PDA

View Full Version : CODERS SAVE THE JJ2 PLEASE!


Toni_
Jan 17, 2012, 06:51 AM
Hi all,

I wish to give you guys some information that may alter the entire jj2 competetive scene.
First, no, and I mean no game which is played at the ladder is trustworthy anymore. Every game may have someone playing with radar and it isn't traceable.

Now players may be wondering why in the world I would state such thing. First of all, I got my hands on Radar v2 today. I know exactly what is possible now. The levellist this radar version works on: Semi, JE, BBlair, BBswing, silwi, Gauntlet, Epitome, FF, WW, Distopia, super, TCS, DW and Zaitox.

I can test it out with you guys if you want, I dont care. I can give all information by just checking radar basically. I even know everybodies health.

Ah, I also dont need teamchat anymore because I know when my flagcarrier is low and I know when to shout "S" because I can see enemy flagcarrier getting 1. All automatically.

Now I cannot tell how long this has been around already, I just know from a source he's been given a couple of untraceable Radar versions already.

I'll be able to show screenshots and I will be able to give evidence of everything I am stating. You can come visit me at my house and I'll show you everything for that matter.

Either way, laddering me is probably not gonna happen now anymore and I am aware of that. But I just wish players to know what is actually possible at jj2 and what you're dealing with. I also wish to get a discussion going and for someone to finally make whatever program that detects cheating - may if even be a program everybody has to use locally. That said, that'll probably be bypassable too so I might as well not play anything competetive at all anymore.

Enjoy.

JJ.net Forums (http://jazzjackrabbit.net/index.php?op=forumz&watte=viewtopic&topic=369&page=1#8515)

I want to say that I have this too. This is LAME. I would like every cheater who cheated with this in a bad way to die. Well it's enough. Veg said everything. I would like now to know,
DO YOU, CODERS, WANT TO SAVE THE JJ2 COMMUNITY, AND GAME ITSELF, BY MAKING AN ANTITOOL OR IMPLEMENTING SOMETHING SIMILAR IN PLUS WHAT BLOCKS RADAR2?
It's gonna be hard work, I Know, but at least try. I want this community to live. Not to die now. I want to give this to EVERYONE WHO I BELIEVE TO AND WHO WANTS TO HELP IN CREATING THIS PROJECT.

To Nimrod (if you see this): Please find a way to block Artem connecting to the serverlist. I know that he can change his IP easy, but if there's any other solution to ban him, do it.

Screenshoots:

LINK1 by Vegito (http://img515.imageshack.us/img515/992/radarj.png)

LINK2 by Toni ~ 1920x1080 (http://img859.imageshack.us/img859/1282/radar2.png)

LINK3 by Toni (http://img718.imageshack.us/img718/5245/radar3.png)

Album. No more pics for now. (http://imageshack.us/g/515/radarj.png/)

Grytolle
Jan 17, 2012, 07:02 AM
I've tried to convince ppl to make a program working along the lines of this:

-scan jj2's memory for known cheats
-take periodic screenshots of the entire screen to hopefully catch other cheats (notably this would make use of radar and highres and unlimited ammo, the immediate threats close to impossible)
-make it harder to manipulate jj2's memory by killing processes that attempt to (not a problem for plus which works with dlls)
-send the gathered information along with timestamps to a neutral server where it can be examined if need be

Such a program would ofc only be mandatory for tournaments that write it into their rules


First Artem, then Glados have started on such projects, but afaik they haven't made much headway



(Edit: if you wonder why I haven't done this myself: I'm really fucking incompetent :D)

Vegito
Jan 17, 2012, 07:19 AM
Screenshoots, gotta love that.
Anyway, indeed. It is about time some programmers perhaps start to work together and get gaming at jj2 friendly/fun again :)

Toni_
Jan 17, 2012, 07:22 AM
I was thinking for something like Harmen suggested.
We create a program that you have to install to play ladders. It will detect all other programs running on that pc at that moment. If win, the program post it automatically to the site.
But Gry's post is even better.

wKtK
Jan 17, 2012, 07:27 AM
wKtK, mad at cheaters and n00bs who distributed this, reporting in.

Gry pretty much hit the general point there.

not a problem for plus which works with dlls
GetMeR?

Sfaizst
Jan 17, 2012, 07:33 AM
Wtf!? whats happening here!?

DanZeal
Jan 17, 2012, 07:37 AM
Would be nice if the program could include a function that makes servers only allowing players who are using it.

wKtK
Jan 17, 2012, 07:40 AM
Wtf!? whats happening here!?
Revolution! and it has only just began...

Sfaizst
Jan 17, 2012, 07:41 AM
So something i included once in JJM, hmm but i dont think i have these version somewhere left, sorry, you still need to wait for the next version when jjm will be a dll like plus is

Toni_
Jan 17, 2012, 07:46 AM
Doublepost. But, my thread, why wouldn't I?

@Sfa: Maybe stop watching your own projects and your own ass? Help the JJ2 community by joining the existing(?) team of coders who can help in creating some anti cheating tool.

Also, if that can help you, I have a source code for Health Spy or however it's called (the part what shows your healths in-game).

Harmen
Jan 17, 2012, 07:47 AM
Artem started a 2nd jj2 revolution,
first was jj2+ now this shizzle

Sfaizst
Jan 17, 2012, 07:57 AM
Hmm sorry, that I'm not writing my projects in the main programming language c++ / php / ... So I need to do the best I can with Delphi...

Even please do not say thet I never did something for the community, just ask grytolle...

So a Health Spy is the problem O_o!? man i made once a fucking small jjm-script to read and show it...

hmm, a bad thing if something like this getting productive used...
a good but insane solution would be to block the sending of health packets from all clients to other ones and make the health state more serverbased...

Toni_
Jan 17, 2012, 08:01 AM
Sfa, I am not attacking you. Your post seemed to be like you think only to make JJM alone, and nothing else. I just wanted you to make a collab anti cheating tool. I never said you never did anything for the community. I Know you did a lot for it, and thanks. But now you should do much more.

Also, since I am not a programmer, I don't know how much the source code can help to you. The point is that, if you need it, you can have it from me. That's all.

P.S. Waiting for GLaDOS to respond here, since someone told that he will show up here soon with a great idea.

Vegito
Jan 17, 2012, 08:02 AM
Nah, radar shows a lot more than just health which you can see in the first and second post of the jj.net thread here (http://jazzjackrabbit.net/index.php?league=1&season=1&op=forumz&watte=viewtopic&topic=369)

GLaDOS
Jan 17, 2012, 08:03 AM
I would like to announce that a team currently consisting of wKtK and me are starting to plan the exact implementation for the Anticheat tool. We already have a plan in mind that should prevent players from using any Radar-like program by forcing them to run an executable alongside JJ2 that scans the memory of suspicious processes for specific patterns. These patterns will be updated from time to time. Once a pattern is found, the tool will report the find to the neutral server and terminate the cheating program.

Sufficient code and protocol obfuscation should prevent most scriptkiddies from breaking the protection. As Radar 2 (or 3, or whatever number it is at now) sports absolutely no features that haven't already been known for a long time, we're hoping that the Anticheat tool should be effective for quite a while, if it ever gets broken entirely, provided the method we have in mind works out well.

Note that legitimate programs like Get Me R will be put on some sort of whitelist, the exact implementation details about this are still in the planning stage though. If the whitelist turns out as a vulnerability, we will most likely end up adding the functionality of Get Me R into our program, with permission by and giving full credit to Shelly, of course.

Toni_
Jan 17, 2012, 08:11 AM
God bless you! Just be fast with that. I know, you're all busy and have other projects going on etc, and I can't blame you if you're slow, but I wish you good luck and success! Thank you all for helping.

Sfaizst
Jan 17, 2012, 08:19 AM
I thought about something similar white / balcklists on a server and scanning the memory but i have thousend ideas to get over my own protection...

so i need to have better ideas to protect jj2 agianst the evil ideas I have xD

GLaDOS
Jan 17, 2012, 08:27 AM
Don't worry, wKtK currently has lots of free time for a few weeks, so we can do some active development during that time.

Sfaizst
Jan 17, 2012, 08:30 AM
tell me when you finished something, ill try it for myself after my exams with a while / blacklist, possible i get a good idea :D

Toni_
Jan 17, 2012, 08:36 AM
Don't worry, wKtK currently has lots of free time for a few weeks, so we can do some active development during that time.

His signature doesn't say so.

Harmen
Jan 17, 2012, 08:38 AM
[18:37:49] Ensar // ShakerNL™: Artem saved JJ2
[18:37:52] Artem: saved?
[18:37:53] Harmen: saved?
[18:37:54] Artem: u kidding?
[18:37:54] Ensar // ShakerNL™: from all those annoying ctf

GLaDOS
Jan 17, 2012, 08:39 AM
His signature doesn't say so.

He hasn't updated his signature for a while, starting tomorrow (I think) he will have about two weeks of free time.

