←back to thread

We outsmarted CSGO cheaters with IdentityLogger

(mobeigi.com)
379 points mobeigi | 6 comments | 16 Oct 24 18:18 UTC | HN request time: 0.411s | source | bottom
Show context
snarfy ◴[16 Oct 24 19:21 UTC] No.41862807[source]▶
For UT2004, you can ban by player GUID (a hash of the CD key) or IP. With the game abandoned by Epic, a number of key generators have cropped up, which makes GUID bans useless. IP bans only go so far with VPNs costing $2 these days.

The main solutions we have today are IP ban + VPN blocking using a database of known VPN subnets and adding them all to the firewall, and a similar fingerprinting technique which scans their folder structure of certain system folders.

replies(12): >>41862963 #>>41863123 #>>41863371 #>>41864302 #>>41864313 #>>41864340 #>>41864577 #>>41865500 #>>41865762 #>>41866999 #>>41867262 #>>41885146 #
1. johnisgood ◴[16 Oct 24 22:38 UTC] No.41864577[source]▶
> IP bans only go so far with VPNs costing $2 these days.

https://redman.xyz/doku.php/schachtmeister2 was made specifically against people using VPNs.

It was made for Tremulous (ioquake3 fork) where people kept evading IP bans, but it can be used for any other games.

It is not my project, but I know the author, and I could personally fork it and make it suitable for specific (or any) games if there is demand for it.

You may also use heuristics, too, in schachtmeister2:

  whois   -10     "Hosting"
  whois   -10     "hosting"
  whois   -7      "Server"
  whois   -4      "server"
  whois   -10     "VPS"
  whois   -13     "VPN"
  whois   -3      "Private Network"
  whois   +7      "residential"
  whois   +7      "Residential"
  whois   -20     "Dedicated Server"
Edit: I noticed that the git repository returns 502, contacted the maintainer.
replies(4): >>41867096 #>>41867996 #>>41870602 #>>41871465 #
2. lloeki ◴[17 Oct 24 06:56 UTC] No.41867096[source]▶
> IP bans only go so far with VPNs

Even without this IP bans only go so far as they're both easily swapped (VPN offers, or rent a VPS to forward traffic, or even by design with an ISP handing out dynamic IPs on router reboot) AND overreaching:

- NAT: ban household / campus

- CGNAT: ban whole neighbourhood

- IPv6: ban whole /64 => whole household (because of SLAAC + random privacy addresses)

3. johnisgood ◴[17 Oct 24 09:52 UTC] No.41867996[source]▶
OK, https://redman.xyz/git/schachtmeister2 now works (cgit), and it can be cloned, too.
4. Rohansi ◴[17 Oct 24 15:32 UTC] No.41870602[source]▶
Residential VPNs are more common now with cheaters to bypass VPN blocks.
5. amonon ◴[17 Oct 24 17:05 UTC] No.41871465[source]▶
Is there still an active tremulous community? I have fond memories of that game.
replies(1): >>41871516 #
6. johnisgood ◴[17 Oct 24 17:10 UTC] No.41871516[source]▶
Unfortunately not anymore, everyone moved to Unvanquished[1] (made by ex-Tremulous players).

You are very welcome on their Discord server, or Der Bunker's[2] (Zittrig) Discord server, too!

We may know each other. :)

[1] https://unvanquished.net/ (https://unvanquished.net/chat/)

[2] https://discord.gg/nubnh8PGnG