←back to thread

We outsmarted CSGO cheaters with IdentityLogger

(mobeigi.com)
379 points mobeigi | 3 comments | 16 Oct 24 18:18 UTC | HN request time: 0s | source
Show context
beeboobaa3 ◴[16 Oct 24 19:13 UTC] No.41862701[source]▶
I hope they asked permissions for storing those cookies. Otherwise they're violating various EU laws.
replies(6): >>41862795 #>>41862897 #>>41862983 #>>41862995 #>>41863047 #>>41876533 #
1. ketkev ◴[16 Oct 24 19:42 UTC] No.41863047[source]▶
I'm not a lawyer, but I think this actually has some interesting things to think about. Not all cookies require consent under the ePrivacy directive, there is an exception for cookies that are "strictly necessary for the delivery of a service requested by the user". I think that'd fit in this case, since providing a cheater free experience is part of the "service" the players are looking for. At the same time, the ePrivacy directive also mentions that the user should be provided with "clear and comprehensive information" about what is stored. Providing that would render the cookies useless.

I don't know how these would balance each other out legally, but it's fun to think about

replies(1): >>41864110 #
2. beeboobaa3 ◴[16 Oct 24 21:40 UTC] No.41864110[source]▶
No, that doesn't count. Companies have tried arguing that their ads' tracking cookies are strictly necessary otherwise they wouldn't be able to offer their services (ads pay the bills). And yet, they require consent.

Preventing cheaters is similar. And this is blatantly a tracking cookie.

replies(1): >>41864474 #
3. eqvinox ◴[16 Oct 24 22:26 UTC] No.41864474[source]▶
You aren't considering that ad cookies/tracking are used to enable a service to someone else (ad buyers), while this anti-cheat tracking cookie is used to enable a service to the user themselves (a cheat-free gaming experience.) I think that may make the difference.

Also, all of this was in 2017. Anyone doing it in 2024 should indeed run it past a lawyer.