So I was reading this post

[blackdragonsdg]

After reading all the way through this post: http://eqemulator.net/forums/showthread.php?t=29125 I started thinking why can’t we as a community do something to try to stop or at the very least greatly hinder the few wannabe hackers who are disrupting servers and web forums. I would be willing to bet that it is the same peons doing the same old tricks repeatedly.
Lets face it hacking yahoo, hotmail and google email accounts is far from complicated and hacking most web forums or using a dos attack on a single ip address is not exactly rocket science either. Every time someone does any of the above mentioned they leave a footprint of some type whether it is ip address, mac address or some other form of id. We all have access to pretty much the same information as the peons causing the problems so why not use it against them.
Those who write the login scripts or have control of the main login server would obviously have the biggest potential impact on limiting and/or eliminating disruptions. The web forums or servers that are being attacked or have been attacked likely have information like ip addresses, account names and so forth that can be cross referenced with the main login server’s information and could ultimately be used against those stirring up trouble. I know that ip addresses and login information can be faked or stolen but the individuals causing the problems will at some point make a mistake that gives away who they really are. If enough complaints about a single ip address make their way to the ISP’s we can make them do something about it.
A permenant sticky post containing all the information that can be gathered on those causing problems would help keep the individual server administrators up to date on who to watch out for. This information would also need to be stored offline so in the event of another forum security breach the gathered information would still exist in a safe place. Also tracking the commonalities between the attacked servers and web forums could go a long way towards removing the annoyance of wannabe hackers. If these wannabe hackers had any real skill then they would not be targeting a web based video game.

[KingMort]

Amen man... There are certain Security companies however who do specialize in this.. Perhaps they may be willing to help though it would take a large community push for funding to accomplish that.. And chances are they won't even touch it due to the client we are using...

[blackdragonsdg]

Getting a security company to help use track down the wannabe hackers would be ideal but like you said the content we are dealing with will likely cause most to walk away very quickly.


Oh and thought of something else we would need to track...the types of attacks being used. As the possibility of finding a link between the types of attacks being used and the hosting types and setups being targeted would be of significant use to us.

[Secrets]

You guys act like it's some big secret. It's MacroQuest 2 plugins that cause this, and they've been doing it for years.

I don't think a "security company" will help you. At all. Look at GameGuard, HackShield, etc. You need serverside detection for an open-source community, not clientsided. The only time a clientsided hack detection will work is the same time the project is closed source. (See: Bane of Life.)

And to be honest, there's a lot of it as it is. The best part about open-source (as it is shown in PHPBB communities and the like) is that you can solve all issues by submitting fixes for them. So, if you have a better solution to fix an exploit, just submit it. Otherwise it's going to stay broken forever. No amount of anti-hack is EVER going to fix the exploit, unless you keep the anti-hack closed source and your project as well.

Keep dreamin'.

[blackdragonsdg]

Secrets, no one is pretending like any of this is a secret. The whole idea was to invoke discussion to find a solution to the problem. If you know the cause of the problem then it should be fairly easy to fix.

If Macroquest is the source of the problem as you clearly said then why hasn't it's function been coded not to work with the emulator? And yes i know that previous statment is easier said than done. The fact that the emulator is open source should just make the solution easier to implement. The biggest problem with people submitting fixes to an exploit is that not everyone in the eqemu community is capable of writting code in a manner that would be useful.

It would be easy to sit here knowing what the problem is and do nothing to try and fix it. Alot of people try the passive method and none succeed. I can talk about this till I turn purple but if no one is willing to help then the whole conversation is pointless.

[KingMort]

Well if we could some how force the clients to have a Security program loaded up before eqgame.exe and if that program is not present then some type of signal is sent to crash the client or disconnect them...

This program would detect and stop Macroquest users dead in their tracks the tricky part is finding a way to ensure that it stayed up during their play time..

[Secrets]

Originally Posted by blackdragonsdg

Secrets, no one is pretending like any of this is a secret. The whole idea was to invoke discussion to find a solution to the problem. If you know the cause of the problem then it should be fairly easy to fix.

If Macroquest is the source of the problem as you clearly said then why hasn't it's function been coded not to work with the emulator? And yes i know that previous statment is easier said than done. The fact that the emulator is open source should just make the solution easier to implement. The biggest problem with people submitting fixes to an exploit is that not everyone in the eqemu community is capable of writting code in a manner that would be useful.

It would be easy to sit here knowing what the problem is and do nothing to try and fix it. Alot of people try the passive method and none succeed. I can talk about this till I turn purple but if no one is willing to help then the whole conversation is pointless.

Know why no one is willing to help?

Because stuff like warping, maps, etc. CANNOT be disabled serversided. You can detect it, but you cannot fix CLIENT issues SERVERSIDED. If you make a CLIENTSIDED detection that is open-source, people would know exactly how to bypass it on the CLIENT. Please, tell me a way you can disable sending every NPC in the zone to the client without sending every NPC to the zone in the client. I'd love to know a way. Please, also tell me how you can disable warping without detecting normal people moving. Including short-range warping. Again, i'd LOVE to know.

There is no simple solution to it, that will just pop out at you. Sorry you think it's easy as

if(MacroQuestDetected == 1)
StopMacroQuest;

because it's not. I am sure someone could make an anti-hack for EQ (as shown in baneoflife) if they wanted to. I am telling you a serversided anti-hack is possible, but a clientsided anti-hack is not feasable in an open-source community.