I'm Real by TolMera

[raw]
made by TolMera for Ludum Dare 49 (JAM)

I'm Real

Screen Shot 2021-10-04 at 11.48.08 pm.png

https://www.imreal.pw/

Have you ever tried to prove that you're real?

I don't mean "Prove to the court that I am sentient" - Jean luc Picard

Though honestly sometimes signing up to a website is just about that hard!

This LD started out as any other for me, plan to make a game, and see what happens.

Well I wanted to build an online game (I've done a few multiplayer games, so this is not out of reach for me). The first thing that I needed was a signup screen! Simple...

Damn, do you know how hard it is to do signup well? Like seriously, signup should be really simple. You give me all your details, I send you an email, you click a link, and you're magically signed up.

Well... It's not really that easy. What happens when the email never gets to you? What about if my email goes to your spam folder? What if you're using a work email account, and your work blocks my message because "it looks like spam"?

Yikes, what a minefield I found myself in.

About 5 minutes of thought into "This could be better, how should sign up really work?" And I came up with ideas for "I'm Real - A signup revolution"

So I bought a domain (imreal.pw) and hooked it up to AWS. Then I went about planning my architecture.

Signup screen: Website => AWS API Gateway => Lambda => DynamoDB => (Back to Website)

Emails follow this: Domain => DNS => MX (send to AWS) => AWS SES => AWS Lambda => AWS DynamoDB

And I ended the weekend by creating a simple SAAS service that could be extended out to be an entire Signup, Authentication and User Management Platform. I think it's got potential, but would need time and money thrown at it :-/

I hope you will "Have a play" with the signup that I created, I think it's cool, I hope you like it!

I know it's not a game, but this is as far as I could get with my game! I got as far as doing a really nice, polished, functional and useful sign-in framework. I made a tool that will go in my armoury, and I'm really proud of the quality of the result :)

Personal note:

So this was an interesting LDJam for me. I thought I was going to write a game, then I thought I was going to write a thing, and somehow I ended up building a bit of a SAAS concept, with minor implementation that actually works, and kinda a manifesto? a manifesto for how website signups could be better-ish.

Yea this was a really interesting LDJam for me. I think this might be the last "game" I try to write, LDJam has helped me narrow in on my real passions which are programming and solving real issues, so I hope you like what I've done.

I also recently got myself a few AWS Certifications (Checkout my linkedIn ) - so I wanted to make sure I used those skills, and have something to put into my Portfolio showing my AWS Skills.

Ratings

Given 1🗳️ 1🗨️

Feedback

Voidsay
05. Oct 2021 · 19:44 UTC
Very stylish tech demo. Unfortunately I am unreal and therefore cannot prove the reverse (aka I am too dumb to verify my 10 minute mail).

Instead my hacker brain tried to open the website in an iframe. This outcome made it very happy. If only I knew what exploit one can do with such power (other than a key logger)
Jeff Kerman
06. Oct 2021 · 18:48 UTC
How is it unstable? Are there loads of bugs? *joking* Cool concept, very different from the other submissions here.
LeReveur
10. Oct 2021 · 17:29 UTC
Renewing the bases of signing up is a great idea. However, I have an example of problematic case : mine. I never sign up with my true e-mail, the catch-all of my domain name redirects to my true e-mail, and so I generally use an ad-hoc e-mail address to sign-up, so I can know who have sell my data when I receive unexpected e-mails. But my true e-mail provider do not allow me to change my sender address, and so I can't use any of those ad-hoc addresses to *send* an e-mail, so your site can't check the e-mail address I provided, until I change it to the true one :sweat_smile:
🎤 TolMera
27. Oct 2021 · 02:20 UTC
Hey @voidsay - What happened when you opened it in an IFrame?

@jeff-kerman - All bugs aside :P thanks very much for looking at it

@lereveur - I realised that would be the case for a lot of people. I think if I was to take this further, I would have to build up some trust with people that I'm not a monster and I'm not going to sell/consume your email-address/soul. hah
I also have a similar setup to you, in that I have a catch all on my domain. I use GMail though, and in Gmail you can setup a "send as". Google will send an email to the address you provide, asking if they can send emails as that address, if you receive and click their link, then you can send as that email address from your gmail account. Pretty useful :)

---

I think if I were to take this further, there's a lot of edge cases. One in particular, the email system actually only accepts emails if it can validate that the sender is 'real' on the domain that the email came from. So if you send me an email from a fake account (No DNS record for the IP address the email came from, and the domain has not signed the email et-al). Then I won't validate the account because the email is probably fake. Lots of interesting challenges.

Thanks y'all for looking at it, was an interesting weekend project.
Voidsay
28. Oct 2021 · 12:45 UTC
I can make a fake website with a key logger and insert your genuine website into the iframe. At first glance the website will look and behave identical. By doing some listing manipulation I could make it so that my site always appears before yours thus all your users interact with you thru me as the middle man. I get to steal personal details and passwords until I decide to pull the trigger on you or your users.
LeReveur
08. Nov 2021 · 17:14 UTC
@tolmera
> I use GMail though, and in Gmail you can setup a “send as”. Google will send an email to the address you provide, asking if they can send emails as that address, if you receive and click their link, then you can send as that email address from your gmail account. Pretty useful :)

I use GMail too, but the last time I tried to change my "send as" (it was a long time ago), it asked me to provide technical infos about the domain mail server - wich does not exists, as it's a redirection. Thanks to your exlanation, I guess they have change this, so I will give it another try