Hacker News Reader

Comment by KennyBlanken | Hacker News Reader

Online multiplayer games keep trying to allow linux users in and keep having to lock them out because there's an instant influx of cheaters.

The Nintendo Switch (which runs Linux) was a favorite of cheaters after jailbreaks came out.

When anyone can compile and run their own kernel with god knows what for modifications, that makes it substantially easier for cheaters and substantially harder for anti-cheat. I don't see that ever changing.

You can't rely on server-side detection either, because some of the cheats are so advanced they go to great lengths to "behave" like a highly skilled human player would with their aiming

View on HN

The status quo's days are numbered. Online chess shows how.

An AI will play these games like a human but better. The AI can be totally separate from the windows box wearing anti-cheat ankle bracelets just as your brain a separate thing to the windows box when when you play. It can interact with the box via keyboard, mouse or controller.

No windows kernel module is useful in detecting and deterring chess cheating no matter how fanciful or factual the vibrating "device" stories are.

Anti-cheat by kernel module, it's day will be entirely done very soon if it isn't already.

"Any time you beat a computer at a game it let you win." Are we there yet? If not, how long?

> "Any time you beat a computer at a game it let you win." Are we there yet? If not, how long?

I don't want to beat a computer, I want to beat another person.

It never was fair to play vs computers in reaction games or skill games.

IE: Quakebots and Fighting games have perfect reaction times and perfect combos. They can simply block perfectly and counter attack perfectly and never drop a combo.

You act like cheating is new to video games??

--------

We never wanted bot in these games. Still don't want them today, and it's a big reason that playing on public boxes (ex: at an arcade or eSports tournament) is still a thing.

Defeating an opponent in a tournament is a big thing for fighting games. The risk of cheating online is always there so online tournaments are simply never taken as seriously (ie: as much $$$$ risked as real life tournaments).

> You act like cheating is new to video games??

No, I think the point is that with AI the existing anti-cheat measures can simply be avoided by letting the AI play through the same interface as a human. Therefore anti-cheat kernel modules will no longer be useful, and will no longer be a reason to stay on Windows.

It seems like what this needs is the return of video arcades.

Fill a room at the mall with Linux boxen with midrange GPUs and fiber internet and the sort of keyboards you can clean with pressurized water. Charge an entry fee and then sell pizza, cheetos, coffee, soda and beer. Open at 11AM and close at sunrise.

Then publish the public IPs used by the arcade-owned machines at each location in the chain and use different public IPs for the customer WiFi. No DRM nonsense, just a way to know you're playing with someone at the arcade where the management doesn't allow cheats on their machines.

Yes exactly but you do not go far enough with your plans. What is the point of any game if we can not determine who has memorised the meta best and who’s fingers twitch fastest. We need to out law general purpose computing in society and first it must be slowly phased out. Humans have shown they can not be trusted with open platforms they will always cheat and scam each other to gain an advantage. We will also need eye tracking devices to determine if they are cheating by reading notes off paper nearby. I think your plan comes to perfection if we chip everyone in case someone else plays for them on the locked down device.

No one is going to use LLMs if aimbots are available.

Have you even played an FPS vs an aimbots before?

Chess anti-cheat now relies on looking at your moves and spotting mistakes. Not even grandmasters play tactically perfect games so this works pretty well for finding cheaters. In theory FPS games could do the same to detect aimbotting.

and will have to do something along those lines for online play.

I still don't understand why we aren't using server-side gameplay analysis for cheat detection. You can have some obvious inhuman-level gameplay heuristics for real time kicks/timeouts during matches and post-game analysis by AI to flag for review or outright automatically ban gameplay that deviates from normal high-level players.

Games very much are using server-side statistics analysis for cheat detection. Valve made a presentation about it and Epic has an API for feeding game state data to ML anticheat for aimbot detection (game-specific and in addition to their existing anticheat measures)

It’s just that it doesn’t work.

But why doesn't it work?

Either everyone on Earth who’s working on this has a skill issue (which is probably hubris?) or there’s not enough differing humanized enough aimbot from human aim (note: Valve manages to screw up even here, with cheaters in Premier basically rage aimbotting these days IIRC)

In addition, there’s not much these things can do against subtler stuff like ESP.

So now we're using an AI cheat snoop to detect the behaviours of AIs, which means the cheat AI will need to learn to avoid the tell-tale patterns the AI cheat snoop looks for and avoid them, which mean the AI cheat snoop will need to....

