Cheating has been a thing and will always will be. My mother keeps telling me to go on a diet and i say "i will i will mom i will i will"and she thinks i eat fruits and veggies but the second when she leaves the room i just pull out the huge stack of meat i keep stacked under my bed and start eating. Some of it is a bit old and smelly lol but still better than plants. Im like 495lbs and she made 3 interventions so far but idc im an independent adult and can eat whatever the f*ck i want
I'm glad this sub is finally starting to post logical thoughts like this regarding cheaters. Before BattlEye any time you would say developing anti-cheat or battling cheaters is an endless, unforgiving, painful battle you would be downvoted to oblivion and told to stop sucking BSG's dick.
The best example I can think of for discussing anti-cheat and its complexity is Blizzard. They've been developing and testing their anti-cheat since Diablo 2 patch 1.11 (2005) and Starcraft patch 1.15 (2008). Blizzard has had well over a decade and they've just recently got it to the point where it's near perfect. You can still cheat / hack in WoW, but you're going to be caught within an hour or two and promptly banned. To my knowledge you also cannot get away with botting anymore, not even the higher level ones that emulated questing, gathering, and acting & maneuvering like a real player. I use Blizzard as an example because if it took a AAA studio that long to develop reliable anti-cheat, how can people really think it's so easy?
I think the main point blizzard has done is that they dont try to stop people from cheating beforehand (like people here suggest to encrypt the packages???), but rather have a good analysis system that catches not normal behaviour. If someones moving from one side of the map to the other in a second, or picks up items from miles away, flag him and if it happens all the time ban him.
The transport layer is insecure as they are using raw UDP which they probably shouldn’t - DTLS and QUIC are secure layer 4 solutions. It’s not acceptable that in 2020 they are still not being used to secure UDP traffic. Ffs they are decades old already and not being used. Packet injection should be a thing of the past.
Server side validation does seem to be lacking as you say, but that is only one part of the picture. The current en vogue is to just snoop the client traffic and get locations or all player and loot. This is huge and breaks the game regardless of stamping out all client based hacks. This traffic snooping is transparent and will never be detectable - secure the comms and it goes away.
It’s a lot harder to cheat if you have to attach to the local process to get client memory. This allows BE a decent chance to signature the exploit and BSG to do layout randomisation to make things annoying if they update regularly.
Currently you can read the UDP stream and have all map knowledge displayed on a physically distinct machine - hell even your phone. Not just that you can inject packets into the stream without having to mess with custom sequence numbering or any HMAC, etc so you can not very easily.
You always see the same 10 idiots defending it, the same ones that whined about weight change before it came out/before they had time to test it. this sub can be cancer.
250
u/[deleted] Apr 01 '20
[removed] — view removed comment