News for hackers. Stuff that matters.
Re:Riot Games Approach to Anti-Cheat by reificator on Tuesday July 17, 2018 @08:51PM (#17554807)
Sure. Until you're playing Dark Souls for the first time, you get summoned to help someone with a boss, and then get invaded by someone with a 360 degree one-shot kill spell that breaks all your weapons and armor, gives you an egghead that you can't remove unless you know where to go, and gives you an item that marks you as a cheater so you now get constantly invaded by exclusively cheaters.

The item that marks you as a cheater might have been a drop in another invasion, I don't remember. The point remains, once the cheaters realize you have a separate cheaters' matchmaking system, they will weaponize that too.

Re:Riot Games Approach to Anti-Cheat by dkersten on Tuesday July 17, 2018 @10:08PM (#17555092)
> The item that marks you as a cheater might have been a drop in another invasion, I don't remember.

I believe they can do it completely passively, so you’re kinda screwed if it happens to you :( This is sadly the nature of trusting what clients send you: a hacked client can send whatever it wants and the “anti cheat” in Dark Souls sadly seems to simply just check if an item should be possible, meaning a cheater can trick the game into punishing non-cheaters. Luckily this hasn’t been a problem for me on console, but it certainly does suck on PC :(

Re:Riot Games Approach to Anti-Cheat by reificator on Wednesday July 18, 2018 @06:31PM (#17562578)
And of course, if it didn't punish non-cheaters, then cheaters could simply cheat the items in on one account, invade/summon another of their own accounts, (or passworded summon in the remaster) and then give the new account the items.

There's no winning against cheaters as long as you trust the client. (And it's possible to do it on consoles too, just more rare as the tools are readily available on PC.)

Re:Riot Games Approach to Anti-Cheat by dkersten on Thursday July 19, 2018 @08:19AM (#17565548)
> There's no winning against cheaters as long as you trust the client.

Indeed.

> And it’s possible to do it on consoles too

Sure, but the barrier to entry is higher, so its not done as often. I’ve never noticed someone who was obviously cheating (which doesn’t mean I’ve never encountered any, but if I have, they’ve never been so severe as to do the things mentioned here or for me to notice it)

Re:Riot Games Approach to Anti-Cheat by Buge on Thursday July 19, 2018 @02:15AM (#17564240)
That seems to be a completely different type of cheat than described in the article. The article is just about cheats that automate certain moves that players would already be able to do, just would be very hard. It's not possible to stop this type of automation in the general case.

If a cheater can make items appear out of nowhere, that's not an automation cheat, that's a security vulnerability in the server that should be fixed.

Re:Riot Games Approach to Anti-Cheat by reificator on Thursday July 19, 2018 @11:28AM (#17567212)
My understanding is that the server is not for realtime. Realtime gameplay is peer to peer.
Re:Riot Games Approach to Anti-Cheat by Buge on Thursday July 19, 2018 @11:05PM (#17572139)
That sounds like a completely different system than League of Legends has. So hellbanning should work fine as suggested (it was suggested for League of Legends).

Other games that use (IMHO) broken protocols by trusting the client can't reliably use hellbanning, and I don't think they can reliably do anything.

Re:Riot Games Approach to Anti-Cheat by reificator on Monday July 23, 2018 @12:14AM (#17590537)
But the realtime gameplay is where the cheaters are giving other clients items in order to mark innocent players as cheaters.

So everyone's getting hellbanned, at which point no one is hellbanned...

Re:Riot Games Approach to Anti-Cheat by Buge on Tuesday July 24, 2018 @11:37PM (#17606755)
I'm saying that a game where the server isn't in the middle is broken, and cannot implement hellbanning.

League of Legends has a server in the middle, thus isn't broken, players can't give each other fake items, and hellbanning will work.