The Truth about Cheating in ET


(Kendle) #1

Overview

There is a lot of confusion and disagreement regarding cheating in ET, so I’d like to start and maintain a thread which gives the truth about cheating in ET. Whilst we all know cheats exists, it appears to me that the “perception” of cheating is far greater than the “incidents” of cheating that actually occur. This is due largely to ignorance of what can and can’t be done, to the fact that appearances can often be deceptive in computer games, and the fact that some people simply can’t accept being beaten by better players and so have to invent cheats that don’t exist.

I’d like to list all the cheats that are known to exist, complete with demos (and screenshots where applicable) so that we’re all aware of what can be done, and to enable us to spot and avoid them. I’d also like to list cheats which are alleged to exist but which almost certainly don’t, in order to explode some of the myths that have arisen about cheating. The aim being to inform and educate new and old players alike so that we can all enjoy this great game without our ignorance leading us to see cheats behind every rock and bush.

Note: Under no circumstances am I advocating using cheats, or even downloading them onto your PC to “test” them. I will not provide links to sites where cheats can be acquired, nor will I even name specific cheats to give any would be cheater a head-start in tracking them down, and would urge everyone else on these forums to do the same.

Furthermore, this is my initiative. I am not in any way shape or form connected to Splashdamage.

Known Cheats

Built in Cheats

ET contains many settings designed to enable mod / map makers to test their work, offline. These have to be specifically enabled on the server to work and are specifically disabled on most public servers. There are some public servers, however, that run with built-in cheats enabled. You should avoid these servers.

Aimbot

An aimbot is a piece of software installed on the client PC that controls cursor movement, and is typically used to enhance a players aim, enabling them to shoot opponents with a degree of accuracy beyond their own natural skills. Aimbots generally work by accessing the OpenGL sub-system that the game uses to display the game environment on your PC.

Aimbots can sometime be crude, leading the user to fire at the closest targets, whether they’re engaged in combat or not. You can sometimes detect an Aimbot by spectating a player and watching as his crosshair “snaps” from one player to another. Other Aimbots are more sophisticated and allow a degree of error, and can be toggled on and off with a key press. These are much harder to detect.

Fortunately anti-cheat software detects most, but some do slip through the net.

>> Demo >> Screenshot >>

Wallhack

A Wallhack allows a player to see through walls, an obvious advantage enabling them to anticipate players coming round a corner, for example, and getting the drop on them. Wallhacks generally work by accessing the OpenGL sub-system the same way an Aimbot does. You can often detect a Wallhack by spectating a player and watching as he appears to be looking at, or even shooting at, walls and other objects.

A good way to spot them is to record a demo whilst spectating them and then play the demo back using the console commands:-

/r_shownormals 1
/demo demoname

This will allow you to see through walls and give you an indication of whether the player in question was also able to do.

Also, Punkbuster has a feature whereby server admins can take screenshots of players screens, in other words they can see exactly what the player sees. This has proven to be a very, very powerful anti-cheat tool, with cheaters on Punkbuster servers getting caught out even though their hacks weren’t detected by Punkbuster while they were playing.

>> Demo1 >> Demo2 >> Screenshot >>

Ballhacks and Skins

Ballhacks and Skins put icons over or on other players or highlight them in some way allowing the hacker see them more clearly and often to track them through walls, providing a similar advantage to Wallhacks. These aids also generally work by accessing the OpenGL sub-system and can be detected using similar methods to Wallhacks.

>> Demo >> Screenshot - Ballhack >> Screenshot - Skins >>

These kind of hacks can, and are, countered by the Punkbuster screen capture feature described above.

General Notes

  1. Anti-cheat software catches most of these hacks, but not all.

  2. These hacks are often distributed as “multi-hacks” providing all the above features in one hack.

  3. There are many technically excellent players out there, whose natural skills give them far superior aim to the average player. If you come up against one of these top players don’t immediately assume they’re cheating. Spectate them, and, if you really are suspicious of their seemingly god-like abilities, record a demo and post it on these forums. There are many experienced players here who can give an opinion on whether the player in question really was cheating or not.

  4. Neither Punkbuster nor ETPro are perfect, and sometimes a player may be running another, perfectly legitimate (and often completely unrelated) program on their PC whilst playing, and get kicked from a server which thinks they were cheating when they weren’t.

This is called a “False Positive” and does happen from time to time. Recent versions of ETPro are quite good at distinguishing between “real” cheats and “false” cheats, but Punkbuster still gets confused at times, and you’ll normally see a player kicked for “GAME INTEGRITY” when this happens.

What’s more, Punkbuster will often kick players for reasons other than cheating, such as:-

  • losing key packets
  • authentication failed
  • cvar out of range
  • server running old version

The first 2 indicate the player crashed or is having network problems. The last 2 mean they’re using a cvar out of range (see the section below on Cvars) or the server hasn’t been updated and there’s a mismatch between client and server versions of Punkbuster. These kicks DON’T mean the player concerned is cheating.

Alleged Cheats

Prone Hack

This hack supposedly enables its user to go prone faster than normal. It’s easy to see how a new or uninformed player could believe this hack exists, as the animation you see of someone else going prone doesn’t match what happens when you yourself go prone.

This is because what you see on your screen is simply a collection of models and animations displayed to you by your copy of ET, in response to instructions it receives from the server. When someone goes prone the server simply tells your PC that whoever it is has gone prone. It doesn’t tell your PC how “fast” they went prone (everyone goes prone at exactly the same rate), however the prone animation your PC displays to you, for some bizarre reason, is different from the movement of going prone when you do it yourself, hence the confusion.

High Jump Hack

This hack supposedly enables its user to jump significantly higher than normal. Shrub servers unfortunately have a “feature” called “double-jump” whereby you can press your jump button whilst in mid-air and jump even higher. On normal and ETPro servers this “feature” doesn’t exist, and so you won’t see this happening.

The reason it can’t happen is because height is determined by the server, not by your PC. You can’t press your jump button “faster” in order to jump “higher”, for example. When you press your jump key your PC simply sends a signal to the server telling it you’ve pressed your jump key. The server then calculates how high, in what direction, etc., based on it’s knowledge of your position and trajectory at the time. It then returns data to your PC telling it how high you jumped so that your PC can display the appopriate model / animation to best fit what the server is telling it.

Damage Hack

This hack supposedly enables its user to receive less damage than normal. Again this hack can’t exist because damage is calculated by the server, not by your PC.

When you shoot at a target your PC simply informs the server that you have pressed your “attack” button. The server decides how many shots you fired, in what direction, and from what position and then determines whether you hit anything, applying the damage award appropriate to the weapon used and the “hitbox” that was struck (“hitbox” (see below) being “head” or “body” generally). No piece of software installed on any players PC can override the server, either to inflict more damage on an opponent, or to receive less damage.

However, it’s easy to see where this myth came from, as online games in general suffer from “lag”, which is due to the connection between your PC and the server not being entirely instant and therefore what you see on your screen is always a fraction of a second out of date. In other words you see other players where they were a split-second ago, not where they are now, and it’s entirely possible to miss the target. Thankfully ET contains some pretty good anti-lag code to compensate for this, especially the ETPro mod, but it’s still possible, given a bad internet connection, to suffer from lag and to see your shots miss sometimes when you were convinced you’d hit the target.

Another reason damage appears to be different from what you would expect comes from the fact that shots are registered against “hitboxs” rather than the player model itself. See this excellent article for an explanation of hitboxs and why they don’t reflect what you see on screen.

Server Hack

With the ET source code now available it’s possible, in theory, for anyone to write their own mod and install it on a server, presumably to give themselves some advantage over other players, especially when you consider how limited client-side hacks are. What’s more, they could, in theory, make a mod that pretends to be something else.

At this present time I don’t know if any such mods have ever been made, and I’d think doing so would have rather limited potential, as client-side hacks can be used on many servers, whereas server-side hacks, if they existed, could only be used on the servers they’re installed on. What’s more, public servers cost money. Would a hacker really want to spend money hosting a server just so as to fool the few people that would visit it?

Until someone comes up with some evidence that such hacked servers exist, this entry remains in the “alleged hack” section.

Cvars

cvars are “console variables”, the settings used to setup and control the copy of ET installed on your PC. There are 100’s of these cvars, which can all be tweaked to modify your game environment. Tweaking some of them would give you an advantage over other players, so the Punkbuster anti-cheat software (and now the ETPro mod) contains a mechanism whereby server admins can specificy which cvars you are not allowed to tweak, or restrict the range of values you can assign to them.

