Anti cheating discussion

[Dico]

[QUOTE=garry;14265257]VAC doesn't work instantly. It's delayed. Lua cheats are fair game, but if you're using external programs to aimbot or you're using external programs to memory hack hl2.exe then you could easily find yourself banned in a couple of weeks.[/QUOTE]

I've used plenty of external cheats, and I'm not VAC banned.

Neither are the other 5 people I know that do it.

We all used cheats that have been detected by other games.

[KEEP IT REAL]

Good job garry. I enjoy your tactics of unfairly banning users who demonstrate flaws in your shoddy system. and disseminating false information. Instead of wasting your time on these forums maybe you could fix your broken shit.

[Dico]

[QUOTE=KEEP IT REAL;14265468]Good job garry. I enjoy your tactics of unfairly banning users who demonstrate flaws in your shoddy system. and disseminating false information. Instead of wasting your time on these forums maybe you could fix your broken shit.[/QUOTE]

If you think his [i]shit[/i] is so crappy, then delete GMod from your system, leave this community and never contemplate anything relating to it ever again.

Garry has no duty to you to be fixing his 'broken [i]shit[/i]', and I don't see you contributing to the matter.
If you expect someone to do something for you, it's common sense (which you have proven to have a lack of) to offer an incentive, or at least ask [i]nicely[/i].

[HubmaN V2]

[QUOTE=KEEP IT REAL;14265468]Good job garry. I enjoy your tactics of unfairly banning users who demonstrate flaws in your shoddy system. and disseminating false information. Instead of wasting your time on these forums maybe you could fix your broken shit.[/QUOTE]

You have every choice not to play GMod. Stop bitching about it, he's already got enough on his mind that he needs to worry about.

[KEEP IT REAL]

[QUOTE=Dico;14265499]If you think his [i]shit[/i] is so crappy, then delete GMod from your system, leave this community and never contemplate anything relating to it ever again.

Garry has no duty to you to be fixing his 'broken [i]shit[/i]', and I don't see you contributing to the matter.
If you expect someone to do something for you, it's common sense (which you have proven to have a lack of) to offer an incentive, or at least ask [i]nicely[/i].[/QUOTE]

Thanks for this post, ban evading user DecoDaMan.

edit: btw I was only referring to scriptenforcer in the post, but I like how you get your panties in a bunch and put your white knight goggles on before you go out to set those nasty trolls straight! and from what I have heard, people HAVE offered solutions to garry to fix / strengthen SE but he didn't do a damn thing. So what is the point now?

[QUOTE=HubmaN V2;14265517]You have every choice not to play GMod. Stop bitching about it, he's already got enough on his mind that he needs to worry about.[/QUOTE]

this is the community you have spawned garry, are you happy with yourself?

[Sa-Mu]

[quote=KEEP IT REAL]Good job garry. I enjoy your tactics of unfairly banning users who demonstrate flaws in your shoddy system. and disseminating false information. Instead of wasting your time on these forums maybe you could fix your broken shit.[/quote]
Garry "Stalin" Newman.

[Sa-Mu]

I don't understand why this hasn't been fixed yet. The only real reason would be the possibility that garry actually enjoys the ability for more advanced users to "hack" any server with lua. People have offered code that will fix the problem, explained the semantics of it in vivid detail, yet nothing has been done.

[Sa-Mu]

[QUOTE=Dico;14265499]If you think his [i]shit[/i] is so crappy, then delete GMod from your system, leave this community and never contemplate anything relating to it ever again.

Garry has no duty to you to be fixing his 'broken [i]shit[/i]', and I don't see you contributing to the matter.
If you expect someone to do something for you, it's common sense (which you have proven to have a lack of) to offer an incentive, or at least ask [i]nicely[/i].[/QUOTE]

I don't see why you think just because you re-register you're suddenly forgiven for being perma-banned. You think you're above the law or something because you helped write a couple shit addons that nobody used even after you shoved them in everyone's faces?

[garry]

I don't think the fact that you can memory hack it makes gmod "broken shit"

[street trash]

[QUOTE=garry;14265623]I don't think the fact that you can memory hack it makes gmod "broken shit"[/QUOTE]
There is more than one way to circumvent SE inside of gmod without relying on outside programs (like ers35's method)

[Cub3]

[QUOTE=garry;14265257]VAC doesn't work instantly. It's delayed. Lua cheats are fair game, but if you're using external programs to aimbot or you're using external programs to memory hack hl2.exe then you could easily find yourself banned in a couple of weeks.[/QUOTE]

VAC doesn't work on Garrysmod.

[garry]

We'll see about that

[-[ Fizzadar ]-]

[QUOTE=Sa-Mu;14265593]I don't understand why this hasn't been fixed yet. The only real reason would be the possibility that garry actually enjoys the ability for more advanced users to "hack" any server with lua. People have offered code that will fix the problem, explained the semantics of it in vivid detail, yet nothing has been done.[/QUOTE]

Agreed, PLEASE fix scriptenforce garry.

[C++]

[QUOTE='-[ Fizzadar ]-;14267023']Agreed, PLEASE fix scriptenforce garry.[/QUOTE]

you fix it

[kevkev]

[QUOTE='-[ Fizzadar ]-;14267023']Agreed, PLEASE fix scriptenforce garry.[/QUOTE]

In the GMod beta there are some changes in the scriptenforcer, so i am guessing that it will work in the new update.

[LuaStoned]

[QUOTE=garry;14265257]VAC doesn't work instantly. It's delayed. Lua cheats are fair game, but if you're using external programs to aimbot or you're using external programs to memory hack hl2.exe then you could easily find yourself banned in a couple of weeks.[/QUOTE]

What about modules, like the gm_funcsolver.dll ?

[hexpunK]

[QUOTE=kevkev;14267151]In the GMod beta there are some changes in the scriptenforcer, so i am guessing that it will work in the new update.[/QUOTE]

Theres a beta?

[QUOTE=garry;14266676]We'll see about that[/QUOTE]

I would love to see VAC working on GMod, it would have little use, but still, we would get people wondering why thye were banned from GMod as well as CS and TF2.

[Catdaemon]

[QUOTE=garry;14265257]VAC doesn't work instantly. It's delayed. Lua cheats are fair game, but if you're using external programs to aimbot or you're using external programs to memory hack hl2.exe then you could easily find yourself banned in a couple of weeks.[/QUOTE]

Lots of modules do memory hacking, and have done for many months, nobody has been banned for using them. People have been fucking about with gmod's memory for months too, nobody's been banned. Shit don't work.

[Cub3]

Adding a md5 scanning hash check for edited hl2.exe would be amazingly tangly cool :P

[FPtje]

[QUOTE=garry;14266676]We'll see about that[/QUOTE]

Hehe that reminds me of Episode one where gman says it XD

I'm making a gamemode and in my gamemode I'm using the BEST anti-cheat that could possibly exist(in my opinion):
it's a prop kill gamemode so aimbot is freaking useless(really, you can't prop kill with an aimbot, it will only make it harder)
and besides I make the clients download a stripped version of FESP(an ESP for those who don't know) and my Xray. This way it isn't [b]cheating[/b] anymore haha

[Cub3]

Mingebag kicker
[lua]
function MingeBag()
for k,v in pairs(player.GetAll())
if(v:Nick == "MingeBag" or "M!nGe" or "minge" or "M1ng3b4g") do
v:ConCommand("kickid " ..v:Nick().. "You got Kicked Change your Name")
end
end
end
hook.Add( "Think", "MingeBag", Mingebag ) [/lua]

[hfs]

[QUOTE=Cub3;14270322]Mingebag kicker
[lua]
function MingeBag()
for k,v in pairs(player.GetAll())
if(v:Nick == "MingeBag" or "M!nGe" or "minge" or "M1ng3b4g") do
v:ConCommand("kickid " ..v:Nick().. "You got Kicked Change your Name")
end
end
end
hook.Add( "Think", "MingeBag", Mingebag ) [/lua][/QUOTE]

wow, i copypasted this script to a lua file and put it on my server, and all of my lau hackler problems were solved. thanks for the script.

