It is impossible to distinguish a perfect aimbot from a perfect player, either through code or by specing. Imperfections can be built in to any aimbot to make it seem more human. They can even miss (surprise!), most typically because of lag.
Now what I really wanted to do with this post was scare the shit out of you all by reminding you that Tremulous, as an open source game, is very easy to hack. Namely, modify the source to report pure CRCs of the QVMs (which can be easily dumped) in vms-1.1.0.pk3 and voila, you're running custom CGAME with whatever dirty code you like.
Quake 3, while it was closed source, actually frustrated hackers. I recall a hack that required you to login with a pure client and then disconnect and connect again with your hacked client. With the source code released, that is no longer necessary.
So next time you see a "really good" player who has been "playing since FPSs were created", think twice. :wink:
Its not really a matter of IF Trem can be hacked, but WHEN. Making frequent releases and varying the protection code will help. Moreover, the protection code should be highly complicated and at least require the hacker to learn the entire Quake 3 engine and probably do enough work to have written the mod in the first place.
