HNHacker News
TopNewBestAskShowJobs

doikor

2,961 karma · joined November 28, 2014

submissionscomments
doikor··on Kagi News
This is actually harder then most think. The chances of your app doing this check being bot detected/blocked is very high.

(unless you are Google etc which are specifically let in to get the article indexed into search)

doikor··on Sora 2
Does this survive panning the camera away for 5 to 10 seconds and then back? Or basic conversation scene with the camera cutting between being located behind either speaker once every few seconds?

Basically proper working persistence of the scene.

doikor··on High-power microwave defeats drone swarm
If you fly the drone 100m up in the air it will block commercial flying due to risk of collision but birdshot can’t reach it.

Even if you manage to hit it at that range there just isn’t enough kinetic power left to really do any damage.

For example here is a Finnish journalist being shot at 70m with birdshot. https://youtu.be/WJgzzrcSmNM?t=124 note that the shot did hit them but none managed to go trough the cardboard and normal civilian clothes were enough protection for other parts of the body.

Basically outside of drones that are trying to hit you (suicide fpv drones) birdshot is kinda useless as there isn't really any reason to fly them so close that they would be in effective range.

doikor··on Germany is not supporting ChatControl – blocking minority secured
> There is a trilogue, which is effectively a three-way negotiation between the Council, Parliament and Commission. But ultimately the approval of Parliament and in most cases the Council is required (ie, Commission cannot force laws).

Also EU can't actually make any laws it makes directives that are then up to each member state to implement on their own. It also has no police/military/force to actually enforce that the member states implement the directives. Basically everything is very much about cooperation or finding a compromise everyone can agree on as there is no way to force anyone to do anything really (outside of cutting away EU funding but then the member state can also stop paying their dues which does not work for most of the big states as they pay more then they get back)

The thing where EU has power and actual means to enforce things is the reason it was originally created for. Trade.

doikor··on Germany is not supporting ChatControl – blocking minority secured
Why would any member state give away their sovereignty like that?

EU is setup like it is on purpose. Parliament represents the people, council the member countries and commission EU itself.

The one with most power is the council as nothing really goes though without their (heads of state of the member countries) approval as EU has no legislative powers of its own but instead member countries have to implement the directives.

doikor··on Germany is not supporting ChatControl – blocking minority secured
Or just never approve it and ignore any demands eu makes about it.

Just take a look at Orban with Hungary how many years you can keep doing this without anything actually happening.

EU in general works only to the extent that member nations want it to work and finding a concensus is always the first goal and split decisions are heavily discouraged (and pretty much anything that matters needs a supermajority at minimum).

If one of the member nations just goes "ah fuck it I don't like this" EU really does not have many tools to fight it (especially for things that effect internal things in the country not trade between them). This is also why directives like this are very unlikely to ever go through without unanimous support from the council (heads of state of the member nations)

I mean literally at worst EU could keep some of the benefits away from a country over not implemeting some directive (what EU is finally after years thinking about doing to Hungary) but that does not really work with a country like Germany that pays more then it gets as they could just go "fuck it we are not paying our dues then".

Basically unlike in the US where the federal government has police, army, etc to actually enforce its rulings EU has none of those. All it can really do is try to take money away which again does not really work all that well.

doikor··on Germany is not supporting ChatControl – blocking minority secured
This isn’t how EU regulation/directives work as they are not laws.

Only way this can come into force in a member country is that country making their own law implementing it. It is at that point that constitutionality should be checked and the law stopped from being implemented.

doikor··on How the “Kim” dump exposed North Korea's credential theft playbook
For the first couple decades while it was ahead of South Korea economically (in large part due to support from China/USSR) it was not that bad but during that time the system of absolute control by the Kim family was setup and once it was up it is too late to really do anything due to how absolute/brutal the control is (you say anything wrong and you and your whole extended family end up in a prison/death camp)

Basically people are willing to put up with a lot if their lives are getting better (economic growth). Problem with that is what kind of system of control an authoritarian government can setup in that period of growth.

doikor··on Japan has opened its first osmotic power plant
Usually you loop the treated waste water through nature for dilution (and more filtering if you use ground water) in case there is some problem with the treatment process.

Also it is kinda hard to sell to people the concept of “you are drinking literal shit/piss” even though if you stop and think about it all lake/river/reservoir water is full of fish, bird, etc shit.

doikor··on MCP doesn't need tools, it needs code
We have that in Scala with the MCP tools metals provides but convincing Claude to actually use the tools has been really painful.

https://scalameta.org/metals/blog/2025/05/13/strontium/#mcp-...

doikor··on Visa and Mastercard: The global payment duopoly (2024)
> online shopping still requires us to enter 16-digit easily-stolen numbers into websites, and so fraud is enormously higher than it needs to be

EU partially solved this with PSD2 enforcing two factor authentication for online card purchases.

https://finance.ec.europa.eu/publications/strong-customer-au...

doikor··on Visa and Mastercard: The global payment duopoly (2024)
There is also the Digital Euro project. Though no timeline exists yet.

https://www.ecb.europa.eu/euro/digital_euro/html/index.en.ht...

doikor··on Electric cars produce far less brake dust pollution than combustion-engine cars
EVs don’t really use the brakes during normal driving being mainly used for emergency braking.

