Programs To 'stop' Cheaters...

ThaldarinThaldarin Alonzi! Join Date: 2003-07-15 Member: 18173Members, Constellation
<div class="IPBDescription">A simple but not flawless idea...</div> I got this idea whilst scanning my computer from spyware and talking about a 'cheater' accusation on IRC.

The idea is a simple program which will monitor all known processes on the players machine, record a log through out the entire playing time and then send the log to a desired destination.

Reason for this? Almost all normal process will be known by many people, including game admins. Any 'dodgy' or unexplainable processes running at the time of a cheat accusation can be more easily dismissed and argued for using this sort of system.

Most players could just re-name the .exe process to match the name of their firewall .exe? True. Although logfiles should be constructed to show the path of all processes possible, and record the memory usage on them. This will make it tighter for people to work around the proposed system idea.

As with any system there is room for error, and improvement. I believe expanding on this idea could help players and league admins from coming under attack. I probably have not included as much information as needed, or as I would like. It's a vague idea, it's also something that sounds like it may be needed.

[EDIT] the firewall.exe was just an example. It could be anything else, it's just to show that the system will be made to be as tight as possible.

Comments

  • lynXijlynXij Join Date: 2004-02-07 Member: 26175Members, NS1 Playtester, Constellation
    Punkbuster use to do this. It would scan all possible known locations of where a hack might be, it would recheck periodically. It was flawed, because either the source gets leaked, or someone is able to reproduce the same 'passing' signal. While allowing people to run whatever programs they want.
  • FaskaliaFaskalia Wechsellichtzeichenanlage Join Date: 2004-09-12 Member: 31651Members, Constellation
    edited April 2005
    well, there you would need quite a bit of monitoring to do

    Scanning for names shouldnt solve it, cause everyone can rename cheat.exe to svchost.exe <!--emo&;)--><img src='http://www.unknownworlds.com/forums/html/emoticons/wink-fix.gif' border='0' style='vertical-align:middle' alt='wink-fix.gif' /><!--endemo-->

    edit: spelling
  • ZephorZephor Join Date: 2002-12-25 Member: 11547Members, Constellation
    CEVO has a program like this. It is very very buggy though and only for CEVO games.
  • coriscoris Join Date: 2003-07-08 Member: 18034Members, Constellation
    There's some anti-cheat program for CS lying around that makes a small avi at your crosshair at random times that players need to send to the admins after the game. The only downside is that you need to use net_graph and net_graphpos 2 for it to be safe (so players cant watch a demo of a game and send in a avi of the demo).
  • Lt_PatchLt_Patch Join Date: 2005-02-07 Member: 40286Members
    Lemme guess, Thaldarin... Using Ad-Aware by any chance?

    Even if you could use something like the Lavasoft CLS program library, then you would need someone like UA to start making it a recommended program for servers.

    Even then, depending on where the program was "located", then it would make it incompatible with VAC, and probably CD as well...

    (BTW <a href='http://www.googlefight.com/index.php?lang=en_GB&word1=VAC&word2=CD' target='_blank'>CD > VAC</a>)
  • AlbinoAlbino Join Date: 2003-08-17 Member: 19841Members, NS1 Playtester
    edited April 2005
    I think CAL really needs to start working on their own anti-cheat software. If CEVO actually gets their CMN software working properly and CAL still uses crappy VAC they're going to look really bad. Who would play CS in CAL when CEVO has 99.9% effective anti-cheat and cash prizes?

    *edit* I guess the cheaters will, but you get my point *edit*
  • EmanonEmanon Join Date: 2003-05-13 Member: 16254Members, Constellation
    I'm excited about this:
    <a href='http://www.ufonurkka.mine.nu/ssclient/index.php' target='_blank'>http://www.ufonurkka.mine.nu/ssclient/index.php</a>

    <!--QuoteBegin--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->ssClient is anticheat tool for Half-Life, Medal of Honor: Allied Assult, Enemy Territory and Call Of Duty. The tool is both client and server side. The main idea of this software is to take screenshots on players while they play and send them to a server. The screenshots are taken from the clients computer as they are on the screen. Before the transmission the shots are compressed to jpegs. The image transfer rate is very slow to prevent lagging.

    The software can be ran parallel with VAC (Valve anti-cheat). Also the server software can upload the images to an ftp server. This can be used to send the images to a web server. And in addition it can send information about the shots and players to an MySql server. This is useful when building websites.

    <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
  • ScyllaScylla Join Date: 2003-08-05 Member: 18942Members
    edited April 2005
    <!--QuoteBegin-Emanon+Apr 5 2005, 05:40 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Emanon @ Apr 5 2005, 05:40 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> I'm excited about this:
    <a href='http://www.ufonurkka.mine.nu/ssclient/index.php' target='_blank'>http://www.ufonurkka.mine.nu/ssclient/index.php</a>

    <!--QuoteBegin--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> </td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->ssClient is anticheat tool for Half-Life, Medal of Honor: Allied Assult, Enemy Territory and Call Of Duty. The tool is both client and server side. The main idea of this software is to take screenshots on players while they play and send them to a server. The screenshots are taken from the clients computer as they are on the screen. Before the transmission the shots are compressed to jpegs. The image transfer rate is very slow to prevent lagging.

    The software can be ran parallel with VAC (Valve anti-cheat). Also the server software can upload the images to an ftp server. This can be used to send the images to a web server. And in addition it can send information about the shots and players to an MySql server. This is useful when building websites.

    <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd--> <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    Forget about it. ssClient is hacked already with a fake client like CD with <span style='color:orange'>SNIP</span>.
  • MrGunnerMrGunner Join Date: 2003-01-03 Member: 11757Members, Constellation
    And it has the most unintuitive interface ever. Plus it won't work with CD.
  • 2_of_Eight2_of_Eight Join Date: 2003-08-20 Member: 20016Members
    Ever heard of "HackCam"? It's in Off-Topic somewhere here. Anyways, what it does, is give players spectating
    1) Wallhack
    2) Automatic warnings of unusual behavior (instant lock-on, above average reaction, sudden movements caused by knowing of enemy nearby [where normally it would be unknown], shooting through walls, aiming through walls, pre-aim [looking at target while turning a corner, always keeping x-hair on the target). A very useful program, for source games only I believe. It's coming out in August or so, integrated with Steam.
    (I'm not sure about the release date/steam integration)
  • theclamtheclam Join Date: 2004-08-01 Member: 30290Members
    <!--QuoteBegin-2 of Eight+Apr 5 2005, 06:53 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (2 of Eight @ Apr 5 2005, 06:53 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Ever heard of "HackCam"? It's in Off-Topic somewhere here. Anyways, what it does, is give players spectating
    1) Wallhack
    2) Automatic warnings of unusual behavior (instant lock-on, above average reaction, sudden movements caused by knowing of enemy nearby [where normally it would be unknown], shooting through walls, aiming through walls, pre-aim [looking at target while turning a corner, always keeping x-hair on the target). A very useful program, for source games only I believe. It's coming out in August or so, integrated with Steam.
    (I'm not sure about the release date/steam integration) <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    I saw that. It would be invaluable if it worked on HL1 games.
  • Malibu_StaceyMalibu_Stacey Join Date: 2003-04-06 Member: 15243Members
    <a href='http://www.unitedadmins.com/index.php?p=content&content=cd' target='_blank'>http://www.unitedadmins.com/index.php?p=content&content=cd</a>

    Welcome to about 3 years or so ago.

    Although C-D doesn't send the information anywhere else, it just stops you being able to play so the detection of anything suspect is only relayed to you rather than the entire internet.
    Considering some servers had lists of players 'caught' using "bunnyhop scripts" when all it did was catch people who had the audacity to press a key bound to +attack2, frankly I think this is a good thing. Less pointless drama thanks very much.
  • ScyllaScylla Join Date: 2003-08-05 Member: 18942Members
    Softice + Sniffer > CD.

    As every Client-side anti-cheat software CD can easily hacked. CD-fake clients exists a long time before <the name of the program digz don’t want me to write down>.

    CD is no security against hacker at all.

    Are there possibilities to make HL more cheat proof? Yes there are some pretty good options. With changes in the engine Wallhacks would be useless. Steam should provide a “trusted environment” for the game DLL and prevent hooks of the game DLL or injections. Remove the feature to define a custom OpenGL DLL.

    That way only OpenGL based cheats would be possible by replacing the system OpenGL DLL

    But all these chances have to be made within the game engine and Steam so its up to valve.
  • FangsFangs Join Date: 2003-02-13 Member: 13506Members
    I have a better idea lets do like in the old west where we get a rope! <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html/emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
  • KoulnisKoulnis Join Date: 2005-04-13 Member: 48337Members
    There is no way to stop cheaters/hackers/lamers/good-for-nothing-noob-boob-sons-of-Castor Troy for good. There will always be workarounds for everything, should anyone have the time or the patience to do so.

    I hear people always spamming the mic with "WTH Haxors!" all the time, and I tell them:

    "Wanna know how to avoid hackers or catch them?"

    "What, dude?"

