|
About 6 months ago I found another method for catching hackers. I did not release the method, but the topic is here
Basically this method will catch oblivion users even after the update which made the previous "no suspicious click" method I found not work.
Oblivion lets you attempt to place buildings where normally you cannot. If you attempt to do this without hacks the GUI stops you and the action is not recorded in the replay. But with oblivion the action is recorded even though the game engine stops it from actually being built. The reason for this behavior is probably due to this feature of oblivion, quoted from the readme: Build anywhere on any terrain for stacking UMS maps.
An automated tool could probably be constructed to search for these invalid build commands, but it is not that hard to do manually using bwchart. Bwchart actually tries to determine if a build command goes through for its resource plots. If it doesn't think that it did, it puts an asterisk near the command. You just need to check each asterisked build command to see if it was actually possible to attempt to build that building at that time and location (use the coordinates).
The most common invalid builds are attempting to build a building where there is already a building or building an extractor 1 square off of the actual geyser. In replays I watched of people I already knew to be using oblivion about 30% of the time they would have at least 1 invalid build command. This means that not that many replays of a suspected hacker need to be checked. Also it is impossible to have the invalid commands without a hack, so if you find just one replay with such an action it is 100% proof of hack.
I have not caught any big names with this method, but I haven't looked either (I do not follow the SC scene much anymore). This is trivial for the oblivion hack maker to fix so don't expect it to be useful for future replays but I would expect it to catch people from the last 6 months+. I'm sure there will be more methods found in the future, so don't worry hackers you are never safe.
Edit: see page 3 of comments for example.
|
|
|
flag, you're a fucking legend.
|
I was gonna bump this tomorrow, nice work flag!
|
|
|
|
|
lol flag and his haxor catching.
|
flag should get a bloodhound icon.
|
Nice. Got a sample hacker rep?
|
im refreshing my bwchart right now, hope this shit works lol
|
im looking at a replay of oblivion user and i cant figure out where that asterisk should be. Theres a thingie like * near selecting hatch action, but that is me. So where exactly do we look and can u provide a screenshot or something?
edit: i really am killing time here, but anyways - replay had many actions by me with * near them. Most are making drones at a hatchery, this has nothing to do with placing buildings. Then more, i had them while placing a hatchery, 3 in a row, meaning that i couldnt place it 3 times in a row. Now u stated that it wouldn't record those actions unless im using oblivion, how the hell do i get those actions then? I am clearly not a hacker and i can provide replay where guy starts at 5 frame on regular bnet game and uses multicommand/automacro. Unless i missed something this method doesnt work at all, since i havent found a single asterisk near his build orders, unless i missed it. If it does work, it will create insane amount of speculations since this isnt easy to figure out as far as im concerned. Hope u will explain the method, i will be waiting yo.
edit: ok theres actions that are marked as * performed by him, now i have 10 times more of those, if he cant place a factory somewhere and it is showing up then how is this different from me not being able to place a sunken colony or a hatchery since its all recorded as well?
On December 31 2008 12:10 flag wrote:
Also it is impossible to have the invalid commands without a hack, so if you find just one replay with such an action it is 100% proof of hack.
so far this seems totally untrue, maybe you mean something else by saying this or programs like chaoslauncher or advloader affecting this. Unless IM MISTAKEN and those * near me placing hatchery is not "invalid command" but something else. Which seems unlikely.
I would suggest everyone just wait to make sure this really is working yo
|
|
|
God you are such a genius
|
I think you need to check each individual build command with a * to see if it's on minerals/gas/unbuildable terrain. Most *'s will be false positives.
|
somebody give this guy a star
|
flag, you are a hero. Perhaps you should have waited until TSL2 to release it though  If it holds any weight, I'd like to nominate this guy for a forum star, or a custom icon.
|
On December 31 2008 12:47 food wrote:im looking at a replay of oblivion user and i cant figure out where that asterisk should be. Theres a thingie like * near selecting hatch action, but that is me. So where exactly do we look and can u provide a screenshot or something? edit: i really am killing time here, but anyways - replay had many actions by me with * near them. Most are making drones at a hatchery, this has nothing to do with placing buildings. Then more, i had them while placing a hatchery, 3 in a row, meaning that i couldnt place it 3 times in a row. Now u stated that it wouldn't record those actions unless im using oblivion, how the hell do i get those actions then? I am clearly not a hacker and i can provide replay where guy starts at 5 frame on regular bnet game and uses multicommand/automacro. Unless i missed something this method doesnt work at all, since i havent found a single asterisk near his build orders, unless i missed it. If it does work, it will create insane amount of speculations since this isnt easy to figure out as far as im concerned. Hope u will explain the method, i will be waiting yo. edit: ok theres actions that are marked as * performed by him, now i have 10 times more of those, if he cant place a factory somewhere and it is showing up then how is this different from me not being able to place a sunken colony or a hatchery since its all recorded as well? Show nested quote +On December 31 2008 12:10 flag wrote:
Also it is impossible to have the invalid commands without a hack, so if you find just one replay with such an action it is 100% proof of hack.
so far this seems totally untrue, maybe you mean something else by saying this or programs like chaoslauncher or advloader affecting this. Unless IM MISTAKEN and those * near me placing hatchery is not "invalid command" but something else. Which seems unlikely. I would suggest everyone just wait to make sure this really is working yo
Okay firstly you're not understanding how to look for these correctly.
In bwchart turn off all actions except build. This will eliminate problems with seeing stars next to things like making drones. The only starred actions we're looking for are ones where someone goes to build a building.
Then yes there are lots of actions with stars next to them. If you ACTUALLY READ HIS POST, then you'd see you need to then check the map coordinates with that action to see if it was just impossible to be placed due to a unit being there or another building being in the way, or if it is actually a place on the map in which you can not place buildings.
If there are any starred build actions in a location on the map that cannot have buildings built, it is a hack action.
|
On December 31 2008 12:47 food wrote:
im looking at a replay of oblivion user
Can you post the rep? I'm having trouble finding one.
|
On December 31 2008 13:08 SonuvBob wrote:
I think you need to check each individual build command with a * to see if it's on minerals/gas/unbuildable terrain. Most *'s will be false positives.
he says that if you not hacking you wont get those actions recorded, so when i was placing my hatchery at an unbuildable terrain( which happens a lot) it did get recorded. Check any known zerg replays, im sure everyone has this. In his opinion tho, this only gets recorded if youre hacking, which seems untrue so far, thats my point.
edit:
https://www.yousendit.com/download/TTZreUNEb0JwTVdGa1E9PQ
rugu_rena is a known hacker from East, plays play/obs pub games
u have to use 1.15.3 i would think
|
I tested w/placing a depot on minerals, it didn't show up in the rep.
|
|
|
|
|
|
EPT
