Suggestion For Devs EXPLOIT finders REWARD

[RavenWinterHawk]

You know the test centers are great for something that is broke. They are not great for exploits.

In fact I would argue people go to the test center to find exploits.


How about giving out unique gifts 1 of a kind for people that turn in exploits?

I bet someone would love to get a unique plate set for turning in the book exploit.

The greatest rewards would come for discoveries on the test center.

And don't make it so mysterious. Have people post exploits on test, where they can all be read, and seen in order of discovery. The top dog gets the reward.

 

[Mirt]

Ohh the put us crazy folks to work idea again. Well once again I am all for it.

 

[Gheed]

You know the test centers are great for something that is broke. They are not great for exploits.

In fact I would argue people go to the test center to find exploits.


How about giving out unique gifts 1 of a kind for people that turn in exploits?

I bet someone would love to get a unique plate set for turning in the book exploit.

The greatest rewards would come for discoveries on the test center.

And don't make it so mysterious. Have people post exploits on test, where they can all be read, and seen in order of discovery. The top dog gets the reward.

They annouced a program like this waaay back when Jeremy was the CS gal here. You were supposed to get free game time dependant on how big the bug you reported was. Even a lifetime free sub if it were something large like a nasty dupe. I turned in a few and never heard a word from anyone. To my knowledge they let it fade into oblivion.

 

[Sevin0oo0]

Have people post exploits on test,

That would be a NO. You will Never be allowed to discuss mechanics of bugs. Even doing so vaguely would have people 'trying it out', or modifying it once the bug is fixed to continue. They could also keep a List of these bugs, and re-try them to see if they have become un-fixed (which happens). Discussion/posting is bannable, and has been, all for very good reasons. Even if you only list a small portion of the bug, it may be enough for someone to figure it out. It opens the door to very big problems, so on a final note, NO.

 

[rieley]

Raven, I'm all for it. In fact was thinking about an award system also but could never be able to make a suggestion on how to implement.

If UO is not able to sponser such a system, UO players are creative. My experience most of the players are honest and for the game, can't game time be purchased "legally" with donated gold? Simply need an organized system for reporting exploits and a leader.

You sound like a leader?

 

[RavenWinterHawk]

They annouced a program like this waaay back when Jeremy was the CS gal here. You were supposed to get free game time dependant on how big the bug you reported was. Even a lifetime free sub if it were something large like a nasty dupe. I turned in a few and never heard a word from anyone. To my knowledge they let it fade into oblivion.

Yeah that is why I suggest transparency. If its good for a government it is good for UO.

We post up what we find on trade center in order. We can see the order. And next to it is reward given.

 

[RavenWinterHawk]

That would be a NO. You will Never be allowed to discuss mechanics of bugs. Even doing so vaguely would have people 'trying it out', or modifying it once the bug is fixed to continue. They could also keep a List of these bugs, and re-try them to see if they have become un-fixed (which happens). Discussion/posting is bannable, and has been, all for very good reasons. Even if you only list a small portion of the bug, it may be enough for someone to figure it out. It opens the door to very big problems, so on a final note, NO.

Test center is test center.
Im not sure what you fear.

If you open a can of worms on test center they can't squiggle to our shards.

 

[RavenWinterHawk]

Raven, I'm all for it. In fact was thinking about an award system also but could never be able to make a suggestion on how to implement.

If UO is not able to sponser such a system, UO players are creative. My experience most of the players are honest and for the game, can't game time be purchased "legally" with donated gold? Simply need an organized system for reporting exploits and a leader.

You sound like a leader?

Oh I wish I was a leader. If it werent for RL time... I might.

 

[Tjalle]

That would be a NO. You will Never be allowed to discuss mechanics of bugs. Even doing so vaguely would have people 'trying it out', or modifying it once the bug is fixed to continue. They could also keep a List of these bugs, and re-try them to see if they have become un-fixed (which happens). Discussion/posting is bannable, and has been, all for very good reasons. Even if you only list a small portion of the bug, it may be enough for someone to figure it out. It opens the door to very big problems, so on a final note, NO.

Test center is test center.
Im not sure what you fear.

If you open a can of worms on test center they can't squiggle to our shards.

The thing is though that unless it´s part of a new publish that is only on TC then anything done on TC can be done on normal shards as well.

So if I find a way to get tamed cranes involving eggs and a tinker tool then I can duplicate that on another shard as well...

 

[Sevin0oo0]

Test center is test center.
Im not sure what you fear.

If you open a can of worms on test center they can't squiggle to our shards.

oh, i don't fear anything (see sig). The worms on test could become the foundation of learning to exploit, once learned, where you think they'll happen next? I've never heard of anyone getting banned for something they did on TC, makes it easy to try there first. Might be how that stuff about the duped IBD's developed

 

[Ned888]

It's easily rectified. Set up a board similar to 'Ask the Devs'. You post, and it doesn't appear without approval from the Stratics Team.

No one would see your bug find, except these guys who run the forums and the developers.

 

[Heimi]

It's easily rectified. Set up a board similar to 'Ask the Devs'. You post, and it doesn't appear without approval from the Stratics Team.

No one would see your bug find, except these guys who run the forums and the developers.

Quis custodiet ipsos custodes?

 

[Mirt]

Yeah that is why I suggest transparency. If its good for a government it is good for UO.

There is a bit of a difference. Its not like the government is telling everyone exactly how you can bypass their security systems. So it would increase the size of the issue in the long run. That being said I still support giving something to those players that find the exploit.

 

[Ned888]

Quis custodiet ipsos custodes?

I don't understand which exact language this is, unfortunately I never learned any others than english. That being said, does this translate into:

Who Watches the Watchmen?

That's the only thing I can think of when I read this line.... It's a good question.

 

[RavenWinterHawk]

People... the exploit is like turning in an object that shouldn't have value. We aren't talking about crashing a system.

Besides. Lets say the exploit was transfering shards at a specific time. A whole lot of less damage is done by making it known to everyone and addressing it... then letting it go for 6 months... hence our economy's inflation.


Besides this is for test center new publishes. Any new publish goes to test center and if you figure out a big glitch, error, or abuse thingy... you get something for it.

 

[Odin of LS]

Quis custodiet ipsos custodes?

I don't understand which exact language this is, unfortunately I never learned any others than english. That being said, does this translate into:

Who Watches the Watchmen?

That's the only thing I can think of when I read this line.... It's a good question.

Google translation Latin to English: Who will keep the keepers of them?

 

[Ned888]

Google translation Latin to English: Who will keep the keepers of them?

So close!!! Still a good question.

 

[Kylie Kinslayer]

Good idea. However it would make those that are dishonest who find them out be even more tight lipped about them, causing them to go on for longer before being found out and fixed.

 

[Heimi]

You got it the first time Usually translated to who watches the watchmen, just my attempt at looking smart and pointing out that involving a 3rd party in the bug reporting process (Stratics) can only lead to problems, no matter how trustworthy the staff may appear to be.

 

[tiggertessa2007]

i turned in some crazy darkwood arms once that i found in an idoc. the gm was actually really nice, i wasnt expecting anything in return but he gave me a mill just for the heck of it. u guys proably seen this pic already but ill show ya again. 147 cold resist lol crazy!

 

[Spyderis]

Im all for this idea!! Your reaward is a ..............wait ....for ...it......a.....Compasion Dye......