[mdeceiver79]

-snip-
Apologies Larhten

It's already been stated that the function to capture the screen is part of unity. This is not a screenshot, this is capturing whatever UNITY is rendering at that point in time.

Keep up.

edit: In case you don't understand, that means it cannot capture what is outside of rust in the picture.

[Larhten]

mdeceiver79 posted:

It's already been stated that the function to capture the screen is part of unity. This is not a screenshot, this is capturing whatever UNITY is rendering at that point in time.

Keep up.

edit: In case you don't understand, that means it cannot capture what is outside of rust in the picture.

Which was exactly my fucking point. Keep up yourself.

[dlovin123]

Teddybeer posted:

Would be lovely if not receiving screenshots would equal a ban.

Now that is just silly. If your firewall program sees Rust.exe connecting you allow it.. and then if you see a random URL (not even a secure URL or an URL with a relevant name) trying to pass data every few minutes.. of course you are going to block it.

Users are correct in this thread.. This isn't a secure way of doing things and skilled hackers can easily manipulate that system. I've read some already have beat the cheatpunch.

[J!NX]

dlovin123 posted:

Now that is just silly. If your firewall program sees Rust.exe connecting you allow it.. and then if you see a random URL (not even a secure URL or an URL with a relevant name) trying to pass data every few minutes.. of course you are going to block it.

Users are correct in this thread.. This isn't a secure way of doing things and skilled hackers can easily manipulate that system. I've read some already have beat the cheatpunch.

Funny story, for the longest time Norton thought Garry's mod 9 was a virus

Unreal Gold on steam also gets called a virus for some weird reason.

[mdeceiver79]

dlovin123 posted:

Users are correct in this thread.. This isn't a secure way of doing things and skilled hackers can easily manipulate that system.

Any proof of this? You're assuming there no authentication, which there probably is.

I've read some already have beat the cheatpunch.

This is nothing to do with the above, why would you group is so.

Make a fallacious statement then back it up with irrelevant information?

[garry]

Multd posted:

So what happens if I just block all traffic to it?

Nothing bad - feel free :)

[Immortalis]

garry posted:

Nothing bad - feel free :)

Thank you Garry for feedback on this system.
I have tons of respect for the challenges your trying to overcome and how your going about it.

Again please be cautious of spoofed reports in the next couple of days.

[garry]

Reports can't be spoofed :)

[Theguy24]

So garry when I'm running Rust in the background and checking my emails you do a screenshot of those?

[Teddybeer]

Hey is also taking pictures of you when your nude.

[Andendumwel]

J!NX posted:

that would never hold up in court "we are stopping cheaters, and it ONLY takes images of assumed cheaters for proof", VS "that is bad and illegal"

How is it illegal exactly? does it prevent you from personally aimbotting?

You're not allowed to capture information off peoples computers without the strict consent of the user.
Writing down a TOS won't work if someone is actually going to take the effort.

The other side.
Reverse engineering is only allowed for educational purposes or to whistle blow.
So making hacks isn't allowed either.

Everyone stating that i'm "dumb" is even dumber.. it's not who's right its about who wins the game in court.

[elixwhitetail]

Andendumwel posted:

You're not allowed to capture information off peoples computers without the strict consent of the user.
Writing down a TOS won't work if someone is actually going to take the effort.

The other side.
Reverse engineering is only allowed for educational purposes or to whistle blow.
So making hacks isn't allowed either.

Everyone stating that i'm "dumb" is even dumber.. it's not who's right its about who wins the game in court.

Are you stating you're going to sue garry?

If not, shut the fuck up about court, it's an irrelevant argument unless you are prepared to file.

Your consent is recorded by your acceptance of the TOS and your continued use of the product. Don't want Cheatpunch to capture your Rust play? Uninstall Rust and never use it again, bulletproof privacy from Cheatpunch.

[Andendumwel]

elixwhitetail posted:

Are you stating you're going to sue garry?

If not, shut the fuck up about court, it's an irrelevant argument unless you are prepared to file.

Your consent is recorded by your acceptance of the TOS and your continued use of the product. Don't want Cheatpunch to capture your Rust play? Uninstall Rust and never use it again, bulletproof privacy from Cheatpunch.

I'm here to discuss, not to hear your fucking fanboy shit.
I'm allowed to post a hypothetical situation, without you getting on my back.
And no, i'm not going to sue anyone. I'm just stating facts here.

TOS is irrelevant when it comes to stuff that is potential law breaking.

[Teddybeer]

So you're lawyer right?

[StrangeWill]

Immortalis posted:

I would think.. (hope) that if Rust Anti-Cheat is talking to a webserver.. it would be using a Secure protocol.. The type of information being sent means that I could get other Steam ID's banned if I was so inclined..

