HNHacker News
TopNewBestAskShowJobs

temporarrry0923

76 karma · joined August 8, 2021

sourcepwned

hi eso, rat, and u2

submissionscomments
temporarrry0923··on Google owns TLDs: .web .meme and .lol
https://en.wikipedia.org/wiki/Kiwi_Farms

> Kiwi Farms, formerly known as CWCki Forums, is an American Internet forum dedicated to the discussion of online figures and communities it deems "lolcows" (people who can be "milked for laughs"). The targets of threads are often subject to doxing and other forms of organized group trolling, harassment, and stalking, including real-life harassment by users.[2][3] Harassment stemming from Kiwi Farms has been implicated in the suicides of three people targeted by users of the site.[9]

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
I can't see that taking off at scale, but certainly in the semipro level it would be used.

Besides, I know like 90% of cheaters are 14 year old kids who used the first google result because it's so easy to. Any resistance and that'll stop a majority

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
Absolutely nothing would happen. I actually did report a few of the accounts just to see what happened and to this day no ban
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
>Couldn't figure it out or didn't figure it out?

I've reported bugs to the VAC email and they were patched a few weeks later, so maybe they do try? I really can't think of a reason WHY they neglect VAC willingly..

>As we speak, there are probably public cheats in existence that won't be banned for at least another two years.

Yep, I used to help maintain a free one on github, the traffic was in the tens of thousands. Been UD for 2+ years (and it's a fork of another, which was UD for 2+). All because we use Java and VAC never started scanning the JVM.

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
>as if it's hard to detect spinbotters

Valve couldn't figure it out for years and years.

Subtle cheats are absolutely a problem, but far less of a problem for the average new non-prime or fresh trust-factor player than a rage botter

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
Only with external third parties like Faceit/ESEA. Not normal matchmaking
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
>Even if kernel anti-cheats worked perfectly, they still wouldn’t be able to detect newer hardware based cheats which run entirely on a second PC leaving nothing for a kernel level anti-cheat to detect.

If it got to this point, to continue your metaphor, the mouse is nearly extinct. The point is not to eradicate cheating, it's to stop the bleeding. Valorant cheats don't even have to do this btw (really only necessary for incredibly extreme cases, see lohousedev and sparkles' video)

Do you know how easy it would be to stop 90% of cheating, at least for a few weeks, in CSGO? It's so easy I figured it out by dumping cvars with a server plugin when I was 14. There is zero way for a legitimate player to have certain cvars set, only a cheat would; yet, cheating is still a massive problem in CSGO.

VACnet has been actually really good, so I agree that that's a better avenue. In addition I am still against kernel AC's (speaking as a legit player, not as an ex-cheater). But the cat-and-mouse game is effectively over if 95% of the mice die.

Valorant's cheating is NOWHERE NEAR csgo. Someone I know on Valorant's AC team actually said they're ramping up (vaguely) so fingers crossed?

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
For sure in other games, yeah. Newell is opposed to kernel anti cheats, though, so probably not in CSGO. But other games now look at CSGO and make kernel AC's a selling point (literally Valorant's selling point), so yeah.
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
Yeah I actually almost worked with a ESEA cheat provider that did exactly this. It was a hypervisor that ran the kernel-AC within it. It really subverted my expectations, if you will ;)
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
It's not about stopping cheating, it's about stopping the bleeding. Some games have a horrendous cheating problem
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
Faceit is really good for an anticheat. It's just that the skill floor is too high to encapsulate casual users, otherwise it would probably kill matchmaking. Cheats cost $60+ and cheat providers get killed often by detection waves
temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
VACnet catches the spinbotters and aimbotters! Actually really good at it too; everyone who did that now just cheats less hard.

The biggest problem was: It didn't auto ban, just sent to overwatch (players watch a past game and vote for cheater or not, fully anonymized). This resulted in a massive clog when some guys I knew generated around 10k free steam accounts (with $3.5 of proxies), began queueing a few dozen at a time, rage cheating. A hell of a lot of games can be botted with free accounts and a beefy (server IIRC) rig; I think he told me he had about 100 accounts running normally in 10 separate Competitive games all against his own bots(rendering at 2x2 resolution so it ran okay, with cheats injected). They all got sent to overwatch but because so many games were being put through overwatch, the queue got overloaded.

This is called Vertigo boosting, because the bots all queued for Vertigo, an unpopular map, to increase odds that only their own bots would be in the game (and, coincidentally, minimize collateral damage to legitimate players). (though it's normally to rank up accounts, not to spam ow queue)

Hi eso :p

temporarrry0923··on Call of Duty Adds Kernel Level Driver for Anti-Cheat
100% this. Coming from someone who made one myself :p if everyone had to do it to cheat, cheating would be OVER at a casual level, and a minor issue at semipros/pros (even irl tourneys can be hacked! see forsaken).
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
That's a small fraction of all cheaters. I was a dev of a free open source cheat and our download rates were insane.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Absolutely, it's a bezier curve with some random noise, I oversimplified.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
>climbing rapidly up rankings (in a 3rd party ladder) is going to be very suspicious

Hard agree here. There's always been people accusing semipros of cheating (see r/VacSucks for more) though, so unless it was pretty concrete, it wouldn't mean anything.

>And if the humanization is so good that it can literally never be detected

It's not that the humanization is good, it's that the cheat is poorly designed enough to be only as good as a really good consistent human. Though you're right that it's not going to be the holy grail.

>The only way to be totally sure are if the game is played on a LAN and the equipment is sufficiently controlled.

