CF Anti Hacking Measures - Z8Games Hates hackers too!

Hello CF Community!

Update - January 2013
http://forum.z8games.com/showthread.php?t=237936


Updated - October 19th.
We would like to make an announcement that we have introduced an update to our game and X-Trap that specifically attacks a type of hack that has been a major problem in all versions of CF for the last 3-6 weeks.

This solution, like all anti hacking measures is a fluid process, but we are confident that it is doing it's job against this latest parasite and should help to improve the situation.


As always, we continue to work with the developers, and X-Trap on a daily basis to battle the situation in the game with hackers and also remove and ban as many hackers per day as possible.
Recently we have noticed a lot of threads on our Community Forums with regards to the hacking situation within Cross Fire. Once again we come here to commune with everyone and discuss the situation together!

We continue to say the same message to our users. That we are doing everything within our ability and power to remove as many hackers from the game as possible. But in this post we'll try to provide you with a little window into our operation and give you some idea on what exactly we do against hackers.

Please feel free to read all of this thread and discuss it here. Flames will be removed and ignored. And please realize that there is no conspiracy here. We do not make money from hacking, we do not distribute hacks, we are fully against hackers within our game. Hopefully after reading this you will be better informed of the situation.

The Situation

Hackers exist in our game. No one wants to admit it, but there it is. The main problem however is that no one knows for sure how many hackers there are. Not everyone with a positive kill/death ratio is going to be a hacker. And this is where the main problem with all of this lies.

We would love to remove 100% of the hackers from our game. But since that situation is very difficult the best we can do is strive towards that goal. To continue to do what we do to make the game better. But no matter how many hackers we remove we are trapped under the mentality of the community. The perceived notion that everyone good hacks is something we have a difficult time changing.

Hacking exists in ALL games however. Just because you didn't see someone who plays Call of Duty hacking, doesn't mean you can't find hacks for that game. Not to mention all the people downloading and playing that game illegally (ie not purchasing it), hacking and piracy in video games is something every company has to deal with.

However these larger games with massive development studios and huge companies and publishers and dollars back them up means they can work with the latest technologies for their games. It's a simple fact that Unreal or Crysis engines are harder to "hack" than the engines used in older games.

One of the reasons Cross Fire is so popular is because it is so accessible. The core gameplay (take a classic pro game of search and destroy) is simple and functional and fun to play. And the fact that the game is based on an older engine means it can reach a wider audience. Not everyone in the world is screaming on a quad core pc with dual 30 inch 3d monitors and HD surround sound. Cross Fire plays on those machines too, but it's designed to reach the maximum amount of people. This is how free to play games operate.

While we're talking about the general situation I will also add that it will always be better preventing hacking from coming in to the game than banning a hacker.

Regardless of the population or the people or the mentality, if we ban a hacker for 30 days and then we eliminate those hacks from coming back in and the user comes back and doesn't use hacks again then we've done a positive to the game. While this isn't always the case, it just reinforces the fact that we need to stop hacks from coming in to the game. As you'll soon find out we get overwhelmed with reports, so removing the user is not always the best solution.

And lastly, in general people make up numbers all the time. 9 out of 10 people make up statistics that 85% of the people believe. (see what I did there?) No one knows exact numbers for anything. The free to play industry is very competitive, we do not release exact numbers for a reason. When dealing with hackers however the last thing we want to do is release information that could be used against us. We understand this is frustrating and we ask for a leap of faith in this aspect. But try not to jump on the statistics bandwagon, because most of the time its completely fabricated.

So this means that the situation is this; We see hackers we eliminate hackers. We can't recode the game on some amazing "end all hacking" update, however this is not stopping us from working with our resources (including the developers) to remove as many hacks from coming in to the game.

What We're Doing

So this brings us to the section where we can discuss what we do against hackers on a daily basis.

Seek out and Find Hacks
We constantly search the internet for hacks. We have a huge list of all the very well known hack sites that we infiltrate and download and test as many hacks as possible. This is our primary way of removing hacks from the game. When a hack gets downloaded it gets tested and sent to the appropriate people. X-Trap and Smilegate. From there these guys code the appropriate blocks into the program to prevent them from entering in the game, or in other cases get them detected so the autoban system picks them up.

It should also be noted that we have our own resources and communications with others for these types of hacks too. The mods and known community gamers provide us with valuable information on where hacks come from, what kinds do what, what to look out for, emerging threats etc.

All in all it goes into a system of daily checks for the latest attempts to ruin your gaming experience. These efforts go directly to people like X-Trap and are directly involved in the recent major updates you've seen to X-Trap.

