Hacker News Reader

Comment by eloeffler | Hacker News Reader

Hi, I'm the maintainer and put together the code for this first working prototype of the digital version of the game. Thanks already for your feedback!

I will gladly provide hints here if you get stuck :)

Many thanks also to atum47, whose FOS, Fake Operating System I've used for the game. You can find it here: https://github.com/victorqribeiro/fos

We have developed the game at the University of Applied Sciences and Arts Northwestern Switzerland, School of Business, Institute for Cyber Security & Cyber Resilience. https://www.fhnw.ch/en/about-fhnw/schools/business/iwi/cyber...

The game is based on a student work that has been published here: Schneider, Bettina, and Trupti Zanwar. "CySecEscape–Escape Room Technique to Raise Cybersecurity Awareness in SMEs." https://conference.pixel-online.net/FOE/files/foe/ed0010/FP/...

View on HN

great concept, the UX problems make this not fun

hope you get this ironed out

I think there are a lot of best practices that can be rehearsed in this format

Recently I had been thinking about how interesting it would be to have a movie or tv show where a protagonist is trying to guess someone's password and they encounter a password manager and give up, or the character tells them they use a password manager as if it was the most obvious thing to do. That would make more sense than sticky notes or seeing some hint in the room that reveals the password.

How one interacts with the game? I see the drawn room but clicking anything there (folder, basket, cup, etc.) does nothing at all...

Which browser are you using? We had some problems with Firefox displaying SVG graphics a little differently but it appeared to be working now.

You should be able to click many of the objects (e.g. the cup) to zoom in.

Latest Firefox on Mac... Will try with another browser. If you need any help in tracing the issue, I'll send you the console output.

Yep, clicking is iffy on Firefox/Mac here too.

Nice work, but as an old gamer I'm wondering if throwing the graphics in some established game engine wouldn't have made it work more consistently :)

I kind of enjoy the graphics... Makes the focus to be shifted on the actual gameplay. You care about the process of discovery more this way. At least that's how it worked for me, but I'm not a regular game player person.

The graphics is a stylistic choice and they can fit in any engine, but maybe clicking would have been more consistent :)

Agreed! :)

Firefox (different versions, up to 78.4) here too, having to click on the drawn objects multiple times to make it react.

I think the only other confusing part is the bank email. Given that the premise is that her cybersecurity is weak, I would think that the transactions are actually because she fell it.

I like it, but the format for the password was pretty frustrating.

yeah, seems like theres not enough hint to let on how this should be formatted.

It's there actually, inside part of the desk, which you don't need any knowledge to open. Just assume the person is stupid :P

Where? Do you mean the 2nd or 3rd drawer?

In fact, I never managed to open the third drawer.

No the top one with the code. It provides a clear hint on the password of the computer. And the code is really stupid (not even a birthday or anything ;) )

Okay, I did find that hint, but the problem is, that while it gives you a hint on what you looking for, there are so many possibilities, how you can type a date as a password (assuming it is the 31st January 2010, which it is not):

2010-01-31

20100131

2010.01.31

31.01.2010

01-31-2010

01/31/10

31.1.2010

31st January 2010

3101

Just to give some examples. If the name of a person can be added, there are a lot more combinations. If there are even multiple people (as in this case) you might even think about mixing those dates.

The concept is really neat! Well done!

Keep up the good work, a bit more polishing and it's going to be even better.

Solved it, was fun. But how would a personal account set up a direct debit?

she used the company's account to setup a standing order to her account

that email "Urgent! Suspicius transactions." is epic..LOL

Reply on news.ycombinator.com