Live data from Hacker News

We outsmarted CSGO cheaters with IdentityLogger

mobeigi.com

11–20 of 372 posts

Re: We outsmarted CSGO cheaters with IdentityLogger

#11
post #3

Thinking about it, steam should force this on every game developer that has cheating problem (I am assuming mainly shooters), maybe implemented better fingerprinting way, giving developers options to hide cookies somewhere in folders of their choosing.

Risk there is that what ever id is generated tends to leak. So lot of cheaters will either tamper with it or circumvent it. So the game will continue and not actually be effective for very long.

Re: We outsmarted CSGO cheaters with IdentityLogger

#13

Server side only anti-cheat is one of the problem domains that I'd really love to work on at some point in my career. This is the type of adversarial arms race that just seems really fun to think long and hard about.

Only problem is, a lot of companies do NOT want to pay for it. It's 'treadmill work'. No matter how many people and how much money you throw at the problem, it still ends up just coming back. It's a losing battle because there are many, many more players than there are developers.

Re: We outsmarted CSGO cheaters with IdentityLogger

#14

> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.

That was addressed in the article.

Re: We outsmarted CSGO cheaters with IdentityLogger

#15

> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.

This scenario definitely did pop up and we would review it on a case by case basis to unban users or make exceptions. However, it was quite rare. Only a handful of reported instances over several months. If our servers were more popular we definitely would have run into it a lot more.

Re: We outsmarted CSGO cheaters with IdentityLogger

#16
>Now, in order for a player to appear to us as a "fresh player" they would need to change their Steam ID, IP address and Steam installation folder. As you can imagine, no one is going to do the latter.

Really? I would expect that a dedicated cheater would reinstall Windows (or reload from a snapshot) every time they are caught.

Re: We outsmarted CSGO cheaters with IdentityLogger

#17
> The best part was that no one knew how we were able to do this and our admin team kept the implementation a top secret. We should have filed a patent!

I know you’re joking, but if you had filed a patent you would have had to reveal the trick, thus rendering it immediately useless.

Doesn’t detract at all from your post. Fun read.

Re: We outsmarted CSGO cheaters with IdentityLogger

#18
Excellent write up and solution. Cheating in video games makes for a wretched experience for those who don't cheat.

It's crazy how rampant cheating in multiplayer games, especially competitive ones has gotten. Ten years ago, I thought it was at an extreme, but it's only gone up since then.

Part of the problem is that for some software developers, writing cheats brings in a massive amount of money.

So instead of some teenager messing around making unsophisticated cheats, you have some devs that are far better at writing cheats than game developers are at preventing them.

It doesn't help that game devs have to secure everything, everywhere, but cheat devs only have to find a single flaw.

Re: We outsmarted CSGO cheaters with IdentityLogger

#19
post #15

> If a player joins with a different Steam ID but with an IP address that is already banned, the system now re-bans them This works great until you realize you're punishing innocent players because of CGNAT and IP addresses getting rotated. Cheaters usually know how to get their router to request a new IP address. That IP address then gets assigned to someone else later.

This scenario definitely did pop up and we would review it on a case by case basis to unban users or make exceptions. However, it was quite rare. Only a handful of reported instances over several months. If our servers were more popular we definitely would have run into it a lot more.

I would wager most people just move onto a different server - leaving you with useless/suppressed data on how many people this may have impacted.
Post reply on HN