[raccoon121]

Nooo, VAC should not be implemented into GMod, terrible idea. People go into GMod for fun, and hacking isn't that bad of a problem in GMod. Seriously

[hfs]

[QUOTE=raccoon121;14274900]Nooo, VAC should not be implemented into GMod, terrible idea. People go into GMod for fun, and hacking isn't that bad of a problem in GMod. Seriously[/QUOTE]

apparently he's adding it in so banned players can't play gmod, which in my opinion is a total dick thing to do.

it'd be useless to prevent cheaters considering that most cheats in gmod are script-based and the only real cheat is an se bypass. i don't even know if garry can get access to the vac database.

[mbainrot]

Thats a bad idea, what does someone do if they get a virus and as such they end up with a VAC ban? (Valve don't give a flying fuck whether it was a virus or not, their VAC is "100% Correct, 0% False positives, and absolutely \"perfect\"" which we all know is 100% BULLSHIT!)

[highlight]Warning this reply is a stdout of my train of thought, you may need to read multiple times for it to make sense, i'll re-edit my thread to make it logical[/highlight]

Hacking isn't much of an issue in Garry's Mod, unless its RP, then radars a prominent (handy for detecting people who are using the RP rules to be fuckheads)

Should be up to the server admins to determine whether they let Valve decide who goes onto their server.

Anti Cheat wise, someone should see if Wormbo is still an asshole, if he isn't he might be able to help out (yes people still got around it, but script kiddies didn't get anywhere near as far)

Anti Cheat Ideas for Garry's Mod;
- Ability to detect EVERY function execution, thus allowing anti-cheat to detect rouge hooks
- Script execution protection, allowing server sent files to be protected from any commands from the client side that may unload them.

Ideas without fucking with gmod core (kinda)
- Set up "botter bait", i.e. some kind of entity that looks like a player to aimbots in a way so that if they use their auto-aim it will snap acuire the "fake" player
- Have some kind of watch that detects sudden movements without the "overshot" (a normal human player if they pull a high speed crazy ivan will slightly miss the target and then pull in, where is a bot will lock on to the target perfectly)
- Detect excessive 180° head shots (typical of a newb aimbot)
- Have publicly listed aim botter lists with steam id's to ban (e.g. [url]http://utan.tnwagroup.com/[/url])
(quote from their [url]http://utan.tnwagroup.com/whatisutan.php[/url])
[quote]
What is UTAN?!

Basically its a free public system to store your UT2003/UT2004 GUID and IP server bans in such a way that they can be rolled out to all servers under your control automatically.

Part of the UTAN system allows the trusted admin's (Head Admin's at various GISP's) to add bans into our system so that they will be distributed to all servers running our server actor. We understand how controversial this could be and have setup the system so that if you don't want these global bans, so to speak, you don't have to receive them!

The system allows you to store you own bans for use of either your server or your GISP only, which are protected by a password. So storing all your bans in our system is possible making it very quick and efficient at sending the bans out to your servers.

The Server Actor was initially created by El_Muerte, an admin at UnrealAdmin. Since then we have moved onto the new improved version of the Server Actor which provides Web Admin changes, understandable ban messages and live e-mail updates. It won't remove your server from the standard server lists on the master server either!

Lastly, the UTAN system is constantly being developed, so over time you will see more options available to you to use for your servers. Things like timed bans, so you can ban someone for 30minutes, 30hours, even 30days if needs be, anti-cheat news, and IP range banning are currently in the pipeline.

We hope you enjoy using the service and if you have any questions about the system please don't hesitate to contact us at [email][e-mail][/email].

