Briggs Softworks

navels wrote:Do we know that this prevents the specific exploit that prompted this thread?

Yes, the exploit modified the client Javascript that was stored inside the server's executable file. The server now verifies its own digital signature and shuts down if it detects any change. I mentioned this in the PFA thread last year.

By the way, here's how you can detect a site that hacked their own server with modified Javascript. Load the poker client. You do not need to log in. Press Ctrl-U in your browser to show the source HTML. Look for this script tag:
Click that link to display the compressed Javascript. Press Ctrl-F and do a search on "http" to look for links to external servers. The only one you should find is http://www.briggsoft.com which is tied to my background logo.

Kent Briggs wrote:

navels wrote:Do we know that this prevents the specific exploit that prompted this thread?

Yes, the exploit modified the client Javascript that was stored inside the server's executable file. The server now verifies its own digital signature and shuts down if it detects any change. I mentioned this in the PFA thread last year.

Thanks!

Got a guy emailing me about this exploit earlier this week.. I told him I was curious since the developer had patched that capability out in 2020 with the signature file verification... crickets on a response still..