GM / Master map hacker and general hacking and cheating th…

On May 31 2012 14:42 BuffloBEAST wrote:
Just in case anymore evidence is needed, here is a replay lightpwnr with some obvious map hacking:

http://replayfu.com/r/crSZPd

On May 28 2012 13:51 CarelessPride wrote:
any1 realize hacks for wow get patched within days while maphacks been out for years and blizzard never gave a fuck? lol yea difference between a game earning them money and a game that doesn't.

On May 31 2012 14:32 babylon wrote:

I'm just kind of confused as to what you are hoping to accomplish here, because in the end, only Blizzard can take any sort of action, and you alert them of hackers by reporting it to them, which you can do without making a thread like this discussing any and all suspicious activity.

On May 29 2012 22:37 FluidKMC wrote:
didnt read the whole thread but I think zergthrowaway is describing nerchio in the reddit thread.

for reference: http://www.reddit.com/r/starcraft/comments/u9n77/psa_if_you_suspect_someone_is_maphacking_please/

On May 31 2012 14:14 babylon wrote:
Is this thread now just a "report all suspicious activity!" thread ...?

Just report them to Blizzard, let them investigate, and play the game, guys. No need to get worked up over this.

On May 31 2012 14:04 Doodsmack wrote:
I'd be interested to know if anyone has experience playing against Rafao on ladder. He's in GM this season and last but the season before that he was in platinum. His account shows 3100 wins in bronze in one season though so maybe that's the reason he was low, but still it's fishy. As of February he was losing games to plats and diamonds. There are replays of him at the below link, from a tournament I'm guessing...I'd be interested to see how his mechanics and decision making are.

http://www.sctemple.com/profiles/3191092-rafao/?show=replays&page=2#Replays

It seems this is another account of his, as the name given here matches the name of his ESL profile here. This account is in plat this season.

On May 31 2012 01:15 kmh wrote:
The paper also cites another paper called "Battle of Botcraft" (available at http://www.cs.wm.edu/~hnw/paper/hop.pdf ) that proposes a method of bot detection based on machine learning methods. This is something we could already start doing right now, without any changes to any network code. By categorizing replays into "hacks" and "not hacks", and detecting common features for the hacked replays we could make hack detection automatic.

For instance, looking at the dsninetail replay, action sequences such as:

15:55 DSNiNETAiL Deselect all
15:55 DSNiNETAiL Blink (Stalker); target: x=32.3,y=46.7
15:55 DSNiNETAiL Attack; target: x=37.9,y=54.9
---
15:56 DSNiNETAiL Deselect all
15:56 DSNiNETAiL Blink (Stalker); target: x=57.8,y=45.5
15:56 DSNiNETAiL Attack; target: x=48.6,y=46.3
---
15:56 DSNiNETAiL Deselect all
15:56 DSNiNETAiL Blink (Stalker); target: x=57.8,y=45.5
15:56 DSNiNETAiL Attack; target: x=48.6,y=46.3

crop up, the same way every time. The time stamp here fails to indicate that the above sequences happen within a single frame.

Squirtle's blink micro on the other hand generates action sequences as follows:

13:59 StarTale Select Stalker x3 (10830,10834,1083c), Immortal (205ec), Deselect 2 units
13:59 StarTale Blink (Stalker); target: x=95.5,y=159.7
14:05 StarTale Select Stalker (10674), Deselect all
14:05 StarTale Blink (Stalker); target: x=97.6,y=155.2
14:06 StarTale Select Stalker x3 (306d4,206e4,10834), Deselect all

Again, the timestamp here fails to indicate that the lag between the actions is much higher: to the tune of several hundred milliseconds.


Machine learning tools could find other indicators too. Comparing the hacked replay to a pro replay you find the following split in the hack replay:

+ Show Spoiler +

Meanwhile, human players such as squirtle would have splits that generate actions as follows:

+ Show Spoiler +

There are loads of potential indicators out there to mine data from, such as click speed/accuracy etc. By comparing these sorts of action sequences and finding indicators, we could get somewhere with automatic hack detection. All we would need are corpuses of "known hack" replays as well as "known good" replays to start training.

On May 31 2012 02:23 kmh wrote:
ObZen:

The replay analysis should be as automatic as possible to be of any worth. Further, it would be pretty catastrophic to have false positives. False negatives (labeling a replay as probably human when it is in fact hacked) would be more acceptable. The replays that are suspicious could then be human-reviewed. I don't envision a future in which blizzard can be arsed to use such a tool, but that doesn't stop us from creating it.

Now, obviously this doesn't detect passive map hacks or such, but we could certainly detect certain bot hacks such as queen inject hacks, blink hacks, burrow hacks etc. I'm guessing map hacks could have suspicious camera movement patterns that could be detected; we need to datamine replays to find that out. Who knows what will pop up?

But yeah, detecting patterns like this would make it worthwhile to create a database of "known hack"-replays as a starting point.

On May 31 2012 18:42 FFW_Rude wrote:
Also what's with QuanticFlo being 6 or 7 times in GrandMaster (check on http://us.battle.net/sc2/en/profile/3162105/1/GameOfDrone/ladder/106953#current-rank ??? I am sure as hell she doesn't have that many account. Thought she was masters too.

Is there hacking going on there ? Does anyone have replays ? Because 7accounts with the same name in GranMaster is just fishy as hell for me.

EDIT :

Ranked 7, 21, 44, 98, 148, 178

On May 31 2012 22:50 pingy[wen] wrote:
Content:
1. he doesn't look through the fogs of war in the replay, but his screen pauses for a bit throughout the game.
2. 14 mins, sends entire army to kill one marine that he doesn't know is there.
3. 14:50 mins, walks up the ramp as if setting up a better concave to attack (not REALLY that suspicious UNTIL
4. 15 mins, stims entire army to attack watchtower which had my army (but he shouldnt' know that)
5. 19 mins, stims to kill my scouting factory JUST as it get around him.
6. 21:45, does a double take with the medivacs to avoid the zerg army, COULD just be trying to juke me out, just note it though.
7. 26:45, waits with his army selected slightly away from ledge. stims entire army, and catches my drop before he even has vision.


Replay:
http://drop.sc/172309

Profile:
http://sc2ranks.com/la/119429/NITRIXENERGY

he has 50apm at the end of the match, which is unusually low...even for offracing. doesn't use his OC energy well at all...though he is offracing apparently.

On May 31 2012 22:26 Felnarion wrote:
You guys should be real careful with this kind of thing...Just throwing out names is a little irresponsible just because you're "suspicious"

In my opinion, you shouldn't mention a name until you have definitive proof. You could be causing someone a lot of grief for nothing.

And someone using a questionable BO, or not moving their army when it makes sense...or moving their army when it doesn't...That's not proof. THat's barely even suspicion. Watch a regular replay, you'll see people do it all the time. Don't tell me you've never had the thought "..There's a banshee coming" and looked for it without scouting it.

On May 31 2012 22:52 HenryZ wrote:


The 1v1 on all the nitrix accounts are leveld by someone so the people who play team games on it are maphacking it seems

On May 31 2012 22:26 Felnarion wrote:
You guys should be real careful with this kind of thing...Just throwing out names is a little irresponsible just because you're "suspicious"

In my opinion, you shouldn't mention a name until you have definitive proof. You could be causing someone a lot of grief for nothing.

And someone using a questionable BO, or not moving their army when it makes sense...or moving their army when it doesn't...That's not proof. THat's barely even suspicion. Watch a regular replay, you'll see people do it all the time. Don't tell me you've never had the thought "..There's a banshee coming" and looked for it without scouting it.