I want to report that it is fairly simple to hack (just trick really) the system, and assign any hat to my avatar.

I cannot earn any hat, but I can wear one as if I had earned it.

It happens because there is no check made on the back-end if I have actually earned the hat yet. If I pass the right ID I wear it.

Wearing a hat I do not own

This is not a manipulation of the sprite's CSS for my own viewing. The hat is really assigned, and I wear it everywhere.

  • 3
    Just make sure you keep the uniform on when you're delivering Captain Hook Fish and Chips dinners to those guys at IBM. – jonsca Dec 22 '12 at 1:16
  • 10
    Now everyone is going to have beards! – animuson Dec 22 '12 at 1:29
  • Maybe you could sell the hats (and beard) on Ebay. – Lance Roberts Dec 22 '12 at 1:32
  • 11
    just unlocked inception mode... Constantinopolitan on meta ;) – Gabriele Petrioli Dec 22 '12 at 1:37
  • 2
    Heh funny, I actually though about this yesterday but then was like "no, they would surely have a check so I won't even try that..." – ThiefMaster Dec 22 '12 at 11:16

Well, the check was there … in a way. Your pirate hat never made it into the database.

Unfortunately, caching of the fact that you're now wearing the hat was made outside of this check, and since this value is retrieved from cache most of the time, in the vast majority of cases you would indeed seem to be wearing it.

Needless to say that this is fixed now (and the "who is wearing what" cache was cleared).

Order in hat land is restored. Thanks for letting us know.

cat with a top hat

  • 1
    You did it faster before I capture my photos with all hats :( – Himanshu Jansari Dec 22 '12 at 11:11
  • 1
    @balpha, unfortunately it is not.. the issue still persists (as you can see, i just re-did the trick).. The problem is that if i change the hat id before clicking on it, it gets assigned as if i owned the hat.. – Gabriele Petrioli Dec 22 '12 at 12:30
  • 8
    @Gaby You're wearing the Copacabana to me (look at your profile in incognito/private mode, or wait five minutes until your in-browser cache is refreshed). When switching hats, the server doesn't confirm to your browser whether you actually own the hat, so you yourself may see the wrong hat. We don't care about people cheating themselves. That's no different from using the inspector to change your reputation. – balpha Dec 22 '12 at 12:44
  • @balpha, aha moment ... thanks for clearing that up :) +1 and accept – Gabriele Petrioli Dec 22 '12 at 12:47
  • Awwww they took my hat away. :'( – animuson Dec 22 '12 at 19:02

+1 for unlocking inception mode, however to see if a user has really been awarded a hat you can check the hat link on their profile. It won't show up if they were't awarded the hat...

  • 2
    trololol, 0x7cf7fb5a – a cat Dec 22 '12 at 1:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .