Update: A Valve employee took to reddit to counter what was said in the bug report:
Hi! Valve employee here. The bug report is incorrect. VAC will not ban you for simply having catbot in your user name (either your steam profile or on one or more of your linux accounts).
The bug report--and I suspect many of the posts in this thread--are a tactic employed by cheaters to try and sow discord and distrust among anticheat systems.
VAC has many different types of detections and we cannot discuss what they do publicly because doing so makes them less effective. However, one thing I can disclose is that all detections require that the detection occur while a user is actively cheating and connected to a VAC-secured server.
Linux historically hasn't been a problem for cheating--the base rate of cheating is significantly lower on Linux than it is on Windows. Unfortunately, a "healthy" community of cheaters grew up around catbot on linux and their impact on TF became large enough that they simply could no longer be ignored. Those banned users are very annoyed that VAC has dropped the hammer on them.
Kisak moderates many of valve's github bug repositories for us in an attempt to keep the bugs high quality and actionable. The VAC team asked him to close the issue in question and to indicate that github was not an appropriate location to discuss VAC bans. He did so, and we support this action.
For proof that I am a Valve employee, you can check my posting flair in the other subs I post on (/r/CSGO and /r/tf2) or a mod can message me and we can work on confirmation using my work email and PMs.
So in this case what Valve is doing is fine. They're getting rid of cheaters and that's how it should be.
Original article
Happy New Year! Let's start 2018 with a bit of a joke shall we: Knock Knock. Who's there? Catbot. Banned.
It seems one user came across an unfortunate issue playing Team Fortress 2 on Steam, as they were VAC banned for having their Linux desktop username contain "catbot".
I can certainly understand when a bot comes along, if it uses something so easily identifiable then as a quick temporary solution you could ban it like that until it's fixed. However, that's obviously not a good long-term solution and will (like in this case) cause an issue for users. It's not even a good short-term solution, considering how many millions of possibilities there are for a username to have "catbot" in there somewhere. Going by usernames just isn't a good idea, it's just not. Why is it not? Bots can just use random names, then this doesn't even become a temporary fix, it becomes useless.
This is what Valve replied with:
Good day, I've received word from the VAC team that this is intentional and not open for discussion on Github.
In general VAC issues are not handled on Github in any capacity and further issue reports on this may result in being banned from the Valve Software issue trackers.
Ouch. I get why they don't want their GitHub filling up with VAC issues (it's not the right place after all), but threatening a ban just like that, without any suggestions on what the user could do is a bit harsh don't you think? Considering this GitHub request is talking about bans, to then threaten a ban from the Valve GitHub trackers—come on.
Valve has done a lot of good for Linux gaming and continues to do so, but I think it's still important to highlight issues, even if they are on the stupid side.
Quoting: Samsai"Catbot" is literally Hitler now. Logic checks out.
Do we need a Dogbot to fight catbot ?
Release the hounds of war!
Quoting: Alm888I personally have all the rights to ditch Valve however I want. And Valve can not do anything to me. Because I don't even have Steam account and neither is planning to, ever. :D
Fair enough, I commend you on your resolve. Giving up Windows originally was a hard enough transition especially using the immature Radeon drivers many years ago. Giving up on Steam would have been one step too far for me. There's only so long i can play supertuxkart and 0.AD.
QuoteNo, it is not. GOG said it will remove "connected" games from user's library if for one reason or another they vanish from his/her Steam account. Get banned on Steam and you can say "Goodbye!" to all games "connected" from it. :|
My apologies, I must of misunderstood how GOG works. I thought you could download and store you games on your local HDD with no DRM/authentication process effectively making your own offline arcade game box.
On this case, Steam could do a lot more than ban usernames to fight bots - which is the point. However, as said they're still doing a lot for Linux gaming behind the scenes and I very much appreciate the work they're doing.
Quoting: liamdaweI really don't get the weird in-fighting over who loves what store. Use what you think is best for you, be it Steam, GOG, itch, whatever :)
Agree. Also Don't forget Gamejolt, hardly ever see it mentioned. The site is really nice and they have a decent Linux client too.
https://gamejolt.com/client
QuoteOn this case, Steam could do a lot more than ban usernames to fight bots - which is the point. However, as said they're still doing a lot for Linux gaming behind the scenes and I very much appreciate the work they're doing.
Apparently the person who made the claims on the VAC bans is just a mod for Valve not a fulltime employee. Also yea, there working on AMDGPU/MESA, Linux VR, SteamOS and generally keeping Linux as a viable gaming platform in the eyes of most developers.
Valve are not anywhere near perfect but nobody can claim 4000+ games in under 3 years is not delivering a better GNU/Linux gaming experience.
Quoting: liamdaweOn this case, Steam could do a lot more than ban usernames to fight bots - which is the point. However, as said they're still doing a lot for Linux gaming behind the scenes and I very much appreciate the work they're doing.
I think that an "anti-cheat-protection" should normally check if the client connecting to the server is known (some kind of hash algorithm) and not modified/unknown. It should also check by undefined interval if the hash does not change after some time.
Is it really necessary to check username, hostname, maybe more?
Quoting: Luke_NukemHonestly, why would a person using a bot actually name it in such an obvious way?
He is mocking Valve and everyone else by saying "Look, Valve is so incompetent that i can make an army of literal bots and they wont do anything about it."
Quoting: Guestoperation ditch valve in favor of gog itchIO and other stores lets do itI can't agree with this. I am a fan of having a variety of etailers, but I would simply not use Linux as my daily driver if it wasn't for Valve.
in fact lets go even further one month of no steam challenge commence!
Quoting: Guestoperation ditch valve in favor of gog itchIO and other stores lets do it
in fact lets go even further one month of no steam challenge commence!
Steam is much more than a store and a DRM; the workshop alone makes it superior to the alternatives.
Quoting: Alm888Quoting: meggermanLinux gamers can't afford to ditch Valve at this point…I personally have all the rights to ditch Valve however I want. And Valve can not do anything to me. Because I don't even have Steam account and neither is planning to, ever. :D
Then it's obviously impossible for you to ditch Valve.
See more from me