Preventing steam id changing?

[Terabit]

It proves that you can beat people using serenity. Some people have and are greedy. Rate me dumb Idc gmod is full of retards and immature fucks.

[LombaxPE]

[QUOTE=Terabit;20764689]It proves that you can beat people using serenity. Some people have and are greedy. Rate me dumb Idc gmod is full of retards and immature fucks.[/QUOTE]

The real steam ID is not hard to get at all. All you need is their steam community page and with that you can get their ID by one of many converters. The problem is getting your server to detect the REAL steam ID and prevent players from joining by their real one.

[IMG]http://img706.imageshack.us/img706/8505/steamidconverter.png[/IMG]

[VoiDeD]

Yes, my real SteamID is incredibly hard to get. I mean, I don't have a steam community link under my avatar at all!

[QUOTE=Terabit;20761940]

Name:√oidy
IP:98.227.90.80:27005
Real SteamID:STEAM_0:0:4491990
Fake SteamID:STEAM_0:1:17203663
Date:02/21/10 01:12:15

[/QUOTE]

Gasp, a random SteamID, clearly it must be fake!

[Slayer3032]

If you want to keep people from impersonating admins as a secondary check you can use a clientside check which sends the player's username for the account they are on via [b][url=http://wiki.garrysmod.com/?title=Util.RelativePathToFull]Util.RelativePathToFull [img]http://wiki.garrysmod.com/favicon.ico[/img][/url][/b]. From what I know, I don't think you can get a username from Steamworks.

Sure if someone is that intent of getting in one might be able to get past it when knowing the method but you can always remove that id from the admin list if it's ever wrong or something.

Combined with IP bans along side the usual SteamID ban or blocking the Hot Spot Shield ranges they really can't do much to you other than come in and troll up the server unless you host a really shitty script with a bunch of exploits. Which then the problem is your script, not SteamID spoofing because anyone in the game could also be doing it anyways.

[editline]03:35PM[/editline]

I guess it could also be used to auth players when they are in the server, I wouldn't suggest it though.

[AzuiSleet]

The problem is, anything coming from the client can be spoofed. If you simply check the username and send it up in a console command, it would be trivial for an attacker to send the same username and get admin.

[Jo The Shmo]

What about just auto IP banning any user who joins under 2 different SteamIDs from the same IP within a few minutes?
It takes a little bit to log out of steam and log back in as someone else, so any legit players could still be safe, but people using Serenity would at least be banned until they restarted their router. That seems like too big of a hassle just to spam props and shout racial slurs...

[Slayer3032]

[QUOTE=AzuiSleet;20767796]The problem is, anything coming from the client can be spoofed. If you simply check the username and send it up in a console command, it would be trivial for an attacker to send the same username and get admin.[/QUOTE]

Sure but unless the attacker knows of the system and exactly how to counter it, which one or two of the people currently with serenity would even know how to do such, it would work fine. For the few who could just IP ban them to hell until they leave. Otherwise you can't do much more until a proper fix is found which it probably won't be.

For the usual server, that would be enough probably.

[editline]04:56PM[/editline]

[QUOTE=Jo The Shmo;20767901]What about just auto IP banning any user who joins under 2 different SteamIDs from the same IP within a few minutes?
It takes a little bit to log out of steam and log back in as someone else, so any legit players could still be safe, but people using Serenity would at least be banned until they restarted their router. That seems like too big of a hassle just to spam props and shout racial slurs...[/QUOTE]

What if me and a friend/brother want to join your server and happen to be on the same IP?

You cut off too many available players by banning the one or two people who you might encounter with this exploit. It does more harm than good. Maybe having a 3-4 limit, but banning a player's IP along with their SteamID when they get banned would be better anyways.

Banning their IP Address and their Free VPN ranges is probably still the best method anyways.

If they have to reset their router to get a new IP address, you should just laugh at them as they take 3-4 minutes for a 20 second shot at trolling.

[dorfy]

personally, I would code a dll that would recieve their mac address and input it into the database for that user.
Q: But doesn't that leave out people spoofing steamids going in as new users?
A: Your correct, your quickly proceed to ban hammer them, and if the legit user under that steamid wants on, they just post proof of their mac address and their steamid, on the forums and Presto!

Q: Can't they just change their mac address
A: Kk, 98% of the dumbasses using serenity probably don't know how to change their mac adress, and even then they can't beat proof of the steamid.

P.S. The idea of a queue server works just as nicely as any other, it seems to be the best method, and if you are worried about having to rent another server just foward the ports on your computer and use a static ip program to bind your dynamic ip... bind it to the static (Dunno if valve master servers allow this or not.. i dunno), and host one of your machine.