Hard agree as well. I've been hoping for online majors to be called off, but alas.

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Very true. I wasted hundreds of hours doing this, if it takes an extra hour to do, cheating would drop overnight
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
>If it's truly identical to aiming by hand, it won't help you

Except it's identical to incredible aiming (yet human) skills, which I do not have ;)

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
If there's one thing that all cheaters have in common, it's an inflated ego. If the enemy is cheating, and half your teammates are, and it's casual, you're gonna toggle on harder. There is no way to get banned in casual, unless it's by VAC, in which case you already have it injected so it doesn't matter.

You are right, though; my estimate is just personal experience

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
I mean, it has fog of war, yes. It's not as good or strict as it could be. I have seen discussions with the devs and they say that if it is more "strict" (ie hiding player positions until they are closer) would be more taxing on CSGO servers, AND would screw with high ping players (they would experience pop-in).

Check out https://edan.gg/defender to see the comparison between CSGO and a better FoW system.

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
I wish I could reply to this with a rallying cry for you to keep trying. But it's true, every 14 year old kid with a keyboard can cheat in competitive now.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
>I'd like to see an industry standard anti-cheat root-kit developed as a publicly reviewable open source project at the very least

An anti-cheat is one of the few areas that truly would ruin its security by going OSS. A cheater can quickly enumerate every method the AC uses to detect cheats, then they know EXACTLY which goalpost to kick into, per-se. 85% of Vanguard's effectiveness is their CONFUSING ban protocols, whether that's delaying a ban to confuse someone testing what's bannable, not divulging details about what avenues are tested, constant updates that aren't specified anywhere, etc.

Case in point, even in CSGO: Just changing the offsets of some game values will break some cheats for several days.

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
>You can't prevent the client from auto-aiming or knowing the enemy player position behind a nearby wall

Valorant and Edan.gg's defender [1] has the best fog of war system I've ever seen. CSGO has probably the worst; in fact, at one point, the game had NONE and sent player pos's to everyone at all times.

I completely agree, but there are a lot of server-side mitigations that haven't been nearly as explored as I'd hope.

[1]: https://edan.gg/defender

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Pretty well. It doesn't shoot through them, because it can't see through them. Sometimes it aims/shoots through them somewhat early before it dissipates completely, because rxn time is way faster than a human. But it's close enough to not be suspicious.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Yeah, that's understandable. If one of my friends were cheating I think it would be obvious what to do.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
VACnet hurts cheaters, and also probably 25% of legits as well. In low trust this can be verified pretty quickly. Even in the gutter of trust, redder than red, you still have about 50-60% of players cheating. That's nearly half of everyone in the WORST trust factor of the game, who are there while not cheating. Though some are probably griefers/mic-spammers/toxics, it's certainly not all of them.
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
I do know this, personally. EAC is not great. They sort of stay on top of things compared to something like CS but it's still possible to get away with it for a few months if you do it right
temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Does popflash.site have an AC? I didn't have a problem last time I tested it.

I think your server could check for several cvars that are only enabled for cheaters using some cheats, to auto-ban them. Though this precludes externals and some better internals.

temporarrry0923··on Epic launches anti-cheat support for Linux, Mac, and Steam Deck
Or worse machine-learning-to-bounding-box that takes the video stream through HDMI, identifies character heads, intercepts the USB HID mouse, and injects movement commands to move the center of the screen towards the nearest "head". Literally (not nearly) impossible to detect, there is no difference between this and just aiming by hand. The video is already out of the box, and the USB HID packets look the same as the real mouse's commands.

I spent about two months creating training data for this and it now runs smoothly on a sister PC with a capture card. I gave up because I got bored (and perhaps felt guilty about cheating) but I wholeheartedly believe I could have played top 500 region online matches and gotten away with it, as investigations usually trigger manual DMA checks by ESEA/Faceit mods, and a manual ("automated") ban in that case. But there is no DMA in my setup. The only way to get banned would be to play stupidly and obviously cheat, and to be honest that's a plus of my setup: the neural network is not perfect, so the aimbot can't be perfect. Like a built-in humanizer.

temporarrry0923··on Turning the tables on chess cheating?
I was a kid who always would try to break every system I came across, no matter what it was. I disassembled our FiOS fiber box when I was 11 just to see if I could get us onto the 1Gb plan somehow. I bypassed the "free beta over" modal on a major photo retouching program to get myself free $99 license keys when I was 12 (inspect elem ftw). I was just always in this mindset of "how do I get around this" even if there was literally nothing of desire behind it.

So naturally when it came to anti cheats, I spent a lot of time reverse engineering and had the same mindset. I never cheated against others in a way to benefit; sometimes to just troll, sometimes to joke around with friends, and occasionally I would be a dick to others who were being a dick as well. I started developing and contributing to other cheats and talking to other programmers as well. I still have a lot of the contacts, especially the people that sell thousands/$ cheats that get used by top 100 in country players (not pro, but tournament players)...

But I will be honest. It got really painful when I realized cheats that I contributed to were being used against my favorite youtubers. I know it sounds stupid, almost like doublethink, to watch and enjoy famous youtubers who vehemently attack cheaters while cheating myself. But in Tom Scott's words [0], "everyone draws the moral line of what's acceptable just slightly below what they're actually doing". But I've nearly entirely given up with playing the game because I have found far more enriching uses of my time, than doing something that actively harms so many people.

[0]: https://youtu.be/OCLaeBAkFAY?t=280

Page 1 of 2Next →