Hacker News new | ask | show | jobs
by isaec 1611 days ago
Does not seem to authenticate scores in any way - I observed this yesterday in the network tab, but it seems someone else has taken advantage of it, and spammed the leaderboards with political messages and a rickroll.

I am curious what the best way to prevent this is without account creation? Maybe store all the data of the run, so it can be simulated serverside and have its score validated?