You could achieve the same with engine braking with ICE but most don’t bother.

doikor··on Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say
In most big companies you don’t really get fired for bad performance (as long as you try to do your job).

In my experience you only really get fired when the command from top comes to cut X% of the workforce (sometimes this is yearly due to stack ranking systems) but even then the best way to keep your job is not doing a good job. In actuality it is connections (being good friends with your boss)

doikor··on LIGO detects most massive black hole merger to date
Can some of the mass escape as gas/mass flying out into space? Basically is energy the only way for mass to exit such an event?
doikor··on How Riot Games is fighting the war against video game hackers
Not a rootkit but it does run at kernel level. If Vanguard is a rootkit then so is every anti-virus software (including Microsoft Defender which is on by default)

For example wikipedia description of a rootkit is

"A rootkit is a collection of computer software, typically malicious, designed to enable access to a computer or an area of its software that is not otherwise allowed (for example, to an unauthorized user) and often masks its existence or the existence of other software."

Vanguard does not mask its existence or the existence of other software nor does it get/give access to unauthorized users (you authorized it during install so by definition it is not unauthorized).

You don't manually give permissions to actual rootkits and they do their best to try and hide their existence.

doikor··on How Riot Games is fighting the war against video game hackers
Some of their stuff is but afaik xbox one and series x/s security model have not been broken. Obviously with those they have control of both the hardware and software making achieving it much easier.

Also with xbox one and series x/s they have the dev mode thingie lowering the interest in trying to hack the retail mode.

doikor··on How Riot Games is fighting the war against video game hackers
In my personal experience with counter strike is around 20% of the games has at least one cheater (one that is very obvious. usually aimbot). There could be more careful with usage of wallhacks etc that are harder to detect for the other players.

Here is some graphs for Valorant https://x.com/deteccphilippe/status/1883945555102957617 basically reaching ~10% at its worst (when Riot devs are only xmas holidays) and around ~1% at its best (~now). And this is the number of caught cheaters so actual amount of cheaters is probably slightly higher.

Here is someone doing a "study" in counter strike https://old.reddit.com/r/GlobalOffensive/comments/1bnhikf/th...

> Out of 60 games, I had 28 games with spinbotters. 28 is an absolutely insane number. 17 games had the spinbotter on the enemy team, 11 games had the spinbotter on my team. Keep in mind though, some games had more than 1 spinbotter, bringing the total number to 36 spinners in 60 games.

(spinbot is a form of aimbot that is very obvious)

doikor··on How Riot Games is fighting the war against video game hackers
> To this day I keep wondering how they can fk this up so bad. Why I am even allowed to play CS without 2fa enabled and without Email confirmation for the first login? They also failed to block the login from Thailand despite it's creation in Germany. This could have been so easily prevented.

This is because any barrier to playing the game is also effectively a barrier for someone to buying their lootbox crap.

doikor··on How Riot Games is fighting the war against video game hackers
One thing to note is that Microsoft is planning some kind of kernel anti tampering system in future that hopefully will give us user level anti cheats that actually work. Though some will very likely see this as some kind of "we don't control our computers anymore" move.

https://www.leagueoflegends.com/en-us/news/dev/dev-vanguard-...

> “On Demand” Vanguard

> "As was foretold, a future will eventually arrive where we can rely on the security features of Windows to protect its own kernel, instead of protecting it from boot with a driver. This will allow us the opportunity to start our anti-cheat services when the game client runs, provided the end-user has opted into all of these features. We’ll have more communication on this topic early next year, but if you’re on Windows 11 and on relatively recent hardware, we wanted to let you know that you won’t have to tolerate the taskbar icon forever (even though we worked very hard on Vanguard’s logo)."

https://blogs.windows.com/windowsexperience/2024/11/19/windo...

> "To help our customers and partners increase resilience, we are developing new Windows capabilities that will allow security product developers to build their products outside of kernel mode. This means security products, like anti-virus solutions, can run in user mode just as apps do. This change will help security developers provide a high level of security, easier recovery, and there will be less impact to Windows in the event of a crash or mistake. A private preview will be made available for our security product ecosystem in July 2025."

doikor··on How Riot Games is fighting the war against video game hackers
But it does lower the amount of cheaters as the consequences are bigger. Also makes manual banning/moderation much more cost effective as the bans actually stick.

At the end of the day the goal isn't 0 cheaters but having few enough that the chance of your match being ruined by one is 1 or 2% instead of 10 or 20%

doikor··on How Riot Games is fighting the war against video game hackers
Very unlikely to happen anytime soon in competitive shooters like Valorant where gamers spend thousands of dollars just to get a few millisecond advantage from faster monitor, mouse, etc.

Adding an extra 5 or 10ms of delay would be a massive issue (especially bad if it is an inconsistent delay)

doikor··on How Riot Games is fighting the war against video game hackers
> Players never get rid of the cheaters completely

> The optimal amount of bad behavior is not zero.

