[Custom Anti-hacking Plugin]

Discussion in 'Suggestions' started by ModernPerils, Mar 4, 2015.

?

Would you like to see this implemented?

  1. Yes

    3 vote(s)
    30.0%
  2. No

    7 vote(s)
    70.0%
  1. ModernPerils

    ModernPerils We the North
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Mar 30, 2014
    Messages:
    513
    Trophy Points:
    33,560
    Gender:
    Male
    Ratings:
    +227
    Minecraft Name:
    ModernPerils

    Suggestion:
    Create a plugin that forces every player who joins to run the command ".test" that outputs the reply in a channel that is not seen by anyone. If there is no response when the player joins, the client has blocked the command, therefore they have hacks. The server will send a message to staff if a user does not have this command returned automatically. If there is a response, then they may not necessarily use a hacked client.

    Reason:
    This would be one of the easiest and most efficient ways of cutting out hackers.

    Other Information:


    I do realize this is not foolproof as some clients have different command indicators, but 95% of hacked clients use this method.

    Link to this plugin:
    This would have to be custom
     
  2. 314

    314 Irrational GameAdmin, former ServerAdmin
    EcoLegend ⛰️⛰️⛰️⛰️ Ex-President ⚒️⚒️ Prestige ⭐ VI ⭐ Premium Upgrade

    Joined:
    Apr 1, 2014
    Messages:
    7,010
    Trophy Points:
    97,160
    EcoDollars:
    $6,000,000
    Ratings:
    +4,919
    I remember seeing a suggestion with less automatism a long time ago, made by zecrux. The main point that would still apply in this case is that less clients use . as command-prefixes than you would think. Also, pretty much every client seems to have an option to allow those commands.

    I'll search the forum for the thread with a lot of answers from kuke.

    EDIT:
    http://www.ecocitycraft.com/forum/threads/suggestion-hacker-identification-method.95095/
    http://www.ecocitycraft.com/forum/threads/suggestion-a-new-way-to-identify-hackers.94888
     
    #2 314, Mar 4, 2015
    Last edited: Mar 4, 2015
  3. Dccciz

    Dccciz Nicememer55
    Builder ⛰️ Ex-Tycoon ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Mar 8, 2013
    Messages:
    2,802
    Trophy Points:
    50,090
    EcoDollars:
    $0
    Ratings:
    +2,060
    Kuke says that most clients can toggle this feature, making this plugin useless. :p (Pi's threads)

    I don't think this will do anything, because if AHax, BHax and CHax use the "'." command, then everyone will switch to DHax which doesn't use it or uses something different.
     
  4. oxwood2

    oxwood2 Builder
    ECC Sponsor Resident ⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ II ⭐ Premium Upgrade

    Joined:
    Jul 1, 2013
    Messages:
    2,880
    Trophy Points:
    76,160
    Gender:
    Female
    Ratings:
    +1,678
    What about afk people
     
  5. Vintage_Gamer

    Vintage_Gamer Builder
    Builder ⛰️ Ex-President ⚒️⚒️ Premium Upgrade

    Joined:
    Jun 18, 2013
    Messages:
    3,783
    Trophy Points:
    53,710
    Gender:
    Male
    Ratings:
    +1,219
    What? o_O
     
  6. oxwood2

    oxwood2 Builder
    ECC Sponsor Resident ⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ II ⭐ Premium Upgrade

    Joined:
    Jul 1, 2013
    Messages:
    2,880
    Trophy Points:
    76,160
    Gender:
    Female
    Ratings:
    +1,678
    Oh nvm my brain stopped working
     
    #6 oxwood2, Mar 4, 2015
    Last edited: Mar 4, 2015
  7. Vintage_Gamer

    Vintage_Gamer Builder
    Builder ⛰️ Ex-President ⚒️⚒️ Premium Upgrade

    Joined:
    Jun 18, 2013
    Messages:
    3,783
    Trophy Points:
    53,710
    Gender:
    Male
    Ratings:
    +1,219
    lol - I thought so :p
     
  8. Nicit6

    Nicit6 N6
    Mayor ⛰️⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ II ⭐ Gameplay Architect Premium Upgrade

    Joined:
    Jul 13, 2013
    Messages:
    9,815
    Trophy Points:
    102,160
    Ratings:
    +8,040
    Several hacked clients don't require that commands be like this - this wouldn't be conclusive that someone isn't hacking.

    What if somebody logs in afk (sounds strange, but ask several staff members, I have a habit of hitting the log in button, tabbing out before it loads, and forgetting altogether).

    You can't force the client to run the command automatically without the use of a parallel client side mod.
     
  9. DD71

    DD71 Mayor of Nashville
    EcoLeader ⛰️⛰️⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Aug 13, 2013
    Messages:
    1,619
    Trophy Points:
    62,910
    Gender:
    Male
    Ratings:
    +589
    Usually when I play, I like to log in and out every half hour or so because I like to go back and forth between things. I know that one day I'd forget to do this (even with a message appearing on screen. I also do what nicit does often.
     
  10. greg45865734

    greg45865734 Builder
    Builder ⛰️ Ex-Mayor ⚒️⚒️

    Joined:
    Apr 1, 2013
    Messages:
    621
    Trophy Points:
    27,240
    Gender:
    Male
    Ratings:
    +135
    What about when people are AFK. Don't want to just ban them for no reason do we?
     
  11. 314

    314 Irrational GameAdmin, former ServerAdmin
    EcoLegend ⛰️⛰️⛰️⛰️ Ex-President ⚒️⚒️ Prestige ⭐ VI ⭐ Premium Upgrade

    Joined:
    Apr 1, 2014
    Messages:
    7,010
    Trophy Points:
    97,160
    EcoDollars:
    $6,000,000
    Ratings:
    +4,919
    Server-issued /sudo-command? But as already said, too easy to hide an illegal client from this test.
     
  12. Jacob43365

    Jacob43365 EcoLeader
    EcoLeader ⛰️⛰️⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 9, 2014
    Messages:
    1,592
    Trophy Points:
    52,910
    Gender:
    Male
    EcoDollars:
    $0
    Ratings:
    +492
    But do we have even any anti cheat plugin? I was on another server and they found a guy using hacks with a plugin
     
  13. 314

    314 Irrational GameAdmin, former ServerAdmin
    EcoLegend ⛰️⛰️⛰️⛰️ Ex-President ⚒️⚒️ Prestige ⭐ VI ⭐ Premium Upgrade

    Joined:
    Apr 1, 2014
    Messages:
    7,010
    Trophy Points:
    97,160
    EcoDollars:
    $6,000,000
    Ratings:
    +4,919
    NoCheat+, I think.
    If it's a plugin that works from such commands, it <could> work. However, then people would just switch to clients that have a different command prefix.
    If it works by behaviour and automatically spots suspicious movement, then I'd say the error range can be quite high depending on connection and quality of the algorithm.
     
  14. AdmiralD

    AdmiralD IsleTradingCo
    EcoLeader ⛰️⛰️⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ V ⭐ Premium Upgrade

    Joined:
    Jul 26, 2013
    Messages:
    6,097
    Trophy Points:
    97,160
    Gender:
    Male
    Ratings:
    +4,288
    It will always be difficult to stop those that "tie a pepsi can to the mouse" or "fall asleep and the nose perfectly lands on the keyboard to keep playing" or "the art of a rubber band and a rock" :p
     
  15. ModernPerils

    ModernPerils We the North
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Mar 30, 2014
    Messages:
    513
    Trophy Points:
    33,560
    Gender:
    Male
    Ratings:
    +227
    The while idea is that th server makes them send this command without then doing anything. Jamie said it was possible so...

    You don't tell people to type this, it automatically happens.
     
    #15 ModernPerils, Mar 5, 2015
    Last edited: Mar 5, 2015
  16. ModernPerils

    ModernPerils We the North
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Mar 30, 2014
    Messages:
    513
    Trophy Points:
    33,560
    Gender:
    Male
    Ratings:
    +227
    Please, if you are going to comment here; read and understand what this I saying in its entirety.
     
  17. knears2000

    knears2000 Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jan 3, 2013
    Messages:
    4,010
    Trophy Points:
    46,590
    Gender:
    Male
    Ratings:
    +1,956
    Nope, no, totally wrong. According to our all knowing god about hacking, Zecrux, only 70% of people who hack use this method. Reading comprehension.

    On a serious note, Revan had the best of answers as to why this will never happen. It's innocent until proven guilty, while this is guilty until proven innocent. I really dislike that idea. So, -1.
     
  18. stoler202

    stoler202 Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Aug 3, 2012
    Messages:
    1,699
    Trophy Points:
    32,660
    EcoDollars:
    $0
    Ratings:
    +471
    Maybe if make it a daily command you do to join sg?
     
  19. Nicit6

    Nicit6 N6
    Mayor ⛰️⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ II ⭐ Gameplay Architect Premium Upgrade

    Joined:
    Jul 13, 2013
    Messages:
    9,815
    Trophy Points:
    102,160
    Ratings:
    +8,040
    Sudo doesn't make a client run a command, it runs the command from the other player's perspective but still on the server.
    There is no way to do this - and no reason there should be.
     
  20. 314

    314 Irrational GameAdmin, former ServerAdmin
    EcoLegend ⛰️⛰️⛰️⛰️ Ex-President ⚒️⚒️ Prestige ⭐ VI ⭐ Premium Upgrade

    Joined:
    Apr 1, 2014
    Messages:
    7,010
    Trophy Points:
    97,160
    EcoDollars:
    $6,000,000
    Ratings:
    +4,919
    Oh, okay. (Just thought so because it still respects user permissions.)