It won't close the skill gap bump, but the more an AI aimbot degrades itself to mimic a human to beat cheat detection the less advantage it will give to the players using it.

It is scary how nuanced the cheating tools already here. Here is a video promoting cheat software explaining how nuanced their aimbot system can be made to mimic real play: https://www.youtube.com/watch?v=hrBohlkHMjU

> existing anti-cheat measures can simply be avoided by letting the AI play through the same interface as a human.

Great. Now we are going to get “secure cables” for mouse and keyboard and bluetooth device attestation.

You're already one step behind. The interface the human player is using isn't USB, it's genuine keyboards and mice.

I generally agree with this conclusion but there are a class of cheats that don't just improve the player's speed/aim/reaction time/etc but actually give you information that you shouldn't have but needs to be available locally to hide network latency like players on the other side of a wall.

China solved this years ago with mandatory ID verification to play video games.

https://en.wikipedia.org/wiki/Real-name_system_for_online_ga...

This was to prevent children from getting addicted but also leads to real life penalties for cheating in video games.

This a new and exciting use of the word "solved." I don't think I'm completely comfortable with it, possibly due to being raised on a diet of anti-soviet propaganda that spoke of such thing as "freedom" "justice", not sure if people care much anymore but there it is.

In the time span of Nixon to Trump and Mao to Xi, America got caught by China.

The idea of Mao's face or Trump's face on the global reserve currency feels really off.

Your argument appears to be nihilistic in nature: "don't bother fighting the cheating because it's inevitable." Forgive me, but I won't be giving up that easily. No anti-cheat is perfect, and we're not aiming for perfect. We're aiming for a reduction, and the harder we make cheating, the fewer cheaters there are. If cheating requires special hardware to mimic mouse and keyboard input, that significantly cuts down how many cheaters one will encounter in a given day. I have no doubt that the threat vector here widens and deepens as AI becomes more integrated into our operating systems. That does not mean we should give up or accept cheating as inevitable.

Comprehension issue.

"Quotes" of something not said directly that you are quoting is always bad. Quotes containing a summary that is entirely false are even worse. Don't do that.

You can try to deal with cheating as chess.com and others _do_, or you can do something you know will not work. Kernel mods for chess.com would be stupid. Their anti-cheat strategy involves zero windows kernel mods. That is how it will go for all online gaming if it hasn't already. So use something else.

Windows kernel modules won't work much longer if they even still do. Pretending they will, doing nothing to stop cheating is a a nihilistic, give up, faintly ridiculous attitude.

Using quotes to intentionally misrepresent someone is of course bad. I feel I accurately represented your position and nothing you have written refutes that. In fact, you double down here by claiming that chess.com's method is a reasonable solution, and vaguely gesture at "something you know will work." Chess.com relies on inference, which is wildly inaccurate, with many false positive and false negatives. There have been many scandals over the years, and you would know that if you had spent a few minutes on Google prior to this comment.

If you disagree with my interpretation of your nihilism, please go ahead and provide a workable solution for significantly suppressing cheating without the use of kernel level anticheats. Right now you're talking about of both sides of your mouth.

Your reading has serious issues.

“Something you know will NOT work” Is what is written right on the page. You quote it without the “not” wTH? Kernel mods won’t work much longer if they still work at all. Gotta find something else. What? Let’s see. Won’t be kernel mods.

Doesn’t make much sense to see this level of non comprehension of plain English. There’s no point talking against it what i say makes no difference if you read the opposite. Maybe this is convo with AI? Dunno.

Best.

>The Nintendo Switch (which runs Linux) was a favorite of cheaters after jailbreaks came out.

If you're saying the Nintendo Switch system software is Linux-based, I don't think that's correct. It's a proprietary system based on a microkernel architecture.

I think it's a FreeBSD variant, if I remember correctly.

It's definitely not. Completely bespoke OS.

ps* is based on freeBSD, Nintendo is proprietary (though use OSS libraries)

It's proprietary, but they kit bashed a bunch of existing components (iirc, Android's surface flinger, the Nvidia embedded linux drivers, and the freebsd network stack)

Nintendo Switch does not run Linux, it runs a proprietary OS called Horizon based on the Nintendo 3DS firmware. Not sure but it might or might not have some BSD code in the network stack or something.

