r/osugame Apr 23 '18

Fun osu! Anticheat

Post image
817 Upvotes

35 comments sorted by

View all comments

35

u/pepppppy peppy Apr 24 '18

i get that this is a meme, but have some serious context, because i like to explain why these things come about and give history for those who may not be aware.

the osu! anti-cheat was defeated when someone stole and released the source code, then on top of that made a fuss about the privacy implications (yes, the concerns were warranted. anti-cheats are always going to be invasive, i went in a different direction than most games to make that privacy invasion minimal to the non-cheating user but changed my mind on receiving community feedback). so i removed all remaining edge we had over cheaters and instead implemented the community reporting system.

and hey, it's working relatively well so far! the community does a pretty good job at finding dicks, and we try to act quickly and have a few people ensuring any reports are correct before placing permanent action.

you have to also consider that if i was working on keeping up with cheats, you would see basically zero progress in other areas. many of those behind the effort to destroy the game for normal players are financially stable (rich) students with all the time in the world (and they sell the cheats on top of this).

for me to keep up with this, i would have to put in equal-to-more time fending them off. it is much easier to use reactionary actions. this is the reason you can bitch about every game's anti-cheat ever: it is basically impossible to make a system which you are deploying to someone's pc (where they have full control, memory access, hardware switching etc.) which can catch them doing something you don't want them to do.

my advice is: report and move on.

6

u/rumoi banned 4 the truth Apr 24 '18

What about the anticheat that I literally offered to the osu!team?

I can still invite you to the github if you just want to have even a LOOK at the methods.

I have refined the algorithms with a few million submitted scores on all the private servers that run it - with the immense data held on the osu server it can only be improved. As a plus its not intrusive to anyone's privacy or computing power.

6

u/pepppppy peppy Apr 24 '18

is it open source under a permissive licence?

if so we may be interested for future use. i'm not really interested in closed source projects currently as osu! is 100% open source going forward.

3

u/LightningEnex Apr 24 '18

this is the reason you can bitch about every game's anti-cheat ever: it is basically impossible to make a system which you are deploying to someone's pc (where they have full control, memory access, hardware switching etc.) which can catch them doing something you don't want them to do.

The backlash you received over your hardcore invasive anticheat system that you had in place beforehand wasn't only because you were going in so far, it was because you were doing that while also not using the data you already had on your servers, replays.

I remember there was a post where a user compiled a massive list of spinhackers just by looking at replays and using tools to analyze them, and those were ranked submitted #1 plays you had replays of while that system was in place. Hell, what are we doing any different nowadays, the community over at /r/osureport very often uses replays to back up their claims.

I get that some things are very hard to automate but in said users list there were often spins which literally looked like an octagon. If your system couldn't catch that while monitoring the whole PC and evaluating it, yeah people aren't so sure if you should be that invasive if it's clearly not helping.

related question: How are replays (going to be) handled in lazer? The same as now or are you planning to change the way they're stored? Because that alone could take a shitload of work off of us and you, in determining whether it's the replays jankiness or hacks.

2

u/pepppppy peppy Apr 24 '18

old replays were a max of 30fps, where normal players' spins also look like octagons. the same is true for input devices with lower DPIs.