BTW, I realise that none of the solutions I suggested above are a magic bullet to solve the hack problem.
What I have suggested though forces hack creators to build a whole software infrastructure around defeating your security and if you do things cleverly, you will be able to break hackers software infrastructure with a comple of key strokes and a few mouse clicks with a STEAM Update! Seriously, hacks are going to screw your software up, thats a given, at least make it hard work for them to do so, and moreover make its easy for you to screw hack creators over once they do bypass whatever measures you have in place. On Tue, 14 Dec 2004 09:09:13 +1100, Whisper <[EMAIL PROTECTED]> wrote: > STEAM is broken > > VAC is Broken > > Because STEAM is Broken even if VAC worked, it would be a waste of time > > And in any case, Valves stupid detect now and ban later has no effect > whilst the STEAM_ID system is broken, since most hackers will have > changed STEAM_ID's well before VAC bans come into force under the > current system. > > Why in gods name its difficult to set things up so peoples STEAM_ID's > that are used in servers can only be autheticated against a database > that Valve has access to AND have the database set to only allow > people on to servers who have legitamately set up STEAM Accounts is > beyond me??? > > <code> > Was this STEAM_ID issued by Valve? > Does the STEAM_ID match the details of the account in our database? > Y let player onto server > N kick player off server > </code> > > It is such a stupidly simple process, and would allow VAC to at least > have a chance at keeping hackers off servers. > > Hell, if they are really hacking into the system, you could do all > checking via Server/Valve communications only. > > Have the HLDS send the STEAM_ID, if its valid, player stays, if it is > not, server is informed and player kicked. > > The Server (so far) always knows what the STEAM_ID is, even if Valve > does not, at least within a few minutes of dickhead player joining the > server. > > If you need more verification and security you can do this: > > Create a hash from the username, password, STEAM_ID & a Valve supplied > alogorithm which can change at any time with any STEAM Update. > > When a player joins a server, the player sends the server their hash, > then the server requests the hash for that STEAM_ID from Valve and if > they don't match then the server rejects the players connection. > > Moreover, when the system gets hacked, do an algorithm change and use > the wonderful STEAM system to push the change out. > > Valve have the great update system, why the hell won't you use it?? > > Do Daily updates, that will fuck people up well and truly who try to > fuck with your system. > > You can further harden this system if you wish, google "public key > encryptions schemes" and find out how everybody else who likes to be > secure does it from crying out loud! > > > > On Mon, 13 Dec 2004 17:42:21 -0300, Marcelo de Paula Bezerra > <[EMAIL PROTECTED]> wrote: > > Cheating and abuse in general are rampant, and no matter how much I try, > > they always come back with new steamids. > > > > Looking at one specific fool who's now banned by ip address and has been > > banned multiple times for multiple offenses (including wallhacking, > > speedhacking and impersonating other players). > > > > STEAM_0:0:4918135 > > STEAM_0:0:4978634 > > STEAM_0:0:5002506 > > STEAM_0:0:5011120 > > STEAM_0:0:5172294 > > STEAM_0:0:5421319 > > STEAM_0:0:748493 > > STEAM_0:1:4989069 > > ---- his isp changed backbone provider here, and he got a new ip. > > STEAM_0:0:5421319 > > STEAM_0:0:5546028 > > STEAM_0:0:5662333 > > STEAM_0:0:5727892 > > STEAM_0:0:5750589 > > STEAM_0:0:5755806 > > STEAM_0:1:5544009 > > STEAM_0:1:5764391 > > STEAM_0:1:5769801 > > > > -- > > Marcelo de Paula Bezerra <[EMAIL PROTECTED]> > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
