10 Year Old "Hacker" Exploits a "Zero Day Flaw" in Games - Polidicks

Apparently exploiting changing the clock on your phone to make your corn grow faster makes you a hacker. :rolleyes: [quote] By: Seth Rosenblatt August 7, 2011 4:00 AM PDT [img]http://i.i.com.com/cnwk.1d/i/tim/2011/08/06/2011_DefCon_19_CyFy_10_year_old_hacker_610x794.jpg[/img] 10-year-old hacker CyFi discovered her first zero-day exploit earlier this year, and presented her findings at the first DefCon Kids at DefCon 19. (Credit: Seth Rosenblatt/CNET) LAS VEGAS--A 10-year-old hacker who goes by the pseudonym CyFi revealed today at DefCon 19 a zero-day exploit in games on iOS and Android devices that independent researchers have confirmed as a new class of vulnerability. The girl from California first discovered the flaw around January 2011 because she "started to get bored" with the pace of farm-style games. Speaking to CNET about an hour before her presentation, CyFi said, "It was hard to make progress in the game, because it took so long for things to grow. So I thought, 'Why don't I just change the time?'" Most of the games she discovered the exploit in have time-dependent factors. For example, planting corn might take 10 real-time hours to mature in the game. Manually advancing the phone or tablet's clock forced the game further ahead than it really was, opening up the exploit. She is not revealing at this time which games are affected because of reasonable disclosure, thus giving the vendors that make the affected games a chance to respond. While many games will detect and block this kind of manipulation, CyFi said that she discovered some ways around those detections. Disconnecting the phone from Wi-Fi made it harder to stop, as did making incremental clock adjustments. CyFi's mother, who must remain anonymous to protect her daughter's identity, told CNET that at the end of CyFi's presentation at DefCon Kids they would offer a $100 reward to the young hacker who found the most games with this exploit over the following 24 hours. The reward is sponsored by AllClearID, a identity protection company that is also sponsoring the DefCon Kids. This is the first year of DefCon Kids programming at the conference, a reflection of the fact that members of the hacking community are getting older and raising families. Already an artist who has performed an improvised, 10-minute-long spoken word piece in front of 1,000 people at the San Francisco Museum of Modern Art, a Girl Scout, and a state-ranked downhill skier, CyFi revealed that she was only a little bit nervous about having to speak in front of the 100 or so expected attendees. She admitted that while it was probably different publicly speaking about a topic with such a specific focus, it would be hard for her to imagine what those differences might be. "Well, I haven't done it yet," she said. [/quote] [url]http://download.cnet.com/8301-2007_4-20089152-12/10-year-old-hacker-finds-zero-day-flaw-in-games/[/url]

i do this with tiny tower stand the fuck back or ill hack yer bum

I do this for some games when I'm on the train. What's new?

[QUOTE=Elfy;31631980]I do this for some games when I'm on the train. What's new?[/QUOTE] What's new is now it's some sort of "big deal".

"hacker"

The vulnerability is valid though. The new part of it that she's discovered is that protection inside the apps themselves can be circumvented by slowly stepping the clock forward instead of jumping.

I did this on animal crossing years ago...

[QUOTE=leach139;31632159]The vulnerability is valid though. The new part of it that she's discovered is that protection inside the apps themselves can be circumvented by slowly stepping the clock forward instead of jumping.[/QUOTE] Oh my God, did you even read the other thread? The people who wrote that article took it completely out of context. You can tell because [i]none[/i] of the other articles covering the same topic have any suggestion that there's further exploiting using this. It's not even [i]possible[/i] to do any kind of serious exploit through this, as the system behind all the time-based actions in apps isn't standardized. It's not like you just plug in the same code for each of the games, it has to be written on a case-by-case basis, and therefore the same bug wouldn't appear in two different games that have time-based things going on.

Oh man, that means I was a Grade A hacker in Animal Crossing back in the day! Edit: [QUOTE=Hamm0;31632217]I did this on animal crossing years ago...[/QUOTE] You too? lol

Ah yes I used to do the same thing on Fable.

[QUOTE=brennahan;31632566]Oh man, that means I was a Grade A hacker in Animal Crossing back in the day! Edit: You too? lol[/QUOTE] Everyone did that on Animal Crossing.

I must be a fucking leet hacker then cause I've done this in Minecraft.

It's fairly obvious about anyone who's played games for the most of their life and is actually somewhat intelligent has done this. Maybe even before 10 years old. But some 10 year old girl does it and suddenly [b]ALERT THE MEDIA 10 YEAR OLD GIRL HACKZ VIDYA GAMES AND GETS A CASH PRIZE FOR IT1!!![/b]

it's called a slow news day stop getting upset

I do this all the time on Plants vs Zombies. Is this article serious?

How the fuck is this a zero day vulnerability? The games have been out for years and there has been thousands of people who have done this same thing before. Turning off the Wi-Fi is what makes it work because the phone stops synchronizing time with a time server. Hell this is a MASSIVE oversight by the devs in reality, not relying on server time is probably an attempt to make the game less reliant on a main server. In fact, I think this game isn't online at all, making the whole ordeal even more retarded.

Hey Garry, you know how you asked if she was hot? Well take a look.

This must be one of those cryptokids I've been hearing about.

[QUOTE=Hamm0;31632217]I did this on animal crossing years ago...[/QUOTE] I'll never forget the time I forgot to save it when doing this.

[QUOTE=Hamm0;31632217]I did this on animal crossing years ago...[/QUOTE] I did this on Animal Crossing when I was 7 I am the worlds youngest hacker!

[QUOTE=Spearman;31634902]I did this on Animal Crossing when I was 7 I am the worlds youngest hacker![/QUOTE] Then you must be 14 now, at most.

[img]http://i.i.com.com/cnwk.1d/i/tim/2011/08/06/2011_DefCon_19_CyFy_10_year_old_hacker_610x794.jpg[/img] lol she thinks she's a hot shot hacker or something?

So, how do you think you are suited for a job in the security sector? Well, I don't wanna brag but I changed the time on my phone to hack farmville. HOLY SHIT

Well fuck. Idiots on the news again.

wow this article is so hilariously out of context, I goggled searched it and did this when I was 8 playing flash games, whats new?

[QUOTE=Carbo;31635792]wow this article is so hilariously out of context, I goggled searched it and did this when I was 8 playing flash games, whats new?[/QUOTE] People are getting dumber and dumber every day. Read the article. This isn't about PC. It's about phones/tablets. It means it would require hardware modifications. So no, you didn't do this when you were 8.

Slow news day combined with a journalist who doesn't really understand technology. Cool.

[QUOTE=PrusseluskenV2;31633661]This works in MC? What the[/QUOTE] Gives you super speed.

[QUOTE=Map in a box;31636002]People are getting dumber and dumber every day. Read the article. This isn't about PC. It's about phones/tablets. It means it would require hardware modifications. So no, you didn't do this when you were 8.[/QUOTE] You can change the date and time in a phone too. Have you ever used something like an iPod?

[QUOTE=dogmachines;31636322]You can change the date and time in a phone too. Have you ever used something like an iPod?[/QUOTE] Thats not CLOCKING. Thats SETTNIG THE TIME.