1. Post #1
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    So, I seem to have split my server's staff team on this as half think that the method of gathering evidence we use is unethical, and the other half feel it's justified if we pre-warn users that it will happen if they cheat. How do we do it? We take a screenshot of the player's client if we detect a variety of hacks on their client, then send it to our web server, if it happens multiple times the system then automatically bans the player.

    Some of our staff believe that we should never take a screenshot from the user's client, with or without prior warning/consent, others believe that it's okay if they violate the rules and we pre-warn them. The only reason we use these screenshots is for enforcement of the bans or to clear allegations in the case of false-positives.

    To the point of what I want to ask, do you guys believe it's okay to do this with a strict privacy policy in place on handling them, taking into account that it is sent directly from the user's client without our administrators intervening.
    Reply With Quote Edit / Delete Reply Show Events Useful Useful x 1 (list)

  2. Post #2
    (Feminazi) (Queen of the Furrys) (Girl Power!) (Massive Faggot) (Queen of the Diva's) (Women's right's activist) (The Classy Lady) (Bigger, Badder, Bronyer)
    Te Great Skeeve's Avatar
    March 2010
    1,653 Posts
    I'm confused, what do you mean "to the web server." Are you not the server owner?
    Reply With Quote Edit / Delete Reply Windows 7 Canada Show Events Dumb Dumb x 2Agree Agree x 1 (list)

  3. Post #3
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    I'm confused, what do you mean "to the web server." Are you not the server owner?
    I am, and I meant that we use a POST request to forward the base64 screenshot to a web server which stores it for use with ban appeals and such, this is done directly from the offending user's client itself.
    Reply With Quote Edit / Delete Reply Windows 8 Show Events Informative Informative x 1 (list)

  4. Post #4
    Author of the detected GMod Cheat cheat Oubhack

    January 2012
    643 Posts
    Why don't you just say in your MOTD or rules or whatever that you reserve the right to take screenshots of clients whenever the moderator(s) feel necessary? `

    It depends on your implementation, if you take screenshots automatically without anything on the players, than that's silly. If you allow moderators and administrators use of the screenshot system and take them automatically if you detect certain activity ( forcing sv_allowcslua for example ) then having the system there greatly outweighs privacy issues.
    Reply With Quote Edit / Delete Reply Windows 7 Ireland Show Events Agree Agree x 1 (list)

  5. Post #5
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    Why don't you just say in your MOTD or rules or whatever that you reserve the right to take screenshots of clients whenever the moderator(s) feel necessary? `

    It depends on your implementation, if you take screenshots automatically without anything on the players, than that's silly. If you allow moderators and administrators use of the screenshot system and take them automatically if you detect certain activity ( forcing sv_allowcslua for example ) then having the system there greatly outweighs privacy issues.
    That's kind of how I was thinking it would work. The staff don't actually have access to force a screen capture though, the system detects the cheats then does it on its own; however there are still some cheats I can't pick up as of this moment in time.

    The way I was going to balance out the privacy issues, was a warning on the loading screen then a notice on the top of the screen for the first 30 or so seconds of joining (including after map changes).

  6. Post #6
    I don't know how to code :c
    Hergs's Avatar
    July 2009
    48 Posts
    It's a security thing so I don't see why not(If you warn them they can easily turn it off). There shouldn't really be anything to hide or be private about, although we did catch a player watching porn on his steam overlay browser one time...
    Reply With Quote Edit / Delete Reply Windows 7 Canada Show Events Funny Funny x 9Winner Winner x 2Agree Agree x 1 (list)

  7. Post #7
    Dennab
    May 2012
    478 Posts
    I don't really see how it would be "unethical". If you did something like dump their cheat or crashed their game or computer somehow, then maybe you would be getting a bit further into the grey area. Make sure your staff realise that you're not taking a screenshot of the entire desktop or whatever, only the game window. Speaking of, if you're using the method I think you're using, it's not exactly something I would recommend relying on. I've managed to find a way around it already, and if I can do it, so can others.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Useful Useful x 1 (list)

  8. Post #8
    Trans genders are gays with mental dis orders
    Dennab
    January 2012
    3,881 Posts
    I don't really see how it would be "unethical". If you did something like dump their cheat or crashed their game or computer somehow, then maybe you would be getting a bit further into the grey area. Make sure your staff realise that you're not taking a screenshot of the entire desktop or whatever, only the game window. Speaking of, if you're using the method I think you're using, it's not exactly something I would recommend relying on. I've managed to find a way around it already, and if I can do it, so can others.
    if someone took my cheat from my folder, I would be pretty pissed.
    Reply With Quote Edit / Delete Reply Windows 8 Canada Show Events Funny Funny x 4Agree Agree x 1 (list)

  9. Post #9

    June 2013
    0 Posts
    if someone took my cheat from my folder, I would be pretty pissed.
    and who gives a shit if it pisses you off? It's your fault for cheating on their server in the first place.

    Edited:

    If you weren't using it and they took it then yeah that's unethical.
    Reply With Quote Edit / Delete Reply Windows 8 Australia Show Events Dumb Dumb x 4Agree Agree x 3 (list)

  10. Post #10
    Dennab
    May 2012
    478 Posts
    if someone took my cheat from my folder, I would be pretty pissed.
    Then you should probably secure your cheat better (thought you probably can't see this because you are banned ;_;).

    Edited:

    and who gives a shit if it pisses you off? It's your fault for cheating on their server in the first place.
    It's a mutual thing. Chances are their server has some custom made anticheat that someone probably worked really hard on since there are no good public ones that I have seen. Wouldn't it be a shame if I posted a full dump of it + code that would bypass it on someplace like hackforums? If someone who does not want their cheat dumped is cheating on your server, chances are it's not public, so all that is necessary is a ban. Then again, as I told the dude above, it's kinda the developers fault for not taking steps to secure their cheat from being stolen/detected by an anticheat, but meh.
    Reply With Quote Edit / Delete Reply Windows 7 Show Events Agree Agree x 3 (list)

  11. Post #11
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    and who gives a shit if it pisses you off? It's your fault for cheating on their server in the first place.
    Personally, I believe that taking the cheat itself would be going against the entire point of the script. It's an anti-cheat, so it should be a preventative measure and shouldn't interfere with the client's operation in any way. While it would be useful to find out what cheats are running and decompile them in order to stop them in the future, I don't see a reason to do that if the system can already detect it. :P

    If it can't, I can always look on Hackforums or MPGH for scripts that people use on most servers.

  12. Post #12
    Rakenson's Avatar
    January 2013
    71 Posts
    Shit man, taking pictures without the players knowing. You're the Gmod NSA!
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Funny Funny x 5 (list)

  13. Post #13
    Effektiv's Avatar
    April 2013
    283 Posts
    By using cheats you are exposing yourself to something that could be stealing more than any anti cheat ever could anyway.
    At the same time by cheating you acknowledge the consequences whatever they are... The only people that don't agree with it are people that cheat themselves, thats probably your own staff. Why would they complain about something that makes their life easier. There is nothing ethical about cheating...

  14. Post #14
    JamieH is a retarded bitch <3
    Pantho's Avatar
    July 2008
    2,197 Posts
    I wouldn't say it's wrong...

    Which means you should send me the code to take pictures of players screens as I really cba making it.

  15. Post #15
    Bat-shit's Avatar
    October 2010
    12,761 Posts
    I have never encountered cheaters except a few ghosts during my 200 playtime of TTT.
    Reply With Quote Edit / Delete Reply Windows 7 Finland Show Events Optimistic Optimistic x 2Disagree Disagree x 1 (list)

  16. Post #16
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    I have never encountered cheaters except a few ghosts during my 200 playtime of TTT.
    In the 6th months of my server being online, I've had everything from players using aimbots to wallhacks and role detectors that edit the GUI. However, it's only recently that we've discovered quite a lot of them because of the new anti-cheat system we're implementing :)

    It all depends on what kind of server you go to, their staff and users themselves. Some servers are peaceful and mainly to themselves with a large community that wouldn't do such a thing, others are open with a small community and much larger outside users who have no such obligation to the server itself.

  17. Post #17
    Author of the detected GMod Cheat cheat Oubhack

    January 2012
    643 Posts
    In the 6th months of my server being online ... new anti-cheat system we're implementing :)
    That made no sense.

    Also there's a difference between taking someone's script and leaking it to pastebin or wherever.
    Reply With Quote Edit / Delete Reply Windows 7 Ireland Show Events Agree Agree x 2 (list)

  18. Post #18
    We Are No Idiots
    Aide's Avatar
    March 2010
    4,721 Posts
    I do it and have gather a good collection of player screenshots. If you caught hacking you deserve a ban. Mind you I collect all player screenshots and there updated regularly.

    http://www.sourcetribe.co.uk/screenshots/

    http://www.sourcetribe.co.uk/screens...M_0:1:59811481

    While I collect player screenshots we also have an observer. Some players who have been banned for hacking don't always should up on screenshots and it pretty easy to catch those players.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Agree Agree x 1Dumb Dumb x 1 (list)

  19. Post #19
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    That made no sense.

    Also there's a difference between taking someone's script and leaking it to pastebin or wherever.
    Do pardon me, I simply meant that it's still in the works, while it's officially active we haven't completed all of its functions so some features are incomplete. Prior to this system, we had no factual evidence that people were cheating.

  20. Post #20
    usa
    anarchisticstudios
    usa's Avatar
    December 2011
    2,261 Posts
    The law states you need to have to user agree if you are taking any data from their computer without their consent, you also need to state the purpose (anti-cheat blah blah), and who will see the data, how long it will be kept for, and exactly what data you will be taking.

    If all those are in your terms somewhere and you make sure the user agrees to them (keep a record in a database, not just something they see when they join, its a law requirement), then from a legal viewpoint you wont be doing anything wrong, take a look at Punkbuster's T&C for an example.

    However from an ethical point of view I would never join a server that would take screenshots of my screen, even for anti-cheat and I think its a bad idea, imo find a better or different method.
    Reply With Quote Edit / Delete Reply Windows 7 New Zealand Show Events Dumb Dumb x 3Agree Agree x 2Informative Informative x 1 (list)

  21. Post #21
    Gold Member
    Jonzky's Avatar
    October 2010
    269 Posts
    Not sure if you all know this as well but taking screenshots of a client's screen will show the steam-overlay (if they are in it) and you can pretty much read steam chats.

    Also as far as taking someone's script; if they hack they should expect consequences and majority of hackers (who are good enough to code a decent hack) can and sometimes will do the same with the anticheat (and pastebin it).

    Edit,
    http://jonzky.com/garrysmod/potentia...1372883632.jpg
    (An example of a clear hacker - though screenshots are automatically taken when the AC detects hacks. ) - The players are banned anyway - screenshots are just icing on the cake.

    Also I was considering releasing a c++ module that ftps the images to a webserver if there's any interest in it.
    Reply With Quote Edit / Delete Reply Mac United Kingdom Show Events Agree Agree x 3Dumb Dumb x 1 (list)

  22. Post #22
    Dennab
    May 2012
    478 Posts
    Also I was considering releasing a c++ module that ftps the images to a webserver if there's any interest in it.
    I don't think you can run modules on the client, if that's what you're saying in this.

    Edited:

    I wouldn't say it's wrong...

    Which means you should send me the code to take pictures of players screens as I really cba making it.
    Weren't you in several of the threads where working code was released? Check the anticheat thread from awhile ago, there was like three pages of people talking about it.

  23. Post #23
    We Are No Idiots
    Aide's Avatar
    March 2010
    4,721 Posts
    Not sure if you all know this as well but taking screenshots of a client's screen will show the steam-overlay (if they are in it) and you can pretty much read steam chats.

