MonkeyType
So im trying to make a type test webapp, and i was wondering how monkeytype (or any other typing site) verifies that the data sent from the client to the server is legit. For example monkeytype calculates statistics like words per minute all on the client (i think), and that data is then saved on the server. What is preventing anyone from fabricating post requests with fake data (such as a higher wpm) to then be processed on the server?
5 Replies
also, what should i do regarding this issue?
Gonna be honest with you... "anti-cheat" as a whole is a tough problem to solve
You're always going to have to take what happens on the client (in this case, the typing test itself), and send that to the server to be handled
And what happens on the client is always going to be out of your hands, and all data that comes in from the client should be assumed to be malicious
@packofm&ms you're in luck man, lol, monkeytype is open source. not sure their anti cheat is on there, but you can definitely take a page out of their book
https://github.com/monkeytypegame/monkeytype
oh wait thats dope
thanks
fasho
i feel like this is simply not something you can control. even if your statistic wasn't faked, if someone were that dedicated to cheat in a typing game, they can dispatch their own keypress requests.