Server Security - Anti Cheat

[Canine]

Evenin!

Just got back into the world of UT and was wondering.
Is there any security measures or mods for security for UT3 servers?

Any plans for a mod, or is there one under development?

Thanks for your time.

[Warped_Out]

I don't believe anyone is working on one.

[Mc.Gugi]

AFAIK only XRay exists, but I've never seen it in use and also got no idea how it enforces that it is run in the background...

[Azura]

You could always make your own using this as a basis:
http://www.unrealwiki.com/Category:NBSP_Documentation_Project

[Wormbo]

No you can't. It's "primary weapon" is a security hole in the UWeb implementation, Anti TCC's primary weapon were "foreach AllObjects" and the Security class. Neither of these are available in UT3, so a security mod will have a hard time looking for suspicious stuff and checking file integrity.
(Well UWeb is, but is restricted to the game directory since UT2004. I don't think there's any way to use it on the split directory structure of UT3.)

[Azura]

That's a shame. The removal of what is considered as security holes is also severely limiting any possibilities. I don't suppose having an outside application listening on localhost would be any good. I'm not surprised no anticheat has popped up besides this XRay. This will not be good for online player numbers at all unless Epic adopts PunkBuster.

[ARsEnAl51]

XAC is meant for competitive matches anyway...

[Chaotic_Cannon]

Hi everyone,

I have started the thread over at the EPIC forums related to this same topic.

The thread can be found here:
http://utforums.epicgames.com/showthread.php?t=674797

In UT99 there were two applications made by people in the community that did things we needed. ASC controller and UTDC.

UTDC was a small app that each client has to download in order to play on the servers that ran it. Then while you were on that server, the admin could log on, click a button and EVERY player would have a screen shot taken and that screen shot was uploaded to the server. At the end of the match the admin could download any screenshot from any player and see if they were using a cheat of some sort (such as radar or looking through solid walls, etc).

Also UTDC also checked each clients (or players) running scripts in the active memory. Basically when you connected to a serever, UTDC activated and compared the active scripts in the UT.exe file (the game scripts currently running) to the stock game scripts that should be running.

UTDC would then determine if the player had any additional scripts or hooks running that game them aimbot, or invulnerability or something a modified .exe file could provide them.

Is there anyone out there that could create something similar for UT3?

[Azura]

You could always try to adapt this idea and similar ones:

http://www.unrealadmin.org/forums/showthread.php?t=29004

The trouble is, this sort of approach is very likely to produce false positives and is more processing intensive.

[Mc.Gugi]

1) UScript Anticheats like AntiTCC are not possible (see Wormbos post).
2) Porting the Screenshot Sender to UT3 is not possible because the screenshots are AFAIK not longer placed in the main UT3-directory.
3) UTDC or any native mod was possible in UT99 because the headers for the game were released officially.
4) No (official) headers exist for UT2004 and UT3. So, it is of course possible to code a native anticheat for those games with enough knowledge, but you will probably not be allowed to release it or even use it (a result might be master-server ban of the server e.g.). Epic does not allow native mods.
5) Give up, noone will create a decent AC for UT3.

Xray... anyone could explain how it works (how to get it running on the clients)?

[_Lynx]

1) UScript Anticheats like AntiTCC are not possible (see Wormbos post).
I think it's a question on how the anticheat is working. Euristic ones - those that will try to detect aimbot-like behavior rather than files/inis integrity can be made.

[Mc.Gugi]

4 months old topic...

Ofc they are possible, but depending on the type of behaviour you want to detect they can be extremely hard to create.
Dunno, haven't started UT3 for half a year now, but I haven't heard that there are more active players by now. Anyway, I think it is epics task to come up with a decent AC.

[=/\F=VENOM]

I need to laugh, I run 4 Homefront servers (UT3 Engine) and I get hassled all the time by players mad I do not install an anti-cheat, there is not one, just banlists and watching demos/spectates of suspect players.

All the cheats used in HF H.U.D.s do not even show in the demos

I love Epic, but seriously WTF?