[INFO] Cheaters and Exploiters

[Dridmar]

I'm not saying we should just let the "hackers" run around until the community grows bigger. I like it that some members are helping Blasto/Thothie with catching them. I'm just saying we don't need to make some sort of Official FN Police group right now.

 

[[FSM]Higgins]

Yeah I agree with dridje actually this community doesnt need any GM"s yet nor will it... unless we are going to have corrupt cops than.. i totally agree with the idea and FSM will fill the spot.

 

[The Man In Black]

Or.. you know.. People who have good judgement, are in good standing with the community, and who don't abuse power :roll:

 

[HomestarR]

You can't truly know that about a person from just a few posts though.

 

[The Man In Black]

No, but people who have been around for a long time generally would have shown their true colors.

 

[Shurik3n]

I find the hex editor hard to believe. Their whole purpose in cheating was to become notorious, or so it seems, so why not do something more... level 255 ish.

 

[Blasto121]

hex editors don't work that way, what would be required to do something like that would cause me to no longer want to be the FN admin...

 

[J-M v2.5.5]

Applying for possible [FN] Police Force...!

 

[WeissberV]

Applying for possible [FN] Police Force...!

me = Riot control Police

 

[Tentadrilus]

Where do I sign?

 

[villager]

I was the first to come up with the idea :|

 

[J-M v2.5.5]

I was the first to come up with the idea :|

And you are trying to say... what?

Oh and :| :| :| :| :| :| :| :| :| :|

 

[villager]

...What?

I was only joking around but go ahead and take it personally.

 

[Thothie]

I'm not big on the police force idea, but that's up to Blasto. Most everyone has access to the FN archives though, and as the wise Marge Simpson once said, "So long as everyone's video taping everyone else, justice will be served."

As for the new cheat, it's not a hex editor - it's a memory editor, and VAC does not catch it.

From the details I've gotten, it may not have access to all the encrypted memory space, which is why no one's managed to change attributes outright, but it seems to have access to transient and unprotected memory, of which there's quite a bit, and I've no real way to protect. You can adjust experience values on monsters, get script names, etc. etc.

So basically, we're back to the MS 1.35 Art Money days, more or less.

 

[Shurik3n]

Aye, only a few values are actually encrypted. Certain things that effect aforementioned values are not. I'll look into more encryption, but I don't doubt it would cause the game to be even more CPU unfriendly. For now the best bet is to continue the vigilante watch of cheaters. Its not like they aren't painfully obvious.

On a side note: In my opinion the only thing the cheaters can really do to damage the game is to distribute items to everyone. Perhaps FN backups should be taken more often, so that all of FN could be reverted if an extreme case of cheated item distribution occurs.

 

[Belmont]

Making items undropable could fix most of this, but it also would kill trading, but IMO, until a real fix comes up this should be enough.

 

[CrazyMonkeyDude]

Then what do we do with our random crap that's useful for newbies but not for us?


...What do we do with our random crap in general?

 

[Belmont]

Oh right, we could have a NPC that takes them, but of course, this would be an extreme solution, and there's always hope we can stop cheaters before we do this.

 

[Sabre]

Two things:
An item destroyer NPC
And an item 'check' made out to a trade recipient, maybe done using a steamID.

 

[The Man In Black]

I was the first to come up with the idea :|

Actually, I came up with the idea a LOOOONG time ago, but I PMed it to Thoth and he didn't run with it ;-)

 

[villager]

I was the first to come up with the idea :|

Actually, I came up with the idea a LOOOONG time ago, but I PMed it to Thoth and he didn't run with it ;-)

PMing anything to Thothie is like throwing rocks into a oblivion, so you actually never thought of it.

 

[Tirex]

Make a fake equip that dosent do anything and dosent drop anywhere at all, if someone has it - we found our hacker.

 

[Slaytanic_pb]

hmmm

That MIGHT work if -

1) The item looks really cool to have - ie. really powerful in some way.

2) There's a way to have the characters items to be scanned in real-time for such items. Only active characters would needed to be scanned, for obvious reasons.

Making #1 is easy, doing #2 would probably kill the FN CPU. Besides if I was a h4x0r (and I am most certainly not btw), I wouldn't be stupid enough to fall for bait like this. I would just hax up items that are already to be known in the game and people have already reported where it was found in the game so I wouldn't be the first to have it and could say where I found it.

It would be better if there was a way for there to be a log of items found in game that could be checked against a master list of where items can be legally found. If item X is found on map Y, but can only be legally found on map(s) A,B, or C, then you probably found a h4x0r. It would even be better if where on the map items where found in order to prevent items that are available on a certain map to be found in the wrong chest and "pass" the screening. You could probably make this a real-time scan (or near real-time) if you make the logs in plain text and the logs themselves make a simple report like -Character A got item X, on map Y, from chest Z. Doing a text comparison shouldn't tax the CPU much. If everything is ok, then nothing else needs to be done. If the comparison doesn't match, then a log is made of the character(s) with the illegal item and be dealt with accordingly. I think this will work even if someone using the "memory hax" were to try and falsify the log report if the reporting is made "cryptic" enough so it would be near impossible to fake a report of finding the item legally. For instance instead of GIB, it could be 1b3, instead of map ms_legal_map, it could be a2c, and instead of chest #2, it could be 77. If it was done this way, the master list codes would need to be changed every so often so that one couldn't make their own master list to use to make false reports.

 

[coleSlaw]

I was the first to come up with the idea :|

Actually, I came up with the idea a LOOOONG time ago, but I PMed it to Thoth and he didn't run with it ;-)

PMing anything to Thothie is like throwing rocks into a oblivion, so you actually never thought of it.

I PMed Thothie today and he PMed me back :|

 

[The Man In Black]

You must be the chosen one :roll: