Quoting: hell0

Quoting: F.UltraServer side checks however is a major performance pain, having it client side means perfect load balancing. So it's not only about being "lazy", it has a real impact on the number of simultaneous clients you can have per server.

There isn't really a need to run the checks in real time or on the same server as the game's logic. In fact it's probably a pretty poor idea to validate every action synchronously as it would lead to horrible game experience in most scenari due to network latency. It would also let cheaters know exactly what was detected or not.

The correct approach to server side anti-cheat is to analyse information statistically to find outliers and then determine whether these outliers are just good players or cheaters (using human validation if necessary).

Let's imagine a cheat letting you fire a weapon faster than intended and let's say the server records every hit. That's all we actually need. After each game the server can ship that game's record off to our anti-cheat analyser. The analyser looks at all hits recorded and find that player A has over 10 hits within 5 seconds with a 10 second reload weapon, player A gets banned.

Better yet, proceeding this way lets you detect cheats that may be invisible to normal players. If your 10s reload gun reloads in 9.75s that's an advantage but nobody will notice it with certainty. If it happens once, it could be chalked up to some weird lag compensation or chance. However if a player consistently reloads ever so slightly faster than possible, a machine will catch it over time.

In short: you should think of server-side anti-cheat as some sort of replay watcher/analyser bot, not a validation of every keypress in real time.

This approach I like! Of course it requires analysis of quite a lot of data since even with a "low sample rate" there will still be quite a lot of events to go over for each session so I think that this is still not something that every single small studio can handle, but then again a 3d party expert could sell this as a service.

View this comment - View article - View full comments

Quoting: slaapliedjeI still haven't sat down and played Hellraid, as I beat the game long ago and always find it hard to go back just to play some DLC, is it worth it?

Have we gotten any word about the second one being native to Linux?

Well it's not even native on Windows yet, being released in December I think. But AFAIK there have been zero words on a Linux release, they keep on doing patches of the first game for Linux though so at least they are honouring that version.

View this comment - View article - View full comments

Quoting: TheRiddick

Quoting: hell0I've played robocraft. Whilst the game was fun and enjoyable to play, they're a prime example of trying to make up for jokingly bad cheat-proofing by using third party tools. Their servers trust everything the clients send: that weapon with a fixed unalterable 10 seconds reload is ready to fire again after 0.1s you say? Sure, go ahead! That speed you can't reach with your current setup is what you're cruising at? Seems alright!

I've been saying this allot lately too. EAC/BE as a AC measure and nothing else is called 100% lazy development! Server side rule breaking checks need to be done. I think Mortal Online 2 has server side AC going on since they discovered early on that client side only was completely pointless!

Server side checks however is a major performance pain, having it client side means perfect load balancing. So it's not only about being "lazy", it has a real impact on the number of simultaneous clients you can have per server.

View this comment - View article - View full comments

Quoting: Raaben

Quoting: F.UltraYou are already running a closed source binary (the game itself and Steam for that matter) on your system that can already do whatever they like with your system, I don't think EAC brings anything more evil to this table since it does not run in the kernel and does not require root(?).

True, but at the same time it is an anticheat's specific job to spy on what one is doing right? It might not have root/kernel access but it can also do alot of snooping around without it.

It can do no more snooping around that the game already can if it wanted to. In fact I would say that you have a much higher risk of a random game doing shady business than something like EAC since if it turned out that EAC did look at things it wasn't supposed to then EAC might find it self without any market so they have much more at stake.

Note that this is not an endorsement of things like EAC, just pointing out that since we already run closed sourced binaries on our system the game is already over so to speak. Proper sandboxing would help here (but Wine/Proton itself doesn't do that even if you remove the Z: share) but AFAIK EAC would be just as sandboxed as the game in that case anyway so the difference is back to zero again.

Huge difference on Windows where things like EAC AFAIK runs as some kernel module, but again that would only allow it to snoop on other user accounts since the game already have access to all your files and how many really run with more than one account on Windows...

View this comment - View article - View full comments

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

You are already running a closed source binary (the game itself and Steam for that matter) on your system that can already do whatever they like with your system, I don't think EAC brings anything more evil to this table since it does not run in the kernel and does not require root(?).

View this comment - View article - View full comments

Quoting: EagleDelta

Quoting: scainePulseaudio 15 is now weirdly "meh", now that the world has re-focused on Pipewire instead. I suppose Pipewire still leverages PA under the hood though?

And yeah, looking forward to Pop_OS 21.10 now, albeit, I take their improvements with a pinch of salt these days, given that I'm a bit of a KDE convert!

I believe Pipewire has interfaces for both PulseAudio and Jack.... though I can't remember if that's PA -> PW or if it was for using applications expecting PA/Jack with PW.

That is for using applications expecting PA/Jack to work with PW instead. PW replaces PA and Jack, it does not work with them so to speak.

View this comment - View article - View full comments

The trailer reminds me a bit of the original Beneath a Steel Sky.

View this comment - View article - View full comments

Quoting: BielFPs

Quoting: Purple Library GuyI would be really surprised if Valve were unable to persuade those people to enable their anticheat to work with Proton.

The fact that they don't need to is the key point, remember that most of the profit from steam comes from Windows users so Valve isn't losing anything from developers not supporting Proton.

Don't forget that the release of the Deck is a major event, so there will be adds, and promotions and perhaps even parties. As a game dev you want as much publicity / visibility as possible so they should be interested in being included in the upcoming Deck promotions.

This is one of the reasons why the big publishing houses never release a native linux build even though they obviously have one internally (for Stadia) -> that doing so won't get them inclusion on some big event and why they instead release on say the Switch since Nintendo will give them free air time.

So if Valve handles to release of the Deck properly then there should be huge interest to be on the hype train.

View this comment - View article - View full comments

Quoting: ElectricPrismHave you seen the data on Sweden? (To be blunt: It looks like your most vulnerable -- obese, diabetic & old probably already were taken out, thus the lower death rates in the present)

Not in the slightest, remember that we have "only" 14.868 deaths out of a population of 11M, we have a lot of more obese, diabetic and old people than that.

There are far too many confounders to say anything regarding country vs country when it comes to covid, perhaps in a decade or so when the scientists have managed to go through all the numbers it's possible to say anything but not today.

View this comment - View article - View full comments

Quoting: GuestPlace when I life this year: excess number of deaths is above 100 000 and Covid kill 6 000

That just means that in your country there is a huge under-reporting of covid cases. In every single country where there are great covid reporting the covid cases is very very close to the excess deaths number so if the same would not apply to your country then your country is an extreme outlier, so the most logically conclusion, unless reasonable evidence of the contrary can be produced, is that it's simply under-reporting of covid cases.

View this comment - View article - View full comments