Skip to content
DevMeme
2982 of 7590
Security Post #3292 · source on Telegram

Game Dev vs. The Friendly Neighborhood Pen Testers

Description

This is a two-person object-labeling meme using a dynamic photo of two soldiers. In the foreground, a soldier wearing a helmet holds a rifle, looking focused and unaware of his surroundings; he is labeled, 'Me trying to code a cool online game'. In the background, another soldier in camouflage is captured mid-air, executing a powerful flying kick towards the first soldier. This airborne attacker is labeled, 'My friends doing their best to find a security breach in my database'. The image humorously captures the classic conflict between a developer focused on building features and the ever-present, often aggressive, reality of security testing. It personifies penetration testing or ethical hacking as a surprise attack from one's own peers, a common experience for developers whose friends delight in finding vulnerabilities in their side projects. The joke resonates with anyone who has built a public-facing application, especially in the gaming world where exploits and database breaches are a constant threat

Comments

22
Anonymous ★ Top Pick Feature development is like building a castle. Security testing is when your friends show up with a trebuchet to 'check the structural integrity of the login page'
  1. Anonymous ★ Top Pick

    Feature development is like building a castle. Security testing is when your friends show up with a trebuchet to 'check the structural integrity of the login page'

  2. Anonymous

    Invited friends to beta-test my shooter; five minutes in the real meta is a DROP TABLE speedrun - guess row-level security ships before hitboxes

  3. Anonymous

    Nothing says "production-ready" quite like your friends discovering SQL injection vulnerabilities through the chat system while you're still hardcoding player spawn points

  4. Anonymous

    When your security-conscious friend is running SQLMap against your hobby project's database while you're deep in the zone implementing procedural terrain generation - because obviously, parameterized queries can wait until after you've nailed the perfect Perlin noise algorithm. Classic case of 'I'll add input validation in the next sprint' meeting 'I found 47 injection vectors in your login form.' At least when your game gets pwned, the leaderboard manipulation will be impressively creative

  5. Anonymous

    Open 0.0.0.0:5432 for a 'quick leaderboard' and your playtesters become a free red team with sqlmap

  6. Anonymous

    Me wiring up WebSockets for real-time PvP, friends dropping UNION SELECTs for their own high-score exfil

  7. Anonymous

    Shipped a “cool online game” and tuned the tick rate; my friends speedran the OWASP Top 10 via /submitScore - apparently the leaderboard doubles as an RDS admin console

  8. Deleted Account 5y

    >cool online game >крестики нолики

    1. @sylfn 5y

      you meant Tic-Tac-Toe. No Russian withou translation!

      1. Deleted Account 5y

        yeap

      2. @ANeufeld 5y

        Put away your flamethrower, pal.

        1. @RiedleroD 5y

          he's right though

          1. @ANeufeld 5y

            He's about as right as if I were to start telling you to use English, because your punctuation sucks. Or in the case of the person before, apparently the vocabulary. The person clearly did its best but someone had to come and smack her nonetheless.

            1. @RiedleroD 5y

              there was no translation, it was a quote and then the joke in russian

              1. @RiedleroD 5y

                a proper translation would've been something along the lines of: > cool online game > крестики нолики (tic-tac-toe)

              2. @ANeufeld 5y

                I don't follow: It was not posted in the actual chatting group where the rule applies, as far as I am concerned. And in the comments, there are no such rules.

                1. @RiedleroD 5y

                  > And in the comments, there are no such rules. yes there are

                  1. @ANeufeld 5y

                    That's literally all I see. No rules. No rules in the channel with just the memes either.

                    1. @RiedleroD 5y

                      that's why we tell people the rules before banning them, jesus.

                      1. @RiedleroD 5y

                        It's way more effective than having them in the sidebar or group description, which nobody reads anyway

                        1. Deleted Account 5y

                          Actually, if it's in the sidebar it's visible from comments

  9. @dontmindmehere 5y

    cool thread guys, keep it up!👀

Use J and K for navigation