MWS hacking

[ACME_Myst]

In light of the discussion in the "Should online tournaments count?" thread, I want to propose this:

We can all agree there's quite a few skillfull computer geeks running around on these boards and in the MTG scene in general. I have some spare time coming up.

Does anyone else here want to join in a combined effort to hack / find an exploit in MWS that can be abused to alter the gamestate in someones favor?

If this fails, I'd say it's a fair assumption no such hacks exist or only exist on such a small basis that this argument can be removed from the discussion.

Disclaimer: I'm not completely sure this topic is allowed on these boards or should even be discussed at all. The problem is that if we DO find an exploit, and it currently doesn't exist, we just invalidated all the MWS testing for the future.

[kicks_422]

I read something before about an MWS hack. The details I remember are vague, but it kind of involved being able to see your opponent's sideboard, which could be used in Games 2 and 3 to figure out what your opponent boarded in against you.

[diffy]

I read something before about an MWS hack. The details I remember are vague, but it kind of involved being able to see your opponent's sideboard, which could be used in Games 2 and 3 to figure out what your opponent boarded in against you.

That's an easy one - here's how you perform it:
Connect to Opponent [Ctrl+I] -> Press Wait -> Copy IP
Go back to MWS, open another Connect to Opponent -> Call your IP, two MWSplay windows open
In one MWSplay window, go 'Show' -> 'My sideboard to opponent'*, close this window
In the other MWSplay window you now see the sideboard of your other window. Now go to 'Options' -> 'Reconnect...' and proceed as if you would connect normally to your opponent (either via server or ip).
There's usually a bug when your victim connects, just press 'F2' -> 'Start New Game' and everything is fine - you now see your opponent's sideboard... just make sure to not close the window because that would show in the log.
Profit.


*Does not really work with the library as the cards get hidden in the library when someone shuffles. You could exploit the trashtalking at the beginning of each game to get a quick glance at your opponent's deck though. The glitch does not work at all with cards in hand.

If you actually start using this exploit in online-tournaments you do get a huge advantage as often enough you can figure out what your opponent is playing (helps with mulligan decisions) and how he's boarding.
I try it out a few times and will get back on people if there's any chance of spotting it as unknowing 'victim'.

Side effects of the cheat:
Some of the hacking players' mana-symbols are replaced by a blank, especially colourless symbols in a coloured spell are susceptible to this - no opponent notice of the cheat.
(to be completed)


Just notify the mws author of your hack and which security hole you abused to make it possible, so they can fix it.

Is there actually still development going on for MWS? I have neither seen a software nor a MtG-Masterbase update in ages.

[ParkerLewis]

The problem is that if we DO find an exploit, and it currently doesn't exist, we just invalidated all the MWS testing for the future.

Not at all. Just notify the mws author of your hack and which security hole you abused to make it possible, so they can fix it.

[Skeggi]

Can't you just run multiple MWS accounts and top8 the tournament entirely by yourself? :cool:

[ACME_Myst]

Obv you could. You'd be really really busy though if other people would also participate.

And, the same thing could obv be done in real life.

[Skeggi]

And, the same thing could obv be done in real life.

Apparently you rule at cloning.

[Nihil Credo]

I try it out a few times and will get back on people if there's any chance of spotting it as unknowing 'victim'.
If you seriously fear this glitch, you could just join the game with a placeholder deck first, and Show your opponent your sideboard. If he was trying this glitch, the message "[Opponent's name] is looking at your Sideboard..." will not appear (as it normally does). Then you press F2 and load your actual deck.

[ParkerLewis]

If you seriously fear this glitch, you could just join the game with a placeholder deck first, and Show your opponent your sideboard. If he was trying this glitch, the message "[Opponent's name] is looking at your Sideboard..." will not appear (as it normally does). Then you press F2 and load your actual deck.

That's tech. You could show them a Dragon Stompy board to make them fetch basics only, hopefully restraining their options a little bit enough so that you could more easily go off with your actual TES list.

[cdr]

Of course exploits for MWS exist. Same as Apprentice, etc. Any sort of client-to-client application? Forget it.


In light of the discussion in the "Should online tournaments count?" thread, I want to propose this:

[Michael Keller]

I just think there are more opportunities for shenanigans to occur when you play a match on Workstation. There are certain invariables which you just cannot control (i.e. Disconnecting, Cheating with Help, etc.). It certainly doesn't take anything away from the folks who try their damnedest to win, but rest assured the program has its faults and that sort of brings down the match credibility of play over the entire tournament. It's like night and day when comparing live play to e-play.

They should not count, IMO.