Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We outsmarted CSGO cheaters with IdentityLogger

mobeigi.com

Post reply on HN
Print view View original

301–310 of 372 posts

Re: We outsmarted CSGO cheaters with IdentityLogger

#301

Post by voldacar »

snarfy wrote: post #292
tomooot wrote: post #225

Earlier quoted context omitted.

On a counter-strike 1.6 server I help with moderating, we have the occasional cheater roll by, surprisingly often "ragehacking" with no attempt at subtlety (e.g. making noscope sniper headshots in mid air). Since the server owner insists on allowing non-steam accounts (pirated copies) to connect we can't rely on SteamID bans, similarly to GUID in Unreal. It's a bit trickier to change the spoofed ID as I assume it's b…

> There's also "illegal" amx plugins and commands, which are generally frowned upon and extremely abusable, but quite useful in these situations. My favorite (which most of the "illegal plugins" are based around) is amx_exec which essentially gives admins direct access to any client's in-game console, to run any command or set any setting! Yes, we have something similar for UT2004, but only a handful of people are ev…

Isn't this a huge security vulnerability for the client?

Re: We outsmarted CSGO cheaters with IdentityLogger

#302

Post by NoMoreNicksLeft »

voldacar wrote: post #300
DanielHB wrote: post #284

I want to share a story in a somewhat related topic: anti web-scraping techniques The most devious version I ever seen of this, I was baffled, astonished and completely helpless: This website I was trying to scrap generated a new font (as in a .woff file) on every request, the font had the position of the letters randomly moved around (for example, the 'J' would be in place of the 'F' character in the .woff and so on…

So it's a Caesar cipher, which is trivial to break. You don't need OCR or any computationally intensive solution.

You need OCR unless you're going to personally sit there and break it by hand so you can feed the tr/// translation yourself every time you need to scrape. And it's a bit more tedious than the puzzles we did as kids, likely the punctuation and lowercase/uppercase were mixed into the slop.

Re: We outsmarted CSGO cheaters with IdentityLogger

#303

Post by connicpu »

NoMoreNicksLeft wrote: post #302
voldacar wrote: post #300

Earlier quoted context omitted.

So it's a Caesar cipher, which is trivial to break. You don't need OCR or any computationally intensive solution.

You need OCR unless you're going to personally sit there and break it by hand so you can feed the tr/// translation yourself every time you need to scrape. And it's a bit more tedious than the puzzles we did as kids, likely the punctuation and lowercase/uppercase were mixed into the slop.

If there's a part that doesn't change, eg a footer or something, you can get a head start and have it figure out the rest by deduction with a spellchecker

Re: We outsmarted CSGO cheaters with IdentityLogger

#304

Post by connicpu »

cedws wrote: post #235
santialbo wrote: post #223

Banning new Steam IDs on banned IPs seems too strict to me. Some ISP use CG-NAT or rotate IPs, meaning a single bad actor could harm many innocent players.

Yeah. IPs are NOT identifiers. At best they are a session ID. Using IPs to ban players on the basis that they've been used by a cheater before seems extremely unfair and probably even an opportunity for denial-of-service.

I'd agree if it was being used to ban players across many servers, but a single community server is not that big a deal to be banned from. And they seem to have had an appeals process.

Re: We outsmarted CSGO cheaters with IdentityLogger

#305

Post by NoMoreNicksLeft »

connicpu wrote: post #303
NoMoreNicksLeft wrote: post #302

Earlier quoted context omitted.

You need OCR unless you're going to personally sit there and break it by hand so you can feed the tr/// translation yourself every time you need to scrape. And it's a bit more tedious than the puzzles we did as kids, likely the punctuation and lowercase/uppercase were mixed into the slop.

If there's a part that doesn't change, eg a footer or something, you can get a head start and have it figure out the rest by deduction with a spellchecker

You might manage to cobble together frequency analysis too, but that would be challenging. If the ciphertext is very small, or is marketspeak without any sense to its message, then that's going to fall flat. And all this assumes just ascii rather than say a (even limited) unicode font. These assholes could be doing that just to have curly quotes or whatever.

