Arch. wrote:I know how to Hack Haypi to a certain extent but don't use it. But all i was saying is that the android OS is too easily hacked. And im pretty sure the server side has no security issues. So far the only way of really hacking is by running all the messages the game sends through a proxy serer and altering the respone the serevr gives back. ( doesn't entirely work though )
Here is just how wrong you are:
It is true that you can monitor the messages that you client sends to the server and the messages the server sends to the client. And if those messages aren't crypted or if you manage to decrypt them then you can alter those messages in both direction.
If you alter the messages the server sends to the client then you can fool the game you have on the phone. For example when you start the game, it syncs with the server to find out the number of resources, cash and coins you have. So if you alter the messages the client gets from the server you can make the game on you phone think you have like 999999999 coins or 999999999999999999 prestige. But that prestige is not truly in the server database, all the other players will not see that you have that prestige so it should be not worth to you. What good is it making you phone believe you are number one when on the server you still show up as number 10.000 and all the other players see you as number 10.000.
If however you alter the messages that the client sends to the server, you could for example pretend that you have 9999999999 gems and put them on the market. But the reason why mmo games are uncheatable is that when a server recieves such a message from a client it checks with the database first. So the server knows that you only have 2 gems in your inventory and instead of processing your market request it will return an error. It is necesary to do so not only to prevent cheating but also to prevent bugs.
However somebody managed to truly cheat in this game. Not alter his own client to show he's the boss but actually managed to fool the server into showing him as the boss. This only means one thing. Somewhere the server takes some info from the client as granted. If the server always checked what he got from the client to see if it fits the server database noone could foold the server that he owned 9999999999 gold nuggets or such. But if somewhere the server doesn't check the info he gets from the client and takes that info for good then someone cand exploit that by sending fake messages from his client (or from a fake client for that matter).
That is the only way to cheat in a mmo game and that is a server issue. When you create a mmo, you expect the users to try to do all kinds of crap with the client. So every piece of info you get from the client you check versus the database to see if it fits (if my client sends a message that I want to attack with 100000 catapults you first check if I have 100000 catapults available, you don't just take that attack for good). If you don't do that then you get hacked but it's not Android or Apple users that need to be eliminated. It's the server that has some bugs that need to be solved. And if they don't solve those, the so called hacked can still hack the game no matter what platforms they ban from the game.
PS: The other way to hack it would be to actually hack the OS of the server or at least the database server and directly edit the info written there but that very very hard and unlikely to happen.