Dear linux fans!
My topic is not strictly related to linux, but I still turn to this forum in hope to get some insight.
I know they say in security contexts "never trust the client". I am in a situation where I think I might have to:
I am making a game (for Android) and I want people to be able to upload high-scores. How would I go about making sure the high scores cannot be tampered with?
I though about making the client (my game) do some hashing with a key, but since it's actually ran on the phone I guess it can always be cracked - correct?
Are there any known methods for attacking such problems? The anti-cheat systems used in larger games seem just a little over-kill...