Working with X-Trap

X-Trap has recently had a major update which has changed the way the program works and has now managed to catch a vast majority of the hacks within the game. We have seen a significant reduction in the number of hacking reports, incidents, available hacks and hackers in game.

X-Trap currently detects well over 300 hack programs. Now obviously this includes outdated hack programs as there are definitely not 300 active hack programs available. However this works out to a new detection every couple of days over the course of the modern xtrap implementation. Just on this fact we can see that they are doing an impressive job to stop hacks from entering in to Cross Fire.

Also, from these hacks that we find they get broken down into a code level where we know exactly which hack you are using when you get detected. This is how we are 100% confident in our auto ban system. When xtrap was first implemented we were banning for hacking but the confidence level was not at its fullest because often times it was difficult to see the type of hack being used. This is no longer the case (and has been for a while). When the auto ban picks up a hack it knows exactly whats being used and issues the kick and the ban for using it.

It should also be said that hackers are not always the smartest people and that often time picking up one hack will pick up multiple ones because people redistribute and rename a specific hack, but the functions don't change and it still gets picked up.

Auto Banning Hackers
This brings us to the auto ban section. As discussed we pick up from a list of hundreds (and growing) hacks. Auto bans are treated as hackers 100% as the auto ban system doesn't make mistakes. However with the nature of the system it works better for us to increment the bans. Especially with the amount of people that fall to account scams, yes it is their responsibility, but some leniency must be given in this respect.

Before you start moaning about the auto ban system, take someone who actually hacks in the game 100% of the time.

The first detection they get banned for 3 days. Then they come back and hack again. Then they get banned for 7 days. Then they come back and they get detected again (this is getting funny now because they surely are using the same hack they got detected on! something we laugh at all the time), we're up to 30 days now and the next ban will become permanent.

After it's all said and done their total playing time for the game is something under 10 minutes of game time in 40 days (over a month!). So if the guy keeps hacking he's barely played the game and he's going to end up with the same result as if he was permanently banned!

The Autoban system picks up way more hackers and bans than purely watching reports do. While we can't give out the number exactly, the system picks up somewhere between 80-90% of the hackers in the game. It should be noted though that of the game population less than 5% actually hack. Even less now with the recent X-Trap update.

Reviewing reports
We get a lot of reports. Period. On a good day (low hacking) on a weekend we might get somewhere around 500 reports.

Sorting these reports out means we have to run filters on them. This is some of the stuff we do to get down to a legitimate report.
First check to see if the information in the report is accurate. Did they upload a replay, is there any additional information, did they get the character name correct (we realize this puts 'work' on your part but getting the name right with a bit of information goes a long way to getting the report done faster).
Then we do things like look to see how many times the user has been reported, the dates they were reported from, then we have to look here for abuse as a lot of clans feel that if one person sees a hacker then they must get all 100 people in the clan to submit the same replay of the same hacker. This is 100 reports we don't need.
Then we have to check to see if the account has been picked up by the auto ban system, and where along in the auto ban sequence they are (ie permanently banned or not etc).
Now we're getting to a point where we have a tangible report/replay to watch and it's the GMs turn to review the case.
Duplicate reports, wrong reports, reports not being actual hackers etc all adds up to one of the most tedious jobs our team does.

We take these reports seriously because we want the game to be legitimate, but we also want to take this professionally. We are not in the business of issuing a ban because so-and-so says so. When we ban a user we want to be confident that we've made the right decision so that if someone complains we can say; "No, we have reviewed this, you were hacking end of story."

Now having said all this, we are currently working on a backlog of bans and will be issuing some large scale bans on a lot of reports that we have been reviewing. We are investigating hacking trends and will be doing a large scale ban of a few thousand accounts this week. This kind of large scale anti-hacking movement doesn't happen often but in this case, coupled with the new X-Trap changes we are approaching a level within the game where hackers are a less of a problem and we've been able to look at some old reports to get them handled.

Lost Accounts
The next largest regular issue we deal with in Cross Fire is the issue of "hacked accounts". Accounts do not get hacked. It's a simple truth. If accounts get hacked in the traditional sense, my game account would have been hacked years ago since it has all the weapons and I'm sure a hacker would love to play on a GM account!

Think about that logically. No one can get my account security information because I haven't told anyone. People are not secure enough with the simple things on their account. Their Login ID, Security Answer, Registered Email are all things you need to keep to yourself. We go through hoops to make it as difficult as possible to change your information. However if you go a fake website and drop down all your info trying to get free ZP you are going to lose your account. Period.

No website will give you free weapons, free zp or anything else for free. If you try to sell your account, if you give your info to your brother, if you download a keylogged hack program. These are all things that can cause you to lose your account.

Those people are stealing your accounts to hack on them. They don't have any other reason to have it. And if the account gets hacked and detected then you're not gonna get the account back. THIS IS THE TRUTH. You are responsible for your account security, therefore when you lose your account and someone hacks on it we have to punish the account. We can't reach through the internet and slap the hacker and give you a pat on the back for admitting you fell for a scam. It's just not going to happen, the account hacked in our game and we issued a ban (auto or not). You're done. Don't fall for a scam. This is a serious problem and you have to take it seriously when you make a Z8Games account.

Every day we get hundreds of support requests for lost accounts. This is just how bad the problem is. You must be more secure with your information. The less time we have to spend proving who owns an account means we can spend more time banning the real hackers.


Misconceptions

At this point we would like to clear up a couple of misconceptions that some people seem to have.

"We do not sell or develop hacks." This makes no sense and is a completely ludicrous notion. It's also insulting to our GM team who spends their time each day banning hackers, finding hacks and doing everything described above.

"We do ban hackers." This is also another ludicrous notion that we don't ban hackers. We're very sorry it seems that the person you reported was caught hacking again in another game you were in. This could mean a few things:
1) They were picked up by the auto ban system and the ban expired and they are no longer hacking
2) They were never hacking in the first place
3) We haven't got to your report yet

There is no limitation to who we ban. We've banned everyone from high level players to high level spenders to level 0's who have only played for 5 minutes. Whether the person was picked up by the auto ban system or manually we've banned em all! And while the backlog of reports does pile up, we get to them and hackers can't escape.

We are confident in our GM team to review replays and issue appropriate bans. They all play the game on a daily basis and they know how to spot hackers and have no tolerance for them. The fact that some people believe we don't ban hackers is such an insulting false notion.


In the End

What does this boil down to? It boils down to our dedicated team of GMs and staff here that are constantly working in the interests of you and the game. We work with the developers, with XTrap and with the community to remove as many hackers as possible.

You may have noticed a reduction in hacking. Which is a direct result of the work we're doing, but that doesn't mean we're done. We're going to continue to review replays and remove hackers and continue to bolster our auto ban system to make sure it's working at the best efficiency.

Our goal is to get to the point where the community mentality changes. We need the good people of this community to recognize the efforts we do, and see them in game. They can help spread the word that we really are making the game a better place. The misconception that the game is filled with hackers when it really isn't needs to stop. But we need to continue to do our best to remove as many hackers as possible.

Stick with us, it's only going to get better!
«13456745

Comments

  • Great summary of the GM's, X-Trap and SmileGate's job, thanks for the head's up.

    It is true that there has been a lot less hacking in game since the recent patches.
    I think most of us don't realize just how much you guys work on this issue, and I wanna thank you for your work, keep it up!
  • This community needs more patience. Knowing there are people dedicating to combat hack, some people still decide to moan and whine in ignorant. Hack will always exist, as long as there are more people making hack than staff working to erase hack (Xtrap).
  • This thread was a long time coming... Thank you
  • Aff, will take forever to read.....

    Just ~20 minutes.
    But it's true, the size of Saidin's post will discourage a lot of people from reading it especially players seeing hackers everywhere and keep complaining, although this thread is directed to them.
  • Just ~20 minutes.
    But it's true, the size of Saidin's post will discourage a lot of people from reading it especially players seeing hackers everywhere and keep complaining, although this thread is directed to them.

    The short form:

    We ban hackers.

    Is all over the boards in a million posts already. I should have added that to our daily duties; come to forums and answer obligatory post about us not banning hackers.
  • All I have to say is keep up the good work.
  • I read the whole thing. And I've always said to people that hacking isn't something that can be dealt with easily.

    Yeah maybe it is very difficult to take care of, but with a good enough dedicated team, they should get the job done.

    Also, the reason why I never say stuff like ''Oh Z8 can't ban these hackers cause they have a bad team'' or however you want to put it, is cause I've never really been behind the scenes, and I'm pretty sure most people haven't either.

    Which brings me to the fact that, you guys just keep trying and we'll keep reporting =)
  • so much stuff to quote :'D

    <3 you guys!!!

    and yeah, you all do an awesome job, and it seems only the minority//people who arent forumers don't realise this fact...

    keep it up, and thanks for the update!!
  • I have a Question If there the possibility to ban the IP adress from the players who are using hacks??? , i think this gonna end with the hackers. PD: thx for the code Saidin :D
  • X_MooN wrote: »
    I have a Question If there the possibility to ban the IP adress from the players who are using hacks??? , i think this gonna end with the hackers. PD: thx for the code Saidin :D

    G4 already IP bans, which doesn't stop people from hacking since IPs can be changed very easily.
  • Since you are 100% confident of the auto-ban system, there is no reason that it shouldn't ban hackers permanently on first strike. Hacking means disloyalty to the game, and kids need to learn the consequences.

    10 second of shooting through wall really does ruin our gaming experience.
  • Thank you for the information and the code! :)
  • Everything seems fine right here, except that I think that a 3-day, 7-day temp-bans are a joke, hackers should be scared of getting instant perm-banned, not just a simple "I'am going to take a break for 3 days and hack again"...

    Good post.
  • LawLinFace wrote: »
    Since you are 100% confident of the auto-ban system, there is no reason that it shouldn't ban hackers permanently on first strike. Hacking means disloyalty to the game, and kids need to learn the consequences.

    10 second of shooting through wall really does ruin our gaming experience.

    And not only that man our K/D Always when a hack enter in our room we finish with K/D negative and we was positive D: ....
  • Lol finally finished reading it, but anyways I agree a 100% with what you said saidin, its true that people get their accounts hacked because they gave a hacker there info, I know how it feels like for a person whose reading this saying "omg my account got hacked and this kid isn't blaming z8" so you know what? my account got hacked 1 and a half years ago when i didnt know anything and i gave my account info because i got pressured in and he hacked it and screwed up my clan.
  • All your actions to stop the hacking so far have been reactive.
    If you really wanted to stop it or at the very least severely lower it then you need to make a proactive approach. Attack it at the source.

    X-trap stops known hacks, but it needs to know the hack before it can stop it. And it can only know it after it has been used unrestricted.

    Support bans players that are reported for hacks, the ones X-trap missed. But lacks the man power to get through all the reports quickly enough to matter. Most hackers will be banned by X-trap sooner then support gets to them.

    In game vote kick is supposed to give players the ability to remove hackers from their games, but the majority of players use it simply as a tool to win. Many refuse to remove hackers on their team because they want them their.

    All reactive responses.



    The biggest reason for people to resort to hacking here is because of their ping.
    High ping makes it much harder to play well and win in this game, it is also less fun to play with, and it can make other players appear to be cheating.

    The 3 most common reasons to hack.
    1. Wants to win.
    2. Wants to have fun.
    3. Thinks/sees all others hacking and joins in.

    High ping affects all of these, it is the biggest cause of hacking in this game.

    True that all games have hackers, but I have NEVER played a online game where the problem is anywhere near this BAD. Over the dozens of F2P MMO's I've played over the years, this one by far has a way more hacker percent then any other.
  • VATAV wrote: »
    True that all games have hackers, but I have NEVER played a online game where the problem is anywhere near this BAD. Over the dozens of F2P MMO's I've played over the years, this one by far has a way more hacker percent then any other.

    Combat arms .
  • I read the whole thing, and I feel like it was informative. You guys do a lot of work to help ban hackers, and some people are just too thick skulled to realize that. A large roll still does fall on the players, and I'm glad you made a point of mentioning that.
  • Thank you, [Gm]Saidin for (hopefully) clarifying that the misconceptions in everyone's minds are wrong. Also, I now have a thread I can refer to on the new hacking complaint threads :D
  • A whole bunch of interesting numbers although you didn't want to mention a single one ;)

    Well, I really like posts like this. It shows that you work close to the community. There should be more like them especially on other issues (like the ping problems).

    But what I really wonder at the short duration of the autobans. I mean you got this perfect system (100% correct bans is what you said) but you don't ban them permanently? Okay, there are these "hacked" guys who would moan a little but what about a simple two strikes system?

    Then again you say that it is very unlikely that you see the same hackers again a second time. Well then there seems to be a whole clan that is able to totally ignore the ban system.

    P.S.
    Thank you for the code ;)
  • [GM]Saidin wrote: »
    What We're Doing
    Working with X-Trap[/COLOR]
    Just on this fact we can see that they are doing an impressive job to stop hacks from entering in to Cross Fire.

    I have noticed that, many hackers left the game before I can persuade someone to start a vote. Nice job z8 and xtrap.
    [GM]Saidin wrote: »
    Auto Banning Hackers
    I am not sure how the auto banning system detects hackers, but I would not think it is a good idea to interlace with xtrap. X-Trap is like the virus database detection, after a virus start to harm, they are find the way to fix. I wish the auto banning system more adaptive -- a segment of code to simulate human reviewers might be good enough to handle most of the hackers. If this failed, report and ban would not work also.
    [GM]Saidin wrote: »
    Reviewing reports
    I think the report system can be improved by recording the players' hacker report performance. In another word, how many reports they made (a reflection of attitude), and how many percentage are correct (the ability they make a correct judgement). This can be recorded as scores. A players with higher scores have higher priority in reporting system, when the system are busy; and they can weight more in hacking/illegal program kicking. Also I think report should be limited to the 1 week after the accident happens. So you need several more fields in players database, total score, #reports, #correct reports. And check if others are reported under the same player name. When vote kick takes this into account, more likely a hacker would be kicked very quickly.

    In this way, you can also estimate how many hackers are found each week.

    Also, please consider to add a respawn/ready button, to prevent hackers from having fun when the system failed to catch them.
    [GM]Saidin wrote: »
    Lost Accounts
    I believe if someone said his account is stolen, either he has hacked and banned or is just too childish to trust free zp stuff. However, when someone can not remember the password because of not playing with it for a long time, there should be a way to recover the password. Otherwise, there would be lots of dead account out there.
    [GM]Saidin wrote: »
    "We do not sell or develop hacks."
    I think no need to explain this. But I had thought if some other game wanted to expel player to play their by provides hacks to ruin another one. At the beginning I saw hackers, I really don't understand their purpose.
    [GM]Saidin wrote: »
    "We do ban hackers."
    The complain is because of the speed of processing. Even though you have reasons, complainer are raging on some fact.
    [GM]Saidin wrote: »
    And while the backlog of reports does pile up, we get to them and hackers can't escape.
    After add evaluation of hacking report to players, I think you can throw away the backlog sometime (for example, when the autoban and xtrap create another golden period for the players, everyone will be happy). Make an announcement, encourage players to report hackers in time (7 days limit) and build up their reputation. Hook this reputation with ribbons, honors, or what ever attractive to the player base. Create a program to merge reports based on the game (room id and time) and players, and pick up the proper time slots, so that reviewer has less repeat work.

    Once the system build up, improve it by forcing vote kick for hacker to send reports. You will see less complain about kicked for being good in the forum.
    [GM]Saidin wrote: »
    In the End

    Again, good work based on the recent result. And still another old comments, you need to heat the players up to fight hackers. When the player base aligned in the attitude, hacker can rarely survive the vote kick, even without adding the weight of vote.
  • I think that most people appreciate the collective effort to contrast hacking. I certaintly do, as the game was virtually unplayable until recently, with dishonest players blatantly wallhacking and their teamates refusing to kick them, being afraid to lose to the opposing teams' hackers.

    A nice step in this direction would be to put under scrutiny the 10 top players. Just have a look: No10 has a K/D of 9.7, while No1 has a whopping 148.01!!!!!! :eek: In between there are K/Ds of around 20.

    It is about credibility and connecting form to substance: You cannot argue that you fight hacking and not be sure whether the top 10 players, advertised in a list on the news page, are crystal-clear.
  • Lovely, and actually public relations post about it from Z8 Games. +100 Respect, was waiting for this.
  • I think that most people appreciate the collective effort to contrast hacking. I certaintly do, as the game was virtually unplayable until recently, with dishonest players blatantly wallhacking and their teamates refusing to kick them, being afraid to lose to the opposing teams' hackers.

    A nice step in this direction would be to put under scrutiny the 10 top players. Just have a look: No10 has a K/D of 9.7, while No1 has a whopping 148.01!!!!!! :eek: In between there are K/Ds of around 20.

    It is about credibility and connecting form to substance: You cannot argue that you fight hacking and not be sure whether the top 10 players, advertised in a list on the news page, are crystal-clear.

    The top ten got there by farming (killing uncontrolled players to get EXP and kills).
    It rarely involves any deaths and easily gets KDRs into the hundreds.
    The top ten are organized based on EXP not skill.
  • VATAV wrote: »
    The top ten got there by farming (killing uncontrolled players to get EXP and kills).
    It rarely involves any deaths and easily gets KDRs into the hundreds.
    The top ten are organized based on EXP not skill.

    This ^^. I'm pretty sure most of them don't hack, but just have no lives. -.-