1. Facebook Flash APIand Social Game Development http://fb.me/tempofeng

2. Agenda Gamelet Our Experiences Tips & Tricks Flash Social Facebook / Flash Q & A

3. Gamelet: Our Experiences

4. Gamelet

5. Web Traffics

6. Gamelet Published 17 Games 15 Real-Time Synchronized Games 2 Social Games 11 Employees 6 Engineers 3 Arts

7. Gamelet Bandwidth 60M/Month Online Users 8000 users (max) Aggregated MAU 400K (down from 800k)

8. Servers Web Servers apache -> tomcat 2xDell PE R610 (1 Master-N Slave) 2xI5520, 6GB, SAS HDs Static Files Servers 1xPC Real-time Socket Servers Java/Mina/ActiveMQ 3xDell PE R610 1xI5520, 6GB, SAS HDs

9. Servers DB Servers MySQL 2xDell PE R710 (1Master, 1Standby) 2xI5530, 32GB, SAS HDs Cassandra 2xDell PE R710 2xI5530, 32GB, SAS HDs

10. Tip & Tricks - Flash Development Environment Art/Developers Workflow Performance Fighting Cheaters Loader crossdomain.xml

11. Development Environment Developers Flash(Flex) Builder Flex Components Slow Ram/CPU/SSD Open Too Many Projects Arts Illustrator/Photoshop/Flash

12. Arts/Developers Workflow .as Designers Programmers

13. Versioning Graphics Assets Confusing! SVN Development Mode car.fla, airplane.fla Production Mode car.fla, airplane.fla -> vehicle_v00.swf

14. Performance Monitoring Framerate Don’t Alpha, 變形工具 Large Bitmap Parent/child Movieclip Using Sprite instead of Movieclip

15. Performance Slow Movieclip cacheAsBitmap Rotate, Scale, … AnimationSlicer http://blog.vandenoostende.com/2008/animationslicer/ Profiler Memory Leak

16. Fighting Cheaters Manipulating Memory Intercepting Packets Accelerators Double Login Manipulating Code Building a Bot Fake Accounts

17. Manipulating Memory

18. Manipulating Memory Cheat Engine http://www.cheatengine.org/ Encode Critical Data Heap Data Scores, Weapon, …

19. Manipulating Memory class SecureInteger { int number; int checksum; public void setNumber(int number) { this.number = number; this.checksum = md5(number); } public intgetNumber() { if(verifyMd5(number, checksum)) return number; else throw new SecurityException(); } }

20. Intercepting Packets Add Signature Encode SSH proprietary PKI solution

21. Accelerators 變速精靈 http://tw.vrbrothers.com/speeder/

22. Accelerators Use Server Time Everywhere Detecting Calculate the difference between client time & server time Network latency will be hard to predict

23. Double Login Logout Previous Logined User Flash LocalConnect Server Notification

24. Manipulating Code Obfuscator Dynamically Download Encoded SWF Loader.loadBytes(bytes)

25. Building a Bot Monitoring Monitoring All Service Interfaces AOP, Annotation Limiting resource update Limit by Time Period Limit by User Roles, Levels Guests, Unregistered Users

26. Fake Accounts Limit Help from Friends

27. Loader Loading Static Files Always Retry!

28. crossdomain.xml crossdomain.xml Access Remote Files Security.allowDomain() SWFs from Other Domain to Access Me loader.loaderContext = new LoaderContext(true, ApplicationDomain.currentDomain) Access Remote Image Files without crossdomain.xml

29. Tips & Tricks – Social Games Game Design Viral Channels Data Storage

30. Game Design Beautiful! Gifting is the New Poke Don’t Punish Users Represent Relations between Friends

31. Viral Channels monfriends

32. Data Storage Read:Write = 1:1 MySQL Transactional Data Growing Slowly Cassandra Key/Value Data Growing Fast

33. Tips & Tricks – Facebook / Flash Facebook API / Graph API Chinese Input Invite/Request without Page Reloaded

35. {

36. return;

37. }

39. wmode = ‘window’

40. Chinese Input Flash 9/10 Only wmode = ‘window’ Can Input Chinese Will Hide javascript Windows Flash 10.1 wmode = ‘opaque’ can input Chinese in IE/Firefox

41. Flash 9,10 + wmode = ‘window’ Move or Hide the Flash

42. Invite/Request without Page Reloaded

44. Step 3: Close the <iframe> by Javascript <script type="text/javascript"> $(document).ready(function() { window.parent.onFbmlIframeClosed(); }); </script>

45. Thanks

46. http://apps.facebook.com/pizzaworld_tw/Pizza 世界