PDA

View Full Version : Anti-Cheat: You may regain your faith!


Old Forums
12-08-2003, 14:16
I posted this on the Enemy Down webby and thought you guys (n' gals) might wanna take a look, some of it is definitly worth considering.

I have been browsing alot of websites from all over the world to try and find the most effective anti cheats Auk can install on their server, from my research I have come up with the following which has made me believe if these tools continue to be updated and developed, cheating will be a rareity

Enjoy!

------------------------------------------------------------------------------------

Cheating-Death http://www.unitedadmins.com/cdeath.php
Cheating-Death (C-D) is an anti-cheat system which includes both a server and client. Unlike HLGuard, which is a server-side only anti-cheat, C-D offers more protection by blocking the cheats themselves before the player joins the server.

While in optional mode, players are checked for a running C-D client and will rename the player if they don't have C-D currently installed and running. For optimal protection against cheaters, servers can be configured to only allow players running the C-D client.

Unfortunately, the C-D anti-cheat system is incompatible with VAC secured MODs. As of v2.2.0, C-D can work with VAC supported MODs as long as VAC is disabled. Otherwise, C-D will shutdown if VAC is detected.

Cheating Death is by far the most effective anti cheat tool available, it is constantly being updated and developed allowing to catch up with the development of hacks and cheats. Joolz, the infamous creator of many widely used cheats and hacks has confirmed in an interview that Cheating Death is the way forward ... the good new is he is quitting CS so he will no longer develop anymore cheats

------------------------------------------------------------------------------------

Counter-Strike Blacklist http://www.csblacklist.com/
CSBLd is the newest weapon in the war on cheating. Before CSBLd, blacklisting wasn't really a practical concept. Admins had to manually submit and download ban lists, something nobody really wanted to do every day.

CSBLd fixes the fundamental problem with blacklisting by making human interaction unnecessary and completely automating the process. The central blacklist is maintained here at CSBL - all you need to do to participate is download the CSBLd client plugin for Metamod and install it on your server.

CSBLd is a Metamod plugin. Among other features, it supports real-time updating and real-time querying of the blacklist, while your game server is running. As clients connect to your server, CSBLd will query the CSBlacklist database and immediately kick/ban them if they're listed, while cheaters banned by HLGuard can instantly be sent to the blacklist.

Confirmed cheaters from all participating servers are automatically banned on yours!

What more could you want? no need to share banlists as it does it automatically!


PS It is compatible with HL Guard, so anyone banned by HL Guard on a CSBL server is banned from all :)

------------------------------------------------------------------------------------

HL Guard http://www.unitedadmins.com/hlguard.php
HLGuard is the latest server-side anti-cheat solution for Half-Life and it's many MODs. Originally developed under the name CSGuard by OLO, the HLGuard Project Team over at United Admins have been working hard at developing new techniques at detecting and blocking cheaters.

HL Guard has changed alot since you last saw it, it is now concentrating on config checks and enforcing file consistency, worth a look!

HLGuard v1.50.02
Released on August 7, 2003

v1.50 Changelog:

[NEW] Filecheck integrated (formerly known as soundcheck)
[NEW] Enforces consistency of certain built in half-life files to prevent sound/model cheats
[NEW] Added cvar detections
[REMOVED] Cheat block
v1.41 Changelog:

[REMOVED] Debugging code.
[NEW] (GFZ) added to nameban.cfg
v1.40 Changelog:

[CHANGED] Separated all Bunny hop checks into bhop_checks.uacfg.
[CHANGED] Changed the link in readme to point to the correct site for documentation.
[CHANGED] Linux .so now compiled using the i586 architecture (was i386)
[REMOVED] [RS] removed from nameban.cfg
[NEW] Many New alias detections added.
[NEW] New wwwcl style cvar configs added for CS: hlg_wwcl_cvars.cfg & hlg_wwcl_cal_cvars.cfg
[NEW] hlg_cstrike_mod.cfg added lines (all disabled by default) to select which cvar config method to use:

Default HLG cvar config
Default WWCL v2 cvar config
Default WWCL v2 CAL cvar config

-----------------------------------------------------------------------------------

Octinium http://www.octinium.org/
It has been a long and interesting journey for this program, and I can honestly say that it works and then some. Octinium is a client-side anti-cheat developed for mods of the game Half-Life, but it also has unlimited potential for other first-person games such as RTCW, Q3 and BF1942. I started work on the program about 4 weeks ago when I was in a random pug and two of the people on my team were obvious wall hackers, spraying walls before anyone heard or saw anything. At first my idea was to take full-screen screenshots, but I soon learned that doing so caused intense lag. Then after about a week of research and brainstorming I decided I should make it so that it just took a SS of the crosshair, but this soon proved to be less effective due to the fact that it could be easily faked by just running Octinium over a demo.

