Quote:
Originally Posted by MarshallTM
VGK, EAC, BE and tarkov launcher all log your OS key
|
Quote:
Originally Posted by MarshallTM
Sure but legally not at all.
Anti cheats historically have never followed the right to be forgotten clause in the GDPR and unless challenged probably aren't even required todo so
I am not sure what you're referencing but logging an OS key would be 100% justified in the EU/US for an anti-cheat company.
|
BE's entire HWID is just checking \\Device\\Harddisk0 through deviceioncontrol and then verifying it against SMART_RCV_DRIVE_DATA. They don't grab any other HWID, leave any traces. Its a single disk drive serial, you can remove the diskdrive 0 from your machine and bypass their HWID. This is common knowledge. Battleye hasn't done a meaningful update in the past half a decade so idk why you are spouting such rubbish. Also why would anyone want your windows CD key when you have a good 30 hardware backed serials you can use that are in fact locked to physical hardware. Windows leaves a bunch of traces to lock your windows key to. They have a full offline DRM using files storing hardware information.
Server space doesn't grow on trees and backend engineers come in all shapes and colours, before you know it you end up paying absurd amounts to maintain your backend. Storage servers aren't local anymore, you use third party hosted (Normally AWS which is extortionate) databases on dedicated database servers. You then pay for AWS to scale your servers to which comes with an even more extortionate price tag as you horizontally scale a cross server database. Doing so also adds delay due to mutexs and scattered data. Utilised data is expensive to store but very valuable. At no point is any major AC throwing away your data or deleting it, People thinking your hwid bans expire due to GDPR have never worked backend. Your hwid expires because its moved onto a redundant storage machine. They will have dedicated servers for ploughing through database instances, seeing when data was last used, old banned data and if its old, unused or simply infrequently used; it gets moved onto a massive storage server. Having dedicated servers doing this, creates latency for your AC servers that need to go through the same data but its constantly being locked under mutex mid query. So when you are spending half a million a month on servers and backend engineers and someone comes up with this bright idea to store data that can be changed by changing a fucking registry key, i would expect them to get a message from HR about them getting sacked within the week. The actual retardation to store such unnecessary data. AI telemetric data is worth a whole load fucking more than another shitty hardware identifier. Storing stupid data costs a lot. The most valuable data will always be AI trainable data. Everything thats done in anti cheats of massive proportions such as EAC have to go through multiple dev teams and managers before it will ever get agreed on, storing stupid data will instantly get rejected. The anti cheat team can't just decide to add new things to the databases as so much other infrastructure will then need updating by the backend team and that needs layers of approval by none technical managers and team leaders.
The reward from collecting HWID is only as good as the algorithm that connects serials to accounts. BE just uses a diskdrive serial which makes it very simple, just ban someone with that disk serial if the disk serial was logged in on an account within the past year. When you are logging 30 hwids, you now have to start judging if someone just bought this component off facebook marketplace 2nd hand. The anti cheat needs to then go through all this data and start making judgements off of if its a sold part or someone evading bans. Theres a reason why vanguard historically let you play with banned disk serials if enough other stuff changed but EAC didn't. Better devs make better algorithms, doesn't matter how much you collect if theres a dev diff. The more indepth you want to scan and compare, the more you are going to hold up your threads. Resources are precious. EAC has to service 2.2 billion unique devices a month, they don't have time for suboptimal data and retarded devs.
Serials are checked for formats/manufacturer rules. Perm spoofers that leave your serials with default_string or other horseshit get you choked out when the AC then compares against other people with that same device that actually have hardware ids on the same device name. Then you get to automatically flag them as a known cheater as you know they ran some shitty firmware editor tool. You can't do that for windows keys since most people use KMS to activate; so the data holds little to no value at all. Anyone can edit them in registry, theres no value to it. THere is no "I got you editting this!!", its simply useless. You are better off using an identifier that has a dual purpose. These clueless kids selling perm spoofers really did fuck up the market with their pasted junk. When your entire userbase can get wiped out by checking if serials conform to standards is a meme. Just another datapoint for ACs to plot.
Thats enough of a lesson in backend engineeering for you. Your post history shows you constantly trying to undermine cheat devs. Larping when you clearly have no development background, lack the most basic knowledge on the most primitive anti cheat really isn't helping your case. Arguing with cheat devs seems to be your go to.
As you want to argue with people that correct you, how about you devirtualize the BE daisy binary? last time i checked it didn't even update to 3.10 yet. All VMP has done in the past 5 years is add basic MBA on their gates, only on 100% VM complexity, and the VM handlers now have their shitty operator substitution they put in their "mutation" and their awful junk bytes. The VMP 3.5.1 source leak gives you everything you need to lift all their VM obfuscation to then get bare VM handlers and gates and throw it back into VTIL. Their VM gate obfuscation is legit the same as the prototype one in the 3.5.1 leak. Its trivial to mitigate all their shitty new protections to get VTIL to work on it again, or simply just run it through mergen since it should still be on 3.8.1. You could also check UC but since you want to argue with people, you should check for yourself as you might not believe the countless reversals.