Tomorrow, 1,500 people are getting banned for using Script Enforcer bypasses. - Garry's Mod

[QUOTE=King Penisless;41349090]Seems like a bad idea to run an unknown dll, you might want to post the source.[/QUOTE] So it can get patched? :P

[QUOTE=King Penisless;41349090]Seems like a bad idea to run an unknown dll, you might want to post the source.[/QUOTE] Not at all. Nothing special. Link: [url]http://puu.sh/3xcXZ.txt[/url] Enjoy.

[QUOTE=jayjay2244;41349148]So it can get patched? :P[/QUOTE] No, so server owners don't have to run unknown code on their servers.

removed

[QUOTE=Effektiv;41347022]So they can use more hacks to override it? Giving the option gives more ways to bypass it which defeats the object. The block should be coded into the dedicated server as well so those people that try to block access to the banlist from their client get nailed by the server to.[/QUOTE] That's completely retarded, you can't bypass or change or modify or tell the server not to kick for you being gbanned because it's SERVER-SIDE, you can't override that unless you're the damn owner. If you can explain to me how someone, from their client, would be able to bypass or hack their way through that, I'll take a gban myself. You can modify sv_cheats and sv_allowcslua because it's a CLIENT-SIDE variable, whereas VAC in other games and gbans in Gmod are SERVER-SIDE. If Garry programmed it so the client checked, that would be just plain stupid.

[QUOTE=Mr.2Sp00p;41349373][url=http://akk.li/pics/anne.jpg]http://www.youtube.com/watch?v=hU7EHKFNMQg[/url] I saw there was a make-a-picture-for-a-key-contest so I decided 2 make a video 'cus afterall videos r just thousands of pictures lol well anyway hope u enjoy 'cos I put a lot of work into it [/QUOTE] Reported

[QUOTE=roxi;41348048]You could just do a simple module - [url]http://188.165.203.201/gmsv_GBan_win32.dll[/url] That will allow [B][U]you[/U][/B] to choose who is banned from your server. [code] require("GBan") MsgN(GBan(1)) [/code][/QUOTE] Thanks for that, i've found [url=http://puu.sh/3x8a4]my own way[/url] of allowing banned players to join my server though. EDIT: Test server still up if anyone wants to test it (may not be 100% stable yet): unitedhosts.org:27013

[QUOTE=mfsinc;41349607]Thanks for that, i've found [url=http://puu.sh/3x8a4]my own way[/url] of allowing banned players to join my server though.[/QUOTE] All for the cause.

[QUOTE=roxi;41349655]All for the cause.[/QUOTE] You are a great person, just wanted you to know that.

[QUOTE=SashaWolf;41342299]I have to disagree with you on everything being able to be done in cheatengine, but for the most part you're right. It's funny he even claims he has a hack yet he can't even write an aimbot for it. The aimbot is pretty much what everyone uses to measure the value of a hack.[/QUOTE] Actually cheat engine is made SPECIFICALLY for that stuff.

[QUOTE=roxi;41348048]You could just do a simple module - [url]http://188.165.203.201/gmsv_GBan_win32.dll[/url] That will allow [B][U]you[/U][/B] to choose who is banned from your server. [code] require("GBan") MsgN(GBan(1)) [/code][/QUOTE] Wow, this certainly works. If anyone wants to give it a shot and test it out (if you're banned), give it a go. ltbzs.game.nfoservers.com:27015

[QUOTE=Pantho;41334711]How is banning people out of spite? Yes this is a sandbox game, but servers that run sv_allowcslua [B]1[/B] don't want you to bypass it and don't want you to run lua.[/QUOTE] This isn't script enforcer 0 means no one can run lua clientside.

[QUOTE=J!NX;41351528]Actually cheat engine is made SPECIFICALLY for that stuff.[/QUOTE] Cheat engine was (as far as I am aware) made for memory editing. I imagine everything in that list of features could be achieved pretty easily with CE (since they can all be done with cvars), but I don't think you can do d3d chams, or chams whatsoever, in cheatengine. Since you claim in that post that this feat is "easy", mind explaining how? That was the feature I targeted when I said I disagreed.

