You need to sign the file with a RSA Encrypted Hash for it to be secure. And for that you need to obfuscate(alot) your keys inside the executable.
-------------------------------------------------- From: "Bob Somers" <[email protected]> Sent: Wednesday, July 08, 2009 3:56 AM To: "Discussion of Half-Life Programming" <[email protected]> Subject: Re: [hlcoders] Access reception to hlcoders forum > Checksums really don't provide security against tampering, as they are > too easy to manufacture. They're more often used to detect casual > corruption errors like those that could be introduced during network > transmission. > > --Bob > > > > On Mon, Jul 6, 2009 at 4:43 PM, Matt Hoffman<[email protected]> > wrote: >> Don't think they have a checksum? >> >> On Sun, Jul 5, 2009 at 3:55 PM, Saul Rennison >> <[email protected]>wrote: >> >>> won't modifying DEM files raw screw up the checksum? :\ >>> >>> Sent from my iPhone >>> >>> On 5 Jul 2009, at 23:41, Tom Leighton <[email protected]> >>> wrote: >>> >>> > The STEAM id's are indeed in the demo files aswell, in plain text, >>> > which >>> > is why you should never rely on demos to be entirely secure on their >>> > own, and 100% proof someone's a hacker. >>> > >>> > >>> > >>> > Harry Jeffery wrote: >>> >> Yeah - I thought that when I found out about how demos are stored. >>> >> Very easy to incriminate an opposing team in CSS if you're desperate >>> >> to win. >>> >> >>> >> 2009/7/4 Matt Hoffman <[email protected]>: >>> >> >>> >>> Demo's look easy to fake. I was poking around in one the other day >>> >>> and found >>> >>> the server name/player names as strings. >>> >>> >>> >>> I was unable to test it, but I wonder if you can change the >>> >>> strings and save >>> >>> and have the differences in game... Make it easy to be an imposter >>> >>> and >>> >>> incriminate someone else. ;) >>> >>> >>> >>> On Fri, Jul 3, 2009 at 3:40 PM, Harry Jeffery < >>> >>> [email protected]> wrote: >>> >>> >>> >>> >>> >>>> IIRC .dem files are just logs of the packets received and sent. >>> >>>> >>> >>>> Thats why going to a tick in a CSS demo is a bit glitchy - it has >>> >>>> to >>> >>>> roll forwards to that tick so that everything is correct - it's >>> >>>> mere >>> >>>> updates not exactly where everything was each tick. >>> >>>> >>> >>>> 2009/7/3 Joel R. <[email protected]>: >>> >>>> >>> >>>>> I think he is trying to learn how to remove speed hackers by using >>> >>>>> >>> >>>> recorded >>> >>>> >>> >>>>> demos. In any case, he definately needs some work on that >>> >>>>> engrish. >>> >>>>> >>> >>>>> >>> >>>>> On Fri, Jul 3, 2009 at 7:38 AM, botman <[email protected]> >>> >>>>> >>> >>>> wrote: >>> >>>> >>> >>>>>> Jonas 'Sortie' Termansen wrote: >>> >>>>>> >>> >>>>>>> Engrish anyone? >>> >>>>>>> >>> >>>>>>> Trinitron, I have no idea what you are talking about. This >>> >>>>>>> isn't a >>> >>>>>>> >>> >>>>>> 'forum', >>> >>>>>> >>> >>>>>>> it's a mailing list. But if you want to see the previous >>> >>>>>>> mails, there >>> >>>>>>> >>> >>>>>> should >>> >>>>>> >>> >>>>>>> be some website where you can browse them. >>> >>>>>>> >>> >>>>>>> But what I understood was, you want the current .dem format? >>> >>>>>>> >>> >>>>>>> >>> >>>>>>> >>> >>>>>> There is a searchable archive of the hlcoders email list here... >>> >>>>>> >>> >>>>>> http://www.mail-archive.com/hlcoders%40list.valvesoftware.com/ >>> >>>>>> >>> >>>>>> ...but the history doesn't go back as far as the archives here... >>> >>>>>> >>> >>>>>> http://list.valvesoftware.com/mailman/private/hlcoders/ >>> >>>>>> >>> >>>>>> -- >>> >>>>>> Jeffrey "botman" Broome >>> >>>>>> >>> >>>>>> >>> >>>>>> _______________________________________________ >>> >>>>>> To unsubscribe, edit your list preferences, or view the list >>> >>>>>> archives, >>> >>>>>> please visit: >>> >>>>>> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >>>>>> >>> >>>>>> >>> >>>>>> >>> >>>>> _______________________________________________ >>> >>>>> To unsubscribe, edit your list preferences, or view the list >>> >>>>> archives, >>> >>>>> >>> >>>> please visit: >>> >>>> >>> >>>>> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >>>>> >>> >>>>> >>> >>>>> >>> >>>> _______________________________________________ >>> >>>> To unsubscribe, edit your list preferences, or view the list >>> >>>> archives, >>> >>>> please visit: >>> >>>> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >>>> >>> >>>> >>> >>>> >>> >>> _______________________________________________ >>> >>> To unsubscribe, edit your list preferences, or view the list >>> >>> archives, please visit: >>> >>> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >>> >>> >>> >>> >>> >>> >> >>> >> _______________________________________________ >>> >> To unsubscribe, edit your list preferences, or view the list >>> >> archives, please visit: >>> >> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >> >>> >> >>> >> >>> > >>> > _______________________________________________ >>> > To unsubscribe, edit your list preferences, or view the list >>> > archives, please visit: >>> > http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> > >>> >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlcoders >>> >>> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlcoders >> >> > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlcoders > > > > No virus found in this incoming message. > Checked by AVG - www.avg.com > Version: 8.5.375 / Virus Database: 270.13.8/2223 - Release Date: 07/07/09 > 17:54:00 > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlcoders
