Bright skins list: detection, kicking...
 

Hello every1,

I'm working on a little proggy which scans the server's clients looking for some "neon" skins and then warns the admin and/or kicks the offending player. It has also some added features, like scanning private/public slots (it warns you if a public player is on a private slot or if a private player is using one of the public slots), protecting some skins (if you're on a clan people can download your skins to see you, but they can be kicked if they try to use them) and also it can send scheduled commands to the server (so that you can change the game type after some time, warn the players about those changes or server restarts or even quit the server, for example). I know some of this features will be included into the next autokick, but just I can wait biggrin:

Anyway, my main concern now is having the community feedback about the bright skins. I've already compiled a pretty large list of them, but I'm sure I'm missing a lot also. So, please, if you know of any neon or bright skins not listed here, please tell me the name (it would be great if you could post a pic or a download link, also!). And I would like to know your opinion about default winter skins being added to the list (when the server is not running Snowy Park). My current list is:

alig
ali_
allied_rodman_nike
allied_britney
german-ch33taz
allied_giant
allied_sabu
allied_flander
axis_flanders
allied_[lord]_snowtrooper
allied_home
axis_away
allied_garycoleman
allied_bluesoldier
german_red
german_redskull
allied_utigerlt
allied_the_human_target
allied_eddie
german_gayhitler
allied_nh
allied_kaitlyn
allied_marilyn_mannon
German-ax-ronald
German_spiderman
MickDude_spiderman
german_oompa
german_redstealth
allied_snakestealth
german_snakestealth
allied_snow
german_snow
german_worker_dead
axis_hans
axis_zombie
allied_grandmaster_flash
allied_lara_croft
german_fairy
german_hitler
allied_luigi
allied_sonic
german_mario
allied_schoolgirl
german_dutchsscamo1
tiedie
german_oakleave
german_wehrmacht_cobra
crazyhorse-1

I know some of you wouldn't agree on this list, but the user would be able to add/remove his own skins. If anyone is interested on such a program, I think I will submit it to aa.com in a few days. Anyway, here's a screenshot of the beta:

[img]http://www.uv.es/~astracan/delator.gif[/img]

allied_utigerlt ?

Thats my Urban Tiger skin... How is that a bright cheating skin?
[img]http://www.planetmedalofhonor.com/wolf-man/skins/urbantiger4.jpg[/img]

...and there are so many ways around altering the skins so you won't be able to detect them.

They can rename the pk3 file to something that wont be detected. As for wolfs urban tiger i think you need glasses. I dont see it as a bright skin Besides people make there own bright skins so why bother making a program to detect them when theres also Dumpuser?

It's not yours, but this one:

[img]http://www.alliedassault.com/img/User-blueurbantiger-redskull-1.jpg[/img]

...which was apparently developped using yours.

I know there's a lot of ways to avoid any kind of detection, but I'm already running this on our clan server and I can tell you I'm surprised of how many people uses bright models to help his aiming skills. Also, as a skinner, I'm suprised too of how lazy people can be when you ask them to do their own modifications biggrin:

By the way, nice skin biggrin:

Regards

[quote:982a9]They can rename the pk3 file to something that wont be detected. As for wolfs urban tiger i think you need glasses. I dont see it as a bright skin Besides people make there own bright skins so why bother making a program to detect them when theres also Dumpuser?[/quote:982a9]

It doesn't look for the pk3 name, that would be stupid.

About wolfs skin, see above.

I do already wear glasses.

Have you tried to type in the console dumpuser "[~IR~]-+ImExample+-"..? I did.

Yeah and so far i been catching some pepople with bright skins.

I did too, but I prefer to play the game and let the program do the work.

no it looks at the TIK name via the output the dumpuser command returns which is just as trivial to alter.

in any event i would guess Wolf-man's skin is more likely to be used than that other one so you should get rid of that entry.

you also cannot consider kicking players for using one of the default skins..... its ridiculous.

Damn, and I was excited that someone had put together a list. tiedie is the only one I've seen on the server that's been obvious.

So my assumption is that force-skins (hahaha) is the only way to go in defending ourselves against this? That is, consider DMz DogTags. A function in their allows you to force a server-sided skin on all of the users (I haven't tested this yet). Is that the only way to go?

Guys give this a chance. This is why he is asking the community.

To get your feedback so he can make his app better.

Like he said you will be able to pick and chose. I would however recommend all skins are unchecked at first install .This way you make the user go into your app and pick the ones he wants removed.
Maybe a little more work but a icon with an image of each skin ( to the admin knows what the "cheater" is using.


Remember we lock our car doors to keep the stupid criminals out. It does not make the care completely safe. there are other ways in. I would assume this would keep at lest 50% of the players honest. Hell that's 50% more then now.

Im with Rude dog. Give it a whirl. Most people are to lazy to go messing with items that are even trivial. It will weed out those who simpl go to some site and grab it real fast. If the admin keeps there list up to date with even the modified "names" then the skin would still be useless.

I would like to see it posted here at AA.com just so the option is available. Considering i've never even heard of the dumpuser rcon command. What does it do?

nevermind i found dumpuser in Rudes, rcon guide.

[url:c19b9]http://mohaa.xgshosting.com/rcon.htm[/url:c19b9]

3 People were banned yesterday alone from my server for using bright skins using dumpuser. I'd gladly give it a look over if it were available. Although I'd probably find more comfort in DMz Force Skins (er, no, let me restate that... the server-side forced skins? damn, just doesn't work LOL)

I think this is an excellent idea, and I wish yocho luck, hopefully this proggie will work out the way you want it to. Another valueable asset to the MOH community. biggrin:

Ill try it on the DOA server and see what happens. When is this program due out?

this idea sounds pretty good. though i think its kinda 50/50.

the good part is it will distract people from using bright skins, as you know they would say "I just like the way it looks", when in reality they use it to see you better.

on the other hand i think it gets alittle personal. some of the skins listed are decent skins, and i myself have some of them, but i dont resort to force models at all. i like how the game's skins look.

on a last note, it would be quite easy to fool this program, and when it does come out and someone is hosting it, i would like to give it a run for its money and see if it can detect it when i put force models on.

anyways, i hope this prog goes well, as i would hate to be seen a big pink skin when im playing online. ;)

Well, first of all, thanks to all who shown their support to the idea :-). Now let me explain myself a bit...

Really I'm not trying to set a standard here, I just wrote it because I needed an app doing this and there was none available, so I though sharing it could help other admins. Frankly, what I like most of it is the scheduled commands, as it allows you to cast a message at a predetermined time or a full change Round/Obj/TDM; the private clients scan also helps me a lot as I'm running a clan server with some public slots.

About the list I published, I know some of those skins (hitler, oakleave or wolfs urbantiger) were not bright. However on my search I've found altered versions which didn't change the script name :-( Anyway, on the instructions I ask every user to check the list by himself and add/remove the skins to his liking before enabling the bright skins module (every module is disabled by default). Putting a pic of each model could also be great help to decide this, but right now the skin list is just a txt file edited with notepad angel: I will think of it if the app has some demand (thanks rude).

About the default models, included with the game, I don't think they should be banned, but that's just my opinion; I just wanted to know what other users think of it.

An important note: it doesn't detect if "force models" is on. I can't get this info from the dumpuser command (or any other that I know of). But if a user has such a skin selected, my guess is he's using the force models (also, I know of some users use force models correctly, they just are tired of the default ones). Anyway, I think most admins try to catch bright skins with dumpuser. This app just automates the process (think of it, you just can't do a dumpuser every minute on every player on your server).

Although I give it the "beta" status, it's working really well. Despite I know the forced skins detection can be easily avoided by some users (remember, I'm a skinner also), I must say it traps 3/4 users each day who try to force skins on my server (and I don't kick'em, I just ask them to select a different skin).

So if I don't find any errors this week (which I don't expect to), I will send it to aa.com and tmt next Sunday.

Regards

Man, i'm sorry but the allied_GaryColeman skin is NOT a skin that you want to be forcing on the opposition. He is SHORT and you would have to guess where the head is. No one would ever use that to force on the other team. That takes that off the list.

Ah?
 

So if I use mick dude's spiderman skin that's considered a "bright skin"? and that's a cheat?

Your forgot the NSA, Von. ed:
Good luck Yocho biggrin:

What would be even cooler if this proggie could open up the cheaters/accused cheaters default text editing program (notepad/wordpad), and write something like:

[quote:6d651]This server uses anti-cheat software. You were suspected of using a model/skin that is not acceptable on this server. If you wish to play on this server, please change your multiplayer skin, and rejoin the server. Thank you.[/quote:6d651]

Now that would be cool. I bet 5 bucks it's possible to do this, too.

Well, -if you're talking about my little app- it allows you to edit the default messages and include on it the client name and skin which were detected as suspicious (so that if you have kick enabled they can change skin and rejoin), but about opening the players default app, since it lacks a client-side part, I'm pretty sure it can't be done (I hope so, if you can run notepad.exe you could probably run any other executable).

If your comments were about any other proggy please excuse me angel:

Regards

hi man that app looks cool
 

hi man that app looks cool could i get it for my clan.
my E-mail is
Glorykillerz@nc.rr.com

Good work YoChoy, just want to drop in some info and thoughts. Your right, you can't pull the force skins setting from dumpuser, not unless they actually go out of their way to use setu that is. The internal scripting has a few big advantages in a situation like this, with full access to the cvars and no problems associated with constant polling. Good idea making it check against a known list, that definately stops anyone out there who isn't using the default skin/shader cheat.

General stuff for everyone:
There seems to be some confusion on what DMz does with models/skins, so I'll try and break it down a bit.
Client is allowed to use whatever Force Models setting they want.
Client is forced by the server to have Force Models turned On.
Client is forced by the server to have Force Models turned Off.
Client is allowed to use whatever Allied/Axis Skin settings they want.
Client is forced by the server to have a certain Allied/Axis Skin.

One of the best options for defeating cheat skins is forcing Force Models to be Off and use Client Side Skin settings, since most cheaters don't have an entire set of default skins changed to cheat skins. (altho the shader cheat gets around this anyways)

Last but not least, it's my belief that EA will address most of these pak file hacks in the Spearhead expansion.

Oh yeah, no the notepad thing won't work, but text in game works great. Nothing like having the player tell everyone what skin he's using automatically, hehe.

wtf man ur making mohaa to be like the military...if some one wants to use bright skins let them....its your fault if you cant beat them b/c they suck so bad they need the bright skins.....so dont call them cheater and noobs, your the noob if you cant beat a noob :)

dogmeat, sorry to get offtopic, but I found a map glitch for crossroads. Please e-mail me at stomviforte@covad.net. thanks. Once again, sorry for going offtopic

Not exactly, we're making it possible for server admins to run servers the way they want, and alot of people out there would love to never have a cheater on their server. And if it's their server it should be their choice, if someone else doesn't like it they can either go find another one or put their money where their mouth is and start their own server. Personally I think anyone who can't play on a level playing field is not even worth testing my skills against, since their so called skills don't mean shit, and they can stay the fuck off my favorite servers thank you very much.

Hi DogMeat!

I downloaded Dogtag yesterday from servebeer and I must say it's a really nice piece of code. I guess it would render obsolete the 'bright skins' module on my app ed: , lol , but frankly, I found the rest of it at least as useful as that part.

I was wondering if you would be interested on a VB shell for it, so that admins only had to check the different features instead of editing the script itself (we were talking about it some time ago, remember? I believe it was the first time you made a public test of Dogtag). EDIT.- I haven't tried dogtag yet (will do this evening), but, looking at the code I don't see the server map list shown on the client screen. As server admin, I think it would be useful to have it shown; "which one's the next map?" is one of the most usual question's I have to answer.

[quote:bf5b7]Oh yeah, no the notepad thing won't work, but text in game works great.[/quote:bf5b7]

LOL! I think we both were wrong!!! I just remembered MoH has a command, "notepad", which allows you to run the proggy without even leaving the console, lol. But I think using on screen text is better, so that other players know what is going on.

Take care

Thanks, but if you like it now wait til you see the next version! I don't think it would render that section of your app obsolete, since you check for specific skins and that offers something different from what I'm doing, however I could duplicate that function easily in the future.

It's been my intention to move all the setup cvars to a config file instead of a script, but either way a setup program to generate said file would be great! Let me finish up the next beta and get it out, then I'd be glad to work with you on it if your still interested.

Didn't add the maplist since the string is usually much longer than the text boxes on the score screen. I've been saving it for display as a HUD item in-game and/or the client side screen portion. I haven't found a cvar yet that only displays the name of the next map or I'd be using that.

I know about the internal notepad but I doubt you can shove a string to be displayed into it, but as you said screen text is better anyway. :)

Delator released
 

Well, I've released the first version of Delator. It's here:

http://cealweb.net/modules.php?name=Dow ... load&sid=5

Though the page is spanish, you just have to click the "Delator 1.0" link. Yesterday night I found a bug dealing with checking the player list, so I rewrote almost the whole thing. It worked fine for the rest of the night, however this is still a "very, very beta" version biggrin:

Check it if you wish, but read the help file before setting it up. If you find any other bug or have some ideas to improve it, feel free to PM me.

By the way, after patching the app it has no longer the ability to cast the offending player IP, but I would add it again in the next version (if any). And I've found it runs great together with DogTag; DT keeps the player from checking the 'force models' setting, but Delator tells you who was trying to use a cheating skin (on the default list I've removed all the polemic skins, I think).

Anyway, thanks to you all

Frankly im sure they work well together given the options that DogTags offers and the List check that Delator offers. I jsut hink its kinda a shame that an admin needs to run two seperate programs. All because one dosnt check for one thing and the other dosnt look for the other. Just wishing they came in one easy to use package.

I havnt looked at either program since neither is "complete" and i dont really want to suggest a program to our leader that may cause problems. It would be great if we could have the best of both of these programs simply running in the background, not annoucing anything. Simply kicking people for "cheat" skins.

Also i was wondering how easy it was to update Delator's list of "cheat" skins? Say i find a user using a skin thats not in that list, but upon my review i find it to be a "cheat" skin. How can i add that to the kick list on a dedicated server?

Well, that's really easy, the skin list is nothing but a txt file, and you have even a link on delator to open that file in notepad, so you just have to type the skin name and save the doc (check the first page on the thread for a screenshot of what delator looks like).

As a server admin, I agree that it would be great to have many programs bundled into one pack. I don't mind losing any credit on it. However, DogTag is not VB really, it's a plain mod, so the only option would be creating a VB shell for it (which I already mention to DogMeat). Finally, Delator should be solid rock before thinking of mixing it with other apps which already showed his value.

Regards

Ok im a suppream noob at these these things so hang with me.

Grabbed a copy of delator and after playing with it a bit i wondered. Does this even have to be loaded on the server or is it simply run by my computer? If i have the rcon password and the server IP and enter all that in, its scanning the server even if im not playing?

Also what does setting the clan tag and pass do? If i enter the tag and a password will it kick everyone the next time a map loads like setting a regular password? Or will it simply keep open 1 or 2 spots for private users? Or does it simply work in conjunction with a private password i already have set with "x" number of slots that i set via rcon?

How hard would it be to add the feature of passwording the server to this program if thats not what the tag and pass do? Becasue i had problems with it the other night where rcon wouldnt accept the password i was trying to set and i kept having to kick people.

Ah hell im sending you a PM.

[quote:33e6d]Grabbed a copy of delator and after playing with it a bit i wondered. Does this even have to be loaded on the server or is it simply run by my computer? If i have the rcon password and the server IP and enter all that in, its scanning the server even if im not playing? [/quote:33e6d]

You can run it either on the game server or any other computer (with internet connection, of course biggrin: ). Yes, it scans even when you're not connected.

[quote:33e6d]Also what does setting the clan tag and pass do? If i enter the tag and a password will it kick everyone the next time a map loads like setting a regular password? Or will it simply keep open 1 or 2 spots for private users? Or does it simply work in conjunction with a private password i already have set with "x" number of slots that i set via rcon?[/quote:33e6d]

I don't know how useful it will be for other people, but it is for me :-D... that's the deal:
You are in the "[CLAN]" clan, so you set a password which allows you to reserve 10 slots on your server for people belonging to it. When Delator is monitoring the server, it will warn you if any player without the "[CLAN]" tag is using a private slot (for example: sometimes the brother/sister/friend of a clan member enters a private slot - Delator allows me to control how "public" our private password becomes; also, the players in my clan usually misstype the reserved password, so they are using one of the 8 public slots without even knowing about it . This way I can ask them to retype the password and re-enter on a private slot instead, cause our public slots are usually very crowded whereas is hard to see the private ones full).
You should setup your private/public slots on your server's .cfg file.
Delator has kicking disabled on the default config. It won't kick anyone unless you check the "Enable kick" feature. In this case, any player using a private slot without an appropiate tag would be kicked, as well as any player on a public slot wearing the tag (they could be impersonating someone; however I have never enabled this feature).
So, yes, it works together with the password you setup on the .cfg file.

