English Cheat or what?

12 replies
Goto Page
To the start Previous 1 Next To the start
11.04.11 11:36:29 pm
Up
Milriko
User
Offline Off
Hello! We have been playing for a long time our matches with new version of CS2D. I always check the logs from my server, but today, when our opponent was too strong I checked it again and i saw this :

[22:04:06] JOIN FAILURE: [-UzZ-] xXx| Pornos (83.4.16.225:2162) can't join (precon. auth failed)
[22:04:06] precon recv: 'z1eb1efb7353', precon expected: 'z2724d177s49'
[22:04:06] SECURITY WARNING: [-UzZ-] xXx| Pornos seems to be a hacker. Ignoring all future packets.
[22:04:06] JOIN FAILURE: [-UzZ-] xXx| Pornos (83.4.16.225:2162) can't join (precon. auth failed)
[22:04:06] precon recv: 'z1eb1efb7353', precon expected: 'z2724d177s49'
[22:04:06] SECURITY WARNING: [-UzZ-] xXx| Pornos seems to be a hacker. Ignoring all future packets.

Can you tell me what it is, please?
IMG:http://imgupload.pl/images/46791184149161885069.png
11.04.11 11:41:33 pm
Up
DC
Admin
Offline Off
this stuff can happen when people manipulate the game or write custom clients (but don't succeed). many people try to manipulate the client to cheat.. so.. yeah.. maybe this guy is a cheater/hacker. or he just messed up the client binary for whatever reason.
edited 1×, last 11.04.11 11:42:46 pm
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
11.04.11 11:42:17 pm
Up
xerionn
BANNED
Offline Off
thanks.
Visit us www.storm2D.com
12.04.11 04:59:19 am
Up
FlooD
GAME BANNED
Offline Off
milriko do you have more examples of that thing happening?

if not then it could be that his cs2d client just glitched (maybe like those graphics glitches)
:(){ :|:& };: http://github.com/floood
12.04.11 12:05:25 pm
Up
DC
Admin
Offline Off
no, it's very unlikely that this message is caused by glitches (actually... impossible). the only scenario without intended manipulation which comes to my mind is a virus infection (on the client-side).
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
12.04.11 01:55:44 pm
Up
BrahOrkah
BANNED
Offline Off
It's very unlikely that this message is caused by a modified clientside binary. Probably a glitch on the server side as said before.
12.04.11 02:56:29 pm
Up
DC
Admin
Offline Off
BrahOrkah has written:
It's very unlikely that this message is caused by a modified clientside binary. Probably a glitch on the server side as said before.

I totally disagree. what leads you to this conclusion? this message would appear for all players if it would be the fault of the server.
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
12.04.11 03:48:07 pm
Up
MrShock
User
Offline Off
DC has written:
BrahOrkah has written:
It's very unlikely that this message is caused by a modified clientside binary. Probably a glitch on the server side as said before.

I totally disagree. what leads you to this conclusion? this message would appear for all players if it would be the fault of the server.


Lot of hackers are trying to hack game because in new version is anything better for hackers. Look, they make [hidden name] hack program. With it you can hack 0.1.1.8. And i do not saw anything like this message, wierd.
12.04.11 04:14:00 pm
Up
DC
Admin
Offline Off
@MrShock:
the new version (which is 0.1.1.9 btw) doesn't make anything better for hackers because nothing related to security has been changed.

there's actually just an improvement because you can't use rcon anymore to execute Lua commands - but NOTHING became better for hackers.

so please stop to claim random stuff. if there's a program that does what you describe then:
• it has nothing to do with 0119. you could have done the same with 0118 and all previous versions as well
• report it to me via pm so I can see what it does

also note that the stuff described above is pretty easy to circumvent if you are not a noob. I never claimed that it is impossible to hack this game without causing this message to appear when joining a server. I only said that servers can get this message because of manipulated (hacked) clients. don't get that wrong...
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
12.04.11 04:25:44 pm
Up
BrahOrkah
BANNED
Offline Off
precon is a 'key' that is based on another 'key' that is send from server to client. It might be the case that player xXx has previously connected to another server, timed out, and still based his precon on the 'key' of another server. It will be highly unlikely that someone is trying to cheat/hack by sending a wrong precon?!
12.04.11 04:31:23 pm
Up
DC
Admin
Offline Off
Quote:
precon is a 'key' that is based on another 'key' that is send from server to client. It might be the case that player xXx has previously connected to another server, timed out, and still based his precon on the 'key' of another server

this can't happen. the key is generated while joining, based on the new key (which must be received from the server that you are currently joining, otherwise the game will not even generate and send a new key).

manipulated/self-made clients might fail to generate the right key which results in this error.

the problem also can't be caused by the server because in that case ALL clients would fail to join and not only one.

also you shouldn't provide that kind of information in a public forum please...
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
22.06.11 07:10:54 pm
Up
Banaan
User
Offline Off
I'm sorry for reviving a three months old thread, but I have a question regarding this topic.

