On Mar 20, 2006, at 1:45 AM, ICS Staff wrote:
One simple solution would be that every server would run similiar prog
like vac, or this could be even included into vac. Anyway,
when cheater joins, his pc (memory) is scanned incase of any
cheats. If
found, he will  get dropped off from the server untill he takes the
cheats off so he can enter.
There is already a working system in the game "Vietcong" called HradBa
which is developed together by Pterodon, the creator of Vietcong and
United Admins.
In this case, the cheating-protection is fast and iminent. Cheater
would not be vac-banned immediately, but he cannot enter if cheats are
loaded up. However, he could be banned later permanently by VAC.

Polymorphic viruses defeated this technique back in the DOS days.
What a polymorphic virus does is detect the execution or signature of
a program which checks for viruses, and then alters it's own
signature slightly to prevent being detected, or writes itself mostly
to disk for the duration of the scan and unloads the part that the
virus scanner is looking for, and when the scanner disappears,
reloads itself. Viola, virus protection rendered useless.

This is why you have a combination of a persistent real-time scanner
(which monitors all memory transfers), and a file scanner (which
checks the files on disk) these days. The last time I saw a "real"
virus (not a macro virus/worm) infect a system, the realtime
protection did little to nothing.

I guess my point here is that I am certainly not qualified to write a
virus scanner (which isn't far from the topic at hand when you really
think about it), and I managed to pick this up at some point. The
guys that are working at Valve on VAC certainly know a lot more than
me about this topic, and it seems that statement would apply to you
as well. We also have to look at how much more popular CS:S is than
most FPS games. If you want to look at Blizzard's track record of
managing exploits in World of Warcraft, theirs isn't much "better".

The point is that they are targeted more because of their popularity,
just like sendmail 8.11 and lots of other software. Give them a
break, they are certainly doing a lot more than a lot of companies do
to keep their software secure.

--
Erik Hollensbe
[EMAIL PROTECTED]




_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to