Go Back   EQEmulator Home > EQEmulator Forums > General > General::General Discussion

General::General Discussion General discussion about EverQuest(tm), EQEMu, and related topics.
Do not post support topics here.

Reply
 
Thread Tools Display Modes
  #1  
Old 08-07-2009, 10:53 PM
demonstar55
Demi-God
 
Join Date: Apr 2008
Location: MA
Posts: 1,164
Default

there are already server-side detection of some hacks (MQ2Warp, etc) but they do generate false positives, and yes, there are hacks to circumvent the detections :/

best bet would be to improve on the current detection systems and add any other detections that can be done reliably

The current system just logs to the hackers table in the DB

And the current MQ2Warp detection makes more false positives for SoF (the time between loc updates is longer than Titanium or something)
Reply With Quote
  #2  
Old 08-07-2009, 11:17 PM
3z3ki3l
Fire Beetle
 
Join Date: Sep 2007
Posts: 17
Default

Quote:
Originally Posted by demonstar55 View Post
there are already server-side detection of some hacks (MQ2Warp, etc) but they do generate false positives, and yes, there are hacks to circumvent the detections :/

best bet would be to improve on the current detection systems and add any other detections that can be done reliably

The current system just logs to the hackers table in the DB

And the current MQ2Warp detection makes more false positives for SoF (the time between loc updates is longer than Titanium or something)
MQ is not "detectable" in the right hands because it can run completely passively depending on which features you sacrifice. Detection methods are redundant as fuck and the huge margin of error allows the other lesser known hacks to run freely -- VZTZ pushed these anti-hacking methods as far as they could and the problems only snowballed (if you didn't notice).

Its funny because I had the same discussion with Null (most recent joke dev on VZTZ) and after alot of pining I came to the conclusion the only "real" solution would be a piece of software that coordinates with the server to make sure nothing is toying with the client. To which he brought up the "failure" of the Bane of Life software... so I checked it out and the fucking thing hadn't even been compiled yet, much less failed.

Ultimately I can't chalk this up to anything but some serious penis envy and total technical ignorance to the issues at hand. All of which is perpetuated and displayed here in this and related threads.
Reply With Quote
  #3  
Old 08-07-2009, 11:26 PM
demonstar55
Demi-God
 
Join Date: Apr 2008
Location: MA
Posts: 1,164
Default

Quote:
Originally Posted by 3z3ki3l View Post
MQ is not "detectable" in the right hands because it can run completely passively depending on which features you sacrifice. Detection methods are redundant as fuck and the huge margin of error allows the other lesser known hacks to run freely -- VZTZ pushed these anti-hacking methods as far as they could and the problems only snowballed (if you didn't notice).

Its funny because I had the same discussion with Null (most recent joke dev on VZTZ) and after alot of pining I came to the conclusion the only "real" solution would be a piece of software that coordinates with the server to make sure nothing is toying with the client. To which he brought up the "failure" of the Bane of Life software... so I checked it out and the fucking thing hadn't even been compiled yet, much less failed.

Ultimately I can't chalk this up to anything but some serious penis envy and total technical ignorance to the issues at hand. All of which is perpetuated and displayed here in this and related threads.
I understand that, just say the best bet to stop MQ2 active hacks at least would be better detection methods, but not sure if we've reached the limit yet
Reply With Quote
  #4  
Old 08-07-2009, 11:30 PM
3z3ki3l
Fire Beetle
 
Join Date: Sep 2007
Posts: 17
Default

Quote:
Originally Posted by demonstar55 View Post
I understand that, just say the best bet to stop MQ2 active hacks at least would be better detection methods, but not sure if we've reached the limit yet
Check out Yeor's server: www.baneoflife.com. The "Client Manager" is what you should read into -- it successfully detects anything latching into the client and will instaban the user (by more than IP) with NO margin for error.

That's where the cock envy I spoke of entered the picture.
Reply With Quote
  #5  
Old 08-08-2009, 02:21 AM
blackdragonsdg
Dragon
 
Join Date: Dec 2008
Location: Tennessee
Posts: 656
Default

Quote:
Originally Posted by 3z3ki3l View Post
Check out Yeor's server: www.baneoflife.com. The "Client Manager" is what you should read into -- it successfully detects anything latching into the client and will instaban the user (by more than IP) with NO margin for error.
That is an interesting way to hinder or stop cheaters.
Reply With Quote
  #6  
Old 08-08-2009, 02:32 AM
demonstar55
Demi-God
 
Join Date: Apr 2008
Location: MA
Posts: 1,164
Default

Quote:
Originally Posted by 3z3ki3l View Post
Check out Yeor's server: www.baneoflife.com. The "Client Manager" is what you should read into -- it successfully detects anything latching into the client and will instaban the user (by more than IP) with NO margin for error.

That's where the cock envy I spoke of entered the picture.
and if they're not running the client manager? juts kick and yell at them to use it?
Reply With Quote
  #7  
Old 08-08-2009, 08:15 AM
3z3ki3l
Fire Beetle
 
Join Date: Sep 2007
Posts: 17
Default

Quote:
Originally Posted by demonstar55 View Post
and if they're not running the client manager? juts kick and yell at them to use it?
They literally cannot play without running the client manager. They cannot start the client without it and it is synced with the server... if the client manager stops the server will kick you.
Reply With Quote
  #8  
Old 08-08-2009, 10:08 AM
Leere
Sarnak
 
Join Date: Sep 2008
Location: Home
Posts: 31
Default

That client manager is a complete failure of concept. It's an external add-on linking to the server with its own protocol. The server has no way of telling it apart from something imitating that protocol and sending that everything is just fine.

Face it, any kind of client-side protection is at best an attempt at making it too much of an effort to circumvent, and you've as good as lost that battle to begin with by needing to provide access to the client software in the first place.

The only way to make something like that work is to have OS support for segregated data where nothing can access your memory space or even physical data files. About the only way to currently even attempt something like that is to basically install the equivalent of a virus.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

   

All times are GMT -4. The time now is 04:51 PM.


 

Everquest is a registered trademark of Daybreak Game Company LLC.
EQEmulator is not associated or affiliated in any way with Daybreak Game Company LLC.
Except where otherwise noted, this site is licensed under a Creative Commons License.
       
Powered by vBulletin®, Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Template by Bluepearl Design and vBulletin Templates - Ver3.3