![Cleeus[JgKdo]](/data/avatars/s/30/30543.jpg?1424422840){kind=avatar}
well, if there was another INF2.91 release an INF-specific native anti-cheat extension could be added.
Anticheat tools on infgermany.de
- Thread starter ExBeginner
- Start date
-
Two Factor Authentication is now available on BeyondUnreal Forums. To configure it, visit your Profile and look for the "Two Step Verification" option on the left side. We can send codes via email (may be slower) or you can set up any TOTP Authenticator app on your phone (Authy, Google Authenticator, etc) to deliver codes. It is highly recommended that you configure this to keep your account safe.
What about an md5 check on certain files at connection time? with a database of accepted values? Would this be feasable, impractical, pointless? Just the first thing to cross my mind ...
Having something like this in mutator form (with support of all platforms) would be awesome... since 2.91 is probably never going to happen...
The problem is that you have to find a way to get the dll/so extension to the clients. The general concept of a mutator doesn't allow it to download third party code because it runs inside the UT sandbox.
The only reason QValidate is actually able to download and use a dll is because of a security weakness in UT. The concept is the same used by worms and trojans to bypass security and right management (prepare host for download, download code and execute it) though the intention is another one. However you should be aware that in general a mutator like that poses a great security risk because a malovent server can use this mechanism to run arbitrary code on the client by simply passing another QValidate111.dll to the client.
That's why it is important that the mutator itself doesn't provide ANY possibility to download external dll's.
Instead the mutator and the dll the mutator uses must be part of an official release of a trusted source to achieve widespread use without introducing security holes into Infiltration or UT.
The only reason QValidate is actually able to download and use a dll is because of a security weakness in UT. The concept is the same used by worms and trojans to bypass security and right management (prepare host for download, download code and execute it) though the intention is another one. However you should be aware that in general a mutator like that poses a great security risk because a malovent server can use this mechanism to run arbitrary code on the client by simply passing another QValidate111.dll to the client.
That's why it is important that the mutator itself doesn't provide ANY possibility to download external dll's.
Instead the mutator and the dll the mutator uses must be part of an official release of a trusted source to achieve widespread use without introducing security holes into Infiltration or UT.
Last edited:
Getting the files to the clients isn't what gives me a headache...it seems quite bearable to me to force everybody to manually dl & install small files into his ut/system folder when he wants to join the server.
But getting propper hack protection (some cheats don't even manipulate files but only rely on changing RAM content) that works on all plattforms is where I see the main challenge.
But getting propper hack protection (some cheats don't even manipulate files but only rely on changing RAM content) that works on all plattforms is where I see the main challenge.
Dunno, but I'll find out.
I doubt releasing the source is common, since its pretty much an invitation to hack around it...
I doubt releasing the source is common, since its pretty much an invitation to hack around it...
No we haven't.
Basically an anti cheat tool needs "security by obscurity" since every experienced programmer could otherwise replicate a proper communication between the client and server.
Since it is the client who tells the server that he is cheating the only way cheat protection can work is by encoding the communcation and introducing certain random elements (but only random if you don't have the code)
Basically an anti cheat tool needs "security by obscurity" since every experienced programmer could otherwise replicate a proper communication between the client and server.
Since it is the client who tells the server that he is cheating the only way cheat protection can work is by encoding the communcation and introducing certain random elements (but only random if you don't have the code)
GOOD NEWS FOR YOU LINUX & MAC USERS:
Hack protection will be (partly & experimentally) switched off for a while, so all Linuxguys should be able to join the server. If you wanne make a big statement for permanent access, PLAY 24h/7 DAYS TO DEMONSTRATE (to whomever in doubt) YOU ARE NOT NEGLECTIBLE
Hack protection will be (partly & experimentally) switched off for a while, so all Linuxguys should be able to join the server. If you wanne make a big statement for permanent access, PLAY 24h/7 DAYS TO DEMONSTRATE (to whomever in doubt) YOU ARE NOT NEGLECTIBLE
Hurrah, hurray and a big whooopy!
Erm which servers again? 121 and infgermany right?
Good at interim decision (I benefit from it), but the problem still needs solving.
Erm which servers again? 121 and infgermany right?
Good at interim decision (I benefit from it), but the problem still needs solving.
When I run QValidate111 with UTDCv15 I get the boot when I test.
The UTDC thinks the QValidate111.dll is a hook or something... Do you no longer run QValidate111 or is there a setup for UTDCv15 to pass this file?
The UTDC thinks the QValidate111.dll is a hook or something... Do you no longer run QValidate111 or is there a setup for UTDCv15 to pass this file?
Just connected to infgermany and it seems that you are not running QValidate111 anymore. Or at least I do not see the Logo and Server Message for it.
Aimbots? I doubt that. Did you test them in INF, Or in UT? I have played infiltration for four years, and during those four years only one person was able to own me bad enough for me to wonder. That person was Duke in 2.86. I wont believe an aimbot exists unless its proven. Do demorecs please of this aimbot in INF. Dont show me wallhacks or other proven BS. I want BOTS!!!!!
Unfortunately we have had aimbots, I got several demorecs sent to me when I admined AFA#2. I might still have them, but they'll be for 2.86 and a very outdated RAv2... probably no way to run them.{GD}NTKB said:
I'm not aware of any that got past 2.9's code, though.
You, sir, are wrong. I do believe if you do a little research on the first posts made about me on this forum, you will see you are very wrong.{GD}NTKB said:
