Pages: [1] 2 3 4 5 6 ... 12   Go Down

Author Topic: The Spread Of Aimbots.  (Read 155537 times)

St. Anger

  • Posts: 377
  • Turrets: +58/-83
The Spread Of Aimbots.
« on: June 08, 2007, 08:50:52 am »
Recently, maybe 3-4 days ago on Fragify# (Boom Boom). There was a guy using an aimbot, he even admitted it. He also spammed the site where he got it from every other 5 minutes. Which I remember, incase any programmer thinks he/she knows how to make an anti-patch.
He also said it was a beta, which is similar to other peoples claims about the recent aimbot activity.

We can expect more and more aimbotters coming around so we need to come up with some kind of solution!!
Logged

Odin

  • Spam Killer
  • *
  • Posts: 1767
  • Turrets: +113/-204
    • My Website
The Spread Of Aimbots.
« Reply #1 on: June 08, 2007, 09:16:01 am »
The solution's already been around since March 31 2006.
Logged

Lava Croft

  • Guest
The Spread Of Aimbots.
« Reply #2 on: June 08, 2007, 09:37:53 am »
There is no solution for hackers and there never will be.
Logged

gareth

  • Posts: 710
  • Turrets: +38/-89
The Spread Of Aimbots.
« Reply #3 on: June 08, 2007, 09:49:49 am »
the solution is admins.
Logged

TRaK

  • Posts: 442
  • Turrets: +94/-21
    • TRaK@MG
The Spread Of Aimbots.
« Reply #4 on: June 08, 2007, 10:09:01 am »
Yeah, I just ran into an aimbotter earlier today as well.

Demo here :
http://uploaded.to/?id=khtfnj


edit: I should say that I have absolutely no way of proving that this aimbotter is the real [afix]Jay, and not just some imitator.

edit2 : Jay's reply on this : http://dretchstorm.com/node/1299#comment-5464
Logged

Lava Croft

  • Guest
The Spread Of Aimbots.
« Reply #5 on: June 08, 2007, 10:15:22 am »
Quote from: "gareth"
the solution is admins.

Admins are only a temporary solution that isn't even always available. You would need admins that spectate the server 24/7. Not even V-Caveman is crazy enough to do that.
Logged

DASPRiD

  • Administrator
  • Posts: 549
  • Turrets: +21/-2
    • http://www.dasprids.de
The Spread Of Aimbots.
« Reply #6 on: June 08, 2007, 11:54:35 am »
We should make the GUIDs hardware based, so re-installing Tremulous would not change it. This way, we would have a greater chance of banning cheaters. We should also implement an online database, which tracks all banned GUIDs. If a GUID is banned from several servers (with different IPs), the GUID gets globally banned.
Logged
url=https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=mail%40dasprids%2ede&item_name=DASPRiD%27s&no_shipping=0&no_note=1&tax=0&currency_code=EUR&lc=DE&bn=PP%2dDonationsBF&charset=UTF%2d8][/url]

Nux

  • Posts: 1778
  • Turrets: +258/-69
The Spread Of Aimbots.
« Reply #7 on: June 08, 2007, 12:01:53 pm »
Quote from: "Lava Croft"
There is no solution for hackers and there never will be.


Maybe no solution (meaning something that will stop hacking for good) but if anything that's a reason to keep trying to invent new ways of finding and pacifying such hacks. If ever you stop they will corrupt all that we hold dear and everything precious to us. We should never stop fighting! NEVER!
Logged

PFB

  • Guest
The Spread Of Aimbots.
« Reply #8 on: June 08, 2007, 12:05:12 pm »
Logged

David

  • Spam Killer
  • *
  • Posts: 3543
  • Turrets: +249/-273
The Spread Of Aimbots.
« Reply #9 on: June 08, 2007, 12:13:27 pm »
lol
Logged
Any maps not in the MG repo?  Email me or come to irc.freenode.net/#mg.
--
My words are mine and mine alone.  I can't speak for anyone else, and there is no one who can speak for me.  If I ever make a post that gives the opinions or positions of other users or groups, then they will be clearly labeled as such.
I'm disappointed that people's past actions have forced me to state what should be obvious.
I am not a dev.  Nothing I say counts for anything.

[A]

  • Posts: 106
  • Turrets: +2/-5
The Spread Of Aimbots.
« Reply #10 on: June 08, 2007, 01:04:22 pm »
Quote from: "DASPRiD"
We should make the GUIDs hardware based, so re-installing Tremulous would not change it. This way, we would have a greater chance of banning cheaters. We should also implement an online database, which tracks all banned GUIDs. If a GUID is banned from several servers (with different IPs), the GUID gets globally banned.


It sounds very interesting, is it really possible ?
Logged

Azrael07

  • Posts: 33
  • Turrets: +3/-13
The Spread Of Aimbots.
« Reply #11 on: June 08, 2007, 01:22:19 pm »
I think it could be good against "kervins" who know only tremulous official binary release, but if someone can make a wallhack or aimbot patch, He could be easly generate fake guid keys and give fake hardware specification
Logged

d0t

  • Posts: 6
  • Turrets: +0/-0
The Spread Of Aimbots.
« Reply #12 on: June 08, 2007, 01:50:06 pm »
Quote from: "DASPRiD"
We should make the GUIDs hardware based, so re-installing Tremulous would not change it. This way, we would have a greater chance of banning cheaters. We should also implement an online database, which tracks all banned GUIDs. If a GUID is banned from several servers (with different IPs), the GUID gets globally banned.


Maybe its too simple for our aimbotters,but my brother ( a.k.a. Critical ), told me witch "hardware component" u could use. It is MAC Address of netwrok card.

Btw. In last week i've hunted 2 Aimbotters, at ATCS Battleground Server, and Swiss Lowping. You can find demos here:

http://www.savefile.com/projects/808497861
Files are in bottom of site...

1st replay
In first 5 minutes of replay I was playing as human. But after i started following UnnamedPlay, bcuz something was wrogn with this guy.
Please pay atention in 12:20 minute of it, u can see how it works.

2nd Replay
Have fun.

3rd Replay
Wait 1 minute, bcuz i was playing at start as alien.

Have fun guys,
d0t.
Logged
D.O.T. -  Device Optimized for Troubleshooting

Nux

  • Posts: 1778
  • Turrets: +258/-69
The Spread Of Aimbots.
« Reply #13 on: June 08, 2007, 02:35:24 pm »
Quote from: "TRaK"
Yeah, I just ran into an aimbotter earlier today as well.

Demo here :
http://uploaded.to/?id=khtfnj


It seems like everytime I see these aimbotters it's the same story. They become so reliant on the aimbot that you see them shooting/chomping forward (no matter whether there's a teammate there or not) waiting for their bot to direct the attack toward the enemy. How much fun can a person have doing something like that?!?
Logged

d0t

  • Posts: 6
  • Turrets: +0/-0
The Spread Of Aimbots.
« Reply #14 on: June 08, 2007, 02:37:33 pm »
Another an idea of my brother is to add feature of creating user accounts by Master Server(MS). User who doesnt have or have incorrect qfile(QFILE-Next Generation :P ) will be registred by MS and given qfile (GENERATED BY MS). When Player joins game, game server gets his qfile-NG and checks in MS qfile-NG database. If it's incorrect Game Server prohibites joining game.

Effects:
- MS has couple information about user (IP, QFile-NG, date of start playing, etc. )
- Users are unique in all Tremulous "wild wild word" :P
- MS Have little more work to do.  :P

how do you feel this ?
Logged
D.O.T. -  Device Optimized for Troubleshooting

DASPRiD

  • Administrator
  • Posts: 549
  • Turrets: +21/-2
    • http://www.dasprids.de
The Spread Of Aimbots.
« Reply #15 on: June 08, 2007, 02:50:14 pm »
Hm, something like that sounds nice, indeed. Or we build our own master server, and registration follows an activation with a key, which you receive via postal service... Ok, they would cost us something, but thats really unique then ;)
Logged
url=https://www.paypal.com/cgi-bin/webscr?cmd=_xclick&business=mail%40dasprids%2ede&item_name=DASPRiD%27s&no_shipping=0&no_note=1&tax=0&currency_code=EUR&lc=DE&bn=PP%2dDonationsBF&charset=UTF%2d8][/url]

Lakitu7

  • Tremulous Developers
  • *
  • Posts: 1002
  • Turrets: +120/-73
The Spread Of Aimbots.
« Reply #16 on: June 08, 2007, 03:02:44 pm »
Quote from: "d0t"
Maybe its too simple for our aimbotters,but my brother ( a.k.a. Critical ), told me witch "hardware component" u could use. It is MAC Address of netwrok card.


