News for hackers. Stuff that matters.
Re:Thank You, Valve by parkingrift on Monday February 07, 2022 @09:14AM (#30245095)
This is why anti-cheat should be performance based. Build a model based on the way that verified elite players play the game, and their performance. Compare “normal” players against the model and look for outliers. Manually review accounts that look suspicious.

Cheat behavior is obvious. Ridiculous long distance accuracy. Weird movement. Weird map awareness. Weird awareness of other players. Etc.

Re:Thank You, Valve by steadyready on Monday February 07, 2022 @09:33AM (#30245366)
They did make one. It was called FairFight[1] and was mainly used by EA in the Battlefield franchise. It also was a dumpster fire: bans were applied to legit players all the time, moderators were overwhelmed and manual review took too long and many times resulted in nothing.

Behavioural anti-cheats are not the answer. Implementations are crap and under-developed, and I don’t blame them: you would need tremendous (server-sided) power to correctly process the models considering how complex multiplayer games are, and it just isn’t worth the investment and complexity to them.

It’s just cheaper to pay rootkit developers (like EAC or BattlEye) and knowingly infect client devices. Hell, their drivers are even WHQL signed by Microsoft. And when false positives hit? Just blame the anti-cheat vendor. Potential HR problem dodged.

[1] https://www.i3d.net/products/hosting/anti-cheat-software/

Re:Thank You, Valve by crtasm on Monday February 07, 2022 @09:58AM (#30245684)
Valve do this, here's a good talk:

Robocalypse Now: Using Deep Learning to Combat Cheating in Counter-Strike: Global Offensive https://www.youtube.com/watch?v=kTiP0zKF9bc

Re:Thank You, Valve by jampa on Monday February 07, 2022 @11:33AM (#30247110)
As a former CSGO player (not a very competitive one) this trust factor really sucks, and Valve oversells it.

If you play with lower ranked friends and do really good in matches you will get reported a lot which will tank your trust factor and almost guarantees it that will only see hackers from them on.

They say they use other factors like account metadata, but I have a 10 year old account, with purchased games and verified phone and still got "Low Trust Factor" after playing with friends and started to have an obvious hacker every other match.

That is why I am a former CSGO player

Re:Thank You, Valve by pbhjpbhj on Monday February 07, 2022 @10:33AM (#30246210)
This is kinda weird, CSGO has spinbots and xp-farming bots: one moves faster than is humanly possible, the other moves on the spot or in a circle with exact constant rotation ... the only conclusion I can make is CSGO want these bots, because auto-blocking them seems trivial.

Why use deep learning when so, so many bots (and their host accounts) could be blocked with trivial heuristics? My only guess is allowing spinbots/farming somehow provides a financial gain in CSGO?

Re:Thank You, Valve by enragedcacti on Monday February 07, 2022 @01:52PM (#30249263)
> My only guess is allowing spinbots/farming somehow provides a financial gain in CSGO?

Valve devs have a lot more leeway than your average developer. They honestly might have just thought it would be cooler.

Beyond that they now have the infrastructure to detect more subtle forms of cheating through deep learning using Overwatch (the reporting system, not the game) as ground truth data to train their AI.

Re:Thank You, Valve by scrollaway on Monday February 07, 2022 @09:19AM (#30245159)
Incorrect, there’s lots of cheats that are completely seamless and just improve your performance without being a completely binary “perfect headshot” vs “always miss” or something.

I guess your last encounter with aimbots was in the early 00s…

Re:Thank You, Valve by jclardy on Monday February 07, 2022 @10:05AM (#30245761)
The great part is many games have the aimbot built in. Players use a hardware dongle to make a keyboard/mouse look like a controller input, and the game applies aim-assist to the keyboard/mouse input.
Re:Thank You, Valve by merlincorey on Monday February 07, 2022 @11:51AM (#30247425)
You don't get mouse axis movement though -- it emulates it through a Controller stick so it's not exactly an ergonomic and mouse-like experience, from what I have heard.
Re:Thank You, Valve by parkingrift on Monday February 07, 2022 @10:27AM (#30246104)
Have you ever played Warzone? People sniping 700+ meters and they can't even see you on their screen. Obvious map hacks, aim bots, and even some hilarious shit like super speed or the ability to drive a car through walls to run you over.

Besides, it's not just a matter of improving accuracy. Elite players are elite in multiple facets of the game. Movement, general awareness, map awareness, accuracy, etc. Many of these metrics are easy to measure.

Cheaters will show up as outliers and it is at that point that their accounts should be manually reviewed.

With casual gaming I really don't even care if someone is "cheating" to improve so long as I feel the game was fair. I can put a red dot on my screen to improve my aim, as an example.

Re:Thank You, Valve by 0x7f5da9 on Monday February 07, 2022 @11:05AM (#30246662)
Warzone is weird. I can't understand why speedhacks, 'silent aim' (you can shoot in a direction different from your view angle) or flying cars are even a thing.

This was impossible in Q3A (1998) without introducing an input lag thanks to client side prediction. Server also didn't send you updates on other clients that are too far away, behind a hill - you'd pretty much only receive positions of those you could see, hear or that could see you. In Warzone, you can see everyone on the map with a wallhack.

I really wonder why the game is designed this way. I guess it might be to limit required computation power of the servers? They still do stuff like hit detection, so server surely has some idea of the physics.

On top of all that, this stuff is possible even today, months or even years after such exploits being widely known. They do have a kernel-level AC driver, but they don't even seem to detect trivial hacks from the server-side.

Re:Thank You, Valve by charcircuit on Monday February 07, 2022 @09:28AM (#30245293)
If other players can't tell someone is cheating then it's not actually a problem since everyone will feel the game was fair.
Re:Thank You, Valve by antoinealb on Monday February 07, 2022 @09:42AM (#30245473)
In competitive gaming, having an actually fair game matters more than having a fair feeling game.
Re:Thank You, Valve by ben-schaaf on Monday February 07, 2022 @10:11AM (#30245862)
In proper competitive gaming (ie. with a prize pool) you can apply much more rigorous standards like kyc, a live video feed; even standardized hardware and drug tests.
Re:Thank You, Valve by antoinealb on Tuesday February 08, 2022 @03:23AM (#30256056)
In magic the gathering, the standards are divided in three: casual (called regular), competitive and professional. Basically the competitive mode is for people who play the game to win, sometimes with small prizes, but still want a very clean playing field. I feel that the standardized hardware and drug tests are feasible at professional, but not competitive, and anti cheat rootkits is interesting in competitive.
Re:Thank You, Valve by kbenson on Monday February 07, 2022 @01:10PM (#30248688)
The area between thinking others are "absolutely not cheating" and "definitely cheating" is huge, and where most online gamers end up spending their time. Absolutely cheating is not a problem, because most games allow you to report people, and they'll get enough reports and be banned shortly. Not being able to tell is the problem, because you feel something was unfair (which you might also feel when it actually is fair), but you feel it more often and it leads to poor experiences and people quitting the game.

Cheaters quit after a while because the game loses its challenge, and people being cheated leave because the game.feela unfair, and eventually there's not much of a community left.

Re:Thank You, Valve by throwthere on Monday February 07, 2022 @09:47AM (#30245535)
Ah, the old Lance Armstrong argument.
Re:Thank You, Valve by meheleventyone on Monday February 07, 2022 @11:06AM (#30246674)
If you want to detect obvious cheating behavior shouldn't you train the recognition software on cheating behavior not elite players?