EvilD
Jan 17, 2012, 08:46 AM
I am by no means a programmer, but i have the resources to provide a seperate secure server if necessary. This server would be a Virtual Machine on my own Virtual Host, which has a dedicated 100mbit link and is protected by a corporate firewall appliance. My preferred OS to host this program on would be Linux(distribution doesnt matter to me), since its far less consuming than windows. But if you dont think you can program it for Linux and commandline/logfile only, windows is possible.

wKtK
Jan 17, 2012, 08:49 AM
Yep, However today I'm still busy with school, so sig-updates and other irrelevant things will come later :)

Lets fight this radar crap :)

GLaDOS
Jan 17, 2012, 09:03 AM
I am by no means a programmer, but i have the resources to provide a seperate secure server if necessary. This server would be a Virtual Machine on my own Virtual Host, which has a dedicated 100mbit link and is protected by a corporate firewall appliance. My preferred OS to host this program on would be Linux(distribution doesnt matter to me), since its far less consuming than windows. But if you dont think you can program it for Linux and commandline/logfile only, windows is possible.

Thank you for your generous offer, it will be considered. Since the server software will be written in C++ using only console and network I/O, compiling for Linux won't be a problem at all; in fact, Linux is my primary operating system for program development. I only use Windows when gaming or compiling for Win32.

Toni_
Jan 17, 2012, 09:57 AM
Thank you EvilD. Any help is appreciated!

If you're gonna make any log or anything similar, I'd recommend to make it public so there's no person who can say that there are corrupted people! We can't prove that either way, but if you try to make it with all these new people, well, corruption wouldn't be possible at all, because there are a lot of people in that project.

To clarify, I don't want to say anyone is corrupted, but there is possibility, so let's prevent that!

wKtK
Jan 17, 2012, 10:15 AM
I agree, such logs should be public (maybe with censored IP's or somth.)

However, some unfortunate things happened while discussing/thinking about the program.
More will be said later, probably by GLaDOS. (See jj.net if you cant wait)

May JJ2ladders survive.

sorry, and I'll see if I can do somthing.

KRSplat
Jan 17, 2012, 10:30 AM
I say that I wish to be able to view the aforementioned logs of my own computer and those of my clients as a host,.

and to extract said logs for ,submission' at my discretion.

GLaDOS
Jan 17, 2012, 10:39 AM
I am sorry to let you guys down, but despite the presence of rough plans, I lack the motivation to create this project. This is caused partly by the group pressure I've been getting about this, and the fact that I'm being told to rush, which would mean I would have to neglect school and my own current work in progress game for the Anticheat project.
Sorry if this sounds egoistic or anything, but there is nothing I would get for writing the program, aside from the ability to play ladder matches again, which has no benefit for me at all with my low playing skills; and, as I know the ladder community, I doubt they would be all too thankful for the project. In particular, I am worried this would end up as the jj.net admins getting all credit for "winning the fight" against cheating by making everyone use the program and me just getting pwned on JJ2 as usual.

Neobeo
Jan 17, 2012, 10:55 AM
Now, I'm not someone who has ever visited the "Online Play" forums, or for that matter even play online. But I do have a lot of experience in anti-cheat mechanisms (I've been bypassing various versions of nProtect since it first came out), and this thread actually piqued my interest somehow.

From my experience, having to run a separate anti-cheat tool can get annoying pretty fast, and doesn't particularly add very much security. As with NeoAC, I would theoretically be interested in a serverside solution as far as possible.

a good but insane solution would be to block the sending of health packets from all clients to other ones and make the health state more serverbased...
Why would this be insane? This was really the first thing that came to mind.

Toni_
Jan 17, 2012, 11:05 AM
As long as there is someone who wish/can to help, this isn't a real let down, GLaDOS. I understand you. At least you wanted to do it. Pressure is never good!

Neobeo, I am glad to see you respond to this thread. Screw banning Artem, because Gry has the point. He could use MSN/anything else to spread his cheats if he gets banned. Well, nothing can stop him except... well you all know what. You should be in contact with the other coders who are willing to help, if you need help. You will probably not make any deals and conversations here.

Stijn
Jan 17, 2012, 11:23 AM
I can understand why this is srs bznz, but remember that cheating has been a problem for ages in online JJ2, and there's no reason this specific time it would cause the community to "die", so there's no need to be quite so panicked, JaRU.

Still, thanks for posting about the issue here.

Lithium
Jan 17, 2012, 11:35 AM
He means the jj.net ladder-based community, which kinda is in danger without the anti-cheat because people do not know whether their opponent is using radar.

Toni_
Jan 17, 2012, 12:33 PM
I actually mean the entire JJ2 community scene, but mainly, yes, JJ.net ladder is kinda ruined with this shi-. I don't panic, maybe I look like that, but I just want this to be over - means on cheating with radar -.

Harmen
Jan 17, 2012, 12:42 PM
I do want to create a program to run that checks for hacks..
but I am not sure if anyone else is doing it already .
and even IF I make it and it works fine people will not trust me enough and think it is more spyware.

Vegito
Jan 17, 2012, 01:04 PM
So lets have radar only ladders xd. Well, I'll give up competetive JJ2 for now anyway. No point playing when everybody can use radar and turn 2D shooter into an RPG. I can't trust everyone either you know.

KRSplat
Jan 17, 2012, 01:19 PM
?Try this out?: http://technet.microsoft.com/en-us/sysinternals/bb896645

Ktos.
Jan 17, 2012, 01:43 PM
That's quite strange actually that anyone is cheating in game like JJ2, there is no point in it lol. I'd understand that(but still blame it) if there was any reward for winning it, but like that? Seems like the most trusted competition now can only be level making, hard to cheat in that one.

What's the point anyway, people want everyone to see them as some kind of pwners maybe, but that makes no sense at all. Good job whoever did that, you have just destroyed fun of playing this game. What's the point of getting feel better at some internet bunny game, lol.

... Still I sometimes like to play CTF, so I guess I will play, just not maps that are included in that Radar thing. How long is it around jj2 anyway?

Grytolle
Jan 17, 2012, 01:56 PM
From my experience, having to run a separate anti-cheat tool can get annoying pretty fast, and doesn't particularly add very much security. As with NeoAC, I would theoretically be interested in a serverside solution as far as possible.
What server side solution could theoretically stop you from reading player positions and plot them out on a .png?

I'm with you on the principle, I just don't think it'll do the trick in this instance.

Neobeo
Jan 17, 2012, 02:32 PM
What server side solution could theoretically stop you from reading player positions and plot them out on a .png?

I'm with you on the principle, I just don't think it'll do the trick in this instance.

A quick example is that a client only receives the positions of players that are within his screen. (assume 640x480, say)

Grytolle
Jan 17, 2012, 03:15 PM
A quick example is that a client only receives the positions of players that are within his screen. (assume 640x480, say)
Sounds like it would work, but then the "cloud"-function still works (not that it's as critical a problem)

Neobeo
Jan 17, 2012, 03:33 PM
What is this "cloud" function exactly?

Grytolle
Jan 17, 2012, 04:45 PM
What is this "cloud" function exactly?
It adds a trail to any player with low health, so you know whether he should be killed off or not (you wanna keep all enemies on low health in CTF so you can make timed scores)

Neobeo
Jan 17, 2012, 09:26 PM
Essentially we want clients to only know things they're supposed to know, i.e. things in their own screen and their own health. So if the server doesn't tell them other players' healths and other players' locations (other than the ones they can see), that should effectively prevent the "cloud"?

Grytolle
Jan 17, 2012, 10:32 PM
No, as the clouds are only visible within your screen :) Basically if you see someone standing ready to recapture with a cloud around him, you leave him be, otherwise you hit him and run away again. You could also see that the enemy flag has low health and scream GO RTS! and then kill him off. And you would never fall it when a flag carrier camps at the carrot with 3 hearts just in order to get hit on purpose and take C (in order to get rid of the C and to hurt opponents)

Like I said, this is really minor compared to the actual radar function of the program, but it's still quite a problem

Vegito
Jan 18, 2012, 01:21 AM
Cloud only works for the client, not for others in your screen in the first place. The most helpful things of radar are indeed the radar itself and being able to see everyones health. Cloud will just remind you that you're low health basically.

There is one thing about not sending positions to players I wonder about.. What about the arrow to the flag/flagcarrier? I guess that'll break?

Harmen
Jan 18, 2012, 04:17 AM
A quick example is that a client only receives the positions of players that are within his screen. (assume 640x480, say)

I am trying to create this right now but it is very hard

Ktos.
Jan 18, 2012, 04:58 AM
I've got stupid idea. Let's force everyone to play with fullscreen with some kind of stupid program maybe, only for ladders etc.

Toni_
Jan 18, 2012, 06:26 AM
Ktos, indeed, it's a stupid idea. How do you expect me to play on 23" monitor in fullscreen? Shall I be on the distance of 3m or something for such a game? It's hard for me. I always play on windowed mode.

Zerg
Jan 18, 2012, 07:22 AM
Ktos, indeed, it's a stupid idea. How do you expect me to play on 23" monitor in fullscreen? Shall I be on the distance of 3m or something for such a game? It's hard for me. I always play on windowed mode.

yes, it has low fps on big scrrens like mine...

wKtK
Jan 18, 2012, 07:30 AM
50" here. gg.

Anyway, back ontopic.

Is there anything I could do without modifying jj2 itself? I mean, most of the serverside solutions (if we go for a server-side solution) depend on Jazz2 performing non-default behaviour. I could learn to modify jj2, but in that time someone more experienced in that are could come up with a solution.

ShakerNL
Jan 18, 2012, 08:29 AM
Let's all move to 1.20 :happyface:

Neobeo
Jan 18, 2012, 09:55 AM
Here is my quick, untested attempt at a fix (v1.23 / v1.23+):
Patch Jazz2.exe at position 0x885C5 from "76" to "EB".
Patch Jazz2.exe at position 0x887B9 from "1C" to "00".
Patch Jazz2.exe at position 0x887FF from "8A 51 3E" to "B2 07 90".

What this hopefully does is:
The first two patches prevents the server from sending any information to a client about other players that are not within his screen (given by |dx| < 640 and |dy| < 480). The third patch tells the client that all other players have 7 hearts of health.

Would be nice if someone (preferably with the aforementioned cheating program) could test this.

Violet CLM
Jan 18, 2012, 11:27 AM
As someone who can't host and besides doesn't have the radar program, I can't test this directly, but it sounds like that doesn't address Vegito's concern that arrows in CTF could no longer point to the flag carrier?

Toni_
Jan 18, 2012, 11:44 AM
"You must spread some Reputation around before giving it to Neobeo again"

Well, unfortunately I deleted Radar2 because it's a semi-spyware. It can harm my computer, and I have a lot of documents for what I don't have any backup.

Also, a program what does the patching should be there, since a lot of people doesn't know how to do that editing, including me. And everytime I want to reinstall JJ2 I must look for this thread to find what to do.

@Violet, at least he found way to prevent sending information about players positions and real health (well, someone could have 7h if /smhealth is 7, but we don't care, don't we?) from server to client. Thanks him for that. I hope he finds the way to prevent freezed arrow, too!

Vegito
Jan 18, 2012, 11:48 AM
I could test it or send the program to either of you 2 to test it. Someone would have to give me a patched jazz2+.exe otherwise (1.23 is ok).

Either way, it is a good start to solve this problem. We'll have to find solutions for the rest too I guess :).

Toni_
Jan 18, 2012, 12:29 PM
Well, Veg said to me... it works! I mean, that patch fixes the main problem, and it is not sending info to the clients. Nice job Neobeo, once again!

Vegito
Jan 18, 2012, 12:53 PM
No I didn't say it works? It doesn't work in fact. DZ and I tried it. How can you say that when I didn't say it xd. I said we were gonna test/see if it works. Lol.
Anyway, maybe someone else can try to edit Jazz2 that way.

Harmen
Jan 18, 2012, 01:00 PM
when I tested it (with artem) it did not work
radar still gave location and the health of the players

Grytolle
Jan 18, 2012, 01:41 PM
As someone who can't host and besides doesn't have the radar program, I can't test this directly, but it sounds like that doesn't address Vegito's concern that arrows in CTF could no longer point to the flag carrier?
Well, it'd be a longer patch, but you could make the arrow point in the right direction by sending a position that is in the same line but just barely outside of the visible area

Harmen
Jan 18, 2012, 01:48 PM
@NeoBeo
I am trying this now for all day but I try it in assembler by searching udpsend function and make it first check if the player is in the screen before sending

Neobeo
Jan 18, 2012, 02:39 PM
Well, it'd be a longer patch, but you could make the arrow point in the right direction by sending a position that is in the same line but just barely outside of the visible area

This patch will probably require some extra assembly code (so fits better in a DLL). Plus I'll need to look into the arrow-making function, as I don't really know how this works.

@NeoBeo
I am trying this now for all day but I try it in assembler by searching udpsend function and make it first check if the player is in the screen before sending

My patch should in theory already do that (modulo errors). It needs an extra patch at position 0x885C5 from "76" to "EB" (also to prevent sending of packets outside visible region). I've updated my original patch post accordingly. The health patch should work properly though.

master sven
Jan 19, 2012, 01:38 AM
Neobeo :)

DanZeal
Jan 19, 2012, 02:27 AM
Here is my quick, untested attempt at a fix (v1.23 / v1.23+):
Patch Jazz2.exe at position 0x885C5 from "76" to "EB".
Patch Jazz2.exe at position 0x887B9 from "1C" to "00".
Patch Jazz2.exe at position 0x887FF from "8A 51 3E" to "B2 07 90".


Not working. Radar is still showing other players. But nice to see you working on this!

Vegito
Jan 19, 2012, 02:49 AM
It also showed health when we tested it yesterday

KRSplat
Jan 19, 2012, 03:13 AM
I conceptualize that Referees shall verify recorded Matches only After viewing Series of Screenshots and/or process Logs from the machine running Jazz2 of each participant, inclusive of spectators.

It might could work; and might could Not.

Harmen
Jan 19, 2012, 03:40 AM
how about seekers that follow a player outside the window?
a seeker following a player is client sided...
if the client doesnt know where the player is what will happen

Vegito
Jan 19, 2012, 05:20 AM
I suppose we can only find out by trying. It could result in a ton of airhits, heh

Neobeo
Jan 19, 2012, 05:28 AM
Not working. Radar is still showing other players. But nice to see you working on this!

Hmm... it certainly works for me. Granted, I haven't sorted out any bugs such as seekers/arrows or whatever had been mentioned; just making sure the basic code works first. But patching the server with this code definitely makes the client see nothing outside his screen (client doesn't need to be patched), and a health of 7. I should probably add some notes here: firstly that the player doesn't "disappear", he simply stops moving once outside the visible region. and secondly that the health is shown as 7 only when player enters the visible region, and is not updated otherwise. (doesn't have to be 7. anything from 1-7 works by changing the middle byte)

Of course, I only tested this on v1.23 (not plus), in both battle and ctf, so it might be some plus implementation. I don't have this Radar app, but however it works it can't possibly obtain information which isn't being given.

Toni_
Jan 19, 2012, 07:57 AM
No I didn't say it works? It doesn't work in fact. DZ and I tried it. How can you say that when I didn't say it xd. I said we were gonna test/see if it works. Lol.
Anyway, maybe someone else can try to edit Jazz2 that way.

I am SURE you told me yesterday, somewhere in Zeal Duels, that patching prevents radar working as is should work.

DanZeal
Jan 19, 2012, 08:50 AM
Of course, I only tested this on v1.23 (not plus), in both battle and ctf, so it might be some plus implementation. I don't have this Radar app, but however it works it can't possibly obtain information which isn't being given.

Yes, tested without plus now, and it works. Seems like plus is doing something, or I did something wrong with the plusified exe.

ShadowGPW
Jan 20, 2012, 06:22 AM
I pity the ones that are using these kind of tools to win their game. Does it REALLY make you happy in the end? What do you gain with it? These kind of tools wreck online play. You should contact anti-cheat makers for help. (Punkbusted for example). Also these kind of people should be banned forever on tournaments and community webpages.

Toni_
Jan 20, 2012, 07:58 AM
And also, if they get banned, they will make more cheats and spread them on MSN/anywhere else, and their revenge would be extremely hard for JJ2 to survive.

Harmen
Jan 20, 2012, 09:51 AM
@Just a Random User
that is why there is being made a program to delete all cheats

Toni_
Jan 20, 2012, 10:07 AM
So, if there is already a program, why don't you use it to delete all cheats?

Grytolle
Jan 20, 2012, 10:09 AM
That sounds a bit unethical lol

Jeans
Jan 22, 2012, 05:02 AM
Well, I've been talking to Gry and Veg about it and this is what we thought out:
We need to create completely new version of JJ2. We don't have source that's why we need a lot of people knowing ASM to decompile JJ2 1.24 TSF (This is the most common used one for online). As I am not so good in low-level things like Assembler I need your help for that. Also: The code cannot be shown out of the trustee team of developers till releasing new version.
The new version will include completely new league connected with JJ2 program. This may be left for me. Please write here if you want to help with that. We'd need:
- Assembler programmers (Mostly to analyse the old code)
- C++ programmers (WinSocket + DDraw a plus)
- Interface designers
- Graphic designers
If we found a team that is big enough I would create the whole project and show you all.
This would solve every problem with cheating. And much, much more. To know further details contact me at bigboob0@hotmail.com.

Sean
Jan 22, 2012, 05:06 AM
While I'm not as uptight as Robo4900 about legality, I still wouldn't recommend outright decompiling JJ2.

Toni_
Jan 22, 2012, 08:22 AM
Isn't it just easier to somehow find blur somewhere and bug him to try to do something for this. He could try to block server sending info to the client about it's position and it's healths what are outside the visible block by the client aka resolution, just like nimrod said.

I appriciate nimrods work but it doesn't work for plus, it works only for normal jj2. blur would probably know how to make that, since he knows how JJ2 works, too. Well, not all functions, but a lot of them.

Could someone contact blur about this?

cooba
Jan 22, 2012, 09:36 AM
I've e-mailed blur.

Toni_
Jan 22, 2012, 10:00 AM
Thanks, a lot! If he doesn't decide to visit this thread/post here/help, could you show us his reply?

cooba
Jan 22, 2012, 10:07 AM
I don't even know if he still uses that address, so there's no guarantee of a reply.

KRSplat
Jan 22, 2012, 10:33 PM
I've tried to convince ppl to make a program working along the lines of this:

-scan jj2's memory for known cheats
-take periodic screenshots of the entire screen to hopefully catch other cheats (notably this would make use of radar and highres and unlimited ammo, the immediate threats close to impossible)
-make it harder to manipulate jj2's memory by killing processes that attempt to (not a problem for plus which works with dlls)
-send the gathered information along with timestamps to a neutral server where it can be examined if need be

Such a program would ofc only be mandatory for tournaments that write it into their rules


First Artem, then Glados have started on such projects, but afaik they haven't made much headway



(Edit: if you wonder why I haven't done this myself: I'm really fucking incompetent :D)

I've an application for this, albeit missing some sections.

It will be better when I've studied C++ starting this season.

- thought I'd revealed this previously; guess so now

wKtK
Jan 23, 2012, 03:45 AM
Well, after some people asked me again, I've decided to write an application that at least blocks artems radar, and is able to communicate with a neutral server to verify that It's running. The protocol will be encrypted ofc.

If you want me to write this, please say so. Howeer if you already decided on another project, please tell me that and I'll do my best to help.

And another question: I would like to obtain a version of Radar (the latest) for testing purposes, to see if it's vulnerable for my detectin method. anyone here could help me?
I PM'd Vegito yesterday, but he hasn't replied yet...

EDIT: I got radar now ok no. I make anti-radar no ok.

Thanks.

Grytolle
Jan 23, 2012, 04:20 AM
Yes, do it please. It's a project that needs a lot less work. ...Unless you mind terribly if it gets rendered obsolete eventually. :)

wKtK
Jan 23, 2012, 06:57 AM
Unless you mind terribly if it gets rendered obsolete eventually.
Of course not :)

Anyway, I just preformed some quick memory scans on Radar2, and it seems the method GLaDOS told me works. That means the program will be able to detect radar. I'll reply here when I've made some progress.

Toni_
Jan 23, 2012, 09:07 AM
Hmm, one question. Will that application block any kind of other versions of radar in future, or just this one?

Any help is appreciated!

If you want me to write this, please say so.

Shall I repeat myself again? :(

wKtK
Jan 23, 2012, 09:46 AM
Shall I repeat myself again?No need to, I've already started ;)

Will that application block any kind of other versions of radar in future, or just this one?The clients will have a system built-in to analyse processes for known patterns. As an addition, however, the server will be able to send extra parameters to the black/white-list. This will ofcourse happen encrypted to avoid hackers abusing this.
So in other words, once the program is successfully running, only the server needs to be updated in order to add/exclude processes. Adding+testing a new Radar will probably only take me 5 min or something.

Toni_
Jan 23, 2012, 12:14 PM
It will take you 5min if you have that radar. I don't think Artem/anyone else will publish his next radar like he did with this one.

wKtK
Jan 24, 2012, 02:04 AM
Those patterns I mentioned before don't need to be specific to one application. They can also focus on one aspect, such as trying to read/write to a players position etc.

Not only will I include patterns that block Radar and Coolhax, I'll also include a few basic pattens that look for JJ2-Hacking related functions.

Remember, this method is meant to be temporary, until jj2 has this weakness fixed.
This is meant to block the most 'dangerous' cheating programs out there atm.

And about new versions of radar, I'll try to make sure the pattern can still catch them.

I cant tell that much more about the method here, or hackers would be able to find an exploit.

