Re: PBM die rolling web site

From: bruno@cerberus.csd.uwm.edu (Bruno Wolff III)

Date: Tue, 09 Dec 1997 00:00:00 +0000

From article <348D7F72.29C0B7CD@gamerz.net>, by Richard Rognlie <rrognlie@gamerz.net>:
] A new service that is being developed on my gaming site, is
]
] 	http://www.gamerz.net/shadowdice/
]
] Players can embed dice rolls in the text of a message sent
] to the various parties involved, and the results can be
] verified by the receiving parties.
]
] An eMail version of this service is being developed.  But the
] web based version is fully functional now.
]
] Richard
]

Your help file doesn't state how you generate your random numbers. It looks
like you use a seed for a random number generator. This may be exploitable
in some cases.

Are you going to allow for digital signatures in the future (both for
your service and for the die roll requesters)?

People will need to carefully check the received headers when getting
messages from your service. From the description it looks like people
can roll until they get a result they like and then resend the message
(adjusting appropiate headers) to the other player(s). If the other
player(s) use your VERIFY command they will think the rolls are legitimate.
The only way to detect the forgery will be to see that the message didn't
come directly from your site (or was relayed through your site if your
site allows relaying).
--
I do not accept mail from sites that have trouble controlling spam.

References

Re: PBM die rolling web site
Richard Rognlie <rrognlie@gamerz.net>
Tue, 09 Dec 1997 00:00:00 +0000

Referenced By

Re: PBM die rolling web site
Richard Rognlie <rrognlie@gamerz.net>
Tue, 09 Dec 1997 00:00:00 +0000