    Also as far as taking someone's script; if they hack they should expect consequences and majority of hackers (who are good enough to code a decent hack) can and sometimes will do the same with the anticheat (and pastebin it).

    Edit,
    http://jonzky.com/garrysmod/potentia...1372883632.jpg
    (An example of a clear hacker - though screenshots are automatically taken when the AC detects hacks. ) - The players are banned anyway - screenshots are just icing on the cake.

    Also I was considering releasing a c++ module that ftps the images to a webserver if there's any interest in it.
    You don't need a module. You can do it all threw php and have the web server handle the load.

    I use

    Code:
    ftp_fget
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Informative Informative x 1 (list)

  24. Post #24
    Gold Member
    I am God.'s Avatar
    November 2011
    134 Posts
    Not this again... if it makes you happier, i've been doing it for months: http://94.23.42.215/screenshots/

    95% people there actually cheated

    What if the cheater asks for proof you banned him for? What if he's using an advanced cheat that only triggered 1-2 anticheat checks and you're not sure either if he really cheated?
    Screenshot solves that problem and helps you get rid of those bastards.

    It's a sandbox game, you should take advance of all the tools Garry gave you to make a perfect server, and don't give a shit about ethic when it comes to cheaters and their screenshots.

    Also double-check if your admins use hacks if they think that it's "unethical"
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Agree Agree x 3 (list)

  25. Post #25
    Dennab
    May 2012
    478 Posts
    You guys shouldn't get too cocky with this screenshot stuff. I've managed to find a way to bypass it, and that's without even touching anything in the engine that's driving the various lua functions that can be used to produce a screenshot. In this case, when I say bypass, I mean that you cannot see anything that my hack draws on the screen, with my chams being the sole exception. If I've been able to figure out how to do it, I'm sure others can as well.
    Reply With Quote Edit / Delete Reply Windows 7 United States Show Events Dumb Dumb x 3Funny Funny x 1 (list)

  26. Post #26
    usa
    anarchisticstudios
    usa's Avatar
    December 2011
    2,261 Posts
    It's a sandbox game, you should take advance of all the tools Garry gave you to make a perfect server, and don't give a shit about ethic when it comes to cheaters and their screenshots.
    If you don't give a shit about the law, I can guarantee that eventually you will get fucked over by someone who means serious business (however unlikely that may seem to you). At least chuck T&C in there, it's not like anyone really reads them anyway, plus it protects you.
    Reply With Quote Edit / Delete Reply Windows 7 New Zealand Show Events Dumb Dumb x 2 (list)

  27. Post #27
    A Huge Faggot

    June 2005
    377 Posts
    Screenshots aren't an effective way of detecting cheating if you're up against people who know what they're doing. I suppose if you absolutely have to be rid of people who use public/paid hacks then you should do it, but VAC usually handles those people pretty effectively.
    Reply With Quote Edit / Delete Reply Windows 8 United States Show Events Dumb Dumb x 1 (list)

  28. Post #28
    Gold Member
    Jonzky's Avatar
    October 2010
    269 Posts
    I don't think you can run modules on the client, if that's what you're saying in this.
    Its already working for me, its on the server. With the module you can easily decode it and change the extension (something I assume you can do in PHP as well).

  29. Post #29
    Author of the detected GMod Cheat cheat Oubhack

    January 2012
    643 Posts
    Personally I thought this issue was resolved.

    If you want to take screenshots and you're scared about legal things, say that you're going to take screenshots in some T&C, lots of servers have rules that you agree to before playing, have the T&C there too.

    Screenshots are an ethical way of detecting cheaters, a lot of cheaters don't know how to / cant / don't bother dealing with this method and it gives proof that couldn't be any clearer or more definitive.

    To some people, servers randomly grabbing screenshots of you talking to your friends and watching porn would seem like an invasion of privacy, but in almost all cases this would have been caused by some cheat detections, some solid ones, such as sv_allowcslua forcing.

