I know, is no percet. Perfecthood is no possible when u are talking about informatic, in fact.

But A critical encripted cookie, combining another forms of filtering may be result in a preety good security.

U always can know if a file has been modified, by hashin it before put. If hash kept in UT server does not match with cookie one, u know it has been manipulated. Double ban xDDDD

Question is... How the hell make that?

Regards

_________________
Donot (shotme)

One server can't do it, maybe to ask UtR community to put it in next version? I've seen they are fighting cheaters too.

We could do it as soon as wurst join that urbanterror admin alliance.

_________________

We cant do it. It cant be done. Is not the same matre. not the same...

I've thinking about Servers can donwload maps as player need. Rigth? So servers can put files into user's machines.

So thing is not so if server can or not put, but how to protect the cookie: There is no system without crack, as u know. Well, maybe idea is not to take perfect proteccion, nor take cheaters ouy, but reduce cheater number as much as we can...

And of course, code may be rewriten to do that, but we have the idea man. Programmers will have the exact code to doing dthat.

regards

_________________
Donot (shotme)

Well, i haven't thought of that. This is not only possible then even doable.
There should be one file which comes to cheaters PC and then block him form coming on that server, right? Still, as you said, we can't do good protection of that file like that. But if they don't know thing like that exist they wont edit it.

But there is another problem. Where will that file come? If it is in folder where UtR is installed, it will disappear when he reinstalls it. And i don't know if game has access to "program files" or "/home" directories. If it does, file can go anywhere so it will be hard to find.

Well, we don't know until we try. We only need someone who'll do it.

_________________

Sure, Thats the big question, man. How to protect our cookie.

Some methods: Hide, duplication, encrypcion...

All of them are 'editables'. Nice observation.

But... How about a common list in a independient server? That list contains not names, not IPs, but all and everyone hashes belonging to our cookies.

U know hash is a fingerprint, and can tell us if a file has been altered or not.

So cheater tries to alter our cookie. And go agaiunst server to play. Server checks his cookie, calculating his hash or MD5sum, or whatever we want... Against global server's list. If hashing does not match... Double Banned

And... if cheater deletes? Well... We have another list checking IPs, or ranges, or names, or MAC adresses even...

I see that like a ring defense: Ring involves another ring, that involves another one...

Should we opoen another post 4 talking about?

Regards

_________________
Donot (shotme)

Yeah well .. nice idea but at some point you have to give the players a hash, now you can't really identify who already had a hash and just got rid of it and who is new. IPs can change, names can change, the range would result in a hash for so many poeple that you can just add the range to the ban. MAC adresses however are layer2 network communication and won't get past a router (you packages pass many routers till they reach the game), so you actually don't know those either (and if you would let it generate by the client where you get the mac the hash still can be edited, and MACs can be faked).
Best would be a hash placed by installation and calculating in hardware information (just how vista did, all saw that it worked since the registration went broke once you switched hardware ^^).

_________________
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live."
- Martin Golding

Yep man, thats a nice appointment. Absolutely agreed with u.

Just taking an install ID and registering it like Vista, u say... Well, is a good method, and may be useful.

Think: What do u have in a PC that is quite rare to change? Well... Is no easy, uh?

And... What about a component's serial number? There is more than a way to read the motherboard's SN, 4 exemple. That allow us to identify a machine, or not?

Just try 'cpuz' program, find it in Google, and tell me if u can read or not...

Of course, u can change ur motherboard... But is quite hard to do for most of users, and a bit expensive for rest of ones

How to do? Well, coders shoud be know it... This is only an idea about...

Regards

_________________
Donot (shotme)

most gamers spend more money on cpu and gpu as on mb, so better use their serials
that would be nice ...

_________________
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live."
- Martin Golding

Sure man, as u wanna ROLF!!!!

Anyway, think that memory is more easy to be replaced than motherboard, thats the reason i suggest mb SN and no other...



But we have an idea only. We need to translate that to UT depelopers, and...

By the way... This idea is Creative Commons licensed, (BY mode)... xDxDxD

Regards

_________________
Donot (shotme)

memory? I was talking about the graphics card and the processor ...

_________________
"Always code as if the guy who ends up maintaining your code will be a violent psychopath who knows where you live."
- Martin Golding