I noticed that sometimes when I'm winning handily my connection will suddenly drop even though my internet is fine, and I'm starting to wonder if certain players have figured out how to game the connection stuff. I definitely didn't actually drop my connection and it's happened 4 or 5 times. I have to open it up on my phone and enter the game id as fast as possible to not lose time and it can end up causing me to lose in tight games where time is getting low. It really sucks when you lose a game because the website claims you dropped your connection when you didn't, especially when you're playing a really good game against a higher rated opponent.
Why is it, that anytime someone claims to be hacked, lagged, poor connection, etc. Its always during a "crushing" win? Its never during a loss.
I should know.... I'm one of them. Most of my code is just copy/pasted stack overflow instead of proper logical instructions to complete the task.
Also it's really not possible in theory unless chess.com has a vulnerability, and 99% of vulnerabilities are caused by criminally negligent programming practices.
Also holy crap what's with all this misinformation about trying to find banking information or corporate information on chess.com. A website is essentially a poster, the chess.com company does not upload its financial information onto chess.com. Someone getting admin access to the website would just be able to spam the forums or change the rules of chess or something. Basically, look at what you can do by pressing F12. Someone who has root access to a website can do any of that except for real. There's nothing more there. Websites containing sensitive information would be horrible design.
It would be horrible design, but it's perfectly easy for most sites to get away with horrible design because of how few people are software developers, specifically in the web discipline.
Here's something interesting. Try entering https://api.chess.com/int/player/optimissed/notices into your browser. Yeah, you can see the notifications for another player. Who's to say there aren't other exposed API calls that simply escaped the developers, or that the developers were simply lazy about and left exposed?