Skip to main content

Hacking Pinball High Scores

Illustration of how to think about security and reward-hacking by walking through many ways to fake a pinball high score.

[cf. cheating at cards] Consider a scenario like “convincing a third party that you got a high score on the pinball machine”. If we apply the “security mindset”, how many ways are there to cheat or reward-hack?

This exercise can help us better unsee an apparently objective fact, and understand the limits to claims like “it is impossible to get an arbitrarily high score because bouncing balls are chaotic”.

Here is an incomplete taxonomy of pinball hacks:

  • Identity/Player Manipulation (who plays or perceived abilities):

    • Substitution:

      • one could pay a pro to play for you instead

        • claim that they did it on your behalf as a work-for-hire and therefore the record is “yours” (similar to ownership in animal races etc.)

      • swap with your identical twin, a look-alike, or a body double

      • get audio feedback from a pro

      • use pro-remote-controlled inputs to pretend to play while a pro plays (extreme version: haptic body suit)

      • latency-masked live stream: pro plays off-camera; you restage the inputs with a few-second delay so judge sees ‘live’ play if they aren’t looking close enough

    • Misrepresentation:

      • use forced perspective/trick angles to make it look like you’re playing the same machine a pro is playing

      • play as part of a team of pros, and then omit to mention them

      • find a pinball machine with a pre-existing high score coincidentally your name (easiest with only initials)

      • change your legal name, or screen name, to the current high-scorer’s name

      • change the current high-scorer’s name to your name (eg. pay them, or use fraud)

  • Physical Gameplay Tampering (altering machine or playfield):

    • External Force:

      • use magnetic balls to maneuver balls from the outside

      • magnets or ultrasonics to tamper with the tilt sensor (stop it from registering a tilt)

      • attach high-frequency vibrator which stabilizes pendulum

      • ultrasonics or static electricity to push ball around from outside

      • aimed compressed air

      • piezoelectric vibrators attached to key spots

      • ride a “Vomit Comet” to tilt or move the pinball machine in micro-gravity (letting you move the ball around arbitrarily without triggering the ‘pendulum’ tilt sensor)

    • Internal Modification:

      • activate machine’s piezoelectric mechanisms remotely (possibly using ultrasonic, but microwaves may be able to induce electricity in circuits and activate them)

      • objects snaked through slots, such as to add invisible barriers like nylon thread, or visible barriers to block/disable sensors

      • sticky gel/resins added to slow down & change ball trajectories

      • wax/oil added to speed up balls

      • warping playfield with infrared laser to heat spots & cause thermal expansion

      • LN2 for invisibly cooling spots, or even freezing mechanisms

      • ball substitutions (many)

  • Machine Configuration/Administration:

    • Firmware & Hardware Tampering:

      • bribe the pinball operator/owner to edit the machine to add favorable rules or simply add you to the high-score table, period

      • hotwire it

      • insert new chips to reprogram it

      • hack it over a network or debug port

      • side-channel attacks: voltage/EMF glitching

      • … (too many to really bother trying to categorize)

    • Software:

      • exploit known glitches or bugs in a pinball machine

      • damage machine to force a reset, erasing high scores

  • Display & Visual Deception:

    • Physical Display:

      • fake number overlays

      • laser-projected false numbers

      • OLED/LCD controlled overlays

      • e-ink overlays (persistent false display)

      • polarized overlay or holographic visual deception

    • Observer/Judge Deception:

      • replace display or machine before judge arrives

      • stage-magician misdirection exploiting change/inattentional blindness (judge forgets they didn’t actually see a high score)

      • judge arrives after machine ‘accidentally’ turned off; ‘witness’ (eg. a beautiful woman) swears she saw a high score

      • hired crowd of actors intimidate the judge into agreeing it was a high score

      • projection of fake video onto the judge (eg. big video screen put in front of them, lasers projected on their glasses)

      • non-impartial witnesses like a bribed judge (possibly for multiple records)

      • drug or hypnotize or induce false memories (eg. by roleplaying or ‘acting’, counting on source confusion)

      • man-in-the-middle attack on judge’s notes or devices: edit their clipboard before they finalize it, and count on change/inattentional blindness

      • replaced judge

      • any of the original identity attacks, laundered through a judge

      • bribe or coerce the third party to pretend that you convinced them of a high score

  • Documentation & Evidence Manipulation:

    • Digital Media Forgery:

      • Image/video editing:

        • Photoshop a photo of yourself to have high scores

        • Photoshop yourself into a photo of someone else’s high scores

      • Deepfake gameplay videos

      • spliced videos (if there is no cumulative final score)

      • Chromakey (green screen) manipulation

      • rolling shutter exploits

      • man-in-the-middle the judge’s digital messages to replace the high-scorer (many ways)

    • Physical & Documentary Forgery:

      • fake tournament or other official certificates

        • which can be notarized (often mistaken for a proof of authenticity, rather than a mere witnessing)

      • spread false claims, and hope they get copied long enough to become official (eg. citogenesis)

      • forged databases or records (eg. fake pinball high-score website / media)

      • tampered databases/records (eg. hack legitimate pinball website)

      • borrowed footage misrepresented

      • record a video of a real pro setting a record on that machine; play it back in front of a camera, blocking the view of you playing

      • font hacking: rotate the camera while zooming in or cutting, so a low score reads as a high score (eg. ‘00 006’ → ‘90 000’; cf. FE-Schrift)

  • System Replacement & Impersonation:

    • entire fake/modified machines

    • version confusion (exploiting different ROMs which seem same but have different rules/bugs)

  • Rule & Semantic Manipulation:

    • misrepresent an existing high score from another context, like a record that allowed multiple credits

    • discredit current high scorers: accuse of fraud, sexual misconduct, fringe politics etc.

    • define a new set of rules for the pinball machine which rule out all existing records and permit only yours

      • narrow machine definition (eg. “must be played on an original, unmodified machine using the original circuit boards”; “played on this machine, which is a unique prototype”)

      • narrow temporal definition (“today”)

      • narrow space definition (“Nevada”)

      • narrow ruleset (“highest score within 60 seconds”, “while blindfolded”, “best-of-3”)

      • expanded ruleset Redefining High score (eg. “cumulative over all games”)

        • redefine number systems (eg. claim an old score was in octal, and lower than your new decimal score)

    • which pinball: find an obscure pinball machine somewhere like the Las Vegas Pinball Hall of Fame Museum, which has hundreds, that no one cares enough to get a real high score on, and get one on that

    • bounty manipulation: offer prizes for beating certain scores (with NDAs), then use insider knowledge

    • create a new pinball machine no one else has ever played, and so your score is definitionally the high score

Similar Links

[Similar links by topic]