Hacker News new | past | comments | ask | show | jobs | submit | noahster11's comments login



So scanr is right, right?


Pushover also handles a server, which you can make requests to, that sends push notifications to your phone. It looks like this project just scrapes JSON from a URL for changes, and notifies from that.

Pushover is push based, while this looks to be pull based.


Well put.


Something else they received backlash for is them limiting devices on the free tier to only 3.

https://news.ycombinator.com/item?id=19925652

https://www.theverge.com/2019/3/14/18265574/dropbox-3-device...


This hit me hard a few weeks ago, and still is.. I've had a few hardware issues and had to (re)install a few times. Limiting access to 3 devices, I'm not sure about upgrading. I don't really need more space, and in fact most of what I really use it for I could get away with a private github/gitlab repo.


If you use Magisk, which is one of the most common ways to root nowadays, it not only roots, but allows custom software to be installed "systemlessly". This means in most cases, SafetyNet won't be able to detect a rooted phone.

Just like with jailbreaking, smart people will always find a way around these barriers Apple and Google put up


It's funny, it's basically installing a rootkit on your phone (one that you trust), it's a piece of software that has access to everything but tries to hide from detection.

But yes I have it too...


Google is behind tesseract[0], not sure if they use this for Google Cloud Vision OCR

[0]: https://opensource.google.com/projects/tesseract


The anticheat they use (EAC) for fortnite checks if Wine is in use, and will fail to run the game if it is.

This is taken directly from the EAC dll:

https://i.imgur.com/a4wBVWz.jpg


Can't say I blame them.

Linux is ridiculously powerful & versatile as I'm sure we all know...and having that much opportunity to mess with all the net/visual/input subsystems in a way the game can't even see (since it's trapped in WINE) is a major issue cheat wise.

Not ideal but I can totally see why a company might from a practical/commercial point of view just block it outright. Especially given player numbers of WINE players vs upsetting your entire user base due to cheaters.


Windows has no lack of power. All this anti-cheating stuff is mostly a scam to stop the dumbest of the dumb cheaters and probably collect information from your computer that's useful to advertisers/investors/law enforcement agencies.

If I wanted to aimbot in an FPS, I would just analyze the HDMI output from my computer (via an FPGA) and have it directly create the necessary USB transactions to move my mouse to the target's head. I would introduce randomness, "input lag", jitter, and even some misses, so that people looking at the kill cam wouldn't immediately think "aimbot" as they are apt to do whenever they die. (You also don't want to make your mouse movements statistically different from anyone else's, or it's the server that will pick up on your cheating... or at least a well-crafted MapReduce. Do game companies have MapReduce? I hope so.)

Executed well, the developer of the game could do nothing about it; maybe I'm really good, or maybe I'm aimbotting. My computer is completely normal, down to the device descriptors on my mouse and monitor. There's no wine, no virtualization, no additional software running.

In the end, trusting the client is crazy. If you want to decide win/loss based on things computers can do easily, your game is probably bad. And aiming is something computers can do in their sleep.


I think you're missing a major component of these deals restrictions: they also want to prevent running 30 headless VMs on a single computer all botting into games to grind whatever free content is available.

This is actually a major component of bot use for f2p games. A lot of companies try really hard to prevent anything that looks like playing in virtual envs. Having these bots fill up your games and play terribly is a bad look for any game that depends on multi-player interactions to keep people involved.


Ah, that sounds like a very fair argument to me.

I believe you can get pretty affordable Windows VMs these days, however. I'm not sure that blocking wine really accomplishes a lot. (There are also companies that sell access to consumer Windows PCs on consumer ISPs these days. If you don't play Hearthstone, you probably don't mind $10/month in free money for letting someone bot Hearthstone on your computer. And it's not like Blizzard is going to say "look, enough Comcast, shut these people down or else we lock all Comcast customers out of battle.net". It's pretty tough to run a gaming client these days, I would imagine. So so much stuff is totally out of your control. I do not envy their engineers at all!)


It actually was a major issue for Valve with TF2. It used to be you could run the game headless and have it join a server to idle farm items for you. In college my roommate and I each bought about 3 copies of the game then ran them headless in VMs to try and farm hats. Never got anything super great sadly.


Analyzing the HDMI is definetely not an up-to-date hacking technique by any means.

Besides having to rely on real-time computer vision which is more expensive/resource consuming and harder, the results wouldn't be as good as with other techniques (although this might fit your argument of having some misses and jitter/lag/etc... to act as cover).


Next generation aiming for twitch shooters will use a camera that tracks eyeball movements.


Already available in the form of the Tobii 4C for approximately 150 USD. Only accurate for most people to about a circle with diameter of about an inch on the screen though, and it feels strange to use it for an FPS.


What does MapReduce have to do with the rest of your post? MapReduce is used in distributed computing - I thought shooters were basically always single servers to keep the lag reasonable.

(I see two flagged posts asking the same question)


It would be used for analysing past gameplay, not during live matches


Aimbots...map reduce...HDMI outputs...and jitter all in one post.

...pretty comfortable in saying that you're not up to speed on 2004 era hax.


Can you please not snark or post unsubstantive comments here? We're trying for a bit better than that. If you know more, it would be great to share some of what you know so we all can learn something. Alternatively, it's always ok not to post.

https://news.ycombinator.com/newsguidelines.html


I can tell you're a member of the gaming community because you have basically dismissed my comment in a condescending manner without providing any actual information.


Please don't respond to a bad comment by breaking the guidelines yourself. That doesn't help and only makes this place worse.

https://news.ycombinator.com/newsguidelines.html


Windows is the land of the reverse engineering. Linux, despite its powerful tools still lacks far behind in this area (reverse engineering and cracking apps).


I'm not sure that's different in windows. What do you think is stopping you from messing with net/visual/input there?


>I'm not sure that's different in windows.

It definitely it. Read up on anti cheating stuff...the windows stuff is down-right rootkit grade....to the point where there are privacy concerns from every the privacy tone-death crowd.

Very very different ballgame from "runs in a WINE container with no visibility beyond that".


Yeah, I know that it's a rootkit-type service. But I'm saying that still doesn't prevent you from going deeper than the checks. Especially if you're using custom code and not a known cheating tool. (Those will get picked up by signatures) Unless they require a fully certified system, you can always play with device drivers which are going to be lower level than anti-cheat.

It's an arms race, but whatever they can check, you can patch. Worst case, you can still virtualise everything.


"EAC/Wine compatibility is currently in a beta state with several games whose help we appreciate, but significantly more work is needed to get it to a suitably stable and hardened level for all." https://twitter.com/TeddyEAC/status/1125678854390067200


Wow, that's just evil.


Probably not evil, just incompetent. Many internet multiplayer games today place trust in the client in order to grant a smoother experience on higher latency internet connections, which makes it easier to implement cheating mechanisms. The fight against this is all about verifying the client and the environment it is running in. WINE is quite hackable, so one can see why they'd want to blacklist the platform outright. Doing it in such a trivially bypassed way is pretty silly though.


They probably prevent it from starting and later do self checks (checksums), check for wine using other methods and then game-ban accounts in waves to hide how they detected cheating/wine.

There isn't a general way to prevent cheating on open platforms with this kind of game, so it ends up being a kind of cat and mouse game. Think of an aimbot (instantly moves your mouse cursor to an enemy as soon as the enemy is seen) or a wall hack that makes enemies visible behind obstacles. The only way to detect those is to check if your runtime environment is being modified by known methods. Opening a wine front (where you'd somehow have detect Linux processes/a modified wine or even a modified kernel etc.) is probably too costly compared to the number of non-cheating players on Linux.


CSGO (where leagues and MM use third-party anti-cheat) is an example where the community deems the vendor's AC insufficient. The most extreme example is Rockstar Games / GTA V, the multi-billion-dollar revenue AAA title where anyone with a free to download menu has far more power than all Rockstar administrators combined.


CSGO VAC is garbage though, and can't not be garbage without being granted extreme levels of access to the system. On Linux you can just run your cheats as root, and they will never get detected.

The slippery slope of giving companies higher access is also seen in CSGO where (Faceit/ESEA, dont remember who exactly) put a bitcoin miner in their anti-cheat. Capcom put a rootkit into Street Fighter V to check for cheaters. Is that acceptable?


>Probably not evil, just incompetent.

Incompetent, or rational decision in terms of bang-for-buck to reduce cheats?


That's a fair distinction here I suppose. From my perspective as a hobbiest game developer, and of course player, any benefits of trusting the client are far outweighed by the problems, but that's a matter of opinion I suppose.


Evil is a strong word. Can you explain?


I guess the GP refers to treating all linux gamers as "cheaters" is not cool.

Like another comment says, maybe it's easier to cheat using Wine, and thus banning the platform is faster/cheaper, even though they might end up catching a lot of legit users in this broad dragnet.


Not evil - it's what has been attracting users to their platforms. PUBG had terrible anti-cheat, really hurt them for a while. In all these claims a reminder that client is trusted. EPIC does "ok" with anti-cheat - be curious to hear others impressions. Cheaters are a TOTAL drag to online multiplayer, so calling efforts to fight cheating "evil" is silly.


Yeah, but how does running a Windows game on Linux = cheating? I understand the need for modern multiplayer games to have anticheat (however unfortunate, and I still refuse to play games that use literal rootkit-esque anticheat [1]), but just trying to run a game on Linux isn't cheating in itself. Does Wine help cheats cloak themselves?

[1] e.g., https://en.m.wikipedia.org/wiki/NProtect_GameGuard


Wine is a fully open implementation of Windows APIs on Linux. The game cannot assume that the API's behavior is fixed on WINE because anyone can change any of the functions to do something unexpected with a quick patch. One example may be hacking up the DirectX implementation to draw some objects as transparent rather than opaque.

Of course, it's possible (if much harder) to go in and hack up the DLLs on Windows. Anti-cheat addresses that by whitelisting known-good MS hashes and/or requiring some type of signing. There's a lot more overhead involved in doing something like that for WINE, since every distro's build would be different, it's common for users to have their own builds with game-specific patches enabled, etc.

I've been out of the WINE scene for a while, but I'll say that I don't believe many WINE users are trying to exploit the platform to cheat. I think it's purely a cost-benefit tradeoff. The vendor doesn't feel supporting a legitimate WINE use case is worth the expense of figuring out a reasonable way to validate behavior, handle integration with distro builds, support debugging/custom patchsets, etc.


Well, using Tor doesn't mean you're looking to abuse a website. But you may find out that 99% of your Tor traffic is abuse and decide it's worthwhile to you and your users to block it.

I would imagine Wine is in a similar predicament.


I find it hard to believe that a majority of people running Fortnite under Wine would be attempting to cheat. Even if Wine would make cheating somewhat easier, would it really be that significant?

It seems far more likely to that most players are just using Wine for its intended purpose—to play Fortnite on Linux.


>Does Wine help cheats cloak themselves? Obviously it could, because it is providing windows API from an uncontrolled source. It would be significantly more difficult to provide hacked system libraries on a windows host.


> calling efforts to fight cheating "evil" is silly

their method (blocking Wine) is questionable though. it reminds me of websites that block Central/Eastern European IP's "because of bots" (yeah, it happens). the goal is nice, but the method hurts many honest users.


As far as I understand, the problem with wine is that the wine sandbox prevents other anticheat mechanism from working.


Epic owns EAC for the record.


I'm sure there's ways to hide/change that.


https://news.ycombinator.com/item?id=13759706

I always enjoy the satirical content about last weeks hackernews posts


I love how while these comments are from years ago, if they were posted today I wouldn't be able to tell.


The itt we are Hacker News on 4chan was good for a laugh if you don’t mind taking a shower immediately after


Although I've been using Pushover[0], a paid service, instead of Gotify, I found a really cool project to pair a push-notification service with is huginn[1], which allows you to program bots to do things on cron jobs, among other really powerful actions.

[0] https://pushover.net/ [1] https://github.com/huginn/huginn


Just to clarify, Pushover is not a "paid service" in that you need to pay for a subscription. You only have to pay once to use it past the 7-day free trial.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: