<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://netfocus.baptie.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Quentyn Taylor's Blog : gaming</title><link>http://netfocus.baptie.com/blogs/quentyntaylor/archive/tags/gaming/default.aspx</link><description>Tags: gaming</description><dc:language>en</dc:language><generator>CommunityServer 2008.5 SP1 (Debug Build: 31106.3070)</generator><item><title>Is cheating a game a criminal offence ?</title><link>http://netfocus.baptie.com/blogs/quentyntaylor/archive/2012/04/04/is-cheating-a-game-a-criminal-offence.aspx</link><pubDate>Wed, 04 Apr 2012 10:53:00 GMT</pubDate><guid isPermaLink="false">a2495dd2-a4ec-4200-8bcf-16cfb4a529d7:480</guid><dc:creator>QuentynTaylor</dc:creator><slash:comments>0</slash:comments><wfw:commentRss xmlns:wfw="http://wellformedweb.org/CommentAPI/">http://netfocus.baptie.com/blogs/quentyntaylor/rsscomments.aspx?PostID=480</wfw:commentRss><comments>http://netfocus.baptie.com/blogs/quentyntaylor/archive/2012/04/04/is-cheating-a-game-a-criminal-offence.aspx#comments</comments><description>&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;a href="http://netfocus.baptie.com/cfs-file.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/quentyntaylor/cards.jpg"&gt;&lt;img src="http://netfocus.baptie.com/resized-image.ashx/__size/550x0/__key/CommunityServer.Blogs.Components.WeblogFiles/quentyntaylor/cards.jpg" border="0" alt="" /&gt;&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;When does cheating in a video game become a &lt;a href="http://www.theregister.co.uk/2011/01/07/video_poker_hack_charges/"&gt;criminal matter&lt;/a&gt; ? I recently came across this &lt;a href="http://www.wired.com/threatlevel/2011/01/video-poker/"&gt;story &lt;/a&gt;where by 2 men was accused of &amp;ldquo;cheating&amp;rdquo; video &lt;a href="http://www.post-gazette.com/pg/11004/1115414-58.stm"&gt;poker machines in Las Vegas&lt;/a&gt;.In essence they are alledged to:&lt;/p&gt;
&lt;p&gt;&amp;ldquo;the men would make small bets over and over again until finally winning a hand, then use a special button sequence to change the credits to a higher denomination and &amp;ldquo;access the previous winning hand of cards,&amp;rdquo; triggering a jackpot.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;Now they have been charged with 650 felony counts of theft, criminal conspiracy, computer trespassing and other charges, it is believed that they may have netted perhaps as much as 1.4 million US $ not a small amount. Now what does this have to do with information security ? well what have they done ? lets look a little deeper.&lt;/p&gt;
&lt;p&gt;They managed to manipulate video poker machines, commonly found in casino&amp;rsquo;s to allow them to win more consistently and increase the odds of them winning. The &amp;ldquo;attack&amp;rdquo; worked by :&lt;/p&gt;
&lt;p&gt;&amp;ldquo;&amp;hellip;..a special &amp;ldquo;double-up&amp;rdquo; feature had to be internally activated. The men persuaded casino technicians to alter &amp;ldquo;soft&amp;rdquo; options on the machines, such as volume and screen brightness controls. Such perks aren&amp;rsquo;t unusual for high-rollers, who can wager anywhere from a few hundred to thousands of dollars in one day.&amp;rdquo;&lt;/p&gt;
&lt;p&gt;So it needed prior knowledge but the settings that were changed were commonly changed for &amp;ldquo;high rollers&amp;rdquo; such these gentlemen certainly appeared to be. But is it criminal to exploit software weaknesses in a game of chance or a game of skill against a computer ? Lets take the analogy of counter strike, it is a 1st person shooter and you have the option of playing against &amp;ldquo;bots&amp;rdquo; or computer controlled players. Now when you play against computer &amp;ldquo;bots&amp;rdquo; you will quickly rise to the top of the leader board, why ? Well with computer players a human can very quickly anticipate their moves and so allow you to beat them. Is this cheating ? possibly ? what about playing against other humans ?&lt;/p&gt;
&lt;p&gt;Lets stick with 1st person shooters, there have been &amp;ldquo;&lt;a href="http://quadtechint.com/counter-strike-bug/"&gt;bugs&amp;rdquo; on maps&lt;/a&gt; that allow players who know about them to effectively win very easily as they have a massive unfair advantage over other players. Is this fair ? in my opinion no, is it illegal ? probably not, &amp;nbsp;is it cheating ? possibly. Certainly &lt;a href="http://www.valvesoftware.com/"&gt;Valve Software&amp;rsquo;s&lt;/a&gt; Anti Cheat system will &lt;a href="https://support.steampowered.com/kb_article.php?ref=7849-Radz-6869"&gt;ban players&lt;/a&gt; if they are caught using any programs to assist them in their playing but that is not what we are talking about here. What we are talking about is a player identifying a problem in the software an exploiting it. &amp;nbsp;So here is my question&amp;hellip;&lt;/p&gt;
&lt;p&gt;When does it become illegal to cheat a computer game ?&lt;/p&gt;
&lt;p&gt;When money is involved ? when other humans are involved ? And before anyone thinks that there is never money involved in computer games I refer you to &lt;a href="http://www.wcg.com/6th/main.asp"&gt;World Cyber Games&lt;/a&gt; where prize funds have topped half a million $. If a player were to be accused of exploiting poor programming ( or indeed &lt;a href="http://www.metacafe.com/watch/2214827/cs_italy_exclusive_bug/"&gt;poor level design&lt;/a&gt; ) to give themselves a competitive advantage &amp;nbsp;such an event would the outcomes be the same ? Can we expect to have criminal investigations if someone manages to exploit a bug in a computer game for profit ? Or is this reserved to games that are regulated by a &lt;a href="http://gaming.nv.gov/"&gt;Gaming Comission&lt;/a&gt; ?&lt;/p&gt;
&lt;p&gt;Lets look at another type of game, in Korea the game &lt;a href="http://en.wikipedia.org/wiki/StarCraft"&gt;StarCraft&lt;/a&gt; is almost a &lt;a href="http://en.wikipedia.org/wiki/StarCraft:_Brood_War_professional_competition"&gt;national sport&lt;/a&gt;, they have &lt;a href="http://www.next-gen.biz/features/StarCrafts-enduring-legacy-part-two"&gt;training academies&lt;/a&gt;, &lt;a href="http://kotaku.com/174264/starcraft-on-korean-tv"&gt;televised events&lt;/a&gt; it is &lt;a href="http://www.stripes.com/news/south-korea-ace-team-draws-rock-star-status-1.89236"&gt;big business&lt;/a&gt;. People also bet on it all the time. Imagine if one were to be able to generate a competitive advantage for a relative newcomer, the betting revenue could be quite considerable. Would it still be illegal ?&lt;/p&gt;
&lt;p&gt;To return to the original story, it seems that the defence that may be used is that the players did little more than &lt;a href="http://en.wikipedia.org/wiki/Card_counting"&gt;card counting&lt;/a&gt;, a blackjack technique that may get you kicked out of a casino but is certainly &lt;a href="http://answers.yahoo.com/question/index?qid=20080327152931AAPg6xZ"&gt;not illegal&lt;/a&gt;, time will tell if this defence works.&lt;/p&gt;
&lt;p&gt;What do you think ? why don&amp;rsquo;t you contribute below. If you are a lawyer I am really interested to hear from you and don&amp;rsquo;t worry your post can be anonymous. Please note that none of the above post constitutes legal advice as I am not qualified to give it.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://netfocus.baptie.com/aggbug.aspx?PostID=480" width="1" height="1"&gt;</description><category domain="http://netfocus.baptie.com/blogs/quentyntaylor/archive/tags/security/default.aspx">security</category><category domain="http://netfocus.baptie.com/blogs/quentyntaylor/archive/tags/gaming/default.aspx">gaming</category></item></channel></rss>