MASSIVE SECURITY HAZARD in Spore!
J. M. Pescado:
Where are these package files HIDING, anyway? I can't seem to locate them inside the directories.
Quote from: wes_h on 2008 June 22, 05:11:06
I saw a post elsewhere claiming that the data is in the color channels at all the locations that are transparent (where teh alpha is zero). It seems like a reasonable conjecture and also a very clever method.
I wouldn't worry about that. An experiment is meaningful even when the hypothesis is proven to be false.
Lorelei:
Photoshop has a "feature" where you can add data info (name of artist, source of image(s), address, copyright, contact data, whatever) to images. I haven't used it in ages, so I can't recall if this data is only for Photoshop-format files or if jpgs, pngs and gifs can also be data-enhanced. At any rate, there are ways to embed data that don't require a lot of nerdery or specialized knowledge. Said data can be very complex.
As far as reading info off a standard compy, also easy. Simplistic Javascripted code embedded in HTML has been used since practically the first days of the graphical (rather than text-based) WWW, and before.
Not a great stretch of the imagination that an unethical data-mining company like EA might seek to tweak existing old tech to steal your personal info. Fuckers.
Mirelly:
Quote from: J. M. Pescado on 2008 June 22, 00:19:50
In the event that the Splorch server cannot be logged in, anything you make will contain your name in it. You can freak out now.
Muahaha. I visited the Sporepedia today and broke it.
proof ... it's a screencap.
ETA Cold Fusion ... yeesh.
wes_h:
Quote from: J. M. Pescado on 2008 June 22, 05:25:30
Where are these package files HIDING, anyway? I can't seem to locate them inside the directories.
I am running the program here on a Vista machine. On Vista the packages are in C:\Users\myusername\AppData\Roaming\SPORE Creature Creator\
I would believe on XP there will be a SPORE Creature Creator in your user area in a folder called "Application Data". This folder or it's analog is, under both Vista and XP, a locked system folder, and to see the files in Windows Explorer you have to uncheck the option "Hide Protected Operating System Files", ignoring the dire warnings that messing with these files could ruin your system, and may perhaps be the source of all strife in the world.
SimPE Phails at opening them, because the format has been updated to version major 2. This has become the latest time sink for me.
Menaceman:
Quote from: Mirelly on 2008 June 22, 20:48:42
Quote from: J. M. Pescado on 2008 June 22, 00:19:50
In the event that the Splorch server cannot be logged in, anything you make will contain your name in it. You can freak out now.
Muahaha. I visited the Sporepedia today and broke it.
proof ... it's a screencap.
ETA Cold Fusion ... yeesh.
I get those error screens a lot when browsing the spore site.
As to my earlier post, I have since created creatures without being connected to the net and they have indeed been stored to my sporpedia with my real name attached. I figure I can just edit them and save as new creatures to get them to use my account name before uploading.
Navigation
[0] Message Index
[#] Next page
[*] Previous page