Code:
1
2
3
4
5
6
[20:22:10] JOIN FAILURE: GzR (189.18.171.195:1728) can't join (precon. auth failed)
[20:22:10] precon recv: 'x9734a7ca849', precon expected: 'zbd16691bG53'
[20:22:10] JOIN FAILURE: TheCAKICI (78.185.43.93:50075) can't join (precon. auth failed)
[20:22:10] precon recv: 'x9734a7ca849', precon expected: 'zbd16691bG53'
[20:22:14] JOIN FAILURE: Player (84.135.123.153:58735) can't join (precon. auth failed)
[20:22:14] precon recv: 'x9734a7ca849', precon expected: 'zbd16691bG53'


Three different people, all generating the same (wrong) precon key. In between, other people joined without problems. This was the fifth of January, in case that matters.

How can three different people generate the same wrong precon key?



I also noticed that this was right after a map change (that's why two players join at the same time). In a more recent log, one of today, I also saw a precon error right after a map change:
Code:
1
2
3
4
5
6
[15:47:26] ----- Mapchange -----
[15:47:26] load map 'de_dust'
[15:47:27] ----- Server started -----
[15:47:27] JOIN FAILURE: D¡sney.# [warmup]«« (80.232.86.219:1) can't join (precon. auth failed)
[15:47:27] precon recv: 'z5cd89418P57', precon expected: 'z!O8c7be209Q53'
[15:47:27] SECURITY WARNING: D¡sney.# [warmup]«« seems to be a hacker. Ignoring all future packets.



I went to look a little further, and saw another pair of wrong keys:
Code:
1
2
3
4
[14:14:02] JOIN FAILURE: Player (95.37.213.130:3316) can't join (precon. auth failed)
[14:14:02] precon recv: 'z8dc9387aS49', precon expected: 'xa9291610753'
[14:14:33] JOIN FAILURE: Rian2 (182.5.35.162:1205) can't join (precon. auth failed)
[14:14:33] precon recv: 'z8dc9387aS49', precon expected: 'xa9291610753'


Surprisingly, this took place (quite a few seconds) after a map change:
Code:
1
[14:13:52] ----- Mapchange -----

Both players were present in the server prior to the map change though:
Code:
1
2
[14:13:34] # 4, Player 2, IP 95.37.213.130:3316, CT
[14:13:34] # 6, Rian2, IP 182.5.35.162:1205, CT




And another one:
Code:
1
2
3
4
5
6
7
8
9
[19:23:52] ----- Mapchange -----
[19:24:02] JOIN FAILURE: HEm+ [HUN] (92.249.163.83:1384) can't join (precon. auth failed)
[19:24:02] precon recv: 'zf30e54a9w49', precon expected: 'z7d7d4dda456'

[19:39:18] ----- Mapchange -----
[19:39:28] JOIN FAILURE: Horta (190.251.111.227:55329) can't join (precon. auth failed)
[19:39:28] precon recv: 'x13e38d7aw53', precon expected: 'xcca056f8155'
[19:39:28] JOIN FAILURE: (G-G) LaNenita223 (200.84.140.40:1044) can't join (precon. auth failed)
[19:39:28] precon recv: 'x13e38d7aw53', precon expected: 'xcca056f8155'



So how does a map change affect the precon? How can different players generate the same wrong key?




Oh and sometimes it says
Code:
1
[19:39:28] JOIN FAILURE: Player (IP:PORT) can't join (client verification failed)

But sometimes it doesn't. What's the difference?



// EDIT: I found something new:
Code:
1
2
3
4
5
6
7
[09:40:21] JOIN FAILURE: tege (109.240.124.222:64821) can't join (precon. auth failed)
[09:40:21] precon recv: 'z!O673736bbG49', precon expected: 'z7b6d002bB49'

[09:49:29] ----- Mapchange -----

[09:49:40] JOIN FAILURE: THE FALLEN (FIN) (193.65.148.247:3747) can't join (precon. auth failed)
[09:49:40] precon recv: 'z7b6d002bB49', precon expected: 'x!O49ee5445q52'


The second guy is using the old precon!




off-topic uprate fail:
Code:
1
2
[20:43:41] precon recv: 'z!085c01660x57', precon expected: 'z!O85c01660x57'
[20:43:46] JOIN FAILURE: uprate (87.211.220.110:58523) can't join (precon. auth failed)

Took him two days (18+19 Dec '10) to figure out what was wrong with his key.


off-topic Eww ugly post :S
22.06.11 07:44:26 pm
Up
DC
Admin
Offline Off
the preconditional authorization code is randomly generated on each startup/mapchange. so this might become a problem when joining right during a mapchange (or if the server needs a loong time for changing the map)

I'll fix this by accepting the code from the previous map as well.

thanks for reporting
www.UnrealSoftware.de | www.CS2D.com | www.CarnageContest.com | Use the forum & avoid PMs!
To the start Previous 1 Next To the start