Quote:
Originally Posted by Effeff
Game: CSGO
Mode: awp-only
Note: I removed the name.
I think this ban is questionable, but I do not understand what I am looking at in the log.
I do not know this person beyond seeing their name on my server on and off as far back as a year ago. I usually end up spectating any player who is decent and I think I have a good eye for telling if someone is cheating.
I was not online at this time. The player was online for 12 minutes, got 20 kills/20 deaths, had only 3 headshots and 28% accuracy.
I am well aware that the statistics I'm telling you are hardly relevant. A player could be bad and still cheating. He could've never cheated at all while I did watch, and today he decided to try cheating. My intuition on what is/is not cheating could be flawed.
|
Although statistics can't disprove that someone is cheating, it is not by any means "irrelevant".
This is pretty relevant context, as it gives me a more accurate idea as to what was going on.
I wish more people would give me context like this, as it makes my job easier.
Btw, I
Really appreciate that you removed the name, SteamID and IP; as it removes all possibility of bias.
And also, I just don't like people sharing player's IPs around, as there are some weird people online. I doubt anything would happen, but as a principle.
Quote:
Originally Posted by Effeff
A player could be bad and still cheating. He could've never cheated at all while I did watch, and today he decided to try cheating.
|
Absolutely correct, I rarely see people say and understand this, so I had to quote it, as it's soooo rare to hear this from others. But:
Quote:
Originally Posted by Effeff
My intuition on what is/is not cheating could be flawed.
|
No one's intuition is perfect, that applies to me as well.
Fact of the matter is, no Anti-Cheat is perfect, and no Anti-Cheat should be treated as such.
Whether a ban is valid or not is in fact up to the server owner, Lilac is a tool meant to help server owners catch cheaters, but it's entirely up to server owners if they see the ban as valid.
Quote:
Originally Posted by Effeff
However, I tell my admins
"don't bother spectating bad players unless they're stupidly obvious"
"don't bother spectating people who have an account that looks 'legit'"
"don't hesitate to ban people who are on a brand new steam account"
In other words, the only bans I trust are bans of obvious players. I do not like the hassle/drama of banning regulars, or players who are just very unlikely to be cheating. I only let certain individuals (ie. myself) make decisions like that, and require video evidence to do so.
|
I fully understand your decision here, as I've gone through this type of drama myself.
It's a hassle, especially when it comes to famous players with fans (3kliksphilip sadly had to deal with this himself when it came to a certain bhoper).
Now, with all that said and out of the way, lets tackle this detection.
Quote:
Originally Posted by Effeff
I think I have a good eye for telling if someone is cheating.
|
I don't doubt you in the slightest, but
Quote:
Originally Posted by Effeff
what autoshoot is (it sounds like another way of saying triggerbot to me?)
|
... S-Sorta.
Autoshoot is a feature cheats have, usually in their aimbot settings.
All it does is shoot for you, and in some cases, it sorta acts like a triggerbot.
In some other cases, the triggerbot is pretty much coded in the same way, but not always.
There is no way of spectating a player and reliably being able to tell if they are using autoshoot or not.
Autoshoot works by inserting a 1 tick perfect shot, Lilac only checks for Autoshoot upon a kill.
And in order to get an autoshoot detection alone - without anything else having been detected, like you have - you have to do it twice in a row or more. Lilac doesn't log the first autoshoot detection, as it may be a false positive.
In addition to this, Lilac doesn't log the first aimbot detection either.
Hence why when this player got their second aimbot detection, they very likely had 3 autoshoot detections in a row, and I mean 3 autoshoot detections for three different kills.
Quote:
how certain you are that this is cheating
|
Fairly certain, as I haven't had false positives for this before.
But:
Quote:
what things could cause false positives server-side, so that I can tell you whether it is possible that it is my server's fault I guess.
|
As far as I know, there is nothing server-side that could cause this.
But, there is something you can do as a player to get a false positive
"bind mwheeldown +attack" or
"bind mwheelup +attack"
These will also cause a 1 tick perfect shot.
However, the likelyhood of someone doing this is very low, and they would have to do that consistently, 3-4 times in a row leading to a kill on 3-4 different players.
It isn't impossible, but it's so unlikely, it really isn't a concern.
Also, autoshoot detections reset if the player doesn't get a 1tick shot leading to a kill.
So, do I think this is a valid detection and ban: Yes.
When Lilac was a private anti-cheat, I would detect legit cheaters doing this all the time, it wasn't uncommon.
But, earlier you said this:
Quote:
However, I tell my admins
"don't bother spectating bad players unless they're stupidly obvious"
"don't bother spectating people who have an account that looks 'legit'"
"don't hesitate to ban people who are on a brand new steam account"
In other words, the only bans I trust are bans of obvious players. I do not like the hassle/drama of banning regulars, or players who are just very unlikely to be cheating.
|
Considering the standards you have put forth, unbanning this player would be understandable, as autoshoot isn't something obvious.
My opinion on whether this is valid or not is irrelevant, because in the end, it's up to you if you wish to upkeep the ban or not.
I know that some server owners have the same mindset you have (I have the same mindset), and don't wanna deal with drama and only wanna ban obvious players.
So in the next update, Little Anti-Cheat Version 1.5.0, there will be a new ConVar that lets you disable autoshoot detections all together.
There is an unfinished version of 1.5.0 on my github page, which you can find here:
https://github.com/J-Tanzanite/Little-Anti-Cheat
In case you wanna disable autoshoot detections all together.
(Keep in mind that
"lilac_aimbot_autoshoot" won't automatically be added to your cfg upon upgrades, you have to add that manually, sadly)
One more thing, I did write a SourceTV auto recorder plugin, which you can find here:
https://github.com/J-Tanzanite/Lilac-SourceTV
It just starts recording a SourceTV demo when Little Anti-Cheat detects a cheater.
I have done some basic testing with it, and will release it here on AM later.
It should be useful if a ban were to happen while no one was spectating.