[QUOTE=SashaWolf;41356693]Cheat engine was (as far as I am aware) made for memory editing. I imagine everything in that list of features could be achieved pretty easily with CE (since they can all be done with cvars), but I don't think you can do d3d chams, or chams whatsoever, in cheatengine. Since you claim in that post that this feat is "easy", mind explaining how? That was the feature I targeted when I said I disagreed.[/QUOTE] Set the ignorez flag of a material to 1 and you can see it through walls. This can probably be done by cheatengine

I think this new anti-cheat system is throwing false positives to antivirus definition databases. Hitman Pro finds that client.dll and MenuSystems.dll are classified as: Gen:Trojan.Heur.GM.0000436190. My guess is because it sits and watches the active memory for applications modifying internals, antivirus software assumes it's something along the lines of SpyWare or as defined: a Trojan. It's been recently reported on the [url=http://steamcommunity.com/app/4000/discussions/1/864972620863854173/]Steam Discussion[/url] of Garry's Mod, though [url=http://facepunch.com/showthread.php?t=1267768%E2%80%8E]these reports started early as May[/url]. This could be the time when Garry started sniffing around for cheaters. If you do run Hitman Pro or anything similar that pulls information from F-Secure definition database, make sure you don't quarantine or remove any files from your Garry's Mod folder. Edit: [img]http://puu.sh/3xPV8.png[/img]

[QUOTE=roxi;41349655]All for the cause.[/QUOTE] Is there a way you can make it list the banned clients? I believe all the bans are unique id's of clients. aka the equivalent of util.CRC( "gm_steamid_gm" ). I heard they're also stored in server.dll, however easier to spot in linux's server binary file.

[QUOTE=Silentfood;41359714]I think this new anti-cheat system is throwing false positives to antivirus definition databases. Hitman Pro finds that client.dll and MenuSystems.dll are classified as: Gen:Trojan.Heur.GM.0000436190. My guess is because it sits and watches the active memory for applications modifying internals, antivirus software assumes it's something along the lines of SpyWare or as defined: a Trojan. It's been recently reported on the [url=http://steamcommunity.com/app/4000/discussions/1/864972620863854173/]Steam Discussion[/url] of Garry's Mod, though [url=http://facepunch.com/showthread.php?t=1267768%E2%80%8E]these reports started early as May[/url]. This could be the time when Garry started sniffing around for cheaters. If you do run Hitman Pro or anything similar that pulls information from F-Secure definition database, make sure you don't quarantine or remove any files from your Garry's Mod folder. Edit: [img]http://puu.sh/3xPV8.png[/img][/QUOTE] Garry has packed the modules.

[QUOTE=ateefromgmod;41330657]ONCE A CHEATER ALWAYS A CHEATER[/QUOTE] Fail. Please google "Ethical Hacker" and educate yourself. But yeah, this is serious, some of the servers I play on have custom anti-cheats that are tested by the admins via attempting to hack it. This completely undermines all community developed anti-cheat systems. Garry should add a global report cvar where if it is set to off, the detected hacker wouldn't end up globally banned, just locally which would allow people to test this stuff.

[QUOTE=BlitzkriegXX;41361574]Fail. Please google "Ethical Hacker" and educate yourself. But yeah, this is serious, some of the servers I play on have custom anti-cheats that are tested by the admins via attempting to hack it. This completely undermines all community developed anti-cheat systems. Garry should add a global report cvar where if it is set to off, the detected hacker wouldn't end up globally banned, just locally which would allow people to test this stuff.[/QUOTE] I'm not sure I'm seeing a problem here, if the admins testing anti cheat get banned by garrys system, why do they need to make their own? Garrys clearly works just fine.

[QUOTE=metallics;41361749]I'm not sure I'm seeing a problem here, if the admins testing anti cheat get banned by garrys system, why do they need to make their own? Garrys clearly works just fine.[/QUOTE] His don't instantly ban the player they are not an anti-cheat as you might think it does not want to stop you from cheating, it is waiting for you to cheat then it bans you the next chance it gets. So people would still hack on the server until they get off, so they are needed to stop them earlier.

[QUOTE=garry;41344639]My anti-cheat isn't an anti-cheat. It doesn't try to stop you cheating. You can bypass it easily. I don't want to stop you cheating. I want to catch you cheating - so I can ban your account.[/QUOTE] You should do what the guys down at Bungie did with Halo. 1. Let everyone go rampant with hacking instead of banning right away and have an internal logging system to get the details of how they're bypassing it, steamID, etc. 2. Take your time and make a very well coded anti-cheat for the hacks. 3. Use a supercharged Banhammer and one-shot AOE them all while simultaneously updating the game to patch all the hacks. 4. Using the internal logging system. Repeat steps 2 to 3. ------ Ok, being serious now, I remember you saying you don't have access to the entire Source engine. How big of a restriction is that to making a good anti-cheat system? EDIT: Also, brb food. EDIT2: Food was good. Love biryani.

[QUOTE=DannelorG;41361852]His don't instantly ban the player they are not an anti-cheat as you might think it does not want to stop you from cheating, it is waiting for you to cheat then it bans you the next chance it gets. So people would still hack on the server until they get off, so they are needed to stop them earlier.[/QUOTE] I know, I've been following the thread for a while. Give it a little while and hopefully people will realise it's just a waste of their account. Before that happens though what's wrong with kicking/banning yourself?

[QUOTE=BlitzkriegXX;41362159]You should do what the guys down at Bungie did with Halo. 1. Let everyone go rampant with hacking instead of banning right away and have an internal logging system to get the details of how they're bypassing it, steamID, etc. 2. Take your time and make a very well coded anti-cheat for the hacks. 3. Use a supercharged Banhammer and one-shot AOE them all while simultaneously updating the game to patch all the hacks. 4. Using the internal logging system. Repeat steps 2 to 3. ------ Ok, being serious now, I remember you saying you don't have access to the entire Source engine. How big of a restriction is that to making a good anti-cheat system.[/QUOTE] I would change one thing on that, since this is not halo and does use dedicated servers that are privately owned make sure owners can opt out of using the anti-cheats/ add exemptions with certain Steam Ids

[QUOTE=metallics;41361749]I'm not sure I'm seeing a problem here, if the admins testing anti cheat get banned by garrys system, why do they need to make their own? Garrys clearly works just fine.[/QUOTE] There are more ways to get around this SE protection system so admins put an extra layer of anti-cheat for those who are able to bypass it. Admins don't want to get [U]'potentially'[/U] banned while testing this extra layer of security.

[QUOTE=BlitzkriegXX;41362159]You should do what the guys down at Bungie did with Halo. 1. Let everyone go rampant with hacking instead of banning right away and have an internal logging system to get the details of how they're bypassing it, steamID, etc. 2. Take your time and make a very well coded anti-cheat for the hacks. 3. Use a supercharged Banhammer and one-shot AOE them all while simultaneously updating the game to patch all the hacks. 4. Using the internal logging system. Repeat steps 2 to 3. ------ Ok, being serious now, I remember you saying you don't have access to the entire Source engine. How big of a restriction is that to making a good anti-cheat system? EDIT: Also, brb food.[/QUOTE] Pretty sure that's exactly what we're doing?

[QUOTE=metallics;41362178]I know, I've been following the thread for a while. Give it a little while and hopefully people will realise it's just a waste of their account. Before that happens though what's wrong with kicking/banning yourself?[/QUOTE] I would prefer for garry to let the owners decide to turn it off or on, as if it is server side it would be nearly impossible to bypass. Reason I'm saying this is I did use a bypasser to run a bhop script on the server I play on, but the owner gave me permission to do so as I was a trusted user. If garry would just code in some exemption form to allow certain Steam Id's to use bypasses on a server without adding to a global ban list I would love the anti-cheat update.

[QUOTE=Goz3rr;41358242]Set the ignorez flag of a material to 1 and you can see it through walls. This can probably be done by cheatengine[/QUOTE] That can be done in the material file, but that's not chams. Chams are a rendering trick that makes the player one color if they are behind a wall and another color if they are in plain sight. Here is an example. [QUOTE][img]http://cloud-2.steampowered.com/ugc/884112244205571885/9073512E1E099CDD14CC664EF2A69D74F40D2507/[/img][/QUOTE]

[QUOTE=garry;41362237]Pretty sure that's exactly what we're doing?[/QUOTE] I wasn't aware that Garry's Mod had an automatic internal reporting mechanism.

[QUOTE=BlitzkriegXX;41362274]I wasn't aware that Garry's Mod had an automatic internal reporting mechanism.[/QUOTE] that's why 1500 people were banned at once [QUOTE=metallics;41361749]I'm not sure I'm seeing a problem here, if the admins testing anti cheat get banned by garrys system, why do they need to make their own? Garrys clearly works just fine.[/QUOTE] Some people like prevention rather than detection, and some people would just like to be able to detect the cheaters themselves. Or don't trust garry's method to catch everything.

[QUOTE=metallics;41361749]I'm not sure I'm seeing a problem here, if the admins testing anti cheat get banned by garrys system, why do they need to make their own? Garrys clearly works just fine.[/QUOTE] It really doesn't. Don't be mistaken, his anticheat didn't "ban all hackers". It only banned people who forced sv_allowcslua to 1, and I think people who ran stuff like winject. Cvar forcing is trivial, which is why so many people decided to do it, despite it being a horrible and easily detectable (by ser'ver owners) method. There are plenty of other ways to allow lua to be ran on the client, and there are plenty of other ways to cheat in the game. All this banwave did was ban all of the kids from hackforums and mpgh who used a really crappy method of cheating, not actual skilled hackers.