Hector Martin

Wait, seriously though? They don't filter that kind of behavior server-side at all? This shouldn't be possible on multiplayer games because as a server designer you need to always assume the client is compromised. Nintendo needs a slap on the wrist for this one.https://twitter.com/Morukutsu/status/1000743600127279105 …

Like, it's not easy to understand what's going on in the video, but I'm pretty sure they've upped the fire rate and range of the blaster to be impossibly high. That's an easy tweak for local things but should be trivially caught if taken online. Smdh.

Online games are *never* designed this way. Seriously. Everyone trusts the client. When the client gets compromised, people try to implement bolted-on attestation and cheat detection mechanisms. I'm surprised you're surprised. This is *entirely* expected.

AKA game designers have bigger things and deadlines to worry about than doing the entire game and netcode design around the assumption that every client may be malicious and break the rules. I'm not aware of any typical console game designed like this.

At *best* one of the players is the "server" and mostly takes input from the others, which reduces the potential for hacks like this... unless you're the server, and then all the hackers need to do is get themselves to be the server.

Honestly now part of me wants to try bug-bountying potentially remote-exploitable splatoon issues, because tbh the idea of remote bricking using unverified inputs worries me a lot.