Toni_
Jan 24, 2012, 05:59 AM
Hmm, okay then. I wish you luck!

cooba, anything from blur yet?

wKtK
Jan 24, 2012, 06:34 AM
Hmm, okay then. I wish you luck!
Thank you very much :)

I can't promise anything, but I'll do my best ;)

Toni_
Jan 28, 2012, 06:45 AM
Anything new about this?

wKtK
Jan 28, 2012, 06:52 AM
College started again and I've got a very busy schedule. My amount of free time has dropped considerably, but I'll try to keep working on this. However, It'll probably take some time before it's finished.

If somebody else wants to try this, contact me and I'll happily tell you the method I'm using to detect programs, as well as how radar can be detected 100% sure.

I'll continue working on this, but school has my priority ofc.

Toni_
Jan 28, 2012, 09:51 AM
Well... okay. I just can't believe that there are a lot of other programmers who could help in this project, and they're hiding in their lair somewhere.

wKtK
Jan 28, 2012, 10:01 AM
I'll try to drag some of them out to here if I see them.

DanZeal
Feb 3, 2012, 11:44 AM
Neo, any news?

Sean
Feb 3, 2012, 07:39 PM
Guys we should all stop bugging them, they'll report anything they come up with when something comes up.

Toni_
Feb 4, 2012, 02:22 AM
And maybe they forgot about this, since they're inactive?

wKtK
Feb 4, 2012, 02:35 AM
The best would of course be, if this would be added into JJ2+. I know thats not gonna happen (soon), because Blur has other things on his head and things like JJ2+ are a pain to code :p

Then there is the other solution, making a client-side app that everybody needs to run. This will be a hassle to check, and a lot of people really aren't waiting for a Punkbuster-like spyware next to their jj2...

So, I've decided to do what many have already tried:

I'm remaking JJ2, cross-platform, compatible with 'normal JJ2'. This will take a lot of time, and i encourage you to find another solution in the meantime. However, it'll become open-source once I've made some progress, so adding a fix/something against cheats will become a piece of cake in comparision with JJ2, from which the sourcecode is not in our hands.

This post was done in a rush, so sorry for any errors/typo's.

I'll leave you with this while I'll go and have lunch.
http://lun4rsoft.info/wiki/doku.php?id=project_fukkatsu

cooba
Feb 4, 2012, 02:58 AM
Project 復活 (fukkatsu, Japanese for 'Revival' or 'Rebirth')Bitch please.

wKtK
Feb 4, 2012, 03:33 AM
I knew people would whine 'bout the name...

Still going with it thou...

EDIT: It's only the project name btw, if you got something better, please say it. If you don't know how to give constructive criticism, please don't use stupid outdated gangster-memes...

Seriously, I try to provide a solution, even a thing everyone whines about but isn't there yet... And ppl whine about the godforsaken PROJECT NAME...
Do you realise THAT is the main reason the coders quit on you? They got better things to do in their spare time than to make things excatly as you command.
If you don't believe me, check the friggin JJ2+ thread, and try to make a little guess why BlurredD quit...

Maybe you should be a bit nicer to ppl spending months writing stuff for you.

and potential negreppers, see the 'reason for editing'.

Grytolle
Feb 4, 2012, 03:49 AM
This will be a hassle to check, and a lot of people really aren't waiting for a Punkbuster-like spyware next to their jj2...
source?

wKtK
Feb 4, 2012, 04:07 AM
Sorry, I should have added "and i think a lot of people..." there. Not a concrete source, but people always seem to complain about such an extra program.

Anubis
Feb 14, 2012, 01:37 PM
I like the name and support the idea, good luck.
Well... okay. I just can't believe that there are a lot of other programmers who could help in this project, and they're hiding in their lair somewhere.
There are indeed unknown coders in the JJ2 community hiding in their lairs, and they won't bother to code anything JJ2-related for the above mentioned reasons. So let's appreciate what wKtK and people like him are doing for the community.

Toni_
Feb 15, 2012, 04:01 AM
Like I already said, I appreciate anyone's work what could help. But I think the only project going on now is Fukkatsu by wKtK.

wKtK
Feb 15, 2012, 04:57 AM
Fukkatsu is going to take a lot of time before it's finished, however. So for a 'quick fix' to solve the radar/cheats problem, it's better to rely on someone else's project 'till it's done.

About whether Fukkatsu is the only project currently going on, there were some developments a few weeks ago about Artem making an anticheat-tool. I also saw his server titled "Artem making antcheat" online sometimes.

And yes, I know people will doubt a program written by Artem because it might contain spyware, thats why Grytolle has asked me to verify and compile the final version.

So I don't know if he´s still working on it, but once (if) it get's finished Gry will send me the code, and I'll check and compile it for you.