• Our Minecraft servers are offline but we will keep this forum online for any community communication. Site permissions for posting could change at a later date but will remain online.

The problem with the current anticheat + how to fix it!

Tenebrous

Peacekeeper
Joined
Feb 26, 2014
Messages
1,411
Reaction score
1,622
Hello everyone!

So today I am going to articulate a current concern I have with XAC, or xime anticheat. Recently XAC has been updated with a killaura detector. Killaura is a cheat which allows the player to obtain hits outside of their opponents hitbox (the hitbox is where you would generally be able to land a hit)

1. The method
XAC spawns a Steve above the user while he/she opens a chest. In theory if they have killaura they will hit the Steve while being in the chest.

2. Why it will fail
First off it's easy to bypass, not all killauras swing while being inside of a chest. Secondly you will have way more false positives than positives. You are killing your server. I think I saw something like 1000 people banned by it in the first 24 hours. That number should make you concerned because badlion, that has a similarly sized player base bans about 300 people everyday using a system which is much more accurate. Thirdly it's excruciatingly simple to trigger. A fool proof anticheat should be impossible to trigger legitly.

3.How to fix it
Well first off you need to take a completely different approach because with this system you will only catch blatant hackers many of whom can already be found by moderators. The staff team needs to understand how bad the closet cheating problem is here (closet cheating is hacking while looking legit) I know of about 25 known people in known clans who closet cheat, as well as 7 staff members. And that's just scratching the surface, there are hundreds of people who do this daily. I mean, it makes sense, it's so easy to get away with. In order to solve this problem I highly recommend you set up some type of api (probably the wrong word here) which will let you see cps in certain locations near the player. Then you can set up a measure of where the hits are registering and work from there.

Cheers
-Tene
 

Electrix

Peacekeeper
Joined
Aug 31, 2014
Messages
1,813
Reaction score
1,269
Yeah, when I heard "spawning an entity when a player opens a chest" I practically facedesked.
 

Diacor

Survivor
Joined
Jul 8, 2015
Messages
140
Reaction score
89
Basically what you said.

Spawning an entity is a really old way to catch hackers, esp. with people using stuff like Satisfying's client

-snip-

edit: Call out the people that ghost client like Satisfying did with Ethelyne.
 
Last edited by a moderator:

Tenebrous

Peacekeeper
Joined
Feb 26, 2014
Messages
1,411
Reaction score
1,622
Basically what you said.

Spawning an entity is a really old way to catch hackers, esp. with people using stuff like Satisfying's client

-snip-

edit: Call out the people that ghost client like Satisfying did with Ethelyne.
Not going to say because of the backlash
 
Last edited by a moderator:

Diacor

Survivor
Joined
Jul 8, 2015
Messages
140
Reaction score
89
What I'm wondering is how u know so much about hacks .-.
he is an ex hacker, + most pot pvp'ers know a lot of stuff about them , seeing as how most good players use a ghost client in the first place(Satisfying)
 

Tenebrous

Peacekeeper
Joined
Feb 26, 2014
Messages
1,411
Reaction score
1,622
he is an ex hacker, + most pot pvp'ers know a lot of stuff about them , seeing as how most good players use a ghost client in the first place(Satisfying)
I will pm you with my skype and will send it there
 

Giggity69Goo

Mockingjay
Joined
Jun 20, 2012
Messages
5,595
Reaction score
4,823
Liking your idea Tene :) Maybe some devs will take a look at this?
 

Illumiigel

Survivor
Joined
Apr 29, 2015
Messages
166
Reaction score
95
Most clients allow you to alter the attack speed anyway. All the hackers have to do is lower it. You could check for a constant cps, but there are also many clients which randomly change the speed after each hit.

The thing is, if MCGamer develops a method which successfully detects KillAura, someone will soon enough find a workaround and then we're back to square one. Let's face it, the current MCGamer developers do not know how to make a successful anti-cheat. If they did, we wouldn't be having this discussion. They need to employ developers who actually work/have worked on clients that know how to combat/prevent anti-cheat methods for detecting KillAura.

I'd also like to point out that it's very unlikely a regular player such as yourself will find the "cure" to hackers. As condescending as this sounds, if you know nothing about the inner workings of these hack clients, you aren't going to have any idea of how to combat hackers.
 
Last edited:

Illumiigel

Survivor
Joined
Apr 29, 2015
Messages
166
Reaction score
95
Basically what you said.

Spawning an entity is a really old way to catch hackers, esp. with people using stuff like Satisfying's client


edit: Call out the people that ghost client like Satisfying did with Ethelyne.
That doesn't work. Most clients check whether an entity is visible or not before attacking.
 

Members online

No members online now.

Forum statistics

Threads
242,192
Messages
2,449,550
Members
523,971
Latest member
Atasci