Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's of a very different nature, but that reminds me of another "off by one" fencepost error exploit I encountered in the wild of The Sims Online.

https://en.wikipedia.org/wiki/Off-by-one_error

In this earlier post I described making a maze solving bot to quickly and automatically generate millions of Simoleons, and an ad-hoc solution to the delivery problem:

https://news.ycombinator.com/item?id=11730181

[...]

And the other problem was that TSO just wasn't designed to make it easy to transfer large amounts of Simoleons from player to player.

You couldn't just "wire" somebody an arbitrary amount of cash via in-game email -- you had to show up on their lot and meet them at a specific real time, and suspiciously hand it over to them $1000 at a time.

There was another better way to transfer cash more efficiently than handing it over grand by grand, and that was with tip jars: You could fill a tip jar with $5000 using the pie menu with a couple of mouse clicks, and then the user could empty it the same way.

So when I had to deliver our first million Simoleons, I came up with a system where I'd go to the lot of the customer and meet them, then ask them to line up a bunch of tip jars in a row. I would then use bot macros to fill each tip jar one by one with $5000, while the customer would quickly empty them as I filled them up, and then we'd go back to the beginning of the row and start all over again, until we'd transferred the entire million Simoleons, in only 200 $5000 hand=>jar=>hand transactions instead of 1000 $1000 hand=>hand transactions.

One time when we were making a big delivery of cash, running the gauntlet of tip jars in our customer's living room (which I admit looked pretty fishy), and their housemate came home, saw what was happening, and wisely sussed up the situation that there was some kind of deal going down, that she wanted in on.

So she put her own tip jar down at the end of her housemate's row of tip jars, and I blithely deposited $5000 into her tip jar several times, which she immediately snapped up.

When I realized what happened, instead of contracting The Sims Mafia [2] to do a hit on her, I congratulated her for her loose morals and ingenuity. It was such a great hack, and I totally fell for it, and had more Simoleons than I knew what to do with anyway. It's all about good customer service!

It was a fun experiment, but other bots and offshore farmers were starting to work the system too, and customer service and delivery problems made it not worth continuing.

[...]

[2]

Schneier on Security: Virtual Mafia in Online Worlds

https://www.schneier.com/blog/archives/2009/11/virtual_mafia...

Randy Farmer and Bryce Glass: Building Web Reputation Systems: The Dollhouse Mafia, or "Don't Display Negative Karma"

http://buildingreputation.com/writings/2009/10/the_dollhouse...



Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: