[Kigen]

I've updated my first post to note how to get "no sockets source."

Any further posts or PMs asking for "no sockets source" will be ignored and/or deleted.

[Kigen]

Originally Posted by Snake60 In other words, it means that he used a script or exploit? I have understood correctly?

They are trying to crash your server. KAC is simply protecting your server.

[f64]

Originally Posted by Kigen CmpString() handles hackers that have what appears to be the exact same name just fine. What they are doing is changing the characters to UTF-8 characters rather than ANSI and because the machines process it in bytes it causes problems. Trust me, strcmp or StrEqual will not work because the Source engine is already doing that.

Alright, so some of the UTF-8 characters aren't being displayed on my standard US setup. So now
I know that this isn't bypassing the Steam check for duplication of a name and therefore it doesn't necessarily
mean they're cheating.
I can see that they might use this to avoid being selected from a menu if an admin
wants to kick or ban them and that could be problematic.

Questions, questions, so many questions

1. Could you please tell me exactly how I can use a UTF-8 char set to make my name appear as a duplicate on my machine?
I would like to play around with this and learn some more.

2. Is there some reason you're limiting names to 4 characters or more when Steam requires only 2?
Compiling your script as is, I can't even join my own server.

3. Need I be concerned about the order in which I list the cvars, as long as I maintain
the corresponding order for the related sections and maintain the appropriate MAX_HACKCVAR value?

sv_cheats and sv_consistency still fall within the bounds of your CreateNewCheckOrder subroutine, being 15 and 16,
respectively on my altered version. I suppose I could change temp = GetRandomInt(13, 16); if need be.

i.e., my alteration hasn't sabotaged the checking of these cvars, right?

Thanks

[Kigen]

1. No.
2. Yes, so people can't use a very short name that has the same character string as everyone else.
3. No.

I try to have sv_cheats and sv_consistency at the start of the check because they are the most popular cvars to abuse.

[UltimateOreo]

Thanks Kigen, A+ work.

[f64]

Thanks for your reply, Kigen. My post didn't get lost in a sea of "how to comment out" this time.

You may wish to consider adding some of the CVARS I'm checking (for DOD:S):

default_fov 90 // changes fov if allowed
host_framerate 0 // speed hack
host_sleep 0 // lag like hell with high numbers
mat_drawwater 1
mat_fullbright 0 // 1 = no darkness, 2 = grey
mat_slopescaledepthbias_normal 0 // oldschool wallhack, pretty ugly in DOD:S

I've already seen 3 in one day with mat_fullbright 1. They had no other cvar reported.

edit: These were false positives caused by no lighting in the map.
http://developer.valvesoftware.com/wiki/Adding_Light

[Snake60]

Thank you for reply, Kigen. But I have one request, can you add cvar for punishment. For example: 0 - "permanent ban", 1 - "kick player", 2 - "warning message to admin", 3 - "warning message to all" If you do it - it will be nice. Thanks.

[Faust_mateo]

Originally Posted by f64 Thanks for your reply, Kigen. My post didn't get lost in a sea of "how to comment out" this time. You may wish to consider adding some of the CVARS I'm checking (for DOD:S): default_fov 90 // changes fov if allowed host_framerate 0 // speed hack host_sleep 0 // lag like hell with high numbers mat_drawwater 1 mat_fullbright 0 // 1 = no darkness, 2 = grey mat_slopescaledepthbias_normal 0 // oldschool wallhack, pretty ugly in DOD:S I've already seen 3 in one day with mat_fullbright 1. They had no other cvar reported.

How do I check/enforce these?

Do I just add them in the server.cfg with:

Using :
sv_pure 1
sv_pure_kick_clients 1
sv_pure_trace 1
sv_consistency 1
sv_cheats 0

Do I add these?
default_fov 90
host_framerate 0
host_sleep 0
mat_drawwater 1
mat_fullbright 0
mat_slopescaledepthbias_normal 0

[NouveauJoueur]

I think you don't need to add those commands to your server cfg until some are only client side commands, and other has the cheat flag ... And it's the default value.

Only sv_ commands are usefull in this case.

Kigen, i've a few question too :

1) You said sv_consistency "0" is one of the most abused cvar. My logs shows that it's the NumberOne reason why players get banned for cheating of my servers, but most of time they do not seems like to cheat, with low score, no pre shot, it's very strange. I read somewhere that you was talking bout a corrupted client issue, do you know what's wrong with this ?

2) Can you add a ban_delay "", so we can set the delay before they get banned ? I mean if you try to do like VAC and random bans, they can just get your plugin, and test it all the day on a server to see what isn't detected.

My english is very bad, so if I wasn't clear just ask

[rautamiekka]

Originally Posted by NouveauJoueur 2) Can you add a ban_delay "", so we can set the delay before they get banned ? I mean if you try to do like VAC and random bans, they can just get your plugin, and test it all the day on a server to see what isn't detected.

Not bad idea