With coronavirus, a lot of people started to play Cards against Humanity over Zoom meetings. Soon after, Cards against Developers was getting a lot of attention. In this blog post, we want to highlight the following topics:

Let us know if you enjoy this blog post!

If you are curious about what Crashtest Security is doing when we are not playing Cards against Developers, check out our super simple online vulnerability scanner.

Why we created a card game as a security company?

As a start-up, every team member must be on the same page regarding company goals. The working attitude of every single team member is shaping the office life for everybody. You may drag people around with you in a large organization, which is impossible in a small team.

As a company grows, the structure is getting more important. Currently, we are organizing our tasks within two scrum teams: one development team and one sales & marketing team. You often hear loud laughs of one of the offices (mainly sales and marketing) without hearing their jokes. Unfortunately, developer jokes quite often do not attract any acknowledgment from the salespeople. But how could you connect the teams working for a highly technical product again to laugh together about the same jokes?

During our offsite in the Bavarian alps, we made a hiking trip in the Partnach Gorge and played a very long round of Cards Against Humanity mixed with Cards Against Cryptography.

The Partnach River

We spiced it up with a few cards that we wrote ourselves and shuffled them into the game during play. The next day, there was an insane flow during our hiking trip: Water in the gorge and creativity. At the end of the trip, we ended up having a list of 228 cards for Cards Against Developers on one of our smartphones. The original game is licensed under Creative Commons as Attribution-NonCommercial-ShareAlike (CC BY-NC-SA). Therefore we could use game mechanics and the existing cards. We used the Cards Against Cryptography templates and included some of their cards into our game as well.

Cards Against Developers game box

Find the whole Cards Against Developers Game on GitHub: https://github.com/crashtest-security/CardsAgainstDevelopers.

So, is it only fun and games?

Of course, we had a lot of fun during the creation of our own cards. All team members, regardless of their position in the company, were included. As a result, everybody feels proud of the game we all created. In the same way, we all feel about our software.

cards game

Additionally, new cards or changes for the existing cards can be submitted via GitHub. We are using the same processes for our software development for the initial and further development of the cards. A change will be requested using a pull request which is reviewed and finally merged. Our sales & marketing team knew these concepts already working with our statically generated website (no CMS used here). Using those concepts for game changes also makes it easier for us to explain the concepts in a completely non-technical environment.

Of course, everybody is already looking forward to the next round of Cards Against Developers as the next team-building experience.

Cards against Developers: How to play online

Due to two viral posts on Twitter and Reddit, Cards against Developers became very popular.

viral cardsviral cards

During the Corona outbreak, a lot of people have to stay home in quarantine. As a result, people often meet via online meetings – and what is better than playing a little round of cards against humanity?

Below you can find some links to Cards against Humanity web applications:

  • All Bad Cards
    This service is our favorite, as it has an immaculate interface.
  • Playingcards.io
    The straightforward, basic interface
  • Pretend you’re Xyzzy
    The “console-like” experience (not in the “PS4-console” meaning, but the “1995 setup console of web servers” meaning) 

There are probably more options out there, so please let us know in the comments if you have a cool alternative, and we’ll add it.

Adding your own card sets to online games

Cardcast is a site that allows you to build your own set of cards. There are already some cards against developer versions on there. They also have their own Chromecast app to play their decks directly.

The cool thing is that you can add these card sets to online games. For All Bad Cards, you can select the decks you want to play before starting a game. For Pretend you’re Xyzzy, you can use the following command in the console:

/addcardcast J9FAA

One last bonus: For all our German followers, here are three German decks that you can add. Enjoy!




Last but not least: If you found this blog article, chances are you are at least interested in software development. Have you tested your application or API for security vulnerabilities lately?

Why not register for free in our software now, start your scan in 2 minutes, play one round of Cards against Developers, and check your results?

Scan for free now