Pretty much everything uses BSD source code in the network stack, including Windows, so that much is a safe assumption, but there's far more that the Switch is using. According to the copyright notice, it uses the FreeBSD kernel. This tracks with reported use of BSD jails, which are part of the BSD kernel.

> You can't rely on server-side detection either, because some of the cheats are so advanced they go to great lengths to "behave" like a highly skilled human player would with their aiming

Shouldn't that be the goal of anti cheat? That cheating is indistinguishable from expert gameplay? Seems to me like these companies are just trying to avoid implementing proper infallible server-authoritative gameplay by offloading the cheat detection to the untrustworthy client, and then trying to lock down the client to make it trustworthy.

All these games already have an authoritative server. These cheaters aren't breaking the rules of the game by being invincible, super speedy, etc. they're aim-botting and wall hacking. Those cheats can't be prevented with authoritative networking.

why can't we prevent wall hacking by not sending packets of enemy players position if the user can't see them on their screen

you run into some really difficult to solve issues when it comes to the gameplay loop, the graphics engine, and network latency trying to solve that unless you are playing some sort of turn based game where all data can be resolved before the next action

You can do it to a degree (basic room detection), but it'll never be 100% accurate because of latency and compute cost, you have to give leeway.

Sometimes user can partially see them, game client would need that position. Then user can make a mod that flashes silhouette that just appeared behind a wall for a moment.

not a trivial solution.

this is something cool done by valorant - see https://www.riotgames.com/en/news/demolishing-wallhacks-valo...

I dont know what kind of authoritative server Apex Legend uses that let the infamous "Tufi" hacker do what he did for so long. IMO it should be trivial to ban someone hitting more than 80% of their shots as headshots,, dual weilding weapons that were never supposed to be dual-weilded. Charge rifle beam permanently shooting and swapping armors from miles away

There's a big difference between authoritative networking with some security holes and non-authoritative networking. Note also that hitting 100% headshots is entirely within the rules of the game; it has nothing to do with the networking implementation.

The Nintendo Switch runs a custom operating system codenamed HorizonOS.

I was going to say. There's no way Nintendo would be caught dead with GPL anything, even GPLv2.

What is the problem with cheating or bots really?

I feel that the solution is just to have a decent ranking/level system so that users play with other people, cheaters, bots or regular users of the same level. When I was playing mario kart with my 5y old daughter, I didn't mind she had access to helps to not run out of the road as it allowed us to play together. I don't see how different it is between say, a super skilled player, and a lower skilled player with cheat/assists. If cheating/assists system becomes so efficient, cheaters will just end up playing together and non cheater will have got rid of them and play between non cheater of similar level. Prolem solved. No?

People who are not naturally competitive (or who don't like competition) struggle to understand the drive. For many, competing against a computer is FAR less engaging or rewarding than against a person. Even if the person is less skilled than the computer. The human element - chance, variance in skill, emotions, etc - is very motivating for some people. The same people often like sports (which I do not). If you replaced every athlete in every competition in the Olympics with a robot, would you still find it as compelling? Some would, but many would not.

i am really doubting that Nintendo Switch uses Linux?... they would have to provide source code no?

Only to the kernel. And only if they patched it. Kernel modules don't count as patches. This is how myriad android vendors get out of providing source. But no, the switch doesn't use linux afaik.

And yet there's plenty of competitive multiplayer shooters that work fine on Linux. Rivals, The Finals, deadlock, CS2, Overwatch, Hunt Showdown, etc.

EA did a big announcement about switching to kernel level Anti-Cheat for Battlefield 6 to combat cheating, yet there's still plenty of cheaters around. It's looking more and more like an excuse in order to give the appearance of combating cheating.

You should not consider Tim Sweeney's comments on the matter as a reliable source. He was veiling his true motivations behind that statement. The Switch does not run Linux either, it's a custom OS descending from the Wii's iOS.

The cheating issue isn't really a matter of being able to run custom kernel code. You can do the same thing on Windows, which is why remote attestation is a thing for some games. As someone who has developed games for Linux (and Windows / Mac), it's an endless cat and mouse game. So long as the system can execute code that is not yours, you never really are getting perfect anticheat. Ease of loading custom kernel code isn't really a hurdle to that.

I find that client and server based in combination is the robust approach. I once implemented anti-cheat in which the server lied about game state, which a regular client without cheats would act predictably on. Deviation from that behavior is a useful heuristic to build a suspicion score.

Reply on news.ycombinator.com