Heikki Levanto wrote: > No amount on crypto-mumbo-jumbo will solve the problem that the server will > have to trust the program, and its author. Signing can provide some little > assurance that the program running today is the same as was running > yesterday, but that's about all. As long as we can write our own programs, > there is no way to stop us from cheating in them, intentionally or by > accident.
Very true. To the people that point to timeseal on the chess servers: both the binaries and the protocol itself are trivially reverse engineerable. I know of at least 2 people (not counting myself) who have done this. Because the client side is fully under your control, you can cheat all you want with this system. But you can also write a client for a non-supported platform :) The only reason why this doesn't create more problems is that the people who have the ability to do this reverse engineering usually have better things to do with their time than to cheat on chess servers. It's like copy protections: it stops some people, but it sure as hell ain't "secure" in any meaningful sense. -- GCP _______________________________________________ computer-go mailing list computer-go@computer-go.org http://www.computer-go.org/mailman/listinfo/computer-go/