Using TLS (HTTPS) doesn't prevent me from sticking a "man in the middle" attack using my own signed certs that I've installed on my personal computer and watching the traffic in an attempt to reverse engineer what is going on. If the system is not properly secured against spoofing HTTPS wont help that.

HTTPS just prevents other people from snooping.

[elixwhitetail]

StrangeWill posted:

Using TLS (HTTPS) doesn't prevent me from sticking a "man in the middle" attack using my own signed certs that I've installed on my personal computer and watching the traffic in an attempt to reverse engineer what is going on. If the system is not properly secured against spoofing HTTPS wont help that.

HTTPS just prevents other people from snooping.

Because VAC will happily accept your self-signed cert because you're a CA, right?

[J!NX]

Andendumwel posted:

You're not allowed to capture information off peoples computers without the strict consent of the user.
Writing down a TOS won't work if someone is actually going to take the effort.

The other side.
Reverse engineering is only allowed for educational purposes or to whistle blow.
So making hacks isn't allowed either.

Everyone stating that i'm "dumb" is even dumber.. it's not who's right its about who wins the game in court.

it detects hacks, it screenshots those hacks, it's not taking any information but from the game itself and that is it

absolutely nothing else

this isn't "if you aren't hiding something you shouldn't worry" NSA shit that screenshots everyones game.

this is "cheat and get caught"

aimbots are so obviously against the game. That wouldn't hold up in court.

Andendumwel posted:

I'm here to discuss, not to hear your fucking fanboy shit.
I'm allowed to post a hypothetical situation, without you getting on my back.
And no, i'm not going to sue anyone. I'm just stating facts here.

TOS is irrelevant when it comes to stuff that is potential law breaking.

no it isn't stop

[StrangeWill]

elixwhitetail posted:

Because VAC will happily accept your self-signed cert because you're a CA, right?

All local applications do is check your certificate store (open up MMC, add the certificate snapin, you'll find your certs under Trusted Root Certification Authorities, you can add your own certs to this), when you install your own certs, you might as well be a CA as far as your desktop is concerned. Let alone if you wanted to be pedantic about being a CA (not that it matters when you're tampering with your own certificate stores), spinning one up is trivial.

For example, it's how Applidium reversed engineered Siri on the iPhone.

[J!NX]

oh and btw

http://en.wikipedia.org/wiki/Information_privacy_law

this?

The right to data privacy is heavily regulated and actively enforced in Europe. Article 8 of the European Convention on Human Rights (ECHR) provides a right to respect for one's "private and family life, his home and his correspondence", subject to certain restrictions. The European Court of Human Rights has given this article a very broad interpretation in its jurisprudence. According to the Court's case law the collection of information by officials of the state about an individual without his consent always falls within the scope of Article 8. Thus, gathering information for the official census, recording fingerprints and photographs in a police register, collecting medical data or details of personal expenditures and implementing a system of personal identification has been judged to raise data privacy issues.
Any state interference with a person's privacy is only acceptable for the Court if three conditions are fulfilled:

The interference is in accordance with the law
The interference pursues a legitimate goal
The interference is necessary in a democratic society

The government is not the only entity which may pose a threat to data privacy. Other citizens, and private companies most importantly, engage in far more threatening activities, especially since the automated processing of data became widespread. The Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data was concluded within the Council of Europe in 1981. This convention obliges the signatories to enact legislation concerning the automatic processing of personal data, which many duly did.
As all the member states of the European Union are also signatories of the European Convention on Human Rights and the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, the European Commission was concerned that diverging data protection legislation would emerge and impede the free flow of data within the EU zone. Therefore the European Commission decided to harmonize data protection regulation and proposed the Directive on the protection of personal data, which member states had to transpose into law by the end of 1998.
The directive contains a number of key principles with which member states must comply. Anyone processing personal data must comply with the eight enforceable principles of good practice.[4] They state that the data must be:

Fairly and lawfully processed.
Processed for limited purposes.
Adequate, relevant and not excessive.
Accurate.
Kept no longer than necessary.
Processed in accordance with the data subject's rights.
Secure.
Transferred only to countries with adequate protection.

I don't think any court is going to give a care about someone that says "I was cheated and banned"

[Andendumwel]

J!NX posted:

it detects hacks, it screenshots those hacks, it's not taking any information but from the game itself and that is it

absolutely nothing else

this isn't "if you aren't hiding something you shouldn't worry" NSA shit that screenshots everyones game.

this is "cheat and get caught"

aimbots are so obviously against the game. That wouldn't hold up in court.



no it isn't stop

Please do not post if you don't have any idea what cheatpunch does.
Thank you.

[J!NX]

Andendumwel posted:

Please do not post if you don't have any idea what cheatpunch does.
Thank you.

please do not post about laws you have no idea about

and I know exactly what it does. Once it sees a hack it takes an image from the game and sends it off



that's enough info, not any more than is needed. please tell me where garry is infringing on someones rights in this image or showing personal info outside of hacking and steam ID, I'd love to hear it.

and "it's not taking any information but from the game itself and that is it "

you mean like, steam ID and an image from their screen? maybe a little info on the hacks they are doing?

Andendumwel posted:

I'm here to discuss, not to hear your fucking fanboy shit.
I'm allowed to post a hypothetical situation, without you getting on my back.
And no, i'm not going to sue anyone. I'm just stating facts here.

TOS is irrelevant when it comes to stuff that is potential law breaking.

so exactly how is this law breaking? is it because you don't like it?

it's only "Invasive" if you're using aimbot and shit like that.

[elixwhitetail]

Andendumwel posted:

Please do not post if you don't have any idea what cheatpunch does.
Thank you.

Because you do know what it does?


hello 911 there's an emergency

this poster's head is jammed up his own ass and it's stuck

oh god please help he's turning blue

[nicename]

I like how hackers are upset about this sending screenshots to a server.
Do they realize how much info their hacking software sends to some datamining center in China or somewhere else?

[EpicKitten]

I am currently preforming a trace route on the IP the URL gave me and its taking some time, will post screenshots of my log

Edit:
Things in red are the Weird ones, that stoodout
Things in blue are some interesting leads

[Immortalis]

nicename posted:

I like how hackers are upset about this sending screenshots to a server.
Do they realize how much info their hacking software sends to some datamining center in China or somewhere else?

None because that is retarded... Most hacks offer the source code with the binaries so you can see what it is doing.. Or you are already paying money for your hack in which case the author makes more money from your hacking subscription then some obscure data mining for China retarded theory.

StrangeWill posted:

Using TLS (HTTPS) doesn't prevent me from sticking a "man in the middle" attack using my own signed certs that I've installed on my personal computer and watching the traffic in an attempt to reverse engineer what is going on. If the system is not properly secured against spoofing HTTPS wont help that.

HTTPS just prevents other people from snooping.

Why would you even do that... Like did you seriously type that?
Your on the receiving end of that payload.. I don't even understand your logic here..

All I care about is other people snooping.. I don't care if a hacker can reverse engineer the packet structure.. They can do that any way using the binary

[tirpider]

Immortalis posted:

None because that is retarded... Most hacks offer the source code with the binaries so you can see what it is doing.. Or you are already paying money for your hack in which case the author makes more money from your hacking subscription then some obscure data mining for China retarded theory.

Almost as retarded as suggesting Rust is a trojan, huh.

[Immortalis]

tirpider posted:

Almost as retarded as suggesting Rust is a trojan, huh.

That was for added Shock value to get a certain developer to reply.. which they did twice to my satisfaction..

EDIT:
I wish there was a "Durrrrp" feedback icon I could give you.. I thought this was obvious

[tirpider]

Immortalis posted:

That was for added Shock value to get a certain developer to reply.. which they did twice to my satisfaction..

I once let a friend lead me around a shopping mall on a leash and spent a month with a puppet tied to my hand and talked to it with a squeaky voice, so I can relate to using one's inner tard for shock value.

You kinda next leveled it though with the paranoid accusations. Congratulations?

[elixwhitetail]

Immortalis posted:

That was for added Shock value to get a certain developer to reply.. which they did twice to my satisfaction..

EDIT:
I wish there was a "Durrrrp" feedback icon I could give you.. I thought this was obvious

No, actually, we applied Poe's Law and decided you really are that dumb/gullible. It was so hard to tell, you did have to spell it out for us because we were convinced.

[Immortalis]

tirpider posted:

I once let a friend lead me around a shopping mall on a leash and spent a month with a puppet tied to my hand and talked to it with a squeaky voice, so I can relate to using one's inner tard for shock value.

Really?! Details Please... haha

elixwhitetail posted:

No, actually, we applied Poe's Law and decided you really are that dumb/gullible. It was so hard to tell, you did have to spell it out for us because we were convinced.

Yea whatever.. I am fairly certain you are 16 so I don't care.

[J!NX]

Immortalis posted:

Really?! Details Please... haha



Yea whatever.. I am fairly certain you are 16 so I don't care.

Yea whatever.. I am fairly certain you are 13 so I don't care.

[KillaMaaki]

If they're using Unity's built in functions for taking a screenshot, it only reads the pixels of the framebuffer (what the game itself renders). This is totally secure and never catches anything other than the game itself.