If you join an Punkbuster enabled server with cvars set outside the permissible range, you will be kicked from the server. Some cvars are so powerful that Punkbuster will simply kick you from the server if you alter them, even if the server admin has not specifically prohibited them.

Other cvars are restricted to a range of values as to go beyond these ranges would give you an advantage over your opponents and / or may cause weird things to happen in-game that you could exploit. There are cvars for instance that could give you a wallhack like effect, or cause you to lag deliberately to make it harder for other players to hit you.

Obviously, to avoid falling victim to these you need to play on Punkbuster enabled servers. This thread assumes that you do. If not, tough, you’re on your own, have fun with all the cheaters out there :wink:

Furthermore, the ETPro mod has added various features to combat some of the cvar hacks going around, such as it’s antiwarp feature which counters cvar hacks that introduce artificial lag.

One point to note however is that cvar tweaking is often carried out to improve game performance (you can reduce detail to boost frame-rate, for example) and so experienced players will often tweak a whole set of cvars. Because each server admin is at liberty to set his/her own acceptable ranges, you can never guarantee that your cvar tweaks will be within acceptable limits, so occassionally you may be kicked from a server for a cvar tweak, or see others kicked from servers for a cvar tweak. This doesn’t mean the players concerned are cheating.

In general, if you stick to properly set-up Punkbuster enabled servers, you won’t fall foul of cvar cheats.

Bugs

There are a couple of bugs that can catch out the unwary or make it appear as if someone is cheating when they’re not.

Tracer Bug

Sometimes you’ll see bullet tracers (thin lines) going through walls. Remember, these are only tracers, not bullets. What’s more there’s a bug which makes tracers appear somewhere completely unrelated to the bullets they’re supposed to be tracers of. You can’t shoot through walls and even tracers aren’t supposed to go through them, but this bug makes it appear that they do. This bug is fixed in ETPro.

Gameplay Issues

Experience is everything

Sometimes a player appears to have uncanny abilities, which has lead to accusations of cheating from time to time from the inexperienced player. Often there is no cheat involved, it’s simply a case of a player using their experience to compliment their skills.

For example, you go blundering round a corner and get mown down. Was your assailant using a Wallhack? Probably not. He could just as easily have been leaning round the corner. A common mistake for the inexperienced to make, especially as ET doesn’t have a lean animation, so when a player leans he doesn’t actually appear to be doing so.

Also, experienced players will be aware of game sounds. Get yourself a good headset rather than use speakers and you’ll pick up sounds, like footsteps, or opponents firing or loading their weapon out of sight, which can all help you anticipate what’s coming.

Voice Comms

Sometimes Clan players will play on public servers using Voice Comms to relay information to each other. Voice Comms is basically multi-user “voice over IP” allowing players to talk to each in real time. It’s used by almost all Clans in competitive matches. Some may claim it’s lame of Clans to use comms on public servers, and maybe it is, but it’s not a cheat and can lead to the impression that some players are more aware of what’s going on around them than others.

Antilag

ET contains a mechanism to combat the connection lag inherent in online games, whereby it attempts to determine where each individual is when they fire a shot, where everyone else is at that moment in time, and then calculate whether the bullet hit anything. There are issues with antilag that can create misleading results, such as being hit by someone when behind an object (like a rock or building) because the antilag system has determined that you were visible to the shooter when they fired their gun.

This article explains it all in much greater detail if you’re interested.

General Guidance

There are 3 “Golden Rules” that we, as players, can follow to protect ourselves from cheats. If you choose not to follow these rules, then please don’t come onto these forums bleating about cheats in ET.

Only play on Pure servers

Quake3 engine games provide a facility whereby the server you play on can check the files you have installed on your PC, and similarly your PC can check the files installed on the server. This ensures both client and server are using the same set, and that neither has been “hacked”. These type of servers are called “pure” and account for the majority of servers out there. You are strongly advised to avoid servers that are not “pure”, as you have no guarantee of the integrity of the server. Don’t complain about cheats on non-pure servers, as it’s very likely they’ll be plenty of them.

You can check the server you’re playing on is pure by bringing down the console ( ~ or ` ) and entering /sv_pure. If it returns a value of 1 the server is pure, if it says 0 it isn’t.

