, build, make music, party, go swim, script interacting objects and adventures, do sports, come up with puzzles, play, explore… Manyland is an open universe with no predefined story, theme or goal… it becomes what we will make of it!Įvery pixel you see in Manyland is created by all of us together as a community. “Exploring the world is a blast” -Massively Such a variety of things in this world to do” -Joshua C. “WONDERFUL … so fun to explore, build, interact, and create ART. ABOUT THIS GAME Welcome to Manyland, an open universe we invent and live together! In an infinite world of abundance, we create new things by drawing them, build new places, hang out and chat, collect, make music, party, script objects, go on adventures… and have fun together in ways none of us can predict.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |