On Mar 20, 2006, at 1:45 AM, ICS Staff wrote:
One simple solution would be that every server would run similiar prog like vac, or this could be even included into vac. Anyway, when cheater joins, his pc (memory) is scanned incase of any cheats. If found, he will get dropped off from the server untill he takes the cheats off so he can enter. There is already a working system in the game "Vietcong" called HradBa which is developed together by Pterodon, the creator of Vietcong and United Admins. In this case, the cheating-protection is fast and iminent. Cheater would not be vac-banned immediately, but he cannot enter if cheats are loaded up. However, he could be banned later permanently by VAC.
Polymorphic viruses defeated this technique back in the DOS days. What a polymorphic virus does is detect the execution or signature of a program which checks for viruses, and then alters it's own signature slightly to prevent being detected, or writes itself mostly to disk for the duration of the scan and unloads the part that the virus scanner is looking for, and when the scanner disappears, reloads itself. Viola, virus protection rendered useless. This is why you have a combination of a persistent real-time scanner (which monitors all memory transfers), and a file scanner (which checks the files on disk) these days. The last time I saw a "real" virus (not a macro virus/worm) infect a system, the realtime protection did little to nothing. I guess my point here is that I am certainly not qualified to write a virus scanner (which isn't far from the topic at hand when you really think about it), and I managed to pick this up at some point. The guys that are working at Valve on VAC certainly know a lot more than me about this topic, and it seems that statement would apply to you as well. We also have to look at how much more popular CS:S is than most FPS games. If you want to look at Blizzard's track record of managing exploits in World of Warcraft, theirs isn't much "better". The point is that they are targeted more because of their popularity, just like sendmail 8.11 and lots of other software. Give them a break, they are certainly doing a lot more than a lot of companies do to keep their software secure. -- Erik Hollensbe [EMAIL PROTECTED] _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux

