• 2 Posts
  • 79 Comments
Joined 2 years ago
cake
Cake day: March 25th, 2022

help-circle







  • I’ve never played it, but aren’t League of Legends servers already authoritative? Also, I’m pretty sure it would only deal with certain kinds of cheats. An authoritative server won’t be able to prevent a player from using an aimbot, for example, since nothing says that a player isn’t allowed to have super accurate aim. The server can’t tell if they are cheating or just insanely good. Nevermind I missed your sentence mentioning *-bots.

    I wonder whether, even with an omnipotent anticheat software installed, cheating would still be possible by having the router manipulate your packets on the way to the server (ie. having all the *-bot work being done on that device). I imagine TLS could maybe thwart that attempt, since the router can’t decrypt the packets, but I don’t think it’s really a problem since the client could also just provide it with the unencrypted packet and the server’s public key, so that the router may fabricate the packets. On the other hand, anticheat software would be aware of that since the client has to send those extra packets, but how could it know that those packets are being sent for nefarious purposes and not just simply some other normal software doing it’s thing?








  • I wonder what sort of mitigations we can take to prevent such kind of attacks, wherein someone contributes to an open-source project to gain trust and to ultimately work towards making users of that software vulnerable. Besides analyzing with bigger scrutiny other people’s contributions (as the article mentioned), I don’t see what else one could do. There are many ways vulnerabilities can be introduced and a lot of them are hard to spot (especially in C with stuff like undefined behavior and lack of modern safety features) , so I don’t think “being more careful” is going to be enough.

    I imagine such attacks will become more common now, and that these kind of attacks could become very appealing for governments.




  • I never got the pipe analogy. Since liquid water can’t be compressed, wouldn’t the amperes be directly proportional to the volts and to the size of the pipe, assuming there are no air bubbles? Also, supposedly resistance only reduces current, but when I think of hair in a pipe, the pressure after the obstruction would also be lower (because pressure is directly proportional to the amount of water that flows)