Please note:- Many cheats don’t require hacked games files, and so pure servers on their own can’t guarantee a cheat-free environment.

Only play on PunkBuster enabled servers

ET uses anti-cheat software called Punkbuster, developed by a company called EvenBalance, who provide anti-cheat software for a number of other games as well. As with pure servers, if you choose to play on servers NOT protected by anti-cheat software you’re not really in a position to complain about cheating.

Please note:- Although Punkbuster catches the majority of cheats, it doesn’t catch them all, so it’s not an absolute guarantee of a cheat-free environment.

Additional:- The ETPro mod, designed for competition but used on many public servers, has it’s own anti-cheat mechanism that can catch some cheats that even Punkbuster can’t, so it would be a good idea to stick to ETPro servers for an extra level of protection.

Only play on “kosher” Mods

There are several “mods” available for ET, which can alter the gameplay somewhat. Using a game browser like All Seeing Eye you can find servers running specific mods, or filter out those you don’t want to play on. In general stick to the “kosher” mods ETMain (“normal” ET), ETPro (a competition mod) or Shrub ( a “fun” mod).

Although with the release of the ET source code it’s possible, in theory, for anyone to make their own mods (for cheating purposes or otherwise) there’s no evidence that such (hacked) mods exist. However, the source code for Shrub and ETPro are NOT available, so playing on these mods should be safe. What’s more, ETPro contains a downloadable client component so it would be pretty difficult for any would-be server hacker to fool you into thinking you were playing on an ETPro server if it wasn’t.

Submissions

I would like demos and / or screenshots of the known hacks listed, so that new (and existing) players can see what they look like. I don’t have any myself so would appreciate any that anyone can provide.

If anyone discovers new cheats, apart from reporting them to EvenBalance I would invite them to submit them to me so that I can edit this thread to keep it uptodate. I would stipulate however that submissions can only be considered if accompanied by evidence. The best evidence being game demos. Simply “claiming” that you “saw” something but without being prepared to provide evidence will see your views discounted by any rational person.

If you wish to submit evidence of new cheats, please adhere to these guidelines:-

  1. All demos must be recorded on pure, Punkbuster enabled servers. All servers must be running the latest ET patch (v1.02) and preferably ETPro 3.0.1 or higher. Shrub servers should not be used if at all possible, and certainly mods other than ETPro (or Shrub) are not to be used under any circumstances.

  2. If you lack webspace on which to host these demos, PM me and I will provide you with some. I have nearly 2Gb of webspace available for hosting, if required.

  3. Only properly recorded game demos are acceptable. Animated gifs, screenshots without accompanying demos, avi / mpeg or any other format movie files, are NOT acceptable.

Suggestions

I am completely open to suggestions as to the content and wording of this post. This thread is not aimed at any individual, or created for any reason other than determining the real truth about cheating. I’m also far from being the most technically aware person when it comes to ET, so if there are technical errors in any aspect of this post I would welcome corrections.

bbcode version of this post here
html version of this post here


(SmokeyTarget) #2
Edit:

Brevity


(Maximus191) #3

I got some demos of wallhackers and aimbot users Kendle. I’ll give you a shout in mirc. :slight_smile:


(Kendle) #4

Smokey: done

Max: cheers m8, catch you in IRC (but might have to wait till tomorrow).


(mouse) #5

wallhack:


(digibob) #6

When you shoot at a target your PC tells the server how many shots you fired, in what direction, and from what position.

Just to make matters slightly more clear, a client doesn’t even have that much control. The client can only tell the server, “i have my attack button down now”, and the server will decide if and when you actually fire.


(evilsock) #7

A very positive, pro-active solution to the debate :slight_smile:


(SCDS_reyalP) #8

Demo from admitted wallhacker on Locked box: http://www.ggnore.com/lavosity_panzer.dm_83 thread: http://www.forums-center.com/viewtopic.php?t=1343

Detecting wallhackers when watching demos:
Use r_shownormals 1. This lets you see through walls in demo playback or cheat enabled servers. However, be warned that seeing something through a wall can make you assume the person in the demo is responding to it.

