Hacker News Reader

How do you implement a leaderboard that can’t be spoofed with REST POST calls from curl or postman?(Genuine question for my own JavaScript game) doesn’t need to be perfect just a barrier that makes it painful to spoof easily

View on HN

Include the complete inputs for the solution, and verify on upload.

Then don't accept dupes and make the leaders winning flights watchable.

This requires deterministic physics.

Save the random seed

Yes this is what I'm thinking. The replay links already include the full input. I would then just have to verify it and show the link for each entry. For example this is my flight just now for today's daily with a time of 12.97s: https://rocket-drone.lol/?level=5550594399&replay=IIgmIUWAJB...

Ooooh, replays already exist. I didn't notice the button.

https://rocket-drone.lol/?level=9&replay=IIiKIUWARAOBhYBzAQg...

nice one!

sub-10s. feels like cheating with slowed reality of course.

https://rocket-drone.lol/?level=5550594399&replay=IIhSIUWBhB...

a little downward boost at the beginning, trading away some health for time, love it!

Reply on news.ycombinator.com