KLISHDFSDF

joined 3 years ago
[–] KLISHDFSDF@lemmy.ml 4 points 2 weeks ago (1 children)

Because it doesn’t have to.

But according to that article it's still trusting the client. It's just validating that the action was within the realm of possibilities, not that it wasn't faked.

From the article (highlighting from me):

Here’s how it works:

  • When you shoot, client sends this event to the server with full information: the exact timestamp of your shot, and the exact aim of the weapon.

The article continues to state:

The enemy may be the only one not entirely happy. If they were standing still when he got shot, it’s their fault, right? If they were moving… wow, you’re a really awesome sniper.

But what if they were in an open position, got behind a wall, and then got shot, a fraction of a second later, when they thought they were safe?

Well, that can happen. That’s the tradeoff you make. Because you shoot at him in the past, they may still be shot up to a few milliseconds after they took cover.

What's stated above already happens in Apex, telling us that they already do everything this article is talking about. This article mentions nothing new and doesn't solve the problem of clients sending fake data that is within the realm of possibilities - e.g. a headshot when you were actually off by a bit.

[–] KLISHDFSDF@lemmy.ml 1 points 2 weeks ago

And when one client sends actuons that are weird and doesn’t line up with it’s internal game state

What if my hacked client sends actions that are not weird, completely plausible, but didn't happen and instead were faked? E.g. I take a headshot and would have missed, but my client sends data that I actually shot them dead center, because I wasn't completely off? How would the server know it wasn't me?

[–] KLISHDFSDF@lemmy.ml 5 points 2 weeks ago

Check the data on the server

I believe this already happens to some degree.

Don’t give any data to the client it doesn’t need, like enemies around the corner

Enemies around the corner still make noise/peek/shoot/etc. You can't just hide data of nearby enemies from the client because their actions still have in-game consequences that need to be reproduced across all active/nearby players.

Now the server doesn’t need to care. There’s input? Validate and use it.

How do you validate data that is within the realm of possibilities? if my head shot would have been 1 pixel too far to the left to hit and my hacked client sends it 1 pixel to the right so it makes a hit, how does the server know this isn't fake?

Server decides if it’s a headshot.

If my fake data doesn't look out of the ordinary i'm still hacking the system and tricking the server-side validation.

Client only sends coordinates of origin and target. Lag? Sucks to be you, with or without cheat.

The math to send the perfect headshot isn't difficult if you know where you are, where the enemy is and you can only send origin & target coords, I'm not sure this solves anything.

That would only create more work for the developers, all for the defacto expulsion of Linux users (Way less players at all times). The best course of action here would be the actual expulsion of Linux users. Also, EA is at most 25% correct. (Not a rational argument, I just very much dislike them)

Agree with you 100%.

Damn, sorry to hear that. It’s always bad to leave something one knows because something’s become unbearable. I wish you best of luck on your journey! (I’m assuming a lot, but why else would you switch despite your choice of use of free time?)

Thanks! I'm a huge open source supporter and only ever installed Windows on my desktop to play games, still using Linux on my laptops. Thanks to Valve, Proton, and Wine, I'll be able to go back to Linux and maybe discover some new games.

On the other hand: I quite like it. It forces them to keep their grubby little hands from my kernel.

I do not like anything anti cheat. But I also don’t really like cheaters, especially in online games, so anti cheat could be tolerated. The only thing is: nothing trumps my systems integrity. Definitely not online player satisfaction.

Kinda agree with you on this. Although I have my desktop as a strict "gaming" machine, I wouldn't mine an EA rootkit on my Desktop Linux system if all I did on it was game. But yes, they can keep their hands off my kernel on my "work" devices.

[–] KLISHDFSDF@lemmy.ml 14 points 2 weeks ago (6 children)

I've been praying for an Open source Apex clone that can be self-hosted. A man can dream.

[–] KLISHDFSDF@lemmy.ml 29 points 2 weeks ago* (last edited 2 weeks ago) (58 children)

Genuinely curious, because this isn't my area of expertise, but how do you design a server to be "better" if it has to trust data from a remote client?

Example, if the client is compromised - because as they've said, they have no way to "attest" that the kernel is not compromised - how would the server know any better?

If my Apex client tells the server I got a perfect headshot, how would the server know I didn't fake the data? Is there a real answer to this problem or are we just wishing they come up with an impossible solution?

