What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 127 Stack Exchange communities.

I want to report that it is fairly simple to hack (just trick really) the system, and assign any hat to my avatar.

I cannot earn any hat, but I can wear one as if I had earned it.

It happens because there is no check made on the back-end if I have actually earned the hat yet. If I pass the right ID I wear it.

Wearing a hat I do not own


This is not a manipulation of the sprite's CSS for my own viewing. The hat is really assigned, and I wear it everywhere.

share|improve this question
3  
Just make sure you keep the uniform on when you're delivering Captain Hook Fish and Chips dinners to those guys at IBM. –  jonsca Dec 22 '12 at 1:16
9  
Now everyone is going to have beards! –  animuson Dec 22 '12 at 1:29
    
Maybe you could sell the hats (and beard) on Ebay. –  Lance Roberts Dec 22 '12 at 1:32
10  
just unlocked inception mode... Constantinopolitan on meta ;) –  Gaby Dec 22 '12 at 1:37
2  
Heh funny, I actually though about this yesterday but then was like "no, they would surely have a check so I won't even try that..." –  ThiefMaster Dec 22 '12 at 11:16
add comment

2 Answers

up vote 40 down vote accepted

Well, the check was there … in a way. Your pirate hat never made it into the database.

Unfortunately, caching of the fact that you're now wearing the hat was made outside of this check, and since this value is retrieved from cache most of the time, in the vast majority of cases you would indeed seem to be wearing it.

Needless to say that this is fixed now (and the "who is wearing what" cache was cleared).

Order in hat land is restored. Thanks for letting us know.

cat with a top hat

share|improve this answer
1  
You did it faster before I capture my photos with all hats :( –  hims056 Dec 22 '12 at 11:11
1  
@balpha, unfortunately it is not.. the issue still persists (as you can see, i just re-did the trick).. The problem is that if i change the hat id before clicking on it, it gets assigned as if i owned the hat.. –  Gaby Dec 22 '12 at 12:30
7  
@Gaby You're wearing the Copacabana to me (look at your profile in incognito/private mode, or wait five minutes until your in-browser cache is refreshed). When switching hats, the server doesn't confirm to your browser whether you actually own the hat, so you yourself may see the wrong hat. We don't care about people cheating themselves. That's no different from using the inspector to change your reputation. –  balpha Dec 22 '12 at 12:44
    
@balpha, aha moment ... thanks for clearing that up :) +1 and accept –  Gaby Dec 22 '12 at 12:47
    
Awwww they took my hat away. :'( –  animuson Dec 22 '12 at 19:02
add comment

+1 for unlocking inception mode, however to see if a user has really been awarded a hat you can check the hat link on their profile. It won't show up if they were't awarded the hat...

share|improve this answer
2  
trololol, 0x7cf7fb5a –  lunboks Dec 22 '12 at 1:59
add comment

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .