News for hackers. Stuff that matters.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by pstrateman on Thursday September 23, 2021 @03:51PM (#28634356)
Sure except EAC doesn't work, even on windows with the full kernel rootkit installed.

Money back guarantee SaaS cheats are like $10/month that are undetected by EAC.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by AustinDev on Thursday September 23, 2021 @03:54PM (#28634398)
And those aren't even cheaters using a full DMA module and separate PC which is nearly impossible to detect if done properly.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:12PM (#28634631)
Or worse machine-learning-to-bounding-box that takes the video stream through HDMI, identifies character heads, intercepts the USB HID mouse, and injects movement commands to move the center of the screen towards the nearest "head". Literally (not nearly) impossible to detect, there is no difference between this and just aiming by hand. The video is already out of the box, and the USB HID packets look the same as the real mouse's commands.

I spent about two months creating training data for this and it now runs smoothly on a sister PC with a capture card. I gave up because I got bored (and perhaps felt guilty about cheating) but I wholeheartedly believe I could have played top 500 region online matches and gotten away with it, as investigations usually trigger manual DMA checks by ESEA/Faceit mods, and a manual ("automated") ban in that case. But there is no DMA in my setup. The only way to get banned would be to play stupidly and obviously cheat, and to be honest that's a plus of my setup: the neural network is not perfect, so the aimbot can't be perfect. Like a built-in humanizer.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by eertami on Thursday September 23, 2021 @05:03PM (#28635350)
>I wholeheartedly believe I could have played top 500 region online matches and gotten away with it

Unless you were already near the top, climbing rapidly up rankings (in a 3rd party ladder) is going to be very suspicious. Draw enough attention and I think it's not unlikely someone would find evidence (not evidence of how your system works, but video proof that shows cheating).

And if the humanization is so good that it can literally never be detected... then better players with more knowledge and game sense will consistently still win. You'd need to be a good player in the first place - which is actually where the danger lies. A pro player with an undetectable cheat they can toggle on momentarily, even just once a series at a crucial moment, could make all the difference.

I've given up relying on technical anti-cheat solutions for online games. If it is apparent someone is cheating by watching them play then that's enough for me (and I've seen some _very_ subtle cheaters get banned from leagues for the most minor of slip-ups.) The only way to be totally sure are if the game is played on a LAN and the equipment is sufficiently controlled.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @05:30PM (#28635734)
>climbing rapidly up rankings (in a 3rd party ladder) is going to be very suspicious

Hard agree here. There's always been people accusing semipros of cheating (see r/VacSucks for more) though, so unless it was pretty concrete, it wouldn't mean anything.

>And if the humanization is so good that it can literally never be detected

It's not that the humanization is good, it's that the cheat is poorly designed enough to be only as good as a really good consistent human. Though you're right that it's not going to be the holy grail.

>The only way to be totally sure are if the game is played on a LAN and the equipment is sufficiently controlled.

Hard agree as well. I've been hoping for online majors to be called off, but alas.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by emsy on Thursday September 23, 2021 @05:43PM (#28635903)
>Unless you were already near the top, climbing rapidly up rankings (in a 3rd party ladder) is going to be very suspicious.

smurfs are as old as competitive games, so I doubt it.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by babypuncher on Thursday September 23, 2021 @05:04PM (#28635367)
Once you start requiring external hardware setups like that, I think the barrier to entry for cheaters becomes high enough that they become far less prevalent.

The goal of good anti-cheat should never be to eradicate it entirely, since that is obviously impossible. You just need to make it so the vast majority of players rarely encounter it.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @05:27PM (#28635680)
Very true. I wasted hundreds of hours doing this, if it takes an extra hour to do, cheating would drop overnight
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by sudosysgen on Thursday September 23, 2021 @08:20PM (#28637228)
People already pay hundred of dollars for cheats. I don't think it would make that much of a difference.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Friday September 24, 2021 @10:21AM (#28642798)
That's a small fraction of all cheaters. I was a dev of a free open source cheat and our download rates were insane.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by sudosysgen on Friday September 24, 2021 @12:20PM (#28644493)
Perhaps, but that doesn't change the fact that video game cheats are a billion dollar market.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by cooljacob204 on Thursday September 23, 2021 @04:37PM (#28634996)
To be honest I have completely given up on competitive fps games. The cheating situation has only gotten worse and I really don't see anti-cheat makers winning.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by horsawlarway on Friday September 24, 2021 @08:54AM (#28641655)
This is mostly where I am.

I was 4 when the first DOOM came out, 7 when Quake was released - I LOVE me some fps games.

But I don't find playing online fun anymore - The first 3 days are great, then you've ranked up a bit and start hitting the rampant cheating, and you realize it's just a waste of time sitting for 20 minutes in a game where some 12 year old (or much worse, some 30 year old) has just bought hacks to feel good.

To be honest - I actually blame the automated matchmaking systems more than anything else.

Give me the good ol' server lists back, where a real person is an admin, and you can make a group of friends. This monotonous, automated, matching bullshit sucks the soul out of most games. It's not fun anymore, it's designed to be a chore to prove that you're "better", with an intentionally game-ified rewards systems built to trigger gambling impulses.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by AustinDev on Tuesday September 28, 2021 @02:34PM (#28685950)
I'm grave digging a bit with this reply... but I was around the same ages as you maybe a bit older at all those releases. The only satisfying time to play big name competitive PVP FPS is during Beta periods and the first few weeks after launch. However... I've found satisfaction for my FPS itch playing games like 'Squad' it's very niche I have my servers I subscribe to for a few dollars a month and sometimes on 'free weekends' we'll have 3-4 a night but admins ban them within a minute. Cheating is rarely a problem in niche harder to play / enjoy games but comes with a time commitment cost. I'd be embarrassed to say how many hours I have in that game but let's just say it's more than 500 hours in ~6 years.

Another good niche game with virtually non-existent cheating is Midair. It's mostly old-school FPS players reliving their Tribes days with good admins global banning the rare cheater.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by deepsun on Thursday September 23, 2021 @05:16PM (#28635549)
Play with friends only, like in good-o-days.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:38PM (#28635018)
I wish I could reply to this with a rallying cry for you to keep trying. But it's true, every 14 year old kid with a keyboard can cheat in competitive now.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by BitAstronaut on Thursday September 23, 2021 @08:19PM (#28637217)
How does Stadia play a role in this? I don't play video games outside of Football Manager so not knowledgeable in the area but I recall reading about the competitive scene of one of these games moving over to the service due to the cheating.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by woobilicious on Thursday September 23, 2021 @09:12PM (#28637557)
I think it would kill the scene, Stadia is anti-performance, it's a video feed streamed over the internet, with all the problems associated with processing on a remote computer, the primary motivator for high refresh rate monitors and low latency input is FPS games I would assume, so going from sub 10ms end to end latency to a 40ms latency on a perfect connection, I just don't see it being accepted.

As an aside it's recommended to keep latency under 20ms to stop motion sickness in VR.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by phone8675309 on Friday September 24, 2021 @12:20AM (#28638589)
If only there were a way to play the single player parts of shooters without the intrusive anti-cheat...

Singlehandedly killed my desire in multiple games.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by stubish on Friday September 24, 2021 @03:50AM (#28639679)
Developers can support this, if they want. Conan Exiles guides you to install the 3rd party anti-cheat, but you can opt out and play single player fine or even multiplayer on servers that allow it.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by nawgz on Thursday September 23, 2021 @05:31PM (#28635746)
As a former CSGO player who would've said this previously... Valorant is impressively legit
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by horsawlarway on Friday September 24, 2021 @09:12AM (#28641831)
As someone who was really into CSGO, I can tell you the cheating just gets more subtle.

Up near LE/LEM ranks - no one is using the obvious hacks anymore. Instead it's things like a small autosnap radius for heads (ex: mouse within 3px of a players head? snap to head on fire), auto-recoil control, and map awareness hacks (4 went A, we go B)

It's a similar problem in Valorant - the goal of the cheater in the higher ranks is to get an unfair advantage with just enough of a cheat to leave the other players wondering if they actually cheated at all.

Hell - there are actually hardware cheats now - ex: mouse that will handle recoil for you in these games now.

It's destroyed my interest in the competitive FPS genre entirely.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by AustinDev on Tuesday September 28, 2021 @02:35PM (#28685959)
What about all the DMA radars? My buddy in Malta is making a ton of money selling them. It's not aim bot but full map knowledge can be very powerful.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by tester756 on Thursday September 23, 2021 @05:32PM (#28635754)
>Literally (not nearly) impossible to detect, there is no difference between this and just aiming by hand. The video is already out of the box, and the USB HID packets look the same as the real mouse's commands.

doesn't "line" made of mouse coordinates look oddly for human?

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by PoignardAzur on Thursday September 23, 2021 @05:49PM (#28635990)
At this point, I'm pretty sure any "human" pattern machines can find, other machines can fake. Simulating how a human would move a cursor towards a position definitely seems like something deep learning could approximate for cheap.

Naive aimbots will still have some artifacts (eg jumping to a new target as soon as the current one is occluded), but making an undetectable aimbot really doesn't seem hard, given the incentives involved.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @05:42PM (#28635893)
Absolutely, it's a bezier curve with some random noise, I oversimplified.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by tester756 on Thursday September 23, 2021 @05:43PM (#28635919)
> random noise

I thought about randomness, but cannot randomness be detected?

e.g you add +- 5 pixels horizontally/vertically

so with 30min game sample cannot it be detected? e.g when collecting only when enemy is on screen

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by jay_kyburz on Thursday September 23, 2021 @07:10PM (#28636768)
The hosts are so cheap they wont do a raycast from a player to an object to see if its in line of sight, they are not going to try and scan your input looking for randomness.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by woobilicious on Thursday September 23, 2021 @09:30PM (#28637671)
You're downplaying how genuinely hard it is to do server side stuff on a game with 60+ players, a lot of this stuff is O(n^2), and the bottle necks is network packet sizes as well where players will start to complain about packet loss because they play on WiFi connection with someone else who watches YouTube or Netflix.

Apex legends does in fact do fully simulated bullet dropoff server side with temporal rewinding, and it doesn't stop hackers from just shooting you with 99% accuracy.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by jay_kyburz on Thursday September 23, 2021 @11:33PM (#28638335)
Its not _hard_ its $$$ expensive. You'll need bigger processors and more servers. I mean, I guess its _hard_ to choose what compromises to make, but not technically hard. Anyhow, I'm no expert.

The solution to competitive gaming is streaming, not anti-cheat. Everybody gets the same resolution, same frame-rate, same latency. Fair is fair.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by novok on Friday September 24, 2021 @02:21AM (#28639187)
Honestly think it's game consoles with keyboards and mice that are bound to proprietary crypto protocols, much like the anti-piracy that the current xbox has. Can't do video stream HID interception unless you make a robot, and you've just raised the barrier of entry so high to get rid of %99.9 of it. And in pro matches you can just watch them in person.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by AlexAndScripts on Saturday September 25, 2021 @11:22AM (#28653821)
Unless you make a robot... Or you connect some wires to the sensors for the joystick.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by novok on Saturday September 25, 2021 @01:21PM (#28654721)
The point of crypto locked controllers made by and for the manufacturer's console is that tampering will cause the device to refuse to run. Which leaves you at a robot to physically manipulate the device as I said. Since it doesn't have to be an standard like HDCP, this can be locked down pretty well like the xbox one is. [0]

At that point the barrier to entry would be so annoying that online cheating will be reduced significantly, and pro tournaments will be done in person to let you prevent usage of robots. Also everyone will be using the same equipment probably provided by tournament organizers.

[0] https://www.youtube.com/watch?v=U7VwtOrwceo

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by exporectomy on Thursday September 23, 2021 @05:07PM (#28635408)
Congratulations on your fun project. Be careful about "literally impossible" though. If it's truly identical to aiming by hand, it won't help you. If it isn't, there might be some statistical (in)consistency that's detectable with enough play.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @05:26PM (#28635672)
>If it's truly identical to aiming by hand, it won't help you

Except it's identical to incredible aiming (yet human) skills, which I do not have ;)

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by exporectomy on Friday September 24, 2021 @09:59PM (#28649770)
What if some person or algorithm notices that you don't have those skills while walking or shooting at other body parts - only at heads? That's the kind of inconsistency I'm talking about. Or what if the nature of the mouse movements is consistently a little different between the AI and yourself?
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by oliwarner on Friday September 24, 2021 @04:10AM (#28639792)
Physical aimbots are a much fairer cheat than picking apart the render pipeline to see through walls. A good player can still beat them.

I'm not saying I'm for any sort of cheat, including the built-in aim-assist for people who choose to play with a controller, but if I absolutely had to play against an unknown number of cheaters, I would prefer they were at least playing with the same deck as me.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by subw00f on Thursday September 23, 2021 @04:17PM (#28634692)
Just out of curiosity, how does it fare with smokes?
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:25PM (#28634810)
Pretty well. It doesn't shoot through them, because it can't see through them. Sometimes it aims/shoots through them somewhat early before it dissipates completely, because rxn time is way faster than a human. But it's close enough to not be suspicious.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by phendrenad2 on Thursday September 23, 2021 @03:55PM (#28634420)
You know this? You've personally tried them? Or is this secondhand, thirdhand, hypothetical knowledge? It seems to me that anti-cheat works the same way DRM works: It poses a barrier to entry that keeps NN% of people who would hack from hacking, which is sufficient to keep the game from becoming a hacker cesspool.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by switz on Thursday September 23, 2021 @04:11PM (#28634621)
As someone who runs an online Counterstrike platform, I can attest to this firsthand. There are literally dozens of open source cheats on Github that bypass the major anticheat services. And when one gets detected, they're usually updated in just a few days. For private paid cheats, they're very rarely detected. I've heard of people paying thousands of dollars for custom-built cheats that have gone years and years without being detected.

The cheating in the game is out of control and has been for half a decade. People still play and can find little pockets to play in to avoid cheaters (namely playing with friends or on paid services, that cut down on cheating due to the barrier to entry of cost), but it's inevitably unavoidable to consistently run into cheaters

My approach has been to run no client anti cheat outside of that built into the game (VAC), as I don't believe invading people's privacy (e.g. always-on kernel level detection) for the illusion of reducing cheating is worth it. There are better ways of hindering cheating than on-client detection, in my humble opinion.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by donkarma on Thursday September 23, 2021 @04:16PM (#28634677)
You're talking about VAC, which is not even close to the same tier as EAC, there are no "open source cheats" that bypass the major anticheat services because they are quickly identified and patched.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by switz on Thursday September 23, 2021 @04:22PM (#28634755)
Correct, VAC is very different than EAC. But it's absolutely not true that there are not open source cheats that bypass EAC, FaceIT, and ESEA. The more popular ones get patched, but I've seen a bunch of smaller ones that do not get detected – you just have to know how to find them. They may eventually get detected, but cheaters generally will just create a new account and start cheating again.

When my platform launched 6 years ago, we were the first to approach the problem of preventing cheating via non-invasive methods. We required you to have played several hundred matches in-game before being allowed to join our platform. ESEA, who are widely considered to have the best client side CS:GO anti-cheat, just recently implemented something similar, proving that clientside anticheats alone don't solve the problem.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by zamadatix on Thursday September 23, 2021 @05:46PM (#28635961)
> They may eventually get detected, but cheaters generally will just create a new account and start cheating again.

Typically games will either avoid putting low play count players in the pool with established or paying players. Both because they don't want the guy playing for the first time to be constantly creamed by heavily invested players which would drive them off but also because real time and real dollars are strong deterrent to most and at least an extreme slowdown to the remaining. The net result of anti-cheat is to make it unviable to continually cheat, not to never have hacks that temporarily work.

CS's problem is Valve has shit anti-cheat that doesn't really care to detect cheaters and even when it does it doesn't have strong new player segmentation to delay them from coming back. Both of these are reason's Valve is lax with cheaters not reason's anti-cheats aren't effective.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by kflzufkrbzi on Thursday September 23, 2021 @06:18PM (#28636310)
Making new players play together with cheaters for a long time sounds kind of bad too
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by zamadatix on Thursday September 23, 2021 @09:57PM (#28637830)
You probably won't be in there for long, if ever, if you're a standard new player. It's a factor most serious anti cheats consider, not the only factor.

That is you came in on an account that had existing game time or existing purchases or you hop on with a friend in good standing or you bought something in game or anything to indicate your account is actually valued by a legitimate player in some way you won't even see this process.

On the other hand if you're a fresh account with 0 time, 0 spend, and the only people that will friend you are accounts that accept every request or are known for accepting new cheaters expect you aren't just going to be dumped into the clean player pool on your first night. Not only are you the hardest type of player to prevent false positives for but you're the least likely to ever be profitable to server anyways.

Even if you aren't immediately uplifted some strategies mean you may not care if your initial nights had a higher risk of cheaters anyways matter. E.g. Fortnite is F2P but your first night you aren't likely to run into many real players. Both because they want you to get some wins to get hooked but also because it dilutes the amount of cheating new players will see.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by lrae on Thursday September 23, 2021 @04:23PM (#28634776)
> There are literally dozens of open source cheats on Github that bypass the major anticheat services.

Do you have links for EAC & FACEIT?

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:14PM (#28634660)
Does popflash.site have an AC? I didn't have a problem last time I tested it.

I think your server could check for several cvars that are only enabled for cheaters using some cheats, to auto-ban them. Though this precludes externals and some better internals.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by switz on Thursday September 23, 2021 @04:17PM (#28634701)
Sorry, I edited my comment after you asked. We don't have an "anti-cheat" in the traditional sense, though I've developed a few solutions to curb cheating in the past. Fortunately, it's not really a problem I've had to solve because I only offer scrimmages these days, meaning you choose who you play with. If I were to offer matchmaking, I'd be more liable to prevent cheaters from using the platform since I would be matching up people to play with.

Since my users are mostly just playing friends I don't really have rampant cheater problems like other services.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:21PM (#28634738)
Yeah, that's understandable. If one of my friends were cheating I think it would be obvious what to do.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by mrmuagi on Thursday September 23, 2021 @05:28PM (#28635706)
That's not really what DRM IMHO -- sure it says that on the tin... Once the video or game is cracked once, the DRM is done. It just provides hurdles and extra barriers for the first person. Once somebody finds a "hack" method that works, they can clone and resell it up until their greed belies their customer's wishes of being undetected due to small player pool using the hack.

And yes, hacks are "rootkits". It's kind of funny how they work. Some of them work at the memory level, or packet level. They require you to disable anti-virus, all firewalls, etc. The only incentive for them not to hack the user is a recurring subscription cost that's often more expensive than the game itself (leading to rage hacks where they are known to detected but the delay in detection-ban lets the user play still and farm RMT items).

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:15PM (#28634669)
I do know this, personally. EAC is not great. They sort of stay on top of things compared to something like CS but it's still possible to get away with it for a few months if you do it right