Anyone can change their MAC address to anything they wish at any time: even in windows, and without installing any additional software.
Logged

d0t

  • Posts: 6
  • Turrets: +0/-0
The Spread Of Aimbots.
« Reply #17 on: June 08, 2007, 03:12:18 pm »
thats why we ( me and my brother ) posted the 2nd idea...
Logged
D.O.T. -  Device Optimized for Troubleshooting

AKAnotu

  • Posts: 616
  • Turrets: +7/-9
The Spread Of Aimbots.
« Reply #18 on: June 08, 2007, 04:34:09 pm »
Quote from: "DASPRiD"
Hm, something like that sounds nice, indeed. Or we build our own master server, and registration follows an activation with a key, which you receive via postal service... Ok, they would cost us something, but thats really unique then ;)
prepared to ship those globally dasprid? lol
Logged

sleekslacker

  • Posts: 407
  • Turrets: +10/-35
The Spread Of Aimbots.
« Reply #19 on: June 08, 2007, 04:41:18 pm »
I think I gave this global registration idea earlier. It's too much of a hassle and avoidable unless you really tie the key to individual persons ( National ID number :D )
Logged
y last name is Jones, the family motto is "Jones' never give up!"

Currently ignoring all of your spams.

kevlarman

  • Posts: 2737
  • Turrets: +291/-295
The Spread Of Aimbots.
« Reply #20 on: June 08, 2007, 06:07:01 pm »
even if you manage to make keys based on hardware in a manner that you can't fake it (which is impossible btw), there's nothing stopping anyone from replacing your complex algorithm to calculate cl_guid with sprintf(newguid, "%x%x%x%x",rand(),rand(),rand(),rand());
Logged
Quote from: Asvarox link=topic=8622.msg169333#msg169333
Ok let's plan it out. Asva, you are nub, go sit on rets, I will build, you two go feed like hell, you go pwn their asses, and everyone else camp in the hallway, roger?
the dretch bites.
-----
|..d| #
|.@.-##
-----

Flower

  • Posts: 94
  • Turrets: +3/-0
The Spread Of Aimbots.
« Reply #21 on: June 08, 2007, 06:44:56 pm »
The only way would be to make the people pay like 3 or 4$ to get a GUID, located in a database and verified each time you play on a server. If the hacker get ban from every servers, he would need to buy a new one, and after 3 times, I guess many people would understand.

For now, if you can get a new GUID like you want, it's impossible to prevent hackers.
Logged
img]http://rm3d.free.fr/flower.jpg[/img]
I'm a Flower, wanna smell my pistil?

kevlarman

  • Posts: 2737
  • Turrets: +291/-295
The Spread Of Aimbots.
« Reply #22 on: June 08, 2007, 06:59:41 pm »
Quote from: "Flower"
The only way would be to make the people pay like 3 or 4$ to get a GUID, located in a database and verified each time you play on a server. If the hacker get ban from every servers, he would need to buy a new one, and after 3 times, I guess many people would understand.

For now, if you can get a new GUID like you want, it's impossible to prevent hackers.
actually you don't need a central database, just digital signatures are enough.
Logged
Quote from: Asvarox link=topic=8622.msg169333#msg169333
Ok let's plan it out. Asva, you are nub, go sit on rets, I will build, you two go feed like hell, you go pwn their asses, and everyone else camp in the hallway, roger?
the dretch bites.
-----
|..d| #
|.@.-##
-----

[Kcorp]Noobius

  • Posts: 197
  • Turrets: +3/-4
The Spread Of Aimbots.
« Reply #23 on: June 08, 2007, 07:03:21 pm »
!kick / !ban works quite well. lava said that admins are not online 24/7...neither are most players, chances are that if there are good people playing there will be an admin too so let's drop the pay 3$ to play idea please.
Logged
It's actualy Noobius but i can't be bothered to change it ^^

Quick, name two famous female inventors. Too tough? Ok, just name one.

beerbitch

  • Posts: 195
  • Turrets: +11/-19
The Spread Of Aimbots.
« Reply #24 on: June 08, 2007, 08:45:08 pm »
Quote from: "d0t"
Quote from: "DASPRiD"
We should make the GUIDs hardware based, so re-installing Tremulous would not change it. This way, we would have a greater chance of banning cheaters. We should also implement an online database, which tracks all banned GUIDs. If a GUID is banned from several servers (with different IPs), the GUID gets globally banned.


Maybe its too simple for our aimbotters,but my brother ( a.k.a. Critical ), told me witch "hardware component" u could use. It is MAC Address of netwrok card.

Btw. In last week i've hunted 2 Aimbotters, at ATCS Battleground Server, and Swiss Lowping. You can find demos here:

http://www.savefile.com/projects/808497861
Files are in bottom of site...

1st replay
In first 5 minutes of replay I was playing as human. But after i started following UnnamedPlay, bcuz something was wrogn with this guy.
Please pay atention in 12:20 minute of it, u can see how it works.

2nd Replay
Have fun.

3rd Replay
Wait 1 minute, bcuz i was playing at start as alien.

Have fun guys,
d0t.


Right, and mac addy is also spoofable.
Logged
Beerbitch - "Some days you're the pigeon, other days you're the statue"

David

  • Spam Killer
  • *
  • Posts: 3543
  • Turrets: +249/-273
The Spread Of Aimbots.
« Reply #25 on: June 08, 2007, 08:49:57 pm »
hard-disk or motherboard ID is harder.
work it into a public key system, and were going good.
Of course, being OSS it will get avoided, but it will slow the shit bags down.
Logged
Any maps not in the MG repo?  Email me or come to irc.freenode.net/#mg.
--
My words are mine and mine alone.  I can't speak for anyone else, and there is no one who can speak for me.  If I ever make a post that gives the opinions or positions of other users or groups, then they will be clearly labeled as such.
I'm disappointed that people's past actions have forced me to state what should be obvious.
I am not a dev.  Nothing I say counts for anything.

kevlarman

  • Posts: 2737
  • Turrets: +291/-295
The Spread Of Aimbots.
« Reply #26 on: June 08, 2007, 08:55:23 pm »
Quote from: "David"
hard-disk or motherboard ID is harder.
work it into a public key system, and were going good.
Of course, being OSS it will get avoided, but it will slow the shit bags down.
it won't slow them down. the solution is to give out signed qkey's for a small donation ($5 or something), and allow servers the option to only accept guids signed by timbo. (timbo had a similar idea, except with a central server and accounts replacing the digital signatures)
Logged
Quote from: Asvarox link=topic=8622.msg169333#msg169333
Ok let's plan it out. Asva, you are nub, go sit on rets, I will build, you two go feed like hell, you go pwn their asses, and everyone else camp in the hallway, roger?
the dretch bites.
-----
|..d| #
|.@.-##
-----

n00b.pl0x.

  • Posts: 34
  • Turrets: +4/-0
The Spread Of Aimbots.
« Reply #27 on: June 08, 2007, 08:56:51 pm »
Quote from: "n00b.pl0x."
It owns

just trying to figure it out, it sucks with aliens, I cant get it to pull off a headbite, for humans you have to either shoot when ur botting or bot, release, shoot, bot, which sucks.

all in all, its hard to use but it does give a good advantage.

something i want to point out, when i attempted to join SST(all 3 times) with it, i got an error message that tremulous had to shut down.
do they hold the solution?

perhaps their non virginity, i mean, unpurity (sv_pure, duh) is preventing the bot? i dunno, my kodez knowledge r slim.

Evlesoa could figure it out, though!
_________________
Resistance is futile.

Pledge allegiance to the pl0x.
Logged
url]http://tremulous.net/phpBB2/viewtopic.php?t=4205[/url]

proud follower of the original.

benmachine

  • Posts: 915
  • Turrets: +99/-76
    • ben's machinery
The Spread Of Aimbots.
« Reply #28 on: June 08, 2007, 09:20:31 pm »
SST is unpure
Logged
benmachine

PFB

  • Guest
The Spread Of Aimbots.
« Reply #29 on: June 08, 2007, 09:22:00 pm »
Quote from: "kevlarman"
Quote from: "David"
hard-disk or motherboard ID is harder.
work it into a public key system, and were going good.
Of course, being OSS it will get avoided, but it will slow the shit bags down.
it won't slow them down. the solution is to give out signed qkey's for a small donation ($5 or something), and allow servers the option to only accept guids signed by timbo. (timbo had a similar idea, except with a central server and accounts replacing the digital signatures)

timbo is wise
Logged
Pages: [1] 2 3 4 5 6 ... 12   Go Up