Obviously the goal never has been to have 0 cheaters. Just from the detection side you need to delay the bans, let in some of the previously detected cheats again, etc to keep the cat and mouse game going on (make it harder to A/B test your cheats)

https://x.com/deteccphilippe/status/1883945555102957617

> Worse still, is that we actually have to let them back in. When we outright “block” a cheating method, we are technically providing the cheater an instantaneous surface to iterate against, allowing them to A/B test their cheats until they find something that is actually undetected at that layer.

> unrelated people who don't play games get their hardware+software locked down because of a bunch of whiny gamers

If you think it is an issue then don't play their game. Very few companies are willing to go through the effort as it is actually quite a lot of work just from the security vulnerability aspects alone (and you also have to effectively detect the cheats too)

doikor··on How Riot Games is fighting the war against video game hackers
Has been used for some time now.

https://x.com/deteccphilippe/status/1883945555102957617

> “Behavior” refers to an ML suspension (also called “server-sided” anti-cheat), often given to ragehackers.

But then you can just teach an AI to act like a human. Anti cheats in computer games is and always will be a cat and mouse game and AI/ML is just another tool in the bag of many tools (most bans seem to be fingerprinting based basically rebanning previous offenders who failed to get around the fingerprinting system)

doikor··on How Riot Games is fighting the war against video game hackers
Though if the AI is only as good as a human can be it is not that desirable. If the cheat does "super human" stuff it can be detected from behavior on the server side though this is after the fact from processing some replay files and thus not that "great" for players as the cheater gets to ruin at least one game.

> “You have to humanize [the cheat] to a degree where the advantage is imperceptible from what a human can do,” said Koskinas. “And once you’re there, you’re not really cheating enough to make it worth it for most users.”

But it is something they acknowledge will be an issue at some point in the future. Personally I think for now AI is way too slow as all the computation needs to happen in a few milliseconds to really be effective.

> Koskinas says he often worries about the use of AI for screen classification, to learn what human inputs look like, and how to reproduce them.

doikor··on How Riot Games is fighting the war against video game hackers
This is actually how cheating is "solved" to some degree in South Korea. Basically you can't play without logging in with your government provided id.

Though they do also use it for stuff like under 16 year olds not being able to play online games between midnight and 6am.

edit: Some extra details about this from a few months ago https://x.com/deteccphilippe/status/1883945555102957617

> KR (Korea) requires national identity numbers for gaming, which opens up a convenient opportunity to ban cheaters at the “soul” level. It is remarkably effective at keeping them out of game for longer periods of time—cheaters have to buy whole new identities to keep playing, so the bans really stick.

doikor··on How Riot Games is fighting the war against video game hackers
The DMA card still needs to be installed, have drivers installed, firmware, etc. The anti cheat tests for that (the cheaters do mask the device spoofing the name/vendor/etc). Having to make new driver/firmware every time the anti cheat starts to detect it is way slower then just new software. Though at some point they will probably just automate it so that every customer gets their own driver and firmware matched with only their cheat software making this way harder but we are not there yet (and you would have to get all of these signed so following the cert chain should make it easier to find at least whos stolen cert they are using)

Also the amount of people willing to buy another pc and DMA cards is way smaller making the chance of running into cheater in your match smaller.

doikor··on How Riot Games is fighting the war against video game hackers
So just because lock picking lawyer can pick the locks at your home you should just get rid of the locks? (and maybe even the doors too)

Making it hard enough is good enough. The difference in 1% of games having a cheater and 5 or 10% is massive in the player experience.

doikor··on How Riot Games is fighting the war against video game hackers
I play both and in my experience Valorant is way better. Better as in "less cheaters" not "better game".

Though as I understand the amount of cheaters in both games varies based on how high/low in the ranked rating you are.

doikor··on How Riot Games is fighting the war against video game hackers
That is what you use behavior detection for. If you don't give human like inputs from the cheat it is detectable and if you limit yourself to what a human can do then the cheat is not very desirable.

> “You have to humanize [the cheat] to a degree where the advantage is imperceptible from what a human can do,” said Koskinas. “And once you’re there, you’re not really cheating enough to make it worth it for most users.”

But if you read the article they do have some way to detect (some) DMA based hacks too where the actual cheat runs on a different computer and use DMA through a pci-express card to read/write directly into memory.

> “I think we detect the majority of it today, but it’s kind of iterative,” said Koskinas.

Though most cheaters "rage cheating" after losing really badly and using cheats to "get back" and those are much easier to detects. This kind of "download random cheat from the internet" at the best only get you banned and at worst your computer is super duper hacked (you are effectively manually downloading a virus and manually giving it admin/kernel level access)

> Thanks to all these techniques and strategies, most cheaters can now be roughly divided into two categories. The first, representing the majority of cheaters, is made up by those who are “rage cheating” by using cheap tools that are easy to detect. Riot employees sarcastically call these cheats “download-a-ban,” according to Koskinas.

At the end of the day all I know from my own experience is that the difference in the amount of cheaters I run into between Counter Strike and Valorant is massive and the main claimed difference being kernel level stuff in Valorants anti cheat (or Valve is just really really bad at making anti cheats)

← PreviousPage 3 of 28Next →