    It's also like every other cheat detection method, something you shouldn't rely on. I could send completely black, completely white or no image at all by detouring the function. And as Sasha said there's ways to draw stuff that don't show up on screenshots.
    Reply With Quote Edit / Delete Reply Windows 7 Ireland Show Events Agree Agree x 3 (list)

  30. Post #30
    Jewkari's Avatar
    June 2013
    175 Posts
    It's a security thing so I don't see why not(If you warn them they can easily turn it off). There shouldn't really be anything to hide or be private about, although we did catch a player watching porn on his steam overlay browser one time...
    I hope that wasn't me
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Optimistic Optimistic x 1Agree Agree x 1Funny Funny x 1 (list)

  31. Post #31
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    In this case, when I say bypass, I mean that you cannot see anything that my hack draws on the screen, with my chams being the sole exception. If I've been able to figure out how to do it, I'm sure others can as well.
    So... then we still end up banning you for hacking? If you don't send one, or you send a bogus one, I'm pretty sure any sane individual would be able to tell you've bypassed the script somehow and know to ban you. So your point is?
    Reply With Quote Edit / Delete Reply Windows 8 United Kingdom Show Events Dumb Dumb x 1 (list)

  32. Post #32
    JamieH is a retarded bitch <3
    Pantho's Avatar
    July 2008
    2,197 Posts
    I don't think you can run modules on the client, if that's what you're saying in this.

    Edited:



    Weren't you in several of the threads where working code was released? Check the anticheat thread from awhile ago, there was like three pages of people talking about it.
    Forgot about that thread, but I did reply there yes. I'll go take a peak at it sometime today.

  33. Post #33
    ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽ ﷽
    zerothefallen's Avatar
    March 2010
    8,263 Posts
    So... then we still end up banning you for hacking? If you don't send one, or you send a bogus one, I'm pretty sure any sane individual would be able to tell you've bypassed the script somehow and know to ban you. So your point is?
    it's simple to either detour render.capture and return bullshit which will get said person banned anyways

    OR you could make it so ESP and ETC is toggled off for the screenshot frame.

    which doing the above makes it useless
    Reply With Quote Edit / Delete Reply United States Show Events Agree Agree x 1Disagree Disagree x 1 (list)

  34. Post #34
    Gold Member
    Crashdoom's Avatar
    April 2012
    14 Posts
    it's simple to either detour render.capture and return bullshit which will get said person banned anyways

    OR you could make it so ESP and ETC is toggled off for the screenshot frame.

    which doing the above makes it useless
    To be frank, the former is what I expect to typically happen. Anyone that would create a mainstream hack would typically not distribute it with a feature that would compensate for screenshot captures as this isn't common use. However, if someone actually bypasses it, having the knowledge and taking the time to do such on my little server, then I am actually quite honoured.

    There's always someone better than you, so you just have to do your best. In this case, I've got systems to catch the petty hackers that we frequently get, someone will be able to bypass it, this much I know.

  35. Post #35
    JamieH is a retarded bitch <3
    Pantho's Avatar
    July 2008
    2,197 Posts
    To be frank, the former is what I expect to typically happen. Anyone that would create a mainstream hack would typically not distribute it with a feature that would compensate for screenshot captures as this isn't common use. However, if someone actually bypasses it, having the knowledge and taking the time to do such on my little server, then I am actually quite honoured.

    There's always someone better than you, so you just have to do your best. In this case, I've got systems to catch the petty hackers that we frequently get, someone will be able to bypass it, this much I know.
    It didn't used to be maintstream a year or so ago. We had one in GM11-GM12 but it relied on a serverside dll file. They have now become much more popular and given the amount of servers that use this method I'm pretty sure I'd built it into a product I was selling, specially considering it's not hard to hide the features during the screenshot.
    Reply With Quote Edit / Delete Reply Windows 7 United Kingdom Show Events Informative Informative x 1 (list)