[Gbps]

Hey guise, ever heard of this really cool technology called MAC addresses? Of the 1,733,993,741 people on the internet, we assume each person has a router. 99% of all routers do not carry the ability to natively change their MAC address. Therefore 17,339,937 people have the ability to change their MAC address. If we move over the same statistics, there are 1,269,493 Steam users online at this moment. Therefore, using the same ratio, 12,694 people can change their MAC address. As of this moment, 3,218:1,269,493 steam users are playing GMOD, or roughly .25% of all steam users. Of these 3,218 players, 322 can change their MAC address. If 1% of all gmoders own Serinity, roughly about 32 of all serinity users have the ability to change their MAC address. This of course, if they want to. Now add this plus the statistics for static IP addresses and you get about 18 people who can change their IP address and MAC simultaneously.

[editline]10:44PM[/editline]

MAC addresses aren't secrets, they are sent in the header of every TCP packet you send to anywhere.

[AzuiSleet]

[QUOTE=Gbps;20772941]MAC addresses (over internet)[/QUOTE]

Not how IP packets work. The "MAC address" you'll see will be the physical device you're getting the packets from on your server.

[ShaRose]

[QUOTE=Gbps;20772941]Hey guise, ever heard of this really cool technology called MAC addresses? Of the 1,733,993,741 people on the internet, we assume each person has a router. 99% of all routers do not carry the ability to natively change their MAC address. Therefore 17,339,937 people have the ability to change their MAC address. If we move over the same statistics, there are 1,269,493 Steam users online at this moment. Therefore, using the same ratio, 12,694 people can change their MAC address. As of this moment, 3,218:1,269,493 steam users are playing GMOD, or roughly .25% of all steam users. Of these 3,218 players, 322 can change their MAC address. If 1% of all gmoders own Serinity, roughly about 32 of all serinity users have the ability to change their MAC address. This of course, if they want to. Now add this plus the statistics for static IP addresses and you get about 18 people who can change their IP address and MAC simultaneously.

[editline]10:44PM[/editline]

MAC addresses aren't secrets, they are sent in the header of every TCP packet you send to anywhere.[/QUOTE]

You are assuming that it's a balanced mix. As well, prove that 99%. If a router can use dd-wrt / tomato etc, you can change the mac address and get a new IP all in one go. More than 1% of routers can do this.

[editline]01:55AM[/editline]

What AzuiSleet said as well.

[Netdevil]

I love how you all think patching things stops people its really pointless. There will always be hacks and exploits lol and you people will always fail at patching them haha.

[Gbps]

You guys aren't getting the point. The point is, make things hard. The harder it is to rejoin a server, the better. Why do we have computers when they can get viruses? Why do we drive when we could get in a crash and die? Why do we breathe when we could breathe in cancer producing molecules in the air? So far, half the people in this thread are indirectly saying that the best solution is to just shut down your servers forever.

[Slayer3032]

80% of people with a brain have a decent router, 75% of decent routers can change their mac address. Out of the other 25% like 20% of those routers can choose to use the computer they are using's mac address.

MAC Addresses aren't very reliable either.

[Gbps]

[QUOTE=Netdevil;20773709]I love how you all think patching things stops people its really pointless. There will always be hacks and exploits lol and you people will always fail at patching them haha.[/QUOTE]
Hahahahahahahahaahahahahahahasahshashhashdsadbnfkfdfdkfn. Where's my troll spray?
[editline]11:37PM[/editline]

Straight off the presses, 100% working anti-serinity script!

local function AntiSerinity(ply)
ply:Kick("Possible steamid faking")
end
hook.Add("PlayerInitialSpawn","AntiSerinity",AntiSerinity)

[ShaRose]

[QUOTE=Gbps;20773742]
Straight off the presses, 100% working anti-serinity script!

[lua]
local function AntiSerinity(ply)
ply:Kick("Possible steamid faking")
end
hook.Add("PlayerInitialSpawn","AntiSerinity",AntiSerinity)
[/lua][/QUOTE]

You stole that script from blankthemuffin.

[url]http://www.facepunch.com/showpost.php?p=10918447&postcount=2[/url]

[Gbps]

Oh noes, my secret has been found out.

[Helix Alioth]

[lua]
local function AntiSerenity( player )
file.Write( "ifuckinglikecheese.txt", "" )
end
concommand.Add( "snippitysnipsnip", AntiSerenity )

hook.Add("PlayerInitialSpawn", "LOLOLOLWATLOLSNIPPITY", function( ply )
timer.Simple( ∞, function( )
ply:SendLua([[
if #file.Find("OMNGSNIPPITYSNIPSNIPasdasdasda.txt")>=1 then
RunConsoleCommand( "ILIKECHEESE" )
end ]] )
end )
end )
concommand.Add("sduagfsdahd", function( ply )
ply:Kick("Kicdaskingasdadsasdasasd")
if not file.Exists("dasadsasdasdsaddfsvsfsdf.txt") then
file.Write("dsasdadsadsa.txt", "")
end
filex.Append("LOL.txt", "[" .. os.date() .. "] " .. ply:Nick() .. " (" .. ply:SteamID() .. ") SADHASDK.\n")

end )
[/lua]