My general understanding is that EA is 100% correct. Now, on the other hand, maybe the should just limit plays between Linux <-> Linux so people can at least still enjoy the game (I'm moving to Linux soon so I'll basically no longer be able to play the game, which is, as my primary gaming addiction, a huge loss I'm willing to take).

There's compromises EA could take, but I think the Linux market share is just too small for them to care to spend any resources - even though they're raking in billions (~$3.4 Billion) and could spare a few resources to find a good middle ground. Capitalism at it's finest.

[–] KLISHDFSDF@lemmy.ml 18 points 2 weeks ago

most logical take. people seem to forget that modern apps are tied into all kinds of features that regular users expect to just work. if you want a bare OS with minimalist apps, install lineage or Graphene and only use apps from F-Droid.

[–] KLISHDFSDF@lemmy.ml 1 points 2 weeks ago

when did you last try it and what clients? I've got friends/family accessing my library and I see them playing back stuff constantly and never seen or heard of any issues. This is across web, AndroidTV, Chromecast, Roku and mobile devices.

[–] KLISHDFSDF@lemmy.ml 46 points 2 weeks ago (3 children)

Linus Torvalds has been sold out to big tech companies like Google and Microsoft. He himself is a billionaire and no longer writes any code.

I can't take that seriously

[–] KLISHDFSDF@lemmy.ml 40 points 3 weeks ago (2 children)

Here's what Google's Gemini had to say about it when I asked:

🗣

What does this say?

VVu7 d0 y00 4ll th1nk 4b0ut 1337$p34k? 1 h4v3nt 8u$t3d 1t 0ut 51nc3 m1ddl3 5ch00l, 8ut m4y83 th3r3’5 p0t3nti4l #3r3.


🤖

This is written in l33tsp34k (leetspeak), an internet language that replaces letters with similar-looking numbers and symbols.

Here's what it says when translated:

"What do you all think about leetspeak? I haven't busted it out since middle school, but maybe there's potential here."

[–] KLISHDFSDF@lemmy.ml 3 points 4 weeks ago

Personally I think its great to have online discussions/questions available on a forum (like lemmy) that are federated and accessible anonymously as it allows answers or discussions to be created and available for others to search and find in the future. There's a lot of content that I find where answers or discussions were posted on reddit, but I can't access it if I'm trying to reach it anonymously (bad for privacy).

I would encourage these kind of posts as:

  1. They generate content for lemmy/the fediverse.
  2. The new content brings in more people, perspectives, and collaborations.
  3. People seeing active discussions on this site will inspire others to post more and help bring in other perspectives.
  4. Understanding the "Ten thousand" XKCD ^(xkcd.com)^ perspective lets you realize that people are learning all the time and that trying to get feedback in a forum is not a bad thing regardless of how many other options there are.
[–] KLISHDFSDF@lemmy.ml 1 points 1 month ago

Localsend is great!

If you need something that works with just a web browser, try wormhole.app

If wormhole is blocked or not working, use any 'Send'^(github.com↗)^ instance, which is a fork^(github.com↗)^ of Mozilla's Firefox Send^(github.com↗)^.

[–] KLISHDFSDF@lemmy.ml 9 points 1 month ago

It’s actually still happening under Biden.

Its a bit more nuanced than that. That's like saying "people who wear seat belts still die". Well yes, that's a fact, but intentionally or not, you're making a claim without context and painting a picture in the mind of others that doesn't reflect reality.

Under the Trump administration’s so-called “zero tolerance” policy, separations were calculated and deliberate.

The goal of zero tolerance was to criminally prosecute all adult migrants who entered the country illegally. U.S. Customs and Border Protection (CBP) would detain parents and transfer their children into the custody of the Office of Refugee Resettlement.

“Cruelty was the point of that policy,” Langarica said.

Biden rescinded the policy in January 2021. Yet, three years later, more than 1,400 families remain separated, according to the latest update from the Family Reunification Task Force.

The report argues that separations have happened for decades, but under the Biden administration they are a result of bureaucratic processes, lack of transparency and accountability — not purposeful cruelty.

Source: https://www.kpbs.org/news/border-immigration/2024/07/29/report-reveals-migrant-family-separations-continue-under-biden

You can find the latest Family Reunification Task Force progress reports here: https://www.dhs.gov/publication/family-reunification-task-force-progress-reports

view more: ‹ prev next ›