If you're in trouble and cannot find an answer to a question which goes beyond Stack Overflow...

If you have a not-so-usual solution for your problems but need to justify it to your boss...

If you like to think on your own rather than blindly follow "common wisdom" and "profound truth"...

...then 'No Bugs' Hare on Soft.ware might be the right place for you.

Your mileage may vary. Batteries not included

Assorted Rants Tagged ‘multiplayer’, page 2:

Bot Fighting 103. Code Integrity Checks, Code Scrambling

posted December 12, 2017 by "No Bugs" Hare

Quote:	“Bingo! We’ve got an executable, which automagically performs TONS of integrity checks, which checks are spread all over the executable, and are extremely non-obvious too.”
Another Quote:	“This approach of ‘not revealing code until attack costs are high’ is certainly not limited to payments.”
	[→]

posted December 5, 2017 by "No Bugs" Hare

Quote:	“it is fundamentally impossible to prevent (or detect) debugging, at least as long we’re staying on one single box.”
Another Quote:	“DON’T spend more than 10% of your overall anti-bot-fighting time budget on system-specific protections.”
	[→]

posted November 28, 2017 by "No Bugs" Hare

Quote:	“Some of the system calls are not absolutely necessary, and using them will significantly simplify life of the attacker”
Another Quote:	“Scrambling will help to protect your protocol even if the attacker manages to F.L.I.R.T. with your TLS library”
	[→]

posted November 21, 2017 by "No Bugs" Hare

Quote:	“One of the nastier-for-us features of IDA Pro is so-called F.L.I.R.T.”
Another Quote:	“All the popular protection methods lag well-behind capabilities of the average-attacker-on-a-100K-simultaneous-player-game.”
	[→]

posted November 14, 2017 by "No Bugs" Hare

Quote:	“Given enough time, everything can be broken”
Another Quote:	“in this fight, most of the non-cheating player population will be on our side”
	[→]

posted July 25, 2017 by "No Bugs" Hare

Quote:	“You DO need access control for your CSRs.”
Another Quote:	“This approach means that we can have our cake (have tree-like structures to express access rights) and eat it too (have very fast SQL for checking access)”
	[→]

posted July 19, 2017 by "No Bugs" Hare

Quote:	“for MOGs, support becomes one of the very important parts of the picture, often on par with Content and Graphics.”
Another Quote:	“the quality of support when using synchronous support methods such as live chat/phone support tends to be significantly worse compared to asynchronous support such as e-mails/tickets”
	[→]