HLGuard v1.60 Beta Released

[MikeJ]

CheesyPeteza wrote..

EDIT: Arghh beat me to it deletable_man



Thats exactly the way VAC does it. Why don't server admins spoof packets for VAC to get people banned?



The answer is, programmers generally aren't stupid. They add authentication checks and encryption.



What worries me more is someone doing an exec client on a player like: alias +aimbot blah



Which would then give them a dodgy alias that'd get them banned.

wow never thought of that, wonder if UA took that into consideration.

[Thortok2000]

I don't think exec client should be allowed by manual admins.



The only time I've ever been banned from a server was from it.



1: I join server

2: A teammate instantly kills me

3: Admin joins

4: Next round, I kill the teammate that killed me

5: Admin slays me

6: Next round, I ignore teammate and he kills me, I didn't fire a shot back

7: Next round, I kill teammate, play as normal, and as soon as I start to shoot the enemy, I die (bind mouse1 kill)

8: I start messing around trying to create an alias to counter this.



bind f3 "bind mouse1 +attack", and simply press F3 before shooting anyone.



The only problem was that + shouldn't've been there, and I started blasting off at random.



9: Next round starts and I start shooting without even holding the button, hitting the person in front of me for two bullets before I turn away, about to fix my bind, when the admin says "that's it" and I'm banned.



I've tried to go back to that server since and it seems like it's a permanent ban, too. I wouldn't mind except that the server filter doesn't filter it out. It's the only server I've ever been banned from for any reason.

[itsMrHankey2u]

ive been banned from many a server and i dont fear this because i dont belive itd be that easy to fake

[EastsideKnifeKillah]

I´ve been banned from like 5 swedish servers beacause of owning too much, they thought I was cheating. Good admins are the only solution imo.

[SteelV]

Deletable_Man wrote..

So why not just do the same with VAC?

CheesyPeteza wrote..

EDIT: Arghh beat me to it deletable_man



Thats exactly the way VAC does it. Why don't server admins spoof packets for VAC to get people banned?



The answer is, programmers generally aren't stupid. They add authentication checks and encryption.



What worries me more is someone doing an exec client on a player like: alias +aimbot blah



Which would then give them a dodgy alias that'd get them banned.

itsMrHankey2u wrote..

ive been banned from many a server and i dont fear this because i dont belive itd be that easy to fake

Wait and see guys. The difference between this and vac is that vac has complete control over the server and doesn't interface with it directly in the same way that HLGuard will. In this sense, it will be much easier to spoof than vac, which is very difficult to spoof.



Hopefully pharlap comes along here, or another programer, and can back me up on this.

[Smurfzilla]

Hah, They should give the people that got banned the oppurtunity to pay a certain amount of money to UA, in which they can get unbanned or something. Sure the hax0rz come back but at least UA gets what they deserver for there hardwork. Maybe UA would even put it back into the community somehow... Good idea though!

[-:Nighthawk:-]

Yeah, packet spoofing can be done, but it's no easy task, SteelV. Your average 12 year old admin isn't likely to be able to reverse engineer the code, analyse it, and then modify it to return any results he pleases. I haven't looked at what kind of packet authentication HLG uses, but I'm fairly sure it's not plaintext, or even remotely close to that. I doubt you could run a packet sniffer looking for steam ID's and find them in their original form.



Point being, yeah, it's possible to do, but it's pretty damn hard. The bulk majority of the time, the real problematic ban-you-for-anything admins aren't intelligent enough to do this kind of work. You don't have to worry about it being made by one intelligent person and widely distributed, either, because as soon as people start finding that, UA would be notified, all recent bans would be canceled, and the code changed to nullify the prior work.

[Pharlap]

Edited by [user="3256"] @ [time="1085787538"]

CheesyPeteza wrote..

What worries me more is someone doing an exec client on a player like: alias +aimbot blah



Which would then give them a dodgy alias that'd get them banned.

alias checking like u describe is a very sloppy way of detecting cheats. its like if u have a program running in memory called "cs-aimbot.exe" you get flagged by vac. theres no proof if u just renamed notepad.exe to cs-aimbot.exe, is there?

SteelV wrote..

Wait and see guys. The difference between this and vac is that vac has complete control over the server and doesn't interface with it directly in the same way that HLGuard will. In this sense, it will be much easier to spoof than vac, which is very difficult to spoof.



Hopefully pharlap comes along here, or another programer, and can back me up on this.

lol. im more of an assembler/DSP or hardware descriptive language (HDL) type of guy :) not really interested in high level languages all that much. scanning packets as they flow through a connection is very easy to do. in its most simplest form they are electrical signals passing through wires. thing is even the most basic encryption like 16/32 bit RSA would require an enourmous amount of processing power to decode in real time as the data is being transmitted.



my brain isnt working now, maybe it will later

[Whisper.]

Pity you can't use HLG on 32 player servers without killing the servers and causing massive amounts of lag, because thats where the hackers love to hang out, since there so much action taking place they think they won't be spotted.



But nobody else seems to run 32 player servers who can provide a useful solution if there is in fact a solution.



Too bad, HLG is pretty damn good otherwise.

[Pharlap]

Whisper. wrote..

Pity you can't use HLG on 32 player servers without killing the servers and causing massive amounts of lag, because thats where the hackers love to hang out, since there so much action taking place they think they won't be spotted.



But nobody else seems to run 32 player servers who can provide a useful solution if there is in fact a solution.



Too bad, HLG is pretty damn good otherwise.

many people who run 32 servers, run them severely underspecced

[oggle]

Stinger and p47r!ck from Game-Deception have created a tool to add bans to the HLG blacklist. This could be used for some great rage by getting innocent people banned.



don't u just hate myg0t?