Re: We outsmarted CSGO cheaters with IdentityLogger

#306

Post by jakjak123 »

DaiPlusPlus wrote: post #286
DanielHB wrote: post #284

I want to share a story in a somewhat related topic: anti web-scraping techniques The most devious version I ever seen of this, I was baffled, astonished and completely helpless: This website I was trying to scrap generated a new font (as in a .woff file) on every request, the font had the position of the letters randomly moved around (for example, the 'J' would be in place of the 'F' character in the .woff and so on…

> easily prevent mass-scraping due to sheer processing costs. my 2018 iPad Pro does OCR on images in Safari instantly. People only think OCR is slow because Adobe Acrobat still uses the same single-threaded OCR algo it’s had for decades now; then consider how blazing a GPU-based impl would be…

It pre processes your photo library while charging

Re: We outsmarted CSGO cheaters with IdentityLogger

#307

Post by stevefan1999 »

> I'm not being funny and I mean no disrespect.

> But cheaters are cunts. They're cunts now, they've always been cunts.

> And the only thing that's going to change is they're going to become bigger cunts.

> Maybe have some more cunt kids.

That statement is really shows how big of a dick you are, like come on man, it's just a game. Without learning game cheats and writing trojans and botnets since 14, although I'm kind of clean now, I wouldn't have mastered C++, C# and Java together and later get deep into computer science (and cybersecurity to some extent).

Re: We outsmarted CSGO cheaters with IdentityLogger

#308

Post by RedCurrent »

stevefan1999 wrote: post #307

> I'm not being funny and I mean no disrespect. > But cheaters are cunts. They're cunts now, they've always been cunts. > And the only thing that's going to change is they're going to become bigger cunts. > Maybe have some more cunt kids. That statement is really shows how big of a dick you are, like come on man, it's just a game. Without learning game cheats and writing trojans and botnets since 14, although I'm kin…

I disagree. Cheating in singleplayer games is fine, but you're ruining the experience of others when hacking in multiplayer games.

Re: We outsmarted CSGO cheaters with IdentityLogger

#309

Post by Rohansi »

johnisgood wrote: post #124
snarfy wrote: post #25

For UT2004, you can ban by player GUID (a hash of the CD key) or IP. With the game abandoned by Epic, a number of key generators have cropped up, which makes GUID bans useless. IP bans only go so far with VPNs costing $2 these days. The main solutions we have today are IP ban + VPN blocking using a database of known VPN subnets and adding them all to the firewall, and a similar fingerprinting technique which scans th…

> IP bans only go so far with VPNs costing $2 these days. https://redman.xyz/doku.php/schachtmeister2 was made specifically against people using VPNs. It was made for Tremulous (ioquake3 fork) where people kept evading IP bans, but it can be used for any other games. It is not my project, but I know the author, and I could personally fork it and make it suitable for specific (or any) games if there is demand for it.…

Residential VPNs are more common now with cheaters to bypass VPN blocks.

Re: We outsmarted CSGO cheaters with IdentityLogger

#310

Post by stevefan1999 »

RedCurrent wrote: post #308
stevefan1999 wrote: post #307

> I'm not being funny and I mean no disrespect. > But cheaters are cunts. They're cunts now, they've always been cunts. > And the only thing that's going to change is they're going to become bigger cunts. > Maybe have some more cunt kids. That statement is really shows how big of a dick you are, like come on man, it's just a game. Without learning game cheats and writing trojans and botnets since 14, although I'm kin…

I disagree. Cheating in singleplayer games is fine, but you're ruining the experience of others when hacking in multiplayer games.

> but you're ruining the experience of others when hacking in multiplayer games

What I meant was, cheating can be a good learning experience to programming for a lot of kids, because they get immediate feedback and rewards. At least that's what I see it as.

Post reply on HN