And yes, in case you are wondering, according to this tweet, this is a “self-defense T-34″ of the separatists. You know, guys, I don’t want to give you any ideas or anything, but do you know what else is standing in Lugansk?
First an IS-3, now a T-34, I fear this Mk.V will be pressed into service next…
Source: http://habrahabr.ru/post/228219/ (via world-of-ru, LJ user Wisejew)
An interesting article appeared on the abovelinked portal about World of Tanks payment security. In it, a Russian programmer of payment portals takes a look at the security of various paying portals, including – yes, you guessed right, the Wargaming premium shop. The author states that he analyzes weaknesses of various payment systems and runs over and over again into the same vulnerability, called… and now, I have no idea how to translate it, because I am not a programmer. In Russian it’s “инкрементальные айдишники” – in English, it would be something like… incremental ID’s? If there is a programmer amongst the readers, please explain to us what that means :)
Anyway, back to World of Tanks portal. After making an order, the client redirects the user to an URL in following format:
http://aggregator-domain/ok.php?payment_id=123456
Which in turn redirects the client to the URL of the game in following format (decoded by the author for easier reading, from Russian server eg. the currency is Russian):
https://online-game-domain/shop/?…amount=32.86…¤cy=RUB…&user=user_email@gmail.com…&item_name=1 day of premium account
The author states that if you figure out the value of the payment_id parameter, you will be able to see login of the user in the game, their purchases etc.
Wargaming shop is just one of the examples, cited by the author. He concludes the post with a statement that due to sloppiness of programmers, in the case above, a possibility is introduced for hackers to mine personal and account data from the purchases. He also comments on the solution (to use something called “token” and “an arbitrary string”). From there on (especially the comments) it gets technical. I wonder though – how much are our data really protected and since Wargaming already had some large account data leaks (remember that “change your password for gold” event? That wasn’t just because Wargaming is nice and cares about our security, it was because on RU server, a certain amount of account data got leaked (and the accounts got hacked)).
this was posted on Yuri Pasholok’s blog – pretty interesting video overall, but the really interesting part starts at 6:40 – StuG III, followed by Panzer III and Panzer IV (and Kettenkraftrad :))
first and foremost, sorry for the delayed contributor review, I was waiting for the Patreon to process the pledges to have it all at once – and today marks the fourth time the Patreon subscription got successfully used, thank you all!
Out of the 1567,1 USD pledged at that point:
- 387,09 USD came in successfully (the rest didn’t go through for some reason on the contributor side, insufficient funds on account etc. – and no, I did not expect the 1000 USD pledge to go through :))
- out of 387,09 USD:
35 USD went to credit card fees
19,38 USD went to Patreon (service fee)
leaving 332,71 USD for FTR – much appreciated! The list of contributors can be viewed here.
And once again it’s the time to thank also the contributors, who donated via Paypal:
Peter1289 (New Zealand)
Robert I. (United States)
Thank you guys!
The best way to help me and FTR is via the Patreon service
Well, it’s been a month or so since there was any real update in the original QA thread on RU forums where Storm and SerB used to answer. SerB moved on to other things apparently (WoWs) and Storm is still on vacation, but that original thread is dead. Makes it a bit harder to gather info (more pages/discussions to run through), but that’s okay, I can do it, just takes a bit more time to stay on top of things.
- Tanitha confirms that current historical battles format will be removed in 9.2:
“The current historical battles installed in 9.1 are due to be removed in 9.2 (which is normal since historical battles were originally scheduled to be replaced with new ones every update). However with 9.2 new historical battles wont be installed, and the mode will hit redevelopment. We are not currently seeking additional feedback on historical battles, as the mode is likely going to hit heavy redevelopment, and be altered a lot.”
- the piece of info that US light tank branch comes in 9.3 is preliminary and might be changed
- no info on whether M47 Patton appears in the game or how
- FV4202 changed into another tank in the future? ” Its being looked at for an overhaul, but not in the short future, more like end of 2014. Its too far away for anything to be finalized yet.”
today, several players have sent me e-mails about the difference between American and European July missions. I mean, the Americans have to have it better, since they are getting the LTP, right? Or… do they?
USA:
Random battles only, tier 4 and above vehicles
- get 5k XP once per day while being in top 10 of your team XP-wise: 2 gold fire extinguishers
- get 10k XP once per day while being in top 10 of your team XP-wise: 2 gold medkits
- get 15k XP once per day while being in top 10 of your team XP-wise: 2 gold repair kits
- repeat the 15k XP part 7 times: 3 days of premium (can be done only four times)
- repeat the 15k XP part 28 times (!): get the tier 3 LTP light tank
Total maximum value: 28 x 6 = 168 gold consumables (3360k credits worth), 12 days of premium, tier 3 light premium tank