BrownTrout:
am acutely suspicious of the uses such software could be put to.
The initial reason I opened direct connexion to the tables without using the flash client
is that I was myself suspicious of how the software was doing things.
In particular, the fact that the password was visible in the URL led me to think
that it was highly possible that the programming of the software was sloppy enough
to allow malicious exploitation of a direct connexion for technological cheating.
In particular, I wanted to check that:
- nobody can see others pocket cards.
- flop is not communicated in advance (at deal time) from server to client.
This led me to reverse-engineer the communication protocol between the server and the client.
By doing this, I noticed that bank balances of players involved in a pot at showdown were communicated (but not displayed by flash client),
and that I could use this to build an extended leaderboard beyond the 50th rank.
If something malicious was possible with the spy and I myself were malicious,
I would not have made the spy project known by players,
nor would have i bothered to make its output available to public.