[Suggestion] A new way to identify hackers!

Discussion in 'Suggestions' started by Zecrux, May 7, 2014.

Thread Status:
Not open for further replies.
  1. XxDiamondxBackxX

    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Mar 22, 2014
    Messages:
    315
    Trophy Points:
    20,400
    Gender:
    Male
    Ratings:
    +14
    Then just ignore them, those who need to will surely try to understand both the pros and cons and evaluate. We have awsome staff here that are very factual and to the point who I'm sure will do their best. Perhaps link them in.
     
  2. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    I don't think tagging them in is necessary, what may be necessary is for me to repost this suggestion so that all the spam won't be on it.
     
  3. FreshSigh

    FreshSigh Builder
    Builder ⛰️ Ex-Tycoon ⚜️⚜️⚜️

    Joined:
    Jun 17, 2013
    Messages:
    814
    Trophy Points:
    29,840
    Gender:
    Male
    Ratings:
    +369
    -1. You can put &7 before ur post and the server considers it an unrecognized symbol so it makes a blank spot. If I did &7.hacktest it would come in global as .hacktest. this works in pm also.
     
  4. StellarisIgnis

    StellarisIgnis aka HCPillarofFire
    President ⛰️⛰️ Ex-President ⚒️⚒️ Premium Upgrade

    Joined:
    Dec 23, 2012
    Messages:
    2,145
    Trophy Points:
    47,910
    Gender:
    Male
    EcoDollars:
    $0
    Ratings:
    +485
    To all those this involves please do not post accusatory comments on this thread please. I will start handing out warnings if this continues.
     
  5. knears2000

    knears2000 Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jan 3, 2013
    Messages:
    4,010
    Trophy Points:
    46,590
    Gender:
    Male
    Ratings:
    +1,956
    Well, how about you learn how to respond to criticism. Also, I've restrained myself from posting bad things on this thread. I stated my opinion and this suggestion is useless.

    -2000
     
  6. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    Actually, you're being ignorant, and you can't identify anything wrong with it. Why are you so scared about this being implemented, do you have something to hide?
     
  7. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    I'm sure something can be arranged to stop that from happening. (If it's even true)
     
    #47 Zecrux, May 8, 2014
    Last edited: May 8, 2014
  8. knears2000

    knears2000 Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jan 3, 2013
    Messages:
    4,010
    Trophy Points:
    46,590
    Gender:
    Male
    Ratings:
    +1,956
    Okay, will this client have to be coded by us? If so, it isn't really worthwhile given the fact that hacked clients are not a real problem right now.
     
  9. Dewsy92

    Dewsy92 Ex-Staff Team Troll
    Builder ⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ I ⭐ Premium Upgrade

    Joined:
    Sep 17, 2013
    Messages:
    5,288
    Trophy Points:
    71,090
    Gender:
    Male
    EcoDollars:
    $0
    Ratings:
    +2,625
    My thought on this suggestion:

    Firstly, I strongly dislike the idea of a random server-wide spot check. Practically it would be impossible to implement via man-power. It would be impossible to do by checking off who has said it without checking logs - It couldn't be done in game. Equally an auto-ban plugin is an awful idea. It would a lot people who genuinely are AFK/not watching chat etc. I appreciate that this isn't really what you are suggesting, but thought I would say this anyway.

    So your proposal is then to have Staff PM suspected hackers and ask them to use a command beginning with '.'
    • This can't be done via PM - /r
    • This can't be done in global - /qm ch g .spotcheck (or whatever command you want)
    • Even if there was a command which could be done in global, it shouldn't be in global. Lets say a member of staff suspects someone of hacking and asks them to do it and they prove they aren't hacking. The player base will then always be suspicious. Any sign of suspicious activity in SG and the user's past reputation of being asked to do it in global will stick with him. People will accuse them (unfairly) left right and centre based on an earlier false accusation.
    • You mention that this would only be done after a member of staff is in conversation with the suspected hacker. Do you not think that people who are genuinely hacking would just ignore staff? It really isn't hard.
    I personally think there are too many issues with this to ever be implemented. There was discussion a while ago about spot-checks for users who have previously been banned via taking screenshots with the message requesting it from staff in the screenshot (to avoid logging off). I will try and find that, but the resounding conclusion was a 'no'. It was too invasive and would be a burden on the staff.
     
    #49 Dewsy92, May 8, 2014
    Last edited: May 8, 2014
  10. kukelekuuk

    kukelekuuk C͕̹̲̽ͪ͐ͩ̔L̜̦̝͈ͦ̿̾̿ḘA̻̗̤̳̐ͭ̆̿̃̑ͭN̊̓͑̇ͯ
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    May 25, 2011
    Messages:
    10,007
    Trophy Points:
    80,160
    Ratings:
    +6,910
    ch qm is quickmessage, it allows you to chat in a channel with a command.