Another reason people can seem to not take damage, or to make ‘impossible’ shots has to do with the hit detection, which is done on the server, using axis aligned boxes, rather than the models players see. Details: http://www.et-center.com/?page=articles&id=43

Another catagory:
“Cheats” built into the game. These are developer commands and cvars which are locked on normal servers. Their normal purpose is to aid in making maps or debugging the game. These are enabled by the server loading a map with /devmap, or using forcecvar on etpro. Occasionaly, people enable cheats on their public servers.

edit:
Not all aimbots/wallhacks/ballhacks are based on subverting opengl. They can also be based on game code.

edit #2: an in game exploit, with demo: http://bani.anime.net/banimod/forums/viewtopic.php?t=2930&highlight=demo


(Sauron|EFG) #9

Some things that you may or may not want to add:

  • I think there’s also cvar hacks/unlockers and lag hacks (which ETPro counters with antiwarp)
  • Players kicked for cvar violations are not cheating
  • False positives (like GAME INTEGRITY)
  • How to find out if a server is pure or not
  • Links that will help server admins to configure PB (like this)

(Kendle) #10

digibob, reyal, edits made. (am I right about /sv_cheats 1 needed to make /r_shownormals 1 work?)

Spoof, yep, I think I should add a section on cvar related hacks. I’ll scribble something up later, but better actually go and do some work now. :frowning:


(Bongoboy) #11

Nice one, Kendle! This may be the most constructive thread in the entire…er…loom that is the forum of…umm…Anyhow, great work: have a banana! :banana:


(Maximus191) #12

Don’t forget cham skins :o


(Kendle) #13

Cheers Max, I’ve put that under Ballhacks and Skins.


(Maximus191) #14

A rather ironic ballhack…


(Depth_Charge) #15

Is that real?


(meLonF) #16

great work kendle :drink:

couple of things might be worth adding:

Wallhacks: If you are a server admin you can set PB to take screenshots of any clients machine. These will draw exactly what is shown on the clients screen, therefore any use of a wallhack will be clearly shown (see example screenshots in kendles post, under wallhack).
** Note ** many newer hacks supposedly interfere with PB’s ability to take screenshots and all screenshots will be plain black screens. If you find a user who only returns black PB screen shots it would suggest (but would not be absolute proof) that a user is using a ‘multihack’ with this feature

Damage Hacks: edited see better explaination in my next post


(mouse) #17

worth adding maybe:

detected cheating in leagues:

http://www.clanbase.com/news_league.php?nid=137981&mid=0&lid=1534
http://www.clanbase.com/news_league.php?nid=137691&mid=0&lid=1534
http://www.clanbase.com/news_league.php?nid=136913&mid=0&lid=1528
http://www.swertcw.com/default.php?c=news&p=view&id=3195

(last 2 rtcw)

Damage Hacks: Players are immune from damage when they are behind a recently revived player. Dynamite and other objects can sometimes ‘shield’ a player from damage due to the screwy hitboxes (can provide a demo if needed)

I do not understand why you call it a hack. Its a feature (behind revived) / bug (behind dyna?).


(RAV3N) #18

thats the punkbuster screenshot thing and cheaters dont use the blocker thing anymore as it is defined as hacking pb’s normal actions which results in a global hardware ban so now ppl who makes cheats dont add that function as a lot of cheaters are to worried about getting caught with it.


(Kendle) #19

Most suggestions taken into account and the original post edited. Feel free to comment on wording etc as I’m not sure I’ve explained everything as clearly as I could have. Plus I’ve undoubtedly still missed stuff.

Keep it up guys, let’s get the full facts about cheating into the open and dispel the myths about it so we can all get on and just play the damn game.


(meLonF) #20

I do not understand why you call it a hack. Its a feature (behind revived) / bug (behind dyna?).

i suspect i didn’t word it right :frowning:

This is (obviously) not a hack, it is simply a feature of the game that is cleverly used by players. However, to a newer player it can look as though you are shooting them but doing no damage … this inevitably results in accusations of cheating. Explaination below:

When a player is revied, they are immune from damange for a second or two while the player animation shows the player returning to a standing position. This is a normal feature of the game. A good medic will use this immune character to ‘shield’ themselves from enemy fire after reviving the player. Due to the revived players ‘immunity’ (and the inconsistancy of the hitboxes vs character animations) it can look like you are shooting the medic, but in reality you are dealing no damage (and getting no hitsounds). Whilst this may look like some sort of invaunerability hack, it is not.

hopefully that one makes more sense