The skies have been grey the past three days which is odd for California. I had more luck shooting at night. Here’s one capture from Day 2. Click the picture for more.

All pictures from DAY 1 of having the Canon EF 85mm f/1.2L II can be found here. Being that it was my first time shooting with this lens in low light conditions, the images are too saturated. I have made the correct adjustments for tomorrow’s shoot.

Update (June 9, 2009): The Bank Bug resurfaced this morning (for several hours). This time you could only duplicate your money 40 Million Pounds at a time. I have since gotten word that the bank bug has been fixed.

Update (June 7, 2009): Changed the title of this post. Just as long as we’re clear that I exploited a client-side glitch and had no back-end access whatsoever.

Imagine if time had progressed further and this occurred when people had invested a substantial amount of time in this game. What Spymaster fails to recognize is their own fault for not running a rigorous QA session before going public. Vulnerabilities like these should never exist, I merely exercised what was made available to me to game the metrics of Spymaster. The existence of these vulnerabilities reveal just how much Spymaster cares about the protection of its userbase and integrity of its service.

The official report from Spymaster has me labeled as some sort of “hacker” when in reality I employed rookie techniques. I didn’t want to sit around all day clicking the same button to complete a task, so I created an html page containing iFrames that called on each task to be completed for me (task.txt).

Once I had had enough money to open a Swiss Account, I started running this script that deposited my earnings automatically (deposit.txt). All in all, I ranked up to level 19 and brought in a whopping 950 Thousand British pounds while running on auto-pilot for approximately 20 hours.

Last night I was tipped off about the Swiss Bank Bug where you could essentially duplicate your money by initiating a transfer to anyone including yourself. I earned 73.59 Trillion British Pounds in under 15 minutes. I bought every single safe-house and 100,000 of everything in the black market. The game was no longer fun and I for one was baffled at the existence of such an integrity-crushing exploit.

This morning I started selling all my black market assets and converting my massive empire of cash into liquid assets. I start attacking anyone and everyone just to lose and send them a ton of cash. I also scoured Twitter for people who had posted their Swiss Account Numbers online. I transferred each of them a significant amount of money—usually less than a Trillion, though, I was being greedy.

Around 1:45pm @rohanpinto decided to make the swiss bank exploit public in the form of a YouTube Video.

I then decided to distribute the wealth to a majority of Spymaster users all with another rookie script (commongood.txt). I didn’t know how to create this script easily so I did a Google search and pulled the base code from this website (shows you how much of a hacker I am). I did the math and decided to send out 4.6 Billion British Pounds to every user… I did that a couple times but it barely made a dent—and remember, whatever I transfered I still got back because of the swiss bug. I then started sending multiple batches of 100 Billion Pounds, then 200 Billion, and finally a few batches of 500 Billion to a range of about 19,000 Swiss Bank Accounts.

Let me make clear that I never “hacked/hacked into” Spymaster as they would have you believe. From how they’ve handled this situation, they’re clearly not the brightest bunch of chaps—(British persona still wearing off).

The game quickly became a joke to a lot of people. Why? Because Spymaster gave everyone the ability to print money and distribute it at will. The only sabotage that was committed was when someone green-lighted this service. Fire your QA staff. Apologize to the community for being so careless. And for the love of Pete, hire someone more adept in dealing with people.

Welcome to WordPress. This is your first post. Edit or delete it, then start blogging!