Why the Anti-Cheat sucks and how it can be fixed (or at least slow the bleeding a bit)

If any of yall ever wanted to know why it seems that despite all the changes BSG makes to the anti-cheat and all the bans they send out the amount of hackers only seems to increase, here is why. Going to try and tone down the tech speak as best I can.

Alright, so to start out BSG uses Battleye to do an integrity check on the game’s files. Used to be that the launcher would just do the integrity check, but this was a laughable implementation that could be bypassed simply by not using the launcher. Now its handled by the launcher and Battleye together. But the implementation of the Battleye module sucks as well and has several vulnerabilities which were uncovered by reverse engineering and decompiling the game code. One such vulnerability allows hackers to just feed Battleye useless files until it eventually hits the hardcoded buffer length limit. Once this happens, Battleye gives up and you bypass it entirely.

Why is this bad? Because it essentially means that players are allowed to make whatever change they want to the game’s binary without Battleye being able to detect any sort of change in the packet. This is how cheaters can go undetected for months.

Changes have been made to the Battleye modules to increase security, but literally none of that matters. Hackers will just reverse engineer the code again and find a new vulnerability. Unless BSG takes action to prevent this, cheat devs will continue to adapt to the changes. BSG has made some attempts to detect reverse engineering, but its always been terrible attempts like checking your IDA history Jesus Christ that one was funny. Luckily, this is a relatively simple thing to fix. A module like Byfron’s Hyperion could be implemented to prevent reverse engineering. Although somewhat new, its already been wreaking havoc on cheat devs over in Overwatch 2 and Fortnite as getting through the encryption has proven to be quite the headache. Won’t stop aimbot, but it will stop ESP, Wall Hack, Loot Vacs, and other cheats that need to interact with the game code.

Source: https://www.reddit.com/r/EscapefromTarkov/comments/xz2nvg/why_the_anticheat_sucks_and_how_it_can_be_fixed/

leave a comment

Your email address will not be published. Required fields are marked *