Comment on Why is anti-cheat always client-side?

• Chozo@kbin.social ⁨11⁩ ⁨months⁩ ago

  Anti-cheats are typically designed so that the user can't actually modify them at all. They install themselves deep into your system, sometimes literally in the form of a rootkit which basically runs parts of it completely invisibly from your OS, entirely.

  source

  • 520@kbin.social ⁨11⁩ ⁨months⁩ ago

    Anti-cheats are typically designed so that the user can't actually modify them at all.

    The problem is that these measures can be bypassed

    source

    • Endorkend@kbin.social ⁨11⁩ ⁨months⁩ ago

      The problem with the server only solution in that they can never detect the source of cheating, only the result of it.

      And detecting the result is inaccurate as there are perfectly natural network latency and other issues that can generate the same result as a cheat, as that's actually how many cheats are discovered and implemented, by noticing that network latency or weird traffic creates an exploitable condition.

      You need to run it on the client side to see if the natural circumstances are happening or someone is using tools to cause the circumstances. The first isn't cheating, the later is.

      You can't detect from the server side what the client side is doing without running anticheat on the client side.

      source
    • Lileath@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago

      But it is complicated enough that most people don’t bother with it.

      source

      • ekky@sopuli.xyz ⁨11⁩ ⁨months⁩ ago

        So is cheating, yet we still have cheaters.

        source
  • zephr_c@lemm.ee ⁨11⁩ ⁨months⁩ ago

    Of course, which is why all cheating has been eradicated forever. Certainly no game with a rootkit anti-cheat has ever had a problem with cheating.

    source
• Endorkend@kbin.social ⁨11⁩ ⁨months⁩ ago

  You can't check the source of cheating on the server side, as it is run on the client side.

  source

  • zephr_c@lemm.ee ⁨11⁩ ⁨months⁩ ago

    You can’t reliably check the source client side either, because the client side self-reports, and is where the cheat runs.

    source

    • Endorkend@kbin.social ⁨11⁩ ⁨months⁩ ago

      That's a statement in the same ballpark as "people who get vaccinated can still get COVID, so why get vaccinated at all".

      Seriously, where do you even come up with that level of daft argument.

      source

      • 2xsaiko@discuss.tchncs.de ⁨11⁩ ⁨months⁩ ago

        One of the most basic security principles is literally “never trust the client side.”

        source
      • zephr_c@lemm.ee ⁨11⁩ ⁨months⁩ ago

        Nobody is making new COVID versions to get around the vaccine. COVID vaccines don’t create a backdoor into your immune system that make you weaker against other viruses. The COVID vaccine actually works. That is a stupid analogy.

        More invasive anti-cheats cause a brief dip in cheating, and then cheaters spread around a way to get around the new anti-cheat and everything immediately goes back to how it was. As long as the anti-cheat is being run on the cheater’s computer, it will be bypassed and made irrelevant. People’s desire to see something, anything done about a problem no matter how terrible the solution sometimes just makes things worse without even helping the problem, and I’m not okay with that.

        source

        • -> View More Comments