the new kong api -- detection of aob edits
-migrated-
the new kong api -- detection of aob edits Posted on: 09/21/2010 3:28am
Quote Post
i have a question about the new kongregate api i ve seen lately

i am wondering if it has something that can actually detect whether or not you use aob edits in your game? i dont know what they edited but i am sure it can catch cheats more easily what do you think?
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 4:58am
Quote Post
When you change, AoBs, you basically edit the internal loaded memory that the flash file takes up on your computer. It's not detectable by Kongregate directly, though there is a chance that the (noob) hacker messes up the AoB and either a) breaks the program or b) the program is smart and detects the AoB change and reports it to Kongregate. Though I'm not sure if flash can do checksums on its internal memory space..... anyone?
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 5:24am
Quote Post
System Bot
Quote from: "texanpride"
i have a question about the new kongregate api i ve seen lately

i am wondering if it has something that can actually detect whether or not you use aob edits in your game? i dont know what they edited but i am sure it can catch cheats more easily what do you think?
How should the API be able to detect it? Besides, how would you come on that idea, did any of the AoBs not work for you? The new API is out a bit longer and I had no problem using any AoB whatsoever. The problem has to be on  your side.

This post was imported from an account that no longer exists!
Previous Name: phreneticus
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 10:35am
Quote Post
( ͡° ͜ʖ ͡°)
Idiots used the AoBs to get an impossible score and got caught.



Flash .sol locations
Chrome: \AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\
Normal: \AppData\Roaming\Macromedia\Flash Player\#SharedObjects

Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 7:34pm
Quote Post
I may be completely wrong, but I think that it is possible to do something that detects code changes. Maybe some checksum or something. I think I saw something like that on Caesary, but I don't know if that only works for server-sided games
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 7:39pm
Quote Post
System Bot
Quote from: "whatever"
I may be completely wrong, but I think that it is possible to do something that detects code changes. Maybe some checksum or something. I think I saw something like that on Caesary, but I don't know if that only works for server-sided games
I only know that a system like this exists for .sol files. Matt for example used it in EBF3.

This post was imported from an account that no longer exists!
Previous Name: phreneticus
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 7:48pm
Quote Post
Here you go, the answer for all your questions, and it ain't 42.

Haven't read any of it, but I think the title says pretty much:
ST7 checksum selfchecking capability
Re: the new kong api -- detection of aob edits Posted on: 09/21/2010 8:53pm
Quote Post
TIM the Enchanter
Level: 1
ADR Info
The API is just a transport method, nothing more, nothing less.  After working with Kong on the security, they stated that they know people are hacking but don't feel the need to do anything about it.  They have no way of tracking anything, as you are editing your local memory.  The API is just a channel for the game to communicate with Kong's servers, not some anti-hack stuff...




Everything's coming up KongHack!

"When you know nothing matters, the universe is yours" ~Rick Sanchez

Re: the new kong api -- detection of aob edits Posted on: 09/23/2010 12:41am
Quote Post
Quote from: "Bazaku"
When you change, AoBs, you basically edit the internal loaded memory that the flash file takes up on your computer. It's not detectable by Kongregate directly, though there is a chance that the (noob) hacker messes up the AoB and either a) breaks the program or b) the program is smart and detects the AoB change and reports it to Kongregate. Though I'm not sure if flash can do checksums on its internal memory space..... anyone?

By using something simple like tamperdata, you can see the communication with server, and see that the server is mainly just doing stayalive checks with the chat/login server. As far as I can tell, there's no active checks of data, thus any checks would have to be in flash.

Certain game makers add a value 2-3 times, if just one of them is changed, it checks against the others, and reports to the server. Also, certain game makers have a check based on how much you could have earned by that point, ie having 2 billion gold when most you could have earned is in the thousands.

Kong overall does not fully support games reporting hackers, in the event that some dick wants to program a game to detect your user name, and ban all the people he doesn't like. (its already proven you can import user name) So they take any reports of a user with a grain of salt....
Re: the new kong api -- detection of aob edits Posted on: 09/23/2010 5:27am
Quote Post
System Bot
Quote from: "odie"
Certain game makers add a value 2-3 times, if just one of them is changed, it checks against the others, and reports to the server. Also, certain game makers have a check based on how much you could have earned by that point, ie having 2 billion gold when most you could have earned is in the thousands.
That only works for server-sided games and 99% of Kong games are not server-sided.

This post was imported from an account that no longer exists!
Previous Name: phreneticus
Re: the new kong api -- detection of aob edits Posted on: 09/23/2010 7:26pm
Quote Post
I take it everyone just ignored the link I posted...
Then again, I doubt any game on Kong does that
Re: the new kong api -- detection of aob edits Posted on: 09/24/2010 1:01am
Quote Post
TIM the Enchanter
Level: 1
ADR Info
Kong doesn't use that bud.  (broken image removed)




Everything's coming up KongHack!

"When you know nothing matters, the universe is yours" ~Rick Sanchez

Re: the new kong api -- detection of aob edits Posted on: 09/24/2010 2:02am
Quote Post
I'm not saying Kong itself uses it. Just said that one random developer might use that(though I find that hard to believe)
Re: the new kong api -- detection of aob edits Posted on: 09/24/2010 2:52pm
Quote Post
Quote from: "whatever"
I'm not saying Kong itself uses it. Just said that one random developer might use that(though I find that hard to believe)

It'd be pretty useless if they do: thats designed for checksumming flash memory cards :-)

You could write some flavour of checksum/hash that checks the code regularly and reports an error if it fails, of course, this'd be like berzerker studio's any hacker stuff which is easily disabled by an AoB.
Re: the new kong api -- detection of aob edits Posted on: 09/24/2010 6:41pm
Quote Post
Even if you included something like that, the checking code itself is still open to exploitation; That's just the nature of having an open format like Flash/ActionScript.