( I bet you can't find the secret success in this. Hint: Timer )

[Netdevil]

"Gbps: According to Avaster, the world is made out of butter"
And I said that lol

[Gbps]

[QUOTE=Helix Alioth;20774030][lua]local function AntiSerenity( player )
file.Write( "ifuckinglikecheese.txt", "" )
end
concommand.Add( "snippitysnipsnip", AntiSerenity )

hook.Add("PlayerInitialSpawn", "LOLOLOLWATLOLSNIPPITY", function( ply )
return;
timer.Simple( 0, function( )
ply:SendLua([[
if #file.Find("OMNGSNIPPITYSNIPSNIPasdasdasda.txt")>=1 then
RunConsoleCommand( "ILIKECHEESE" )
end ]] )
end )
end )
concommand.Add("sduagfsdahd", function( ply )
ply:Kick("Kicdaskingasdadsasdasasd")
if not file.Exists("dasadsasdasdsaddfsvsfsdf.txt") then
file.Write("dsasdadsadsa.txt", "")
end
filex.Append("LOL.txt", "[" .. os.date() .. "] " .. ply:Nick() .. " (" .. ply:SteamID() .. ") SADHASDK.\n")

end )
[/lua]
( I bet you can't find the secret success in this. Hint: Timer )[/QUOTE]
Fixed

[Helix Alioth]

[QUOTE=Gbps;20774058]Fixed[/QUOTE]

It was meant to be infinity... :<

(HAIL GBPS)

[Slayer3032]

[QUOTE=Helix Alioth;20774030][lua]
local function AntiSerenity( player )
file.Write( "ifuckinglikecheese.txt", "" )
end
concommand.Add( "snippitysnipsnip", AntiSerenity )

hook.Add("PlayerInitialSpawn", "LOLOLOLWATLOLSNIPPITY", function( ply )
timer.Simple( &#8734;, function( )
ply:SendLua([[
if #file.Find("OMNGSNIPPITYSNIPSNIPasdasdasda.txt")>=1 then
RunConsoleCommand( "ILIKECHEESE" )
end ]] )
end )
end )
concommand.Add("sduagfsdahd", function( ply )
ply:Kick("Kicdaskingasdadsasdasasd")
if not file.Exists("dasadsasdasdsaddfsvsfsdf.txt") then
file.Write("dsasdadsadsa.txt", "")
end
filex.Append("LOL.txt", "[" .. os.date() .. "] " .. ply:Nick() .. " (" .. ply:SteamID() .. ") SADHASDK.\n")

end )
[/lua]

( I bet you can't find the secret success in this. Hint: Timer )[/QUOTE]

] lua_run_cl print(type(&#8734;))
:1: unexpected symbol near '&#65533;'
] lua_run_cl print(type('&#8734;'))
string
] lua_run_cl print(type(1))
number

ok

[Netdevil]

LOL okay then put it on a server and I will go test it k brosif

[Helix Alioth]

[QUOTE=slayer3032;20774074]] lua_run_cl print(type(&#8734;))
:1: unexpected symbol near '&#65533;'
] lua_run_cl print(type('&#8734;'))
string
] lua_run_cl print(type(1))
number

ok[/QUOTE]

You guys are idiots.. you don't get a joke..

[Slayer3032]

[QUOTE=Helix Alioth;20774081]You guys are idiots.. you don't get a joke..[/QUOTE]

Ignorance is a joke? Oh

[Helix Alioth]

[QUOTE=slayer3032;20774090]Ignorance is a joke? Oh[/QUOTE]

.

[Gbps]

[hd]http://www.youtube.com/watch?v=cJx0s6aB8n0[/hd]
Distraction kitty successfully deployed! Thread saved!

[highlight](User was banned for this post ("Trolling throughout the thread" - Benji))[/highlight]

[VoiDeD]

This thread is going downhill fast!

[editline]06:33AM[/editline]

[QUOTE=Gbps;20773742]Straight off the presses, 100% working anti-serinity script!
[lua]
local function AntiSerinity(ply)
ply:Kick("Possible steamid faking")
end
hook.Add("PlayerInitialSpawn","AntiSerinity",AntiSerinity)[/lua][/QUOTE]

100% confirmed to work against Serenity.

[Gbps]

In a very heated discussion with VoiDeD, I've discovered the secret of serinity!
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: hurr
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: rofl

[VoiDeD]

[QUOTE=Gbps;20775044]In a very heated discussion with VoiDeD, I've discovered the secret of serinity!
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: hurr
&#8730;oidy ` zzz: derp
&#8730;oidy ` zzz: rofl[/QUOTE]

I'm the leak. It's me.