[TF2] New hack allowing people to play without Steam running/active?
 

For the past few weeks, I have been seeing an increase of cheaters who cannot be banned/targeted by usual means (e.g. through SourceBans), as they are simply not authenticated through Steam yet.
After about 1-2 minutes, they will automatically be kicked with the reason "Client not connected to Steam", but can still cause ruckus until that happens (e.g. aimbotting).

The only way to get rid from them is to use the engine's built in "banid" commands, although they still manage to reconnect just like nothing happened.

Has anyone else seen this on their server and maybe got a solution on how to deal with those shitbags?
Only effective workaround I have atm is to simply disallow unauthorized clients to do any damage and send any chat messages.

Re: [TF2] New hack allowing people to play without Steam running/active?
 

As a temporary solution, create a plugin that perhaps disallows team changes until they obtain a real steam id? This is assuming their steam id the entire time is something like STEAM_ID_PENDING.

Re: [TF2] New hack allowing people to play without Steam running/active?
 

You can generally enforce a much lower timeout than the default without trouble, SMAC has an option (smac_validate_auth) to kick non-authed clients after only 10 seconds.