We outsmarted CSGO cheaters with IdentityLogger
1–10 of 372 posts
Re: We outsmarted CSGO cheaters with IdentityLogger
#2Feels disgusting with the hidden fingerprinting but very technically impressive!
Re: We outsmarted CSGO cheaters with IdentityLogger
#3Thinking about it, steam should force this on every game developer that has cheating problem (I am assuming mainly shooters), maybe implemented better fingerprinting way, giving developers options to hide cookies somewhere in folders of their choosing.
Re: We outsmarted CSGO cheaters with IdentityLogger
#4I am surprised VGUI browser shares cookies across Steam accounts. When I log out of my Steam account, switch to another one, launch the same game, I would have expected an entirely different datastore to be used for the VGUI browser.
Re: We outsmarted CSGO cheaters with IdentityLogger
#5Server side only anti-cheat is one of the problem domains that I'd really love to work on at some point in my career. This is the type of adversarial arms race that just seems really fun to think long and hard about.
Re: We outsmarted CSGO cheaters with IdentityLogger
#6> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them
This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.
Re: We outsmarted CSGO cheaters with IdentityLogger
#7Kudos to the author for using RFC5737[0] TEST-NET-2 address for:
> An example of an IPv4 IP address is 198.51.100.1.
Re: We outsmarted CSGO cheaters with IdentityLogger
#8> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.
Yeah, you would think they would rely on their secret cookie in that situation instead, to minimize false positives like that.
Re: We outsmarted CSGO cheaters with IdentityLogger
#9> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.
They addressed this in the section entitled "Problematic cases of IP address fingerprinting"
Re: We outsmarted CSGO cheaters with IdentityLogger
#10Kudos to the author for using RFC5737[0] TEST-NET-2 address for: > An example of an IPv4 IP address is 198.51.100.1. [0] https://www.rfc-editor.org/rfc/rfc5737
I'm a big fan of using identifiers reserved for examples. I use TEST-NET-2 IP's and example.com all the time in my documentation!