[quote:33e6d]How hard would it be to add the feature of passwording the server to this program if thats not what the tag and pass do? Becasue i had problems with it the other night where rcon wouldnt accept the password i was trying to set and i kept having to kick people[/quote:33e6d]

Sorry, I'm not sure what you mean by "passwording the server to this program". If you mean the ability to set a new rconpassword/private password via Delator, I think it would be easy to add, but I wonder if that's what you mean... oOo:

Regards

I mean setting a password to close the server completly. To only allow those with the password in. like a match, or a private practice session. Last time i used the rcon command for this it didnt work. Thought it would be pretty nice since i would have this running to just slap the password into it and next map load have the password take effect.

Also was looking through the text files and was wondering what this was:

[quote:ff5f7]17/10/2002 0:41:31 Aviso: Uso de un skin no admitido - Player: "[CEAL]TCol.YoChoyLaMuete EM" Skin: tiedie
17/10/2002 0:44:29 Aviso: Uso de un skin no admitido - Player: "[CEAL]TCol.YoChoyLaMuete EM" Skin: tiedie
[/quote:ff5f7]

I agree, anychance that this program and AutoKick will be intergrated????

hey whee do get this at sounds good i dont need bright snipers running around well you can mail it to me if ya wana cronos2@ATTBI.COM

[quote:2a2ea]Also was looking through the text files and was wondering what this was: [/quote:2a2ea]

LOL! It's the spanish translation of "Warning: Forbidden skin detected. Player: [CEAL]TCol.YoChoyLaMuete EM Skin: tiedie" (hey! I'm Spanish biggrin: ). I think I forget to delete the log after my last tests (see date). By the way, if someone is curious, it's not the real tiedie, it's a skin created by me for testing purposes (the regular pilot renamed tiedie, I'm thinking of including it on the next release so that admins can do their own tests).
And damn, it worked; the second time I forgot I had that skin selected and it kicked me out of my own server! LOL!

[quote:2a2ea]hey whee do get this at sounds good i dont need bright snipers running around well you can mail it to me if ya wana [/quote:2a2ea]

See the previous page for a download link

[quote:2a2ea]I agree, anychance that this program and AutoKick will be intergrated???? [/quote:2a2ea]

I would gladly send the whole source code of a final, stable release, to CK if he's willing to do it (I think it would be a lot easier to embed Delator in Autokick than the opposite, Delator is a single VB form), but I know for sure CK was considering the addition of bright skin detection into Autokick (I think the next Ak version will arrive when Spearhead is released). However, if he's not interested, I would try to put banning cappabilities into Delator for my own use, since I think both programs can conflict if running on their own against the same server (not tried it yet).

Ops! I almost forget this one:
[quote:2a2ea]I mean setting a password to close the server completly. To only allow those with the password in. like a match, or a private practice session. Last time i used the rcon command for this it didnt work. Thought it would be pretty nice since i would have this running to just slap the password into it and next map load have the password take effect.[/quote:2a2ea]

I see. A very good idea! (I had a similar scenario one month ago: I executed a cfg which made all slots private, but the public players were still there even after restarting the server). I think it will be easy to do, though most probably the kick will be immediate or after a selectable interval (you press a button, console says "please, public players leave the server" and after, say, 30 seconds it kicks those who didn't left).

YAH I SPEAK SPANISH AND SPANGLISH LOL THANKS I FOUND IT MAN PPL ARE REALY GOING TO HATE MY SERVER'S NOW THERE SNIPERS ONLY SERVERS DO YOU THINK YOUR GOING TO MAKE A ENGLISH VERSION OF YOU SAID IT WAS IN SPANISH

[quote:69df4]YAH I SPEAK SPANISH AND SPANGLISH LOL THANKS I FOUND IT MAN PPL ARE REALY GOING TO HATE MY SERVER'S NOW THERE SNIPERS ONLY SERVERS DO YOU THINK YOUR GOING TO MAKE A ENGLISH VERSION OF YOU SAID IT WAS IN SPANISH [/quote:69df4]

Nop, the app is english (well, my english; but, since warning messages can be edited, of course I use a spanish translation on my server. That's why the messages in the log looked so strange ed: , but the default messages and on-screen text are english.

Regards