[cod] COD4: 2 players with same guid (hack?)

Andre Lorbach alorbach at ro1.adiscon.com
Mon Mar 3 08:40:00 EST 2008


Punkbuster uses it's own engine to create GUIDs from the cdkey as I
believe. Compare the GUIDs in the gamelog, see if they differ there,
too. If yes I might be wrong ;)

--
Regards,
Andre


> -----Original Message-----
> From: csmith [mailto:cod4 at divzero.net]
> Sent: Monday, March 03, 2008 1:55 PM
> To: cod at icculus.org
> Subject: Re: [cod] COD4: 2 players with same guid (hack?)
> 
> I do not believe this to be correct. My wife and I have separate CD
keys
> and play together all the time. both status and pb_sv_plist on my
server
> (which is not on our LAN) shows the same IP address with different
GUIDs.
> 
> Andre Lorbach wrote:
> > I know what a GUID is supposed to be and what an IP address is!
> >
> > An example will explain what I meant in the first place, lets take
the 2
> > brothers sample:
> > BrotherA connects to the a cod4 server and gets the GUID
> > 549f8ire98hfji5490htfjoi590gf9i04. The auth server stores the IP and
> > GUID and caches this information as I believe for at least 10
minutes.
> > Now BrotherB connects to a Cod4 Server, the master server sees the
IP of
> > BrotherB which is the same as BrotherA, and assigns the cached GUID
to
> > BrotherB which is 549f8ire98hfji5490htfjoi590gf9i04. BrotherA and
> > BrotherB play with the same GUID, but having different cdkeys.
> >
> > I believe this is how it works since Cod2.
> >
> > Regards,
> > Andre
> >
> >
> >
> >> -----Original Message-----
> >> From: Ronny Schedel [mailto:info at ronny-schedel.de]
> >> Sent: Monday, March 03, 2008 11:05 AM
> >> To: cod at icculus.org
> >> Subject: Re: [cod] COD4: 2 players with same guid (hack?)
> >>
> >> It's not working in this way.
> >>
> >> guid = global unique identifier
> >>
> >> An IP is not global unique and cannot be used as guid. The CD key
is a
> >> global unique and is used. We have a statistic system running,
which
> >>
> > relies
> >
> >> on guids. I have also a dynamic IP address, but my guid remains
always
> >>
> > the
> >
> >> same, because the guid depends from the CD key. If two people have
the
> >>
> > same
> >
> >> guid, then they have the same CD key.
> >>
> >> Best regards
> >>
> >> Ronny Schedel
> >>
> >> ----- Original Message -----
> >> From: "Andre Lorbach" <alorbach at ro1.adiscon.com>
> >> To: <cod at icculus.org>
> >> Sent: Monday, March 03, 2008 10:38 AM
> >> Subject: RE: [cod] COD4: 2 players with same guid (hack?)
> >>
> >>
> >> The master server is caching the Guids based on IP, people playing
> >>
> > from
> >
> >> the same location (typically like brothers in LAN) often have the
same
> >> GUID, but use different cdkeys! I believe them game is forcing
> >> pb_sv_guidrelax 7 because of this.
> >>
> >> And there are also other issues which can happen because of this
kind
> >>
> > of
> >
> >> caching behavior, I have seen this one at least ONCE. Let me
explain
> >> what happened...
> >>
> >> A clanm8 came to me and told me he got kicked for GLOBAL BAN once,
but
> >> never again then.
> >> So I searched the logfiles and saw that his GUID was different for
> >>
> > this
> >
> >> one time when he got kicked.
> >> He told me he did not change his cdkey, and I believe him because
it
> >> doesn't make sense to change your key to a banned one, and change
it
> >> back then.
> >>
> >> So here is what I think happened, and you must know that in germany
we
> >> usually have a forced disconnect every 24hours where we get a new
IP
> >> assigned. IP's are rare, so it is very usual to get an IP somebody
> >>
> > else
> >
> >> wasusing 5 minutes ago. Somebody with a Global banned key tried to
> >>
> > play
> >
> >> Cod4 minutes ago, then got a disconnect. My m8 had the disconnect a
> >>
> > few
> >
> >> minutes after this, and obtains the IP from the global banned
player.
> >>
> > My
> >
> >> clanm8 connects to a server, and the master auth server uses the
> >>
> > cached
> >
> >> (and banned) GUID for my clanm8.
> >>
> >> It's a very rare condition but not impossible to happen.
> >>
> >> Best regards,
> >> Andre
> >>
> >>
> >>
> >>> -----Original Message-----
> >>> From: Ronny Schedel [mailto:info at ronny-schedel.de]
> >>> Sent: Sunday, March 02, 2008 5:02 PM
> >>> To: cod at icculus.org
> >>> Subject: [cod] COD4: 2 players with same guid (hack?)
> >>>
> >>> Hello,
> >>>
> >>> today we had 2 players with the same guid on our COD4 server. Is
it
> >>>
> > a
> >
> >> hack?
> >>
> >>> Can we prevent this server side?
> >>>
> >>> Best regards
> >>>
> >>> Ronny Schedel
> >>>
> >>>
> >>> ---
> >>> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> >>> Mailing list archives:
http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
> >>>
> >>>
> >> ---
> >> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> >> Mailing list archives:
http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
> >>
> >>
> >>
> >> ---
> >> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> >> Mailing list archives:
http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
> >>
> >>
> >
> >
> > ---
> > To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> > Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
> >
> >
> >
> 
> ---
> To unsubscribe, send a blank email to cod-unsubscribe at icculus.org
> Mailing list archives: http://icculus.org/cgi-bin/ezmlm/ezmlm-cgi?38
> 




More information about the Cod mailing list