    "Lan party," followed by mute.
  • DuoGodOfDeathDuoGodOfDeath Join Date: 2002-08-01 Member: 1044Members
    edited April 2005
    If only Valve spent time to prevent cheats than to just to a half arsed job doing it. I liked when Joolz made fun off Valve for their pathetic anti-cheat preventions. Appears the web site that hosted the interview no longer hosts it.
  • ZephorZephor Join Date: 2002-12-25 Member: 11547Members, Constellation
    edited April 2005
    cal-ns's sekret project should help stop cheating <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile-fix.gif' border='0' style='vertical-align:middle' alt='smile-fix.gif' /><!--endemo--> In the spirit of ns.com I'm not going to tell you its name or what it does and hype it up a lot and stuff.
  • MrMojoMrMojo Join Date: 2002-11-25 Member: 9882Members, Constellation
    <!--QuoteBegin-Zephor+Apr 16 2005, 12:24 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Zephor @ Apr 16 2005, 12:24 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> cal-ns's sekret project should help stop cheating <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile-fix.gif' border='0' style='vertical-align:middle' alt='smile-fix.gif' /><!--endemo--> In the spirit of ns.com I'm not going to tell you its name or what it does and hype it up a lot and stuff. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    is it looking at demos?
  • coriscoris Join Date: 2003-07-08 Member: 18034Members, Constellation
    <!--QuoteBegin-MrMojo+Apr 16 2005, 08:34 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (MrMojo @ Apr 16 2005, 08:34 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> <!--QuoteBegin-Zephor+Apr 16 2005, 12:24 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Zephor @ Apr 16 2005, 12:24 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> cal-ns's sekret project should help stop cheating <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile-fix.gif' border='0' style='vertical-align:middle' alt='smile-fix.gif' /><!--endemo--> In the spirit of ns.com I'm not going to tell you its name or what it does and hype it up a lot and stuff. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    is it looking at demos? <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    No it's opening them in DemoFreak and looking for s4 pige0n.
  • ZephorZephor Join Date: 2002-12-25 Member: 11547Members, Constellation
    <!--QuoteBegin-MrMojo+Apr 16 2005, 11:34 AM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (MrMojo @ Apr 16 2005, 11:34 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> <!--QuoteBegin-Zephor+Apr 16 2005, 12:24 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Zephor @ Apr 16 2005, 12:24 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> cal-ns's sekret project should help stop cheating <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile-fix.gif' border='0' style='vertical-align:middle' alt='smile-fix.gif' /><!--endemo--> In the spirit of ns.com I'm not going to tell you its name or what it does and hype it up a lot and stuff. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    is it looking at demos? <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    nah its something cooler...

    btw, we named our program "coinflip"
  • a_civiliana_civilian Likes seeing numbers Join Date: 2003-01-08 Member: 12041Members, NS1 Playtester, Playtest Lead
    <!--QuoteBegin-Zephor+Apr 16 2005, 09:44 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Zephor @ Apr 16 2005, 09:44 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> btw, we named our program "coinflip" <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    That name is almost as intriguing as Nexus.
  • AmplifierAmplifier Join Date: 2004-02-19 Member: 26708Members, Constellation
    If only we had a NS Anti-Cheat system... or even something like DODGuard.
  • ZephorZephor Join Date: 2002-12-25 Member: 11547Members, Constellation
    edited April 2005
    edit: wait until next week.
  • MrGunnerMrGunner Join Date: 2003-01-03 Member: 11757Members, Constellation
    MORE LIKE TONIGHT AM I RIGHT?
  • DuoGodOfDeathDuoGodOfDeath Join Date: 2002-08-01 Member: 1044Members
    Like 5 AM last night.
  • N_RecoupN_Recoup Join Date: 2005-01-17 Member: 36126Members
    Or we could just spec them like always. Works on our server.
  • Diablo_fxDiablo_fx Join Date: 2003-02-21 Member: 13793Members
    <!--QuoteBegin-Thaldarin+Apr 5 2005, 05:29 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Thaldarin @ Apr 5 2005, 05:29 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> I got this idea whilst scanning my computer from spyware and talking about a 'cheater' accusation on IRC.

    The idea is a simple program which will monitor all known processes on the players machine, record a log through out the entire playing time and then send the log to a desired destination.

    Reason for this? Almost all normal process will be known by many people, including game admins. Any 'dodgy' or unexplainable processes running at the time of a cheat accusation can be more easily dismissed and argued for using this sort of system.

    Most players could just re-name the .exe process to match the name of their firewall .exe? True. Although logfiles should be constructed to show the path of all processes possible, and record the memory usage on them. This will make it tighter for people to work around the proposed system idea.

    As with any system there is room for error, and improvement. I believe expanding on this idea could help players and league admins from coming under attack. I probably have not included as much information as needed, or as I would like. It's a vague idea, it's also something that sounds like it may be needed.

    [EDIT] the firewall.exe was just an example. It could be anything else, it's just to show that the system will be made to be as tight as possible. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    This wont work, because people have so much "crap" programs in the background that it would be imposible to tell the difference..
  • Malibu_StaceyMalibu_Stacey Join Date: 2003-04-06 Member: 15243Members
    <!--QuoteBegin-AUX Recoup+Apr 17 2005, 07:42 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (AUX Recoup @ Apr 17 2005, 07:42 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Or we could just spec them like always. Works on our server. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    Isn't always possible to spec 11 players at the same time during a competitive match but hey who said knowing what you're talking about was ever a requirement on these forums?
  • coriscoris Join Date: 2003-07-08 Member: 18034Members, Constellation
    <!--QuoteBegin-Malibu Stacey+Apr 19 2005, 04:25 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Malibu Stacey @ Apr 19 2005, 04:25 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> <!--QuoteBegin-AUX Recoup+Apr 17 2005, 07:42 PM--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (AUX Recoup @ Apr 17 2005, 07:42 PM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> Or we could just spec them like always. Works on our server. <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
    Isn't always possible to spec 11 players at the same time during a competitive match but hey who said knowing what you're talking about was ever a requirement on these forums? <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
    Require 11 judges to spec every game?!?!?!?!??!!
    Oh wait.
Sign In or Register to comment.