If your cheat detection runs on the client side only, you don't have cheat protection.
Linux Gaming
Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.
This page can be subscribed to via RSS.
Original /r/linux_gaming pengwing by uoou.
No memes/shitposts/low-effort posts, please.
Resources
WWW:
- Linux Gaming wiki
- Gaming on Linux
- ProtonDB
- Lutris
- PCGamingWiki
- LibreGameWiki
- Boiling Steam
- Phoronix
- Linux VR Adventures
Discord:
IRC:
Matrix:
Telegram:
Well, there only so much in gaming that reasonably can be done server side.
Sure, the server could identify that a player shouldn't be visible and not transit that location to a client, addressing seeing through walls, in theory.
But once a player is hypothetically visible, aimbot can happen. If you are crawling in a ghillie suit in the grass, but the other player has a client that skips rendering grass and replaces the ghillie suit model with a suit made of traffic cones...
Now intrusive anti cheat isn't worth it, but it is an unavoidable reality that it is up to the client to preserve the integrity.
Closest you get would be streamed gameplay, where the rendering even is server side. Also not worth it. But even then I could see cheating machine vision and faked controls to get an edge unfairly.
I don't play games that require anti-cheat. Simple as that. If a game is full of cheaters, I don't play those games either. I am not going to have a windows installation just to play games. I am not going to have a console that only plays games. I am a simple man, if it supports Linux and doesn't have anti-cheat I play. But also I don't have friends so...
Well the garbage takes itself out
Let's do some math here, they said:
More cheaters using Linux than legit users (...) .01% of all players base
Let's do a quick math. The maximum peak users for Rust was 259,646 concurrent users according to https://steamcharts.com/app/252490 . Let's assume 60% (more than half) of all the .01% users were cheaters, congratulations, you got rid of all those 16 cheaters... I haven't played much Rust, but I'm fairly confident that there's a bit more than 16 cheaters there.
And that's without getting into the whole client side anti-cheat doesn't work.
You dont understand linux users have black magic hacks that ruined the game for every player on every server, their power cant be understated... Theyre a whole bunch of dangerous hardened criminals
I feel like some people think Linux is only for hackers and cybersecurity professionals
And genuine hackers and cybersecurity professionals have got way better things to do than cheat in Rust.
The cheaters are all obnoxious 12-year-olds who couldn't land a single hit without the cheats, that's why all the compilation videos of cheaters falling foul to fake cheat software are so funny. They'll spend 10 minutes trying to go through a doorway without it ever occurring to them that something must be wrong.
It's almost like client side anti cheat doesn't work and if proper server side anti cheat is made it wouldn't matter what platform the client is on.
"never trust the client" is pretty much a motto of infosec, idk what the hell game devs expect
See, the wild thing is that I used to run with some actual hackers in GMod... and... I learned from the exploits that they did, how you actually design at least a game mode script that can't be fucked, can't be poked proded or queried directly.
Of course, if the actual exploit is lower level than what I'm writing at, well then I'm still fucked...
I can remember at least one GMod originated, lower level exploit, caused by Garry leaving some direct, unsanitized interface to Steam itself directly exposed via lua... which caused Steam/Valve themselves to step in and rewrite a part of all of Steam, because Garry is s fucking moron, and more or less allowed a virus/malware to propogate through Steam itself, independent of Garry's Mod...
Never did figure out if any of the goobers I knew had any direct ties to that or not.
But anyway, fucking yes, literally never trust the client with anything beyond their own GUI, and barely trust them with that, don't just let them click on anything in their screen space to see if its an item they can put in their inventory, do an actual server side vector ray trace, from the item to the playet, make sure the thing they clicked on is actually near them, put that all into a buffer that locks up if they're calling it at inhuman rates...
It was so easy to item dupe and stat boost and even hijack other players accounts in so many gamemodes I saw.
Fucking one of them had the user set and enter a login password to 'access' their various characters, pick one to spawn as.
Problem?
... That gamemode was actually doing the id check via SteamID, duh.
The username/password thing was a fucking phishing scam, that game mode had a forum, everyone used the same user names, a bunch of people got their hotmails or whatever fucked, by the dev of that gamemode.
... Anyway... yeah, I learned all this infosec type shit first hand, in an earlier 'FacePunch Studios' production.
Fuck Garry, fuck FacePunch, these people are idiot clowns.
Roblox exists now, the GMod roleplay communities independently invented their own ways of monetizing their gamemodes via syncing to their sites and forums with payoal widgets, ya'll missed the boat on that one, no one is going to play S&ndbox in anything close to GMod in its heyday numbers.
Get your anticheat code off my fucking cpu and onto your servers where it belongs.
Garbage games do this, simple as.
Skill issue.
People who play games to cheat are the problem with the world. Born losers.
So many games that work flawlessly on Linux, so I just skip those that don't:]
This is the way.
And let people run their own dedicated servers again.
Developer of game 'Rust' talks about ~~anticheat~~ rootkits on Linux
This whole anticheat thing is so stupid. Remember when Sony got sued bigtime for including rootkits on their audio CDs? Why are game developers getting away with it no problem? Society is regressing and it's frustrating to watch.
On Windows the cheating program it's a simple exe that will get kernel access with a simple uac request.
Everyone, especially 12 years olds, are able to run it. (And maybe get malware/ransomware disguised as a cheating program)
None of the losers that need a cheating program to feel validated in online multiplayer games will have the skills to recompile the kernel in Linux to add support for that
None of the losers that need a cheating program to feel validated in online multiplayer games will have the skills to recompile the kernel in Linux to add support for that
aha! so you admit, IT'S POSSIBLE! Well aren't we lucky we have microshoft who won't let anyone recompile their colonels! shows you mr silly yunix!
;D
Minecraft is actually a good example.
Server owners pay very little to nothing for anticheat, and cheaters have dozens of extremely elaborate clients to choose from, all interfacing with the very open and moddable game. And still, servers that do give a fuck have basically zero rage cheating. ESP? Sure, but that can be solved as well. But beyond that, everything can and is detected. And that in a game as sandboxy and freedomy as MC. It was designed to have a lot of slack in movement and actions, yet ACs are extremely good.
Server side anti-cheat should be the focus of every game company with an MMO game in their catalog. Relying on kernel access is madness.
They dropped Linux before proton was invented. Go on any cheat website and the requirements will always say to have windows. Maybe proton is exploited by some cheaters, news to me. You should just ban windows, no more cheaters.
I would bet that the claim of more than half of Linux players cheating is false positives due to shitty anti cheat. Like the anti cheat relying on some windows process or trying to initiate some process and linux is structured differently so it fails.
Hardware level cheat detection has always been a losing game. I'm a professional in similar area (not games) but it's fundamentally impossible to do when you dont control physical hardware, it's stupid. The only way to detect cheaters is machine learning based behavior analysis, period.
TL;DR: skill issue
Never heard of Rust, but it sounds like something I can afford to ignore.
OS shouldn't even matter to prevent cheating; do your anticheat validation server side. Anyone who knows anything about security knows the client side can never be trusted.
Ultra toxic survival game where you build a base, get raided by 4 guys with rocket launchers and bombs while yelling slurs at you. Then rinse and repeat.
I thought that was the trans crab programming language
So Linux users were 0.01% - one in 10,000 players - and also the main cheating problem?
Some odd math there.
If Valve's expanding hardware lineup helps increase SteamOS adoption, they'll change their tune.
I mean, Linux player base is only .01%, even if they are all cheaters, they will literally have no impact... You can't say "Linux user base is too small", and "if you support Linux you want cheaters" at the same time if you want to make sense.
This is actually one of the absolute worst trade-offs they could have made, if you think about it for like 2 minutes :
They said 0.1% of players were on Linux.
Even if they were ALL cheaters, that's still a tiny amount of cheaters you just "banned"
Almost 100% of whom will just cheat on Windows instead ; whereas all the legitimate Linux players will loudly complain forever.
They decided to sacrifice all the free PR from one of the most vocal groups of players out there, in order to get a ~ 0% reduction in the number of cheaters.
In more simple terms, they just shot themselves in the foot for no benefit whatsoever (though I do grant it's a relatively small "gun")
The garbage took itself out.
I’d imagine people on Linux who want to play Rust would be more than happy to shell out $15 and go through the little effort it is to download DLC so they can play on a Premium server when the other option is to shell out $140 for a Windows 11 license and go through the effort of installing that spyware trash to their PC.
On the other hand, Alistair clearly doesn’t want your money so maybe stop trying to give it to him.
Explain something to me. It’s a multiplayer game anything that affects all players should be handled on the server side, not the client. So if I make a cheat it can only be installed client side, not server side.
So if my hypothetical cheat looks at object placement and any time I sees a small object approaching at a high velocity it can say “I’m going to assume that’s a bullet based on what the server told me about it.” Then my cheat would say “your character moves from here to here until the bullet passes by, then moves back. I will tell the server you moved to the left 20 inches in the blink of an eye then moved back”
This works because the server just trusts what it’s told in this example.
So there are two options here to resolve this. Either the server sets thresholds and denies any placement changes look like the Flash is playing rust, or the server evaluates suspicious placement changes later when the cpu load it’s under is lower. The first approach stops much of this instantly but is computationally expensive and could not scale well for lots of players. The second would work well enough. You need to catch cheaters but it’s doesn’t have to be within the same exact cpu cycle.
In either case, these work because the server is taught to look for something that shouldn’t be possible. The enforcement happens server side. The client doesn’t fucking matter.
There is zero reason to put anti cheat on the client side when it’s not a P2P instance. Target a few servers, not thousands of players.
even most popular Minecraft servers have better functioning anti cheat that is completely server side
Why isn't this the standard everywhere? These servers prove that server side anticheat works.
It is. All games have this kind of server side verification which denies not allowed actions. The difference is in Minecraft it comes down to "no, you cannot fly, or" no, you cannot build a pig spawner because you don't have one in you inventory". But in Counter Strike you need to decide if one player's 14ms headsbot is legit, while some other player's 20ms kill was not. Or if someone was acting on information they shouldn't have (radar and wall hacks). That's orders of magnitudes harder.
Generally speaking, the slower a game, and the less hand eye coordination are necessary, the easier is server side cheat detection. On the other side, there's chess...
mentioning EA games like Apex Legends removing support is laughable. Sure Alistair, ALL those EA games ALL decided around fall of 2024 to ditch support for Linux/Proton. All at the Same time. Not because EA has a deal with Microsoft/Game Pass and NOT because a few months later Microsoft announced their own Handheld with Asus. Just like Riot.
So Alistair how long until Rust is announced for Gamepass with all DLC included?
They're on that lie still?
Cool, cool. I've got plenty of games to choose from to care about lazy lying assholes who can't be bothered to come up with a better excuse than that for why they irrationally hate Linux
Does the anti-cheat break the game on Linux? Not buying the game. I don't need that kind of crap in my life.
That .01% number is out of line with the overall share of Steam users in 2018 by literally an order of magnitude. I can understand some deviation within a particular game, but that figure is so far off that I kind of suspect he just made it up on the spot.