Free Car Washes for everyone!
-
So I visit the local car wash website to get their Sunday hours.. and they have this little javascript "concentration" type game. Looks real old-school web, like 1999 or something.
I play the game once, and I "win" a 50 cents off coupon... BFD, but I think, this is all javascript, it's got to be easily hackable. Sure enough, I download the javascript (all on one page, not even an included .js file) to my local machine and start some light modification of the javascript to show the images behind each of the locations as the starting move, then I just have to click all the matches, and I'd win a free car wash. I spent about 10 minutes playing around with how simplistic the javascript is, and then I decide to look at the "winning" condition -- yup -- the URLs for all the prizes are hard-coded in the javascript -- so I just go to that URL, and VIOLA - FREE CAR WASH!Game page: http://www.scrubadub.com/game/game.htm
Winning page: http://www.scrubadub.com/game/qa56n9.htm
code:
if (matches>=matchlimit && score>=realhigh){level1()}
.......
function level1() {
setHigh()
if (gameover!=1) { // don't alert if game is over
window.open ("qa56n9.htm", "newwin", "width=525,height=375,directories=0,toolbar=1,location=0,status=0,menubar=0,scrollbars=1,resizable=1,copyhistory=0");
}
}
-
It looks like the name of the HTML file has been encrypted with some pretty complex hashing algorithm, cryptographically proven to be secure. Our plan can't fail!
(Strangely, I skipped over the URLs you gave and just read it straight from the code, then I looked at the URLs.)
-
Ah, how wonderful. Should I ever find myself on the other side of the pond, and in possession of a car, it's nice to know that I can get a coupon for a free car wash.
Anyway, it's not really much of a WTF, insofar as I doubt they really mind people going to the "winner" page directly. The real point of the promotion is in the order form itself: you get a coupon for a free car wash, they get your contact information, some statistics about the efficiency of their marketing channels and hopefully a visit from you to redeem the coupon (which they hope will lead to return visits, should you find the service worth paying for).
The game is just there to catch your attention, and to make you invest some effort in the promotion so that you'll be more likely to follow through with the subsequent steps.
-
-
@dtobias said:
@Hank said:
VIOLA - FREE CAR WASH!
Musical instruments are involved?
- -->
Viola, from french verb "violer" in the past tense that could be translated as
"raped"
I suppose a 5 minutes car wash can be enough for some persons in this context
-
@tchize said:
@dtobias said:
@Hank said:
VIOLA - FREE CAR WASH!
Musical instruments are involved?
-->
Viola, from french verb "violer" in the past tense that could be translated as "raped"
I suppose a 5 minutes car wash can be enough for some persons in this context
Damn - now I can't get an image of Aly McBeal out of my head !
-
Yeah but... I don't know if I want these people to wash my car... could put a lot of swirl marks in it then mention it needs exterior detailing.
