New Anticheat System for Quake3

49 replies [Last post]
(*WASP*SH▲DOWKNIGHT)
Site administrator
haxxus's picture
Offline
Joined: May 2007
Posts:
Re: New Anticheat System for Quake3
flaki wrote:

Hi, as some of you know already, im admin of 2 servers - clanv.eu
I was testing the Pureskill for quite a time as duch mentioned already...So what i can say so far:

The lates Pureskill build works fine with antivir/malware softwares without any detections anymore... You can see with /ps command whos using it/whos clean or not ... You can as admin switch it on or off and you have several option how the system has to act. : Nothing, console/center screen massage/kick...

I would ask people for some cheat clients, yeah i know thats weird and i never had any cheats even to try but i think this system needs a hard tryout so pls send me links. I have instaled the pureskill on both V servers but currently its only activated on our tournament server [*V*] AW TourneY ... when tests will go fine ill activate it completly on both server.
So actualy i know why you are careful about it but lets give it a try and next step is to find out how it works with cheats detection...
Also im not sure how much duch is ready to release the source code but maybe that would help the comunity to gain some trust in this project...

There is no reason why not show source unless hes aiming to sell and that's fine if he is, I don't have time to set a vm to test it because that's what I would do if I were to test it fully and I recommend anyone to do so if their looking to test it. I don't know what protection you are using , but all my security detect the mentioned codes above.

duch
Offline
Joined: Apr 2017
Posts:
Re: New Anticheat System for Quake3
(*WASP*SH▲DOWKNIGHT) wrote:

Why isn't there a mention of your anticheat on your GitHub ?

I'll edit the description soon. All my changes in this repo reside in /code/server as I wrote before.

(*WASP*SH▲DOWKNIGHT) wrote:

Before current updates your .dll scan noted Gen:Variant.Symmi.74030
Current updated dll Shows Gen:Variant.Johnnie.2310 (SpybotAV)

Gen:Variant.Symmi.74030 - Since I'm paranoid I used leaked Enigma protector license, with software protectors whenever license is stolen/used to protect malware - license gets banned by AV, any file protected with such license will be detected as malware. I don't use any software protector now.

I don't know what SpyBotAV is but they are not even on VirusTotal. Have a look at my modules scans:
https://www.virustotal.com/#/file/d8f3b9a13efcd33c3dade1d025638b7a42f29db110396f87d05ab3e44c4862ed/detection
https://www.virustotal.com/#/file/ab07068f0aaa26f438eb212f484739fdf33af360f9bffa51592efcfc4cb9548d/detection
https://www.virustotal.com/#/file/b637806f93ce6232697793c417cdef50a351bc4de6c67ee7cd0e2bc496d98dc8/detection

Or you can ask players on [*V*] AW FreezE who use it, if something bad happened to them. Also there are lots of tools to monitor process behaviour in safe environment, which log for example: registry usage / file usage / internet traffic. Search for them yourself or leave me a pm, and I'll send you names of these tools.

SSS+ B10TRIX wrote:

anti-cheat works on the server version (1.32c,newest ioq3)or on the client version?

Client works and detects cheats always, it doesn't matter if the server uses it. When PureSkill is enabled on the server it will instantly kick cheating players, read Manual for server admin options Happy

http:/pureskill.tk/donate - you can support my anticheat project here if you want Happy

flaki
Offline
Joined: Jan 2013
Posts:
Re: New Anticheat System for Quake3

I mean sure its your right to take care of your server but i think we should not completly block it also...About the detection, have you tried the latest build? Or are you talking about the first link duch posted? I have no detections so far, my antivir detected some things with first release but as mentioned, it seems to be gone now... Which protection software are you using?

(*WASP*SH▲DOWKNIGHT)
Site administrator
haxxus's picture
Offline
Joined: May 2007
Posts:
Re: New Anticheat System for Quake3
flaki wrote:

I mean sure its your right to take care of your server but i think we should not completly block it also...About the detection, have you tried the latest build? Or are you talking about the first link duch posted? I have no detections so far, my antivir detected some things with first release but as mentioned, it seems to be gone now... Which protection software are you using?

First few builds had Gen:Variant.Symmi.74030'

New Build has Gen:Variant.Johnnie.2310

Google will give a brief info on what they are.

duch wrote:

Or you can ask players on [*V*] AW FreezE who use it, if something bad happened to them.
I don't know what SpyBotAV is but they are not even on VirusTotal

1. On the real world these tools are monitored by the makers until a big fish joins to get cought.
2. Does it matter what tool is used as long as it detects?.

I'm just trying to logically place the pieces together.

flaki
Offline
Joined: Jan 2013
Posts:
Re: New Anticheat System for Quake3

https://www.f-secure.com/v-descs/false_positive.shtml

" TECHNICAL DETAILS

False Positives sometimes occur if a program or file contains code or behavior that is similar to known harmful files. This is especially likely if the program or file uses compression or protection techniques, or is spread using a distribution method, that are commonly used by harmful files.

Latest False Positive Notices

  • Gen:Variant.Johnnie.27178: (17 July 2017) This detection unintentionally triggered on game-related files. This issue was resolved with the 2017-07-16_18 database update released at 2309hrs UTC on 16th July 2017. "

(*WASP*SH▲DOWKNIGHT)
Site administrator
haxxus's picture
Offline
Joined: May 2007
Posts:
Re: New Anticheat System for Quake3

Upon further Reviews and test's I have concluded this tool is safe to use , Is being tested on all Freon servers and will be eventually be forced so grab your copy and happy fragging!

EVILUTION
fiendsin's picture
Offline
Joined: Jun 2012
Posts:
Re: New Anticheat System for Quake3

I like the idea, but can't seem to get it working,I played quake 2 pro with anticheat system as a dll, and some of the new doom ports have acs as dlls and without them, server won't let you play. Sortof like strict auth did back in the day when q3 master server was up. I'm a little skeptic though as I know there will always be a way to bypass it unless it's enforced as in forementioned game ports. We don't have any coders here, but it would be really great to have a new protocol that would replace the standart one on q3, and if it wasn't for protocol, you could actually play quake live with ioquake as it supports png textures and some other lighter extensions, which makes game less heavy on HDD


Sometimes I wish I was a NEET again, but life is too fucking expensive man.
The weak plot revenge, the strong forgive and the Lucky forget, but Fiend, Fiend no longer gives a shit

◀█ BIG BOB wrote:
Man you even sound like Lego's

You Fuckers wrote:
I would cut my fifth finger to bang her actually

You Fuckers wrote:
BELIEVE IN BLASPHEMY

EVILUTION
fiendsin's picture
Offline
Joined: Jun 2012
Posts:
Re: New Anticheat System for Quake3

That said, the protocol along side binary, wouldn't allow older binaries to connect to new servers, and honestly, I suggested this like 2-3 years ago, when I found out about the edawn binary. Now some of people will remember the devs as stealers of ideas and stuff, but at least the dude had balls to pull off something new, it may not have been as simple as e+ configuration wise, but the binary was a very good change.


Sometimes I wish I was a NEET again, but life is too fucking expensive man.
The weak plot revenge, the strong forgive and the Lucky forget, but Fiend, Fiend no longer gives a shit

◀█ BIG BOB wrote:
Man you even sound like Lego's

You Fuckers wrote:
I would cut my fifth finger to bang her actually

You Fuckers wrote:
BELIEVE IN BLASPHEMY

(*WASP*SH▲DOWKNIGHT)
Site administrator
haxxus's picture
Offline
Joined: May 2007
Posts:
Re: New Anticheat System for Quake3

were running on 1.32e.ded Tongue