Riskable

Father, Hacker (Information Security Professional), Open Source Software Developer, Inventor, and 3D printing enthusiast

  • 34 Posts
  • 1.14K Comments
Joined 1 year ago
cake
Cake day: June 23rd, 2023

help-circle





  • RiskabletoPC Gaming@lemmy.caEpic Games Sues Fortnite Tournament Cheater
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    5
    ·
    2 days ago

    It is impossible to do these types of checks on serverside.

    If the client can make a determination as to whether or not to draw a player the server can too (and refuse to send those packets). It’s not impossible, just more computationally intensive and thus, more expensive (on the server side of things).

    Naive way: Render exactly what the player will see on the server. Do this for every client and only send the data to the client if the another player enters the view.

    More intelligent way: Keep track of the position and field of view of each player and do a single calculation to determine if that player can see another. If not, don’t send the packets. It will require some predictions but that’s no different than regular, modern game-specific network programming which already has to do that.

    Servers these days have zillions of cores. It really isn’t too much to ask to dedicate a thread per player to do this kind of thing. It just means that instead of one server being able to handle say, 500 simultaneous players you can only handle say, 100-250 (depending on the demands of your game).

    If your players host their own servers then it’s really no big deal at all! Plenty of cores for their personal matches with their friends or randos from the Internet. If you’re a big company with a game like Fortnite then it’s a huge burden compared to the low-effort system currently in place.



  • This suggests we may need to put in extra effort to take responsibility for our role in conflicts, show greater empathy for others’ values and perspectives

    Hah! That’s pretty much exactly what I’ve said to my (right wing) relatives on a number of occasions but it doesn’t work. Does the author not realize that this perspective is very liberal?

    Liberals and progressives are the folks with empathy that can’t fathom how anyone could vote for Donald Trump; a well-known grifter, actual criminal, tax cheat, and total scumbag who cheated on all of his wives.

    I have a ton of empathy yet I still don’t understand conservatives. The only thing that makes sense to me is that they’re authoritarian and their chosen authority tells them to hate certain people, that any given thing is a conspiracy, and that no government-run program is ever a good thing. But to tell them that to their faces is like telling them that they’re stupid and suckers. To them it’s incredibly insulting.

    Yet when you try to figure out how they (someone who lives off Social Security) came to believe that, “Mexicans are stealing our jobs” it’s the only thing that makes sense. They really are suckers. They may have been “smart” at some point in their life but not anymore. They choose how to vote based on anger at imaginary enemies and fake news.


  • RiskabletoPC Gaming@lemmy.caEpic Games Sues Fortnite Tournament Cheater
    link
    fedilink
    English
    arrow-up
    50
    arrow-down
    8
    ·
    3 days ago

    Excellent defense: “You sent me the packets revealing where all the other players were. If you didn’t want me to know they were behind walls why did you tell me precisely where they were?”

    Yeah, doing such checks on the server side of things is more computationally intensive but it would solve that problem entirely and you wouldn’t need client-side anti-cheat bullshit anymore.

    The first rule of network programming is never trust the client. How does anti-cheat software work? By trusting the client.



  • It’s rapidly becoming worse than that. Soon it will be:

    Laws only apply to non-conservatives/non-Republicans.

    It’s the Nazi playbook. It will start by ignoring the law when it comes to smaller minority groups like LGBTQ people, immigrants, etc but it will expand to include anyone who isn’t an adherent to the ruling party’s ethos and ultimately anyone who doesn’t bow their head/pay a bribe to the correct political authority.

    Right now Republicans are mostly playing by the rules by passing laws that only punish their “out” groups/scapegoats but eventually that won’t be good enough.



  • Even worse: It’s a compliance nightmare!

    Classified information leaking in this way is a one-off situation that might get an individual in trouble. If someone at a heavily-regulated company uploads the wrong thing though, that can cause major disruptions to commercial services while the regulators investigate. Not just fines or prosecutions after-the-fact!

    Here’s why it’s a big deal: Nearly every organization allows employees to use google.com. That necessitates allowing POSTs to google.com and from a filtering perspective it makes it nearly impossible to prevent. The best you can do is limit the POST size.

    Having said that, search forms in general always pose a 3rd party information disclosure risk but when you enable uploading of entire files instead of just limited text prompts you increase the risk surface by an order of magnitude.