Host site see my image files? (1 Viewer)

[FartDarts]

Hi just made an account, hope this is the right place.
If I use a local image file to put into the game that's being hosted on a site, would the site see the image.
Thanks in advance I'm dumb.

 

[stuntcock]

If I use a local image file to put into the game that's being hosted on a site, would the site see the image.

Flash applications are run on the client side. Your browser downloads a copy of the SWF file and then runs the AS3 code locally. If you haven't installed a Flash player (or Flash plugin) then your PC will be incapable of running the game. Therefore the server will simply show you an error message and advise you to install the appropriate Flash software.

If a SWF file is hosted on a website, then the Flash application will sometimes have limited access to the web server's filesystem. This access allows the Flash experience to include things (such as sound effects and video clips) which don't exist on your local PC. The most obvious example is a Flash "video player" which allows the user to watch a movie, but which prevents the user from easily downloading an intact copy of the MP4 source file.

When you submit a local file (such as a PNG hairstyle) to a web-hosted SDT game, the file is loaded into the SWF (i.e. the temporary file which exists on your PC). The chosen file doesn't automatically travel to the server. Your local copy of the game accepts the PNG file, draws the hairstyle sprites onto the appropriate layers, and the appearance of your girl changes accordingly. The web server merely hosts the SWF file and allows you to download it; there's no reason for your PNG files to be uploaded.

Nonetheless, it is possible for a developer to include a special AS3 instruction such as "whenever the user submits a file, please upload a copy to my FTP server." Most developers would not bother to do so, because their server would quickly fill up with duplicate copies of the most popular anime hairstyles. But it's theoretically possible for a malicious developer to spy on your activity or blackmail you.

If you're concerned about privacy then I would encourage you to download your own local copy of the SDT game (or the SDT Loader). If you're especially nervous then you can inspect the game's code to ensure that it isn't doing anything wrong. You could even disable your internet connection before running the game. Of course such vigilance quickly becomes inconvenient ... and so most people simply ignore the privacy risk (or they assume that SDT modders are acting in good faith, and therefore they act with less caution).

In practice, the SDT-hosting website probably isn't spying on you. Porn websites typically host hundreds of different games, and it would be impractical to inject blackmail code into all of them. If the website operator wants to harm you, then it's much easier for them to fill your screen with aggressive popup ads, or trick you into installing ransomware, or exploit an XSS vulnerability to steal your passwords. But there's little reason to rely on a web-hosted copy of SDT, so you should just install a local copy anyways.

People are usually more concerned with security flaws in Flash (which can expose your PC to malware) rather than the risk that a Flash game will leak any embarassing personal data.

 

[FartDarts]

Flash applications are run on the client side. Your browser downloads a copy of the SWF file and then runs the AS3 code locally. If you haven't installed a Flash player (or Flash plugin) then your PC will be incapable of running the game. Therefore the server will simply show you an error message and advise you to install the appropriate Flash software.

If a SWF file is hosted on a website, then the Flash application will sometimes have limited access to the web server's filesystem. This access allows the Flash experience to include things (such as sound effects and video clips) which don't exist on your local PC. The most obvious example is a Flash "video player" which allows the user to watch a movie, but which prevents the user from easily downloading an intact copy of the MP4 source file.

When you submit a local file (such as a PNG hairstyle) to a web-hosted SDT game, the file is loaded into the SWF (i.e. the temporary file which exists on your PC). The chosen file doesn't automatically travel to the server. Your local copy of the game accepts the PNG file, draws the hairstyle sprites onto the appropriate layers, and the appearance of your girl changes accordingly. The web server merely hosts the SWF file and allows you to download it; there's no reason for your PNG files to be uploaded.

Nonetheless, it is possible for a developer to include a special AS3 instruction such as "whenever the user submits a file, please upload a copy to my FTP server." Most developers would not bother to do so, because their server would quickly fill up with duplicate copies of the most popular anime hairstyles. But it's theoretically possible for a malicious developer to spy on your activity or blackmail you.

If you're concerned about privacy then I would encourage you to download your own local copy of the SDT game (or the SDT Loader). If you're especially nervous then you can inspect the game's code to ensure that it isn't doing anything wrong. You could even disable your internet connection before running the game. Of course such vigilance quickly becomes inconvenient ... and so most people simply ignore the privacy risk (or they assume that SDT modders are acting in good faith, and therefore they act with less caution).

In practice, the SDT-hosting website probably isn't spying on you. Porn websites typically host hundreds of different games, and it would be impractical to inject blackmail code into all of them. If the website operator wants to harm you, then it's much easier for them to fill your screen with aggressive popup ads, or trick you into installing ransomware, or exploit an XSS vulnerability to steal your passwords. But there's little reason to rely on a web-hosted copy of SDT, so you should just install a local copy anyways.

People are usually more concerned with security flaws in Flash (which can expose your PC to malware) rather than the risk that a Flash game will leak any embarassing personal data.

So to be clear… They wouldn't see them unless they're dicks and put a lot of effort into it. Im pretty sure I used Comdotgame, but it could've been pinkobox.com but it's not a thing anymore

Also how would I know know if the code is malicious? I'm bad at computers so I would download that flash thing, go the site, what should I look for.

 

[FartDarts]

Flash applications are run on the client side. Your browser downloads a copy of the SWF file and then runs the AS3 code locally. If you haven't installed a Flash player (or Flash plugin) then your PC will be incapable of running the game. Therefore the server will simply show you an error message and advise you to install the appropriate Flash software.

If a SWF file is hosted on a website, then the Flash application will sometimes have limited access to the web server's filesystem. This access allows the Flash experience to include things (such as sound effects and video clips) which don't exist on your local PC. The most obvious example is a Flash "video player" which allows the user to watch a movie, but which prevents the user from easily downloading an intact copy of the MP4 source file.

When you submit a local file (such as a PNG hairstyle) to a web-hosted SDT game, the file is loaded into the SWF (i.e. the temporary file which exists on your PC). The chosen file doesn't automatically travel to the server. Your local copy of the game accepts the PNG file, draws the hairstyle sprites onto the appropriate layers, and the appearance of your girl changes accordingly. The web server merely hosts the SWF file and allows you to download it; there's no reason for your PNG files to be uploaded.

Nonetheless, it is possible for a developer to include a special AS3 instruction such as "whenever the user submits a file, please upload a copy to my FTP server." Most developers would not bother to do so, because their server would quickly fill up with duplicate copies of the most popular anime hairstyles. But it's theoretically possible for a malicious developer to spy on your activity or blackmail you.

If you're concerned about privacy then I would encourage you to download your own local copy of the SDT game (or the SDT Loader). If you're especially nervous then you can inspect the game's code to ensure that it isn't doing anything wrong. You could even disable your internet connection before running the game. Of course such vigilance quickly becomes inconvenient ... and so most people simply ignore the privacy risk (or they assume that SDT modders are acting in good faith, and therefore they act with less caution).

In practice, the SDT-hosting website probably isn't spying on you. Porn websites typically host hundreds of different games, and it would be impractical to inject blackmail code into all of them. If the website operator wants to harm you, then it's much easier for them to fill your screen with aggressive popup ads, or trick you into installing ransomware, or exploit an XSS vulnerability to steal your passwords. But there's little reason to rely on a web-hosted copy of SDT, so you should just install a local copy anyways.

People are usually more concerned with security flaws in Flash (which can expose your PC to malware) rather than the risk that a Flash game will leak any embarassing personal data.

Sorry I thought the page was for messaging. So I didn't see that command or anything like that when I inspected it. That confirms they don't have anything?

 

[stuntcock]

So I didn't see that command or anything like that when I inspected it.

Which command?

That confirms they don't have anything?

I would encourage you not to worry about it. But I cannot confirm it.

Let's assume that you visit comdotgame and download the SWF file hosted on that webpage. You then spend weeks learning all about AS3. You inspect every line of code and you ensure that the file is completely clean.

Even so, we cannot guarantee that the SWF file you inspected is the same one which you previously accessed. Perhaps the webmasters of comdotgame are running a super-secret blackmail operation, in which every millionth visitor is presented with a malicious copy of SDT. Perhaps there's a yet-undiscovered Flash vulnerability which dumps game memory into cookies. Perhaps SDT and Flash are safe, but the website infected your PC with a trojan rootkit. Perhaps you accidentally left your stream running, and so the whole session is now available as a VOD (with screen capture and face cam) at twitch.tv/FartDarts.

If you used personal or incriminating files while playing an online game then it's possible (although very unlikely) that someone else has seen or copied those files. You can mitigate this risk by running a local copy of the game instead of an online one. You can almost eliminate the risk by disabling your internet connection during gameplay and by carefully inspecting the code of every SWF file (including all mods). Or you can simply ignore the risk because it isn't worth anyone's time/effort to spy on the porn gaming of random strangers.

 

[FartDarts]

Which command?
Anything about copying the files to a server.
I would encourage you not to worry about it. But I cannot confirm it.

Let's assume that you visit comdotgame and download the SWF file hosted on that webpage. You then spend weeks learning all about AS3. You inspect every line of code and you ensure that the file is completely clean.

Even so, we cannot guarantee that the SWF file you inspected is the same one which you previously accessed. Perhaps the webmasters of comdotgame are running a super-secret blackmail operation, in which every millionth visitor is presented with a malicious copy of SDT. Perhaps there's a yet-undiscovered Flash vulnerability which dumps game memory into cookies. Perhaps SDT and Flash are safe, but the website infected your PC with a trojan rootkit. Perhaps you accidentally left your stream running, and so the whole session is now available as a VOD (with screen capture and face cam) at twitch.tv/FartDarts.

If you used personal or incriminating files while playing an online game then it's possible (although very unlikely) that someone else has seen or copied those files. You can mitigate this risk by running a local copy of the game instead of an online one. You can almost eliminate the risk by disabling your internet connection during gameplay and by carefully inspecting the code of every SWF file (including all mods). Or you can simply ignore the risk because it isn't worth anyone's time/effort to spy on the porn gaming of random strangers.

I'm 99% sure it's the same one and they don't have a secret blackmail option. Didn't get a trojan, So basically what you're saying is all hypothetical worst case scenario and I'm probably fine just overreacting.