2/13/2024 0 Comments Hacker club cooee downloadIn an FPS, you typically cannot do a lot of server-side culling - everyone on the map is “visible” to the client, because everyone is moving so fast that you can’t really do any line of sight culling on the server. Even on the client, we do culling, so that we don’t draw everything in the dataset the client knows about. We speak of “culling” the data that is sent down, basically reducing the set. Assume that anything that comes down the wire is visible to them. In short, you should not rely on the client to filter information. This one was a problem early on in EverQuest and is still an issue in many FPSes. Packet stream sniffing: getting more info than you should You may not want to spend the time in encrypting if you need a fast response. To top it off, encryption can be slow, if you’re talking a real-time sort of situation. ![]() But really, all this does is raise the bar a bit on the hacking skills required. The hackers can choose to do is read the incoming packets out of client memory after decryption, instead of sniffing the stream directly. So that means that you are encrypting the packets, handing the user a decrypter called a client, and thinking that encryption helps. ![]() Really, anything after “it gets to a user’s computer” is in the hands of the enemy. Here’s the diagrammatic way to look at it. The first thing to realize is that encryption of the data stream isn’t going to stop anyone serious. ![]() That particular phrasing may have originated with Kelton Flinn, but I am sure many of us came up with it independently. You’ve probably heard that before - I wasn’t the first one to say it, but it constantly gets misattributed to me. The interesting thing, of course, is that all the hacks I am going to talk about are actually not hacking the virtual world at all they instead attack the client, which is your window into the world, and also your waldo, your means of exercising control over what happens in that world. Given the recent hack to the blog, and also given the recent news of the decompiled Eve Online client, it seemed like a good time to go over some of the ways in which a virtual world gets hacked.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |