SECURITY ISSUES: ANTI-HACK MEASURES
INTRODUCTION:
Hi, I want to start a thread about security issues related to hacking - And are seeking a constructive debate both about security issues and possible fixes in regards to a central point stated in the Focus forum rules. I also recommend reading up on the subject, to make sure we all try to contribute with information with as high quality as possible.
I will also state a security issue with this type of thread that both moderators and all contributors must keep in mind. Hacking developers read these types of threads as a means to learn how to circumvent them, therefore it is important to send direct e-mails to the developers if you find sensitive information that may be exploited. Don't mail moderators as stated in forum rules.
From The Focus forum rules:
"No game is perfectly secure, but it is accepted that we, as the player base, want it to be as secure as possible. Therefore, should you discover a cheat, exploit, hack or other security issues then you are at liberty to post the existence of said issue on the boards. You are, however, requested to NOT post how to recreate the issue for other posters to emulate, or to link to such instructions. Instead please send details to members of the Focus Home Interactive or developer teams (NOT the moderators - they're players just like you!) so that they can recreate and resolve the issues."
A feedback from a moderator or developer would also be helpful in specifying rules or behaviours not specified clearly enough in forum rules, if this is the case, on the type of content a thread like this could contain, or even if a thread like this is even wanted or should be removed, as I can understand if it is better to send e-mails directly to the developers in all cases, though I believe in open discussions to get higher quality on the information and expose this to the public.
Personally I have researched and spent many hours on the subject, as I really would enjoy playing a hacking free game one day. In my opinion the technology to create that today is very difficult, but making games with a lot of focus on this kind of problems might minimize the problems to an extent where it is bearable - In competitions on public LANs it is probably possible with current technology if the involved parties takes the necessary steps - This would also expose cheaters who would play considerably worse with no access to hacks.
I have never used cheats myself, but seen remarkable improvements in my own skills when playing intensively earlier in my life - So I know you can "git gud" as well.
I have also played Ins2 for a ridiculous amount of hours, also cs:go for quite some time. For a long time I believed in the hollow statements provided in most comment sections regarding this problem, and it is difficult to expose these kind of people without first playing a game 100s of hours to be able to really understand the difference between "u need 2 git gud" and "something does not add up here", because it takes a lot of time to get skilled in pvp, which is a helpful skill to separate apples and oranges in this regard. I have also spectated players until they left the game, because they knew they were being watched and did not want to get exposed, even if I said or texted nothing negative when spectating.
It is not helping at all to use this thread to try framing any players in any game, and really skilled players exist, just look at something like a Dark Souls speedrun to see that the dedication some people invest can lead to unbelievable skills. Hackusations/defaming is not constructive and is very easy to do wrong, but it is interesting what you learn if you open your eyes about the reality of esports.
Many examples from a lot of different games which demonstrates the problem exist, but all you need is an internet connection to find proof of the existence of said problem yourself if you are not aware already, which may be a better and more effective way to understand the situation. Also many gamers don't understand the complexity of the problem (I have more to learn myself), but I will link to one video that can be a helping step in that direction if wanted.
CONCERNS:
- In this video it is shown a document between the poster who is fishing/luring a hacker to expose what they want, also it shows that the Easy Anticheat [EAC] is already (2017) being tampered with by hacking developers on top of the other anti cheat programs (of course it is). The video is almost 1 hour long, but is the most pedagogic introduction summary I have seen so far on the topic. It is also some obvious and less obvious solutions shown at least regarding LANs, so I hope at least one developer finds the time to look at it if not familiar with the content.
THOUGHTS ON SOLUTIONS IN SANDSTORM:
- Introduce spray patterns that makes it easy to expose bullet accuracy manipulations, but don't go public with it.
- Keep RNG sway even if people complains about it, it can help to expose hackers by identifying impossible sway control.
- Make other mechanics with similar goals and don't go public with it.
- It has become such a huge problem that corruption can occur within even the most well-intended companies. Don't rely on too few programmers, and don't outsource security tasks without some healthy paranoia.
- Don't cheat and be part of the problem obviously.
VIDEO:
I will take no legal responsibility for the content of this video. The examples seen in the video should not be regarded as proof of defaming of any players involved who has not been proven to be cheating by other legitimate means.