Comment on Rockstar Games DDoSed Heavily By Players Protesting New AntiCheat Code

• jonne@infosec.pub ⁨3⁩ ⁨months⁩ ago

  It’s just ridiculous the stuff you see that should be easy to catch with basic server scripts. Players conjuring money and vehicles out of thin air, moving impossibly fast, vehicles/players with seemingly unlimited hit points, etc. You could easily catch that shit on the server side and ban the cheaters, but instead they go for the most invasive client side shit.

  Sure, if you want to stamp out stuff like aim bots and whatever eventually you’ll need to look at the client side of things, but in a decade they didn’t seem to do anything at all.

  source

  • Soggy@lemmy.world ⁨3⁩ ⁨months⁩ ago

    That kind of stuff catches legitimate users all the time. In Rust for example it’s common to get kicked for “fly hacking” while jumping on vehicles. The more open-ended the game the more weird edge cases become very relevant. Especially if it has a halfway decent physics sim. Tons of ways to give players weird velocities. Then it has to account for the variance ping introduces…

    Some stuff, yeah. Should be easy to check if a player has too much HP. But spoofed communication between the client and server is a tough nut to crack when you can only see what the client wants you to see. Keeping everything server-side would help but that introduces latency to every input, unacceptable for anything even moderately paced.

    All thay said, it would be a lot easier to swallow the “necessary evil” argument if it actually fucking worked.

    source

    • flashgnash@lemm.ee ⁨3⁩ ⁨months⁩ ago

      I’m pretty sure there’s not a valid reason for players to be able to spawn giant Ferris wheels in people’s garages, that seems like a fairly easy one to test for

      source
    • Buttons@programming.dev ⁨3⁩ ⁨months⁩ ago

      Use a more holistic approach. Combine heuristics like the average speed and aim hit percentage with reports from other players.

      Review player reports, if a player makes a false allegation in their reports, mark that player as having less reliable reports. If a player reports someone who turns out to be a definite cheater, mark whoever reported the cheater as having more reliable reports. Etc etc.

      source

      • Soggy@lemmy.world ⁨3⁩ ⁨months⁩ ago

        None of that helps low-level play or games without meaningful progression. Continuing to use Rust as an example, because I’m most familiar with it among games with controversial anticheat: people get banned all the time. All the time. And they keep coming back with brand new Steam accounts, and continue to cheat until someone notices and an admin happens to be online. Rinse and repeat. Seemingly an infinite pool of cheaters, or finite cheaters with infinite money for new copies of the game. And it only takes a few minutes to ruin someone’s week.

        The most effective prevention method is probably strict gatekeeping: require a minimum hours played in wild west servers or a certain value of games owned in an account before a player can be whitelisted. Proof of investment, that kind of thing.

        source