Thank you

The Unreal Trusted Admin Network Administrators.
[/quote]

just some ideas :P

[Rambo_6]

[QUOTE=mahalis;14261462]Deco advertised/hyped his library a lot a while ago, and now a couple of people are clever and post that (or something similar about GLON) as ironic "solution" to any Lua problem.[/QUOTE]

but it is the solution

[Catdaemon]

[QUOTE=mbainrot;14275555]
Anti Cheat wise, someone should see if Wormbo is still an asshole, if he isn't he might be able to help out (yes people still got around it, but script kiddies didn't get anywhere near as far)[/QUOTE]

Haha what, all the script kiddies got around his crappy anticheat. It's not possible to use the same methods in gmod anyway.

[ComWalk]

[QUOTE=garry;14266676]We'll see about that[/QUOTE]
VAC will do little to no good for ScriptEnforcer at all, and instead will only break Lua modules used for legitimate purposes.

The two bypasses that I know have been in use for the last few months won't be affected by this at all. The first method, a simple extension of the old crc collision trick, simply involves expending a trivial amount of effort to preserve the file size. The second is slightly more in-depth and involves adding entries to the LuaFilenames stringtable manually and then creating the corresponding empty files in the lua_client_vfs search path. Both of these involve no code modification at all, and subsequently would do nothing to upset VAC.

Although SE is easily duped by code modification, it's not a problem big enough to warrant breaking modules that do such for legitimate purposes. The number of servers that use scriptenforcer at all is tiny, and the number of people with bypasses is negligible as well, not to mention that the released bypass wouldn't have upset VAC either.

Enabling VAC won't make up for the flaws in scriptenforcer; if you want to combat the bypasses currently in use, give up on using CRCs as protection against malicious users. If you can't be bothered to use a decent hashing algorithm like SHA, switching to MD5 is simply a matter of changing the function calls and a header include.

There are several modules release for use with servers that detour engine functions. If you have VAC enabled, everybody who runs these on a listen server will find themselves VAC banned, all in the name of 'securing' the select few servers which use scriptenforcer in the first place.

You are trying to solve the wrong problem with the wrong tool; if you want to do anything that will have any effect on cheating, fix scriptenforcer. I believe that you will find that it solves the vast majority of the problem as it exists now, while entirely preserving the ability for legitimate and useful Lua modules to be used safely.

[hfs]

[QUOTE=ComWalk;14276461]VAC will do little to no good for ScriptEnforcer at all, and instead will only break Lua modules used for legitimate purposes.

The two bypasses that I know have been in use for the last few months won't be affected by this at all. The first method, a simple extension of the old crc collision trick, simply involves expending a trivial amount of effort to preserve the file size. The second is slightly more in-depth and involves adding entries to the LuaFilenames stringtable manually and then creating the corresponding empty files in the lua_client_vfs search path. Both of these involve no code modification at all, and subsequently would do nothing to upset VAC.

Although SE is easily duped by code modification, it's not a problem big enough to warrant breaking modules that do such for legitimate purposes. The number of servers that use scriptenforcer at all is tiny, and the number of people with bypasses is negligible as well, not to mention that the released bypass wouldn't have upset VAC either.

Enabling VAC won't make up for the flaws in scriptenforcer; if you want to combat the bypasses currently in use, give up on using CRCs as protection against malicious users. If you can't be bothered to use a decent hashing algorithm like SHA, switching to MD5 is simply a matter of changing the function calls and a header include.

There are several modules release for use with servers that detour engine functions. If you have VAC enabled, everybody who runs these on a listen server will find themselves VAC banned, all in the name of 'securing' the select few servers which use scriptenforcer in the first place.

You are trying to solve the wrong problem with the wrong tool; if you want to do anything that will have any effect on cheating, fix scriptenforcer. I believe that you will find that it solves the vast majority of the problem as it exists now, while entirely preserving the ability for legitimate and useful Lua modules to be used safely.[/QUOTE]

sticky this post

[JetBoom]

Great anti-cheating method: ban people who are cheating.

Seriously, all you need are some admins and maybe some script to watch people in 1st person view. You can't stop cheaters cheating.