Jump to content

  •  

skempertush

Member Since 23 Mar 2014
Offline Last Active Oct 26 2015 06:28 AM
-----

Posts I've Made

In Topic: How secure will my server be?

26 October 2015 - 06:30 AM

[font="'comic sans ms', cursive;"]no patcher have a feature like that for now, the only way available is using game guard[/font]

 

[font="'comic sans ms', cursive;"]OOT there is a launcher that will just (didn't have compare feature) make a file and listing all md5 files in current folder, i hope some one can make it for free release[/font]

I saw the file... Yeah it will be useful if he released the source, so we can hardcode the MD5.


In Topic: How secure will my server be?

25 October 2015 - 03:17 AM

VisualBot, can it by-pass the botcheck script?

 
i never have visual bot, but i think visual bot can't do it againts script check,
 

>Correct me if I'm wrong but. 0delaysprite.grf is still just a regular sprite, the only difference is it has NoAnimation for delay. Since MyServerGRF is secured, why not I get those WithAnimation sprites to MyServerGRF so regardless of what they would do to their data.grf it will still have it's animation because the first to read is MyServerGRF. My problem is what are those sprites....
I'm also thinking about getting those WithDelaySprites on my SecuredGRF. My problem is what are those sprites...

 

[font="'comic sans ms', cursive;"]even you embed data.ini into your exe those way just can fool average cheater or leecher, but from what my experience from 130 player i have 15 of them can see through it[/font]

 

[font="'comic sans ms', cursive;"]this is the work around with out integrity check if the player can tell the priority of grfs he can just merge (oh yes the secureed grf is not to get extracted data but you can still merge / add file in to it) the edited sprite on the 1st grf not data grf (data.grf & rdata.grf always come last), so it will come back to check the integrity of grfs file, yes ? open patcher -> clikc start game -> compare the grf to the server if match open the exe, if not dont open it don't give the player notice about it let them think the exe was failed because their file[/font]

 

How do I integrity check on patcher?


In Topic: How secure will my server be?

24 October 2015 - 07:48 AM

[font="'comic sans ms', cursive;"]Q: Still have exploits ?[/font]

[font="'comic sans ms', cursive;"]A: Yes[/font]

 

[font="'comic sans ms', cursive;"]Q: What are those and how to prevent them?[/font]

[font="'comic sans ms', cursive;"]A: a loot to put it in detail[/font]

 

[font="'comic sans ms', cursive;"]some of them is:[/font]

[font="'comic sans ms', cursive;"]1. Packet Hack, since you set packet obfuscation you could avoid it and the way to make it avail again is to tamper the client but you have set the MD5 Hash check for the client at least for minimum standart you have it already[/font]

[font="'comic sans ms', cursive;"]2. Sprite edit (0 delay) it was headache if you didn't have a game guard to check the integrity of grf file[/font]

[font="'comic sans ms', cursive;"]3. Macro, Bot, Visual Bot[/font]

 

[font="'comic sans ms', cursive;"]Point 2 and 3 for now you only can have a game guard to prevent it but even you have it no 100% guarante it will protect perfectly since there is always way found to fool the guard and worse it was the how to fool the guard is available in the net for free.[/font]

VisualBot, can it by-pass the botcheck script?

 

Correct me if I'm wrong but. 0delaysprite.grf is still just a regular sprite, the only difference is it has NoAnimation for delay. Since MyServerGRF is secured, why not I get those WithAnimation sprites to MyServerGRF so regardless of what they would do to their data.grf it will still have it's animation because the first to read is MyServerGRF. My problem is what are those sprites....


Well, actually, since he'll use password protected GRF and embedded data.ini he should be safe from 0delay grf as long as a) he doesn't release his grf without pass and B) he doubles proper animation files inside his grf.

 

Packet Obfuscation will make it way harder to WPE spam packets, and MD5 hash will prevent people from diffing your client further. I'd say get some more protection to prevent bots/macros, and you're pretty good to go.

I'm also thinking about getting those WithDelaySprites on my SecuredGRF. My problem is what are those sprites...