Concept exploitable? about mcsr-serversiderng-1.16.1 HOT 12 CLOSED

the rng seed gets refreshed every 30 seconds

from mcsr-serversiderng-1.16.1.

The server's endpoint for refreshing the seed (basically the login endpoint, I believe) currently has no rate limit.

(at least it seems like it)

from mcsr-serversiderng-1.16.1.

Also, one would also be able to cheat without performing additional requests.
Just use the seed to calculate how much gold is needed for the next piglin trades to result in a specific amount of pearls, and é voilla, time saved by not having to gather as much gold as one normally would.
This is just an example, I have no clue how speedrunning works.
I'm just trying to illustrate how this mod could be abused.

from mcsr-serversiderng-1.16.1.

and you need to be able to pull that all off in the next 30 seconds or else you have all new rng, and with that its still a better scenario then letting the player pick their rng

you could wait around for good rng if you wanted to but the point of speedrunning is you didnt wait around

from mcsr-serversiderng-1.16.1.

It might be worthwhile investigating what would happen if the mod were to only use one random generator for all relevant random events.
That way, the outcome of the game, e.g. the amount of piglin trades, is entirely dependent of player behavior.

from mcsr-serversiderng-1.16.1.

that would be worse, then you could trigger random events to skip bad calls letting the player directly manipulate the rng instead of predicting it for a short amount of time

from mcsr-serversiderng-1.16.1.

and you need to be able to pull that all off in the next 30 seconds
you could wait around for good rng if you wanted to

What I'm saying is that a program could cycle through thousands of them in a couple of seconds or minutes

from mcsr-serversiderng-1.16.1.

thats not an issue on this repo go to the backend repo for that issue

from mcsr-serversiderng-1.16.1.

where's that?

from mcsr-serversiderng-1.16.1.

I'd be interested in looking at the backend code, but I cant seem to find the repo. Is it public?

from mcsr-serversiderng-1.16.1.

sorry had a work meeting the repo is here https://github.com/VoidXWalker/serverside-rng-website, nvm looks like its private we know about the issue now though and will try to get it fixed asap though

from mcsr-serversiderng-1.16.1.

pls dont dos the server again btw, everything went down for like an hour this morning because of you making to many requests, and we do log the time that the requests are made so we would know if someone exploited this anyways by looking at the request volume

from mcsr-serversiderng-1.16.1.