    As for the idea that everyone needs to chat a message starting with a period. lol. Most clients have abolished that system by now. I've seen many that use ~, `, *, #, -, _ and some others. The period is common in only a handful of clients.

    This suggestion doesn't work because it relies on hacking clients all using the same system and people being stupid enough to use that system. Not to mention most hacking clients that DO use the periods allow you to the TURN IT OFF. MEANING THE PERIOD KEY DOESN'T WORK. Some hacking clients don't even use chat, they have a separate input box they use for commands.

    All in all, this suggestion won't work solely because it relies on hacking clients being EASY TO DETECT (which they're definitely not..)

    If you want more info about the rest of your flaws. A similar suggestion was made in the past and it got denied:
     
  11. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    Ok first off, #1 most popular hacked client currently is huzuni client. It uses periods as a way of turning on commands through chat and it can't be turned off. I know this for a fact. I did extensive research on the latest version of the client and it cannot be turned off. As for the server with /ch qm and "&#" I bet the server staff could disable this. If deleteing /ch qm means stopping a great portion of the hackers, it should be turned off. Many other clients actually do use the "." to turn on hacks through chat. Heres an explanation. #1 Hackers don't actually use the alternative option through chat to turn on their hacks. Its much harder and takes more time than the other ways. #2 Hackers use keybinds or manually turn on hacks with their mouse, in the hacked client menu. Hackers don't expect to be tested this way. (unless they've read the complaint, but that wont matter if the flaws are fixed). #4 the similar suggestion using screenshots is much harder because it includes the uploading of images, and even more excuses than this. This is a simple chat test. #5 For example another excuse could be, "I cant find my screenshots folder". I actually deleted my screenshots folder once by accident, and I didn't get it back until I reinstalled minecraft, and even then, my screenshots weren't in it, because it was a new folder. #6 there are only two flaws with this new method, and I bet they could be fixed.
     
  12. XxDiamondxBackxX

    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Mar 22, 2014
    Messages:
    315
    Trophy Points:
    20,400
    Gender:
    Male
    Ratings:
    +14
    I personally cannot post pics because of my security settings.
     
  13. Dewsy92

    Dewsy92 Ex-Staff Team Troll
    Builder ⛰️ Ex-EcoLegend ⚜️⚜️⚜️⚜️ Prestige ⭐ I ⭐ Premium Upgrade

    Joined:
    Sep 17, 2013
    Messages:
    5,288
    Trophy Points:
    71,090
    Gender:
    Male
    EcoDollars:
    $0
    Ratings:
    +2,625
    I disagree, there are many more. I don't think that this is a good idea and won't implemented for what Kuke said (/qm , /r , '.' not being a universal thing for different hacked clients). But for arguments sake, let just say that using '.' would work and /qm and &7 were removed. There are still issues with this suggestion.

    1. Suspected Hacker is afk/ignoring staff.
    So, I suspect PlayerX of using a hacked client and I ask him to say .hacktest in global. PlayerX ignores me. Lets say that they are genuinely afk, it is extremely harsh to ban someone for being afk. As for your suggestion that staff would only ask after starting a conversation with them, its very easy to ignore people in PMs. What are my options? Staff have 3 main methods of enforcing rules: Warning, Kicking & Banning.

    Warning - What good is a warning? He has just ignored my PM requesting him to say .hacktest in global, why would he listen to my warning? Also, what happens after several warnings, move up the ladder to kicking/banning?

    Kicking - This is 100% useless as it legitimises him logging off and removing the hacked client before logging back in.

    Banning - We can't ban for ignoring a request to say something in global. If the user is genuinely afk, then it would be unfair to ban for not responding. If we don't ban afk people, doesn't that just make the system pointless as people would always use the excuse they were afk?

    2. How public it is
    As I said earlier: Lets say a member of staff suspects someone of hacking and asks them to do it and they prove they aren't hacking. The player base will then always be suspicious. Any sign of suspicious activity in SG and the user's past reputation of being asked to do it in global will stick with him. People will accuse them (unfairly) left right and centre based on an earlier false accusation.

    Staff would be limited to asking when they had good reason to believe they are hacking, which requires video evidence to be certain of. This shouldn't be something which staff should be able to use regularly as it can have really damaging effects on a innocent person's reputation on the basis of a staff member's gut feeling.
    ___________________________________________________________________


    I want to repeat something that I said in another recent suggestion regarding hacked clients:

    I have just searched for 'hacked client' in the Complaints/Appeals forum and gone through all the ban appeals dating back to 1 November 2013, so 6 months. I found 20 successful appeals, of which 18 received a 3 day temp ban or less indicating that they were first time offenders. So it appears that the bit I have underlined in your comment isn't strictly true. The vast majority of people who have been banned for using a hacked client haven't re-offended. If they have, and have been banned, then the fact that they haven't appealed shows that our currently policy is working/that they are no longer an issue. In my opinion having 18 players who have been able to rejoin the community as a result of our policy is worth the 1 or 2 which re-offend.

    I disagree that the current situation is as bad as some people make out. It definitely isn't bad enough to warrant such invasive proposals as this.
     
    #53 Dewsy92, May 8, 2014
    Last edited: May 8, 2014
  14. kukelekuuk

    kukelekuuk C͕̹̲̽ͪ͐ͩ̔L̜̦̝͈ͦ̿̾̿ḘA̻̗̤̳̐ͭ̆̿̃̑ͭN̊̓͑̇ͯ
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    May 25, 2011
    Messages:
    10,007
    Trophy Points:
    80,160
    Ratings:
    +6,910
    I have about 15 hacking clients installed all for the sake of being up to date with them and knowing what features they offer. only ONE, the one you just named, still relies on periods.
    This whole suggestion is flawed in every way possible. Like I said earlier, you're relying on the fact that all clients use periods, while in fact, they do not. (and long ago those that did had a command called .msg which would let you send a message that starts with a period.)

    I've been involved with hacking clients for the past 3 years, I know exactly which features the ones I have installed offer and only 1 out of 15 clients I use would get caught with your suggestion. (because that client is missing some functions you'd see in other clients that have been around for longer)

    So why would people use the one client that can get caught with this? Why would people not switch clients when they know these spotchecks start happening?

    Your suggesting relies on a feature that most clients have abolished, and people will simply stop using the clients that still offer that feature. (Like Huzuni)
     
  15. iEvolive

    iEvolive Epidexipteryx hui
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    Oct 28, 2011
    Messages:
    1,379
    Trophy Points:
    40,690
    Ratings:
    +136
    Okay, so you've consistently demanded that people who reply to this thread provide you with a list of flaws in your suggestion, a list which you mistakenly believe is nonexistent, since you've said that your suggestion is "completely flawless" a number of times. In the interests of mutual understanding, I felt it wise to compile a list of all of the faults with your suggestion already noted, and add a few more of my own.

    Firstly, you claim that your suggestion is easier than a video, which is untrue. A global spot check creates, as @nicit6 stated, huge problems for moderators, not to mention your proposed automatic ban after a short period of time. In addition, a user PMing moderators asking them to demand that a user type .hacktest creates more hassle for moderators which is simply unnecessary given the work they already need to do. A video, or screenshots, though perhaps less convenient for the plaintiff involved, is overall more efficient, and if we look at this from a utilitarian perspective, the fact that mods do not have to manually go to all of the effort of gathering evidence is better for everyone, since they have more time to do more useful things.

    Secondly, a number of users, myself included, have taken issue with your proposal of an instant ban accorded to any user who fails to complete the hack test, as you put it, either by logging out instantly or not responding at all. An automatic ban system is never a good idea, since it only accounts for people who are active and watching chat. Though users who are afk at any given point in time are a minority, they are a fairly significant minority, and should be accounted for. Your proposal suggests that we (and by we, I mean the moderation team) instantly ban all of these innocent users who have done nothing wrong. You yourself have stated that this remains a major flaw in your case, and yet seem to believe that your suggestion is, to use your words again, "completely flawless". Adding to this, users have every right to ignore moderator communication, especially if not at fault, and furthermore, should have every right to decline, as @nicit6 stated in another similar thread.

    Thirdly, users such as @kukelekuuk00 and @Videowiz92 have explained repeatedly that the suggestion wouldn't actually work, whether it be due to bypasses such as & colour codes and /r and /ch qm commands or due to the fact that very few hacked clients actually use full stops to prefix commands. You have stated that you tested this and it did, in fact, act as a bypass, irrespective of whether or not you were actually on a hacked client. Your response to this was that these fairly important commands be disabled to facilitate the implementation of your suggestion, which, as I'm sure someone as intelligent as you can understand, is not only a weak argument but a logistical nightmare. Going on from this, should this suggestion be implemented, what would such a message say? "Please type .hacktest to prove that you are not using a hacked client, except in the event that you do not use a hacked client that requires full stops to prefix commands, in which case please type hacktest prefixed by whatever your client does use"?

    Fourthly, ignoring everything above, your suggestion creates an enormous logistical issue that I would argue is far greater than the problem it supposedly solves. Unless you plan to have moderators constantly typing /who in order to see who did and didn't respond to a global broadcast that most people would ignore anyway, and then banning those people, the implementation of your suggestion would require the development, installation and continued updating of a custom plugin solely to enact a draconian auto-ban. This creates unnecessary work for the server's already overworked developers, which, as for moderators, diverts their time from doing other, more useful things.

    Finally, it is of my opinion, and the opinion of many others, I am sure, that hacking in SurvivalGames or other PvP outlets is a vey minor issue. ECC is not a PvP server and SurvivalGames is simply a side game where users can have fun, earn a bit of money and support the server via the purchasing of kits. Though there are some users who do utilise hacked clients, they are very much in the minority and the relentless pursuit of their persecution for which you seem to be so passionate and enthusiastic is little more than a glorified witch hunt against users who would be banned regardless of the implementation of your suggestion due to valid complaints made under the status quo.

    -1.
     
  16. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    Name the 15 hacked clients. All of them.
     
  17. kukelekuuk

    kukelekuuk C͕̹̲̽ͪ͐ͩ̔L̜̦̝͈ͦ̿̾̿ḘA̻̗̤̳̐ͭ̆̿̃̑ͭN̊̓͑̇ͯ
    Builder ⛰️ Ex-EcoLeader ⚜️⚜️⚜️ Premium Upgrade

    Joined:
    May 25, 2011
    Messages:
    10,007
    Trophy Points:
    80,160
    Ratings:
    +6,910
    I'll gladly do that in a PM, but I'd like to keep that out of this suggestion.
    If that's all you have as a response to my post then I'll stop trying to convince you, too.
     
  18. FreshSigh

    FreshSigh Builder
    Builder ⛰️ Ex-Tycoon ⚜️⚜️⚜️

    Joined:
    Jun 17, 2013
    Messages:
    814
    Trophy Points:
    29,840
    Gender:
    Male
    Ratings:
    +369
    Zec, I'm sorry, but it's not going to happen. If you want to prove somebody is hacking, take a video.
     
  19. Zecrux

    Zecrux Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 20, 2013
    Messages:
    450
    Trophy Points:
    27,190
    Gender:
    Male
    Ratings:
    +74
    First off @iEvolive
    @kukelekuuk00 @Dewsy92
    MY NEW THEORY
    • Huzuni is the most popular hacked client used today. Nodus is basically ancient and not as advanced as huzuni... 65-70% of hackers use huzuni for it's massively decreased lag. Minimal-no glitches/bugs. Easy to understand. Quick navigation. Instant keybinds. ETC... It's rated #1 by the best hacked client download website there is. <mod-edit>

    • Huzuni rating here. (video by wizardhax) It is rated #1.
    <mod edit>


    SCENARIO 1: Lets describe my new theory. #1 PlayerZ is a person that is constantly killing me in sg and pvp, and doesn't kit in sg, nor does he have high mcmmo stats in pvp. I tell a moderator about PlayerZ. The mod then engages in a conversation with PlayerZ, teleports to him, then pms PlayerZ the message to say .hacktest in LOCAL chat! (This makes the identification method mostly private, unless he is at spawn. Also if he is in sg or in pvp, the mod could possibly kick him out of sg if its possible, or if hes in pvp the mod could just tpa to him and do it in the arena.

    • That method will make it more private!

    • Lets say &7 and /ch qm were blocked (temp or perm blocked. or possibly only blocked for that user?) or removed. Would scenario 1 now work?

    Possible errors in scenario 1:
    • PlayerZ is afk Solution: Mod should make sure they are engaged in a conversation.
    • PlayerZ has a moderator ignored. Solution: Mod could temporary disable their /ignore? Why would player ignore mod? (hack alert)
    • PlayerZ disconnects from the server. Solution: If user disconnects directly after receiving message... (hack alert[player needs to log to turn off hacks]) That could be worth of a ban.

    A alternative: PlayerZ doesn't have to be banned on the spot for failing to type ".hacktest" in /ch local. The mod or any other users could screenshot the user failing to do so, and the failed ".hacktest" could be used as additional evidence in a later complaint.
     
    #59 Zecrux, May 8, 2014
    Last edited by a moderator: May 8, 2014
  20. TdoggTL

    TdoggTL Builder
    Builder ⛰️ Ex-President ⚒️⚒️

    Joined:
    Jul 22, 2012
    Messages:
    1,694
    Trophy Points:
    32,340
    Gender:
    Male
    EcoDollars:
    $0
    Ratings:
    +532
    Nice job adding like 3 download sites for hacked clients as well as a YouTube video on hacked clients. Gg.
     
    #60 TdoggTL, May 8, 2014
    Last edited: May 8, 2014
Thread Status:
Not open for further replies.