At this point I started to lose faith, thinking that there would be too many ways around it and too little I could do about it. But after I made a post on GotFrag, I got an amazing outpouring from the community asking me to keep going on with it and offering anything they could to help out the effort. This motivated me to go on and work harder than before. I decided to implement many different kinds of security encryption and such to make it almost impossible to edit anything made by my program. After the last beta test and having Team G3 use the program I decided it was time to wrap things up.

The actual program was finished a few days ago but I ran some security checks on it to make sure it all worked. I was very happy with how the program turned out; it was better then I could have ever expected nearly a month ago. From the beginning my idea was, wwcl (though not as effective as it once was) is used for config checking, first-person demos are for catching things like aimbots, but there was nothing to stop a person who could run a wallhack and hide it well. So I figured that would be where Octinium filled the gap, and I think it will come to meet all my expectations. I would like to thank everyone that ever joined #octinium and questioned the program's integrity, bringing up good questions that helped me improve upon its existing design, teams that beta tested, and people that offered me ftp's, mirrors, and webspace for the program.

Octinium is a product of the community, and I will never seek profit from it.

The following are a list of features and general information about Octinium:

1/ The download is about 900 kb.
2/ It takes about 4 to 5 screenshots per minute, at completely random intervals.
3/ A normal 45 minute .avi translates to about 600 kb, making for easy transfer of the files, so people no longer have to file disputes and go through a long, drawn-out process to get demos.
4/ Octinium uses about 3 MB of memory while running.
5/ Finished files cannot be edited due to a new style of digital protection coding. If editing is attempted the program just crashes. Also, you cannot take screenshots of the videos using prnt scrn.
6/ Requires minimal configuration (basically all you have to do is type in your resolution).
7/ It records your crosshair, timer on the bottom, and soon to be required net_graphpos 2 (to verify that you aren't just watching over a demo with no hacks on).
8/ Cannot be blocked by the same method people used to stop punkbuster screenshots due to the fact that it uses a different method with the ms mfc.
9/ Octinium causes NO lag.
10/ Octinium is supported by the following:

CAL, UGS, IGL, and many other leagues offering both Counter-Strike and other games.

The success of my program depends on the way it is implemented by the leagues. It basically works the same exact way as an in-game demo does and requires the same attention.

There are too many people to thank so I just left that to the info file in the program download.

Please go to #octinium (irc.gamesnet.net) for the link to the download, more information, and any comments, questions, and suggestions.

------------------------------------------------------------------------------------

SoundCheck http://www.tng-clan.de
As promoted by #Harmless this MOD enforces users to use default skins/sprites/sounds/models, this is to stop players who use certain sounds wav's etc to give them an advantage over the opposing team. The effect of using 'hack' skins/sprites/sounds/models hasn't made much impact but believe me the advantage it can give you is alot more than you might think.

The good thing is this mod can be customised so you can select which files it enforces players to use default, so you can configure it to only enforce sound files or player models etc.

------------------------------------------------------------------------------------

WWCL http://wwcl.net
This MOD has been in debate for months, is it effective? does it work? imo yes it is definitly worth it. Yes there apparently ways to get around it but tbh I estimate the majority of players don't know how to, so I'd rather stop 90% of ppl configging on our server than give up and leave the option for ppl to openly config, wouldn't you agree?

It is capable of stopping ex_ cvars and blocks ppl from using dodgy scripts .. for example: scripts that allow them to automatically stop dead still when they fire the awp, allowing them to achieve 100% accuracy at all times.

------------------------------------------------------------------------------------

How to find out a players rates
This is extremely useful for checking whether or not a player is using stupidely low rates to give them an advantage over the opposing team. Using lower rates for a fast connection will lower the amount of information sent between the client and server, because there is soo little information being sent from client to server the server has to predict the players movements on screen as it hasnt got all the data to accurately show the characters movements on screen ... thus what you see ain't what you get lol

To display a players rates type the following (providing you have rcon access):

rcon user <id>

The <id> is the 3 digit number for a player, which can be found by typing 'status' in console ... it is the same number you would use for starting a vote_kick, it is not the wonid.

If however it is too late and the player has left the server, providing you have a demo (fpp or HLTV) you can still find out their rates, simply open the demo in wordpad/notepad and scroll down until amidst the code you find the player name, beside it will be their settings

------------------------------------------------------------------------------------

#Asylum.uk