tf2 bots only target humans. how do they know who's a human? & who's a bot? (in the past, now fixed)
Вставка
- Опубліковано 25 чер 2024
- Music: BananaSlug ( / user-426347780 )
channel discord --- / discord
channel patreon --- / shounic
channel tracker --- trello.com/b/L3B65jUX
[ todo list / current progress on upcoming videos / channel roadmap ]
feedback --- forms.gle/bkuGF6attQrRPc6o9
custom files --- pastebin.com/raw/e32aG4nP
[ hud / crosshairs / hitsound / killsound / gfx cfg ]
github.com/SteamDatabase/Game...
big thanks to:
Sappho.io & Mitch for their contributions in research
Gold & Loudlux for scripting help
FAQ:
Q: How did you make that? What editing software do you use?
A: I use Adobe Photoshop, Premiere Pro & After Effects. Photoshop for image editing and thumbnails. Premiere Pro for compositing and After Effects for motion graphics (the fancy animations). - Ігри
It's quite sad that the creativity of a man gets wasted in this way. They could've done something better than cheating.
Nah the bot creators have no talent, that's why they make shitty bot code instead of making something of actual worth.
nah they only take code from stackoverflow
Yea...
In the world of software development, I am pretty sure that this handshake method through achievements isn't anything very creative. In fact, as soon as shounic mentioned achievements at the start of the video, I immediately guessed correctly that bots were using impossible achievements to communicate which would be possible to patch by Valve.
Like make their own game
I wonder how many bot mechanisms you’ve known about but didn’t want to reveal until a fix was already deployed
It's all easily available to the public, so he probably knows about all bot mechanisms.
All of them.
I wonder why he chose to not reveal them, after all knowing it by regular people could make bots not shoot regular players
@@PouLS I mean, the info becoming widespread means the bot hosters will push out fixes to change the bots behavior. A minority of players knowing and utilizing the trick is better than a majority knowing and it getting removed.
@@PouLS by creating and using borderline cheat software? yeah nah
It'd be funny if community servers flipped the script on their head and made it so if invalid achievements were broadcast it would intercept the bot's response and say every player /but/ the bot sent that back. Making the bot only target bots
It would be really easy for the bot owner to just update the code and flip the check, though. Instead of checking for the response, it just checks for the lack of one.
As hilarious as that'd be, the "Not Bot" can be marked as "Bot" so easily. The issue is that as soon as you can distinguish bot vs not bot, you just have to figure out which is which.
@@steeledminer616 so basically, it’s either among us or everyone’s a spy.
[human]
[there are 3 bots among us.]
@@CiromBreeze if they did that then the bots wouldn't work on any server except those using that achievement flipping plugin, since otherwise they'd only recieve a response from bots since players would never normally send the response.
Would be really ironic. The things attempting to fuck up the game becoming the only things shot? I'd love this if it were for the main game, give us something to watch, little Bot Wars to laugh at, Rancho Relaxo and watch them go ham.
I was about to say how that sounds quite easy to fix, and then it cut to Valve fixing it
Neat
Well, this is only one way of communicating. Cathook has a secret messaging system that allows you to coordinate bots easily
Honestly, I think they should have kept this around as a way to detect bots, like that community plug-in Shounic mentioned.
This is just one way of communicating... they can perfectly use another and keep changing
And it doesnt solve the problem, even if the bots shoot each other it still ruins the other experience
So yeah, its not that easy to fix the issue
@@Ultra289 the treadmill
Greetings fellow lambda user.
It IS rather amusing to see the cloned bots slaughtering each other for once.
They killed most humans and no one's left, but because of their coding they can't stop, so they decide to start killing each other and continue
Ironic
They used to attack each other, but then the bot hosts figured this out.
Valve straight up scrambled their IFF system
@@moonlightact1792 Mankind is dead
Blood is fuel
In 2024 there will be a robot war between China and India and this exact thing will happen but on a grander scale
TF2 bots only seem crude on the outside. This rudimentary IFF system is really clever and also... pretty sad when you realize that the people who make these bots can't be bothered to find any other outlets for their creativity.
Tf2 players upon seeing bothosters irl: "A funny _twist._ A funny *murder.* (proceeds to spam scout's BO(i)NK taunt)
Ham?
For every yin, there is a yang.
the creativity/talent only came from a couple of people who wrote the hooks and put them on github. it takes zero skill, talent, or creativity to take someone else's code. in fact, i do it constantly, and no sane person would say i know what i am doing. yet, it works. curious
@@boldCactuslad it just works
I'm genuinely loving this. Seeing the bots popping each other truly felt like someone had spread a virus through them. Some real Terminator end of skynet shit.
There is already an alternative identification method using cathook's own server called Nullnexus. The server will return all hashed SteamIDs of the bots/cathook users on a given server IP. It seems that many bots aren't using it though.
Also: Bots used to identify through the "cl_drawline" message previously. This message is usually used after finishing a competitive match when you're able to draw on the screen. This was also fixed quite some time ago which made the bots switch to the achievement method.
I thought the cathook method would have been more popular. Weirdm
@@szymex8341 I imagine they put a shitload of random IDs in there so if valve ever tried to mass ban them they'd hit normal people
@@szymex8341 That would be a bad idea, if the programmers for those bots realize that, they could maliciously add IDs of real players that they dislike, thus griefing real innocent people.
if random cheaters can upload their bot ID to this whitelist, then why can't normal players?
Make a script that, whenever you join a game, everyone you play with gets added to the whitelist. You're like a walking bot vaccine!
@@nolin132 You have to provide the servers "Spawn Count" to send data to the cathook server. But this "Spawn Count" can only be retrieved by reading the game's memory. So you'd basically have to use a cheat in order to retrieve this information and add yourself to the whitelist.
That's the thing I guess I never realized, cheating in games is one giant arms race. In this case, the TF2 Developer managed to counter one of the hacker's "plays". It makes me scared though because now I realize the single guy working on TF2 is going up against every single hacker in the game, with really only what they can look up to help them.
This is prolly super obvious but it's new for me, idk.
Huge [citation needed] here, but I think Valve _hired_ some more developers to solve these absence of TF2 update, so it's not much "single guy" anymore. But again, don't cite me on this.
Well, they are not entirely alone. They got the entire tf2 community backing him up.
There's dedicated players that root through the game's coding all the time that report exploits and cheats.
It's just up to Valve to actually act with this information.
All forms of cybersecurity is an arms race. That's why you have to update your antivirus every few weeks.
Cheating is just a game of cat and mouse ,doesnt matter if its tf2, csgo, valorant, r6siege or your mother
If the devs fix one way of cheating they ll find another, so that doesnt make them worried
@@aloysiuskurnia7643 Tyler McVicker said a while ago that those working on TF2 updates following #SaveTF2 are all interns and such that wanted to. Tyler has given out so much insider info of what's going on with TF2 and the community it just completely tone deaf to him, I don't get it.
Imagine a real player got one of these invalid achievements which would have made them immune to bots, allowing them to go on a crusade against the bots
Meet the Spy
The Chosen One
The Doom Slayer of bots
@@gamech2008 amazing, perfect response.
It was abused by other certain cheats. The bot hosters caught on and started making lists of people that abused this feature which is funny tbh
Before the update that greatly reduced the amount of bots, I saw a few bot-killer bots.
So I'm guessing that these botd did the same but instead of not killing the bots that use the "secret handshake" they just kill those
Makes you wonder if someone fought fire with fire and made a bot that _only_ targets bots. It’d be pretty funny I won’t lie
i think that actually was a thing for a while
i remember seeing a few actually, there'd be only one on a team, and would only shoot bots. they never lasted long, being basically just a week or two before they disappeared entirely, adding more bots to fight bots was never good lol
There was actually some anti-bot bots.
They were programmed to randomly chose a (real) player and follow them.
They would only shoot at other bots, not real players.
You could ask in chat for them to swap between Vac Medic and Sniper.
That was a thing, but they were quickly impersonated, so the owner stopped.
Still wouldnt fix the problem so it would be a waste of time unless a youtuber who gets money from making content does it
You can tell who commented before finishing the video, because they're asking why valve could check it but not do anything about it...
Actually there was a bit of misinformation near the end, the bots are shooting each other because currently there is an uprising in botopia and there is a civil war
That's even better!
Sounds like a show I'm willing to lay money to watch!
very good insight, shounic!
shounic is the hero of explaining such things on tf2
i agreee yamahaiamitchellman
The biggest takeaway to me is that the fix was undocumented, meaning that Valve is doing more than just what they release in their patchnotes
Or they just forgot to write it down.
After plowing through a lot of bs, I'm sure I'd forget something boringly technical as "fixed sending invalid achievements being sent to server."
Something like Sniper eating his gun is funny and worth noting just because I'd remember it.
@@SethTooQuick Security related fixes are often undocumented, though they're usually related to code exploits rather than bots
Don't get your hopes up, only fixes get the undocumented treatment. Everything else Valve doesn't give a fuck
no, security fixes are usually not mentioned because telling any wouldbe hackers you just fixed a flaw may lead them to look for more flaws faster@@SethTooQuick
Man, dealing with bots is like a perpetual mouse and cat game between bot makers and developers. Unfortunately, this is the only way to minimize the bot invasion as much as possible without compromising too much of using a "permanent" solution like disabling chat for F2P players.
As long as the bot makers keep improving their schemes, the devs need to keep up and get to one or two steps ahead of them as the bot makers doing the same.
Glad the average players are starting to realize that fixing cheating issues isnt that easy regardless of game
i always said that, glad people starting to realize
@@Ultra289 it just was the radio silence,not even achnologing the problem for so long
"It's not a real achievement" - flashback to my childhood...
😂😂😂😂😭😭😭🤣🤣nooooooooooooo
Ive legitimately barely seen any bots in the past few weeks
Looks like the tide is finally turning
demoman reference
@@unknownuser20778 I had the same experience as Milo on a few weeks 1-2 patches ago. Then cheaters found out what was the problem I guess and now it's back to square 1..
I swear I saw somewhere that one of the devs of a bot program or something like that quit so a large portion of bots either left or went to another program.
Bots are mostly gone but I’m seeing ALOT of closet cheaters now, some hide it and some are extremely obvious. Also there’s a group of people with extremely expensive unusuals and Australiums going around cheating just for fun
@@Odd-Definition Exactly. And worst of all is that they use patched exploits somehow.. I had a cheater heavy that used crits exploit to crit on will
I always thought they just added eachother to their friends list but come to think of how many thousands of bots there are i don't think that would work out too well.
wait if this handshake no longer works, that means Valve could apply the same script or code they made on CSGO, and put bots on only servers that have bots so they would kill each other for a underterminated time?
I had stroke reading this
Morbin
I'll try to clean this up:
"Wait, if the bot handshake can be detected, is it possible for Valve to implement a system similar to CS:GO's, where identified cheaters are grouped up in isolated servers and left to kill each other?"
The cheaters already stopped using the handshake
Well sorry for bad english i'm a brazilian, but thx correcting me
They could also have gone the other way, and made everyone regularly broadcast the bots' secret invalid achievements, so the bots all think everyone's a bot and don't shoot anyone.
Again, they're secret. You as a player or a server would have no idea what the answer achievement is.
@@zizo5349 couldn’t they just make every player broadcast achievement 521-999+ then?
But the game server receives the message anyway. Just keep track of what the invalid achievement is and then apply it.
@@zizo5349 I think he meant something like having everyone unlock those achievements so Noone gets shot by bots.
@@zizo5349 Not really secret when you can just get the code online and do whatever you want to it
The dev commentary outro sends me back to 2007 trying to run tf2 on an Intel Atom
honestly, that’s some good steps in the right direction. getting their hands on what they use, and then reverse-engineering it so they know what’s being exploited, and then fixing whatever exploits they’re using- it makes botters’ lives and efficiency that much harder.
You guys seem to forget that the guys who programmed the bots will prolly just make their bots not send the secret handshake anymore? People in the comments seem to believe valve could use this to catch bots or whatever when the people who make the bots would very easily be able to patch their bots to not send the invalid achivements. No matter what they did, the end result would be the same; bots remain, bots are no linger able to id eachother
Yeah but they just prevented the handshake from working here? Would it not be at the least minimally beneficial to make it so bots will get banned for attempting the handshake?
Yes they'll just make the bots not attempt the handshake, but exactly, they have to make the bots not attempt the handshake. Compared to what they have to do rn, which is nothing because valve just made handshakes not work, you see?
It seems like it would be just as easy to make a handshake attempt lead to a ban as it was to make a handshake attempt simply not go through, but with an added benefit of forcing the bot makers to change the bots. And it was a silent patch too, if they said nothing about it then the bot makers would have to FIGURE OUT that the handshake is what's causing the ban.
It just seems like it would've been a very easy & has some benefits over simply making the handshake not work. You're ultimately right, not much of an actual difference in full end results, but still
@@LOLWHATBRO it goes back to the fundamental problem stated in the first bot video; any measure to limit or ban bots would take more effort for Valve to implement than it would for bot makers to circumvent, better just to jump to what the end result should be. Also adding a built-in "ban when invalid advancements are sent" could cause even more problems for tf2 spagetti code, and seems like the kind of thing that could absolutely be accidentally triggered by some bug or exploit
@@LOLWHATBRO however doing this would make the game even more unstable, imagine you got a bit flip und suddenly you are sending 0010 1000 0100 (644) instead of 0000 1000 0100 (132), bam you get banned without any reason or fault. And like you said in the end it wouldnt matter.
Then don't ban them; instead give them the bot models and have them drop money when killed. Both teams share the same money pool and resupply lockers double as upgrade stations.
@@Weeblon On average a computer experiences 4 bit flips per gig of RAM per month...New players are the ones that unlock the most achievements...I can see the "hey I downloaded the game, placed a dispenser and got banned" posts
>chad Valve secretly fixing the game, caring more about doing it right than getting reputation for it
Shounic, would you have any way to know about the weird Unicode character that namebots were using? Windows games would never render it, but Mac and Linux would render it, allowing them to immediately tell the difference between the bots. It always looked like a line with a block at the top of it. It was always at the end of namebots until one day I pointed it out, and I think the botmakers intentionally changed it to be inbetween characters to be harder to see on the vote menu. On Windows it would also oddly render only in the killfeed occasionally.
It's apparently Unicode Character U+202C when I tried to look it up. Pasting it in Steam or anywhere else in my text editors would crash them immediately. Only my browser knew what to do with it.
There must be a font difference then, because I use ToonHud with a custom chat font which is literally just default chat with antialiasing, and I guess this also affected the killfeed which helped me know what players had impersonators. Unfortunately, the vote menu didn't display this character for me though
U+202C is "POP DIRECTIONAL FORMATTING", which shouldn't render as anything -- instead, it just disables the last directional formatting character (these are used to explicitly switch the direction of text from left-to-right or right-to-left). That's likely also why text editors crashed when you entered it -- there wasn't a previous directional formatting _to_ disable.
The character actually being rendered was probably a different one, though it would take a while to figure out which one from a description -- there's a lot of characters in Unicode.
@@Fayti1703 neat. Which implies there's a name exploit system with Unicode in Steam that hasn't been patched.
@@AshnSilvercorp is your profile picture the mark of ascension from Rain world?
@@scintillantflea4698 *dives back into void water*
I once encountered an unusual bot on casual, whose sole purpose was to alert the legit players in the server that certain other players were bots. Maybe whatever method that bots will use now to identify each other can be turned on its head to create a bot that _exclusively_ targets other bots.
valve could make an ultimate and ban every bot in the game by simply write down every user that tried to unlock invalid achievement for a some period of time and ban everyone in this list
that would look epic, but it has no purpose since you can easily generate another million of bot-accounts
the botters are humans tho, they'll find another way
Valve built in the theme 'players vs. robots' into the game in it's early life and now later in it's life those same robots can literally be used to aptly represent the biggest threat to the future of tf2. Nice one Valve.. >
good job as always:)
that's really interesting actually
I always wondered how that worked. Very informative as usual.
1 year later now they dont shoot each other.
"oh look jimmy replied to me i should react with [insert achievement here]
Another lovely video. Loved every minute
Mentioning that this is what Sourcemod plugins do in community servers to stop bots from happening is precisely the answer to my previous question in the last bit video.
Thanks!
clever indeed 👀
Players could have created a plug-in to also send out the achievement broadcast and make themselves effectively invisible to bots, like in WWZ
very interesting thank you shounic
It kind of irritates me how maliciously smart this is.
Great video!
Y'know, I've always wondered this. Thanks!
Fun fact: bots from different hosters use different handshakes, and you can see them killing each other fairly often.
That frog hat is the funniest thing I’ve seen and I’m depressed it’s spy only
The old valve would definitely offer shounic a job
The only channel where one doesn't need to be reminded to like
One of them recently has been Ghost in the Machine
Had no clue, explains a fair bit
thats him officer, the guy who made the tf2 bots
Wow, that’s… actually pretty impressive
so what you’re saying is that the bots are killing each other now
Thats exactly what hes saying. And its funny af.
We shouldn't get too happy about it, though. There are rough two gazillion other methods they can use to identify each other; it's just that many of them are harder to code and maybe less efficient (so it takes a few ticks to process instead of just one).
@@Yveldi too late Im already too happy
@@Spacebugg NOOOOOO damnit
Nice, can't wait to learn about how the bot developers get around that fix in a few months *if we're lucky.*
Edit: has bold text gotten even bolder on this site now?
bots still dont target eachother for some reason
my thoughts before the video:
most likely, it's the same person running the bots in that case.
or they have some way of comunicating amongst eachother about who is a bot
It seems like a lot of the issues related to bots have to do with server-side input verification. Valve really should be checking that list twice: once on the server, and again on the client.
Lol, that ending when they're taking eachother out is truly a taste of their own medicine.
They also have a connection grid that the bot creator makes, the sensors of the bot check if the bot is in the grid. If it’s not, it’s a regular player, and if they are they’re a bot. That’s why bots still don’t kill each other nowadays.
L4D bile bomb
"Fight amongst yourselves"
What I've heard from a botter named pinkie, they have an config that they can whitelists their bots using steam64 so if a bot or player isn't whitelisted, it will target them.
what the hell that's crazy. I had no clue that bots could do stuff like this
I used a simplified version of this before, not for anything malicious but it was pretty cool.
It’s such an easy system to break too!! Valve could just ban anyone with invalid achievements
except its just broadcasting an invalid achievement like a radio tower and doesnt actually stick, malicious servers would also try to award you achievements outside of the normal range for an easy insta ban
another idea we can also protect ourselves by doing this first u see what echievements they are using and then send invalid echiebements so the bot thinks that youre one off them
sniper bots fighting eachother seems interesting, would watch that
Bot shenanigans aside, that's kinda cool.
so it's Machine vs Machine now, cool
Interesting, I always just thought that bot steam IDS were kept on a big spreadsheet that all bot holsters shared so they wouldn't shoot fellow bots.
And here I figured they'd use usernames or chat messages. I suppose that would be too obvious so real players would take advantage of it.
They could still probably do something with chat, like have a code that changes every second. The bot would then check if the message matches the correct code at the correct time to see if that player was a fellow bot. That would require additional overhead, though, possibly requiring the machines running the bots to be networked.
You just fixed a few years catastrophic bot problem in a 3 min video 😳
Its hilarious how hacky yet also how clever ever some of tf2s code is lol
Please, make a video explaining how bots wear three hats in the same slot
shounic mabye you could make a video about how explosions work also eplaining why the caber dose less dmg from upbove and the oppisite from beneath
At the start of each round, everyone has to solve an audio captcha.
HA! at least that’s 1 way that the bot crisis is stopped or more playable than before
Bots vs. Bots is kinda hilarious though.
plot twist: shounic has been behind the bots this whole time
VALVE DOING STUFF???? POG
Can you explain that patch note that says "Fixed a server crash caused by Sniper trying to eat his gun"?
Switching to the gun while eating a sandwich.
I've never played TF2. I learned this from a different comment.
Lmfao
Basically, if you were in spawn and had "respawn on loadout change" enabled in the option, if you started eating a sadnvich as Heavy but immediately switched to Sniper right before the animation started, it would play the eating animation on Sniper and his rifle instead, and it'd crash the server at the end of the taunt.
@@drucy. but sniper doesn't have a eating animation, does it?
@@AndresinReal It basically rigged Heavy animation directly onto Sniper's model, which deformed it greatly.
@@drucy. this doesn't explain why it happens, only how it happens, which everyone already knew just from reading the patch notes
I haven’t seen bots in my games for a long time since the new update, I haven’t seen a single spinbot or omegatronic
Ive seen a server with bots from 2 different hosts, they were fighting eachother iirc.
I assumed they check the steam ids for each account and dont attack ones on a whitelist set up by the bot host
massive W
1:00 AM IN THE CLUB! yeeaaaa boooyyyy
recently some matches i've joined are full of bots and im instantly kicked from the round
So, there's a way for bots to figure out who're bots, but Valve can't use the same method to figure out who're bots? Damn.
It's a "secret" handshake for a reason, there's no way for valve to know which codes the bots are using. Cryptography in action!
@@markuskarlsson2001 They're using the invalid ones. They know which achievements are invalid.
@@markuskarlsson2001 ban everyone trying to unlock an invalid achievement ID for starters, you cant do that with an unmodified client, they fixed the issue but could've used that to detect and ban bots
@@markuskarlsson2001 It's only secret in that normal users can't see it. There's no cryptography going on, the server can see everything being sent to it
Who’re is definitely not a word.
Now they still don't shot each other, they've found a way to bypass that.
We need to find that achievement- oh nvm it's already gone
nice, even if it's only a small step
It took me longer than I'm happy to admit to realize that the video is talking about cheating, external bots, not Valve-made, in-game bots.
That's actually really clever.
Is it possible for the server to flag bots that get an invalid achievement? Or to have the server check for if the achievement exists before sending the message to everyone else?
Nvm you talked about how it got fixed
that's pretty smart
I liked how you explained the three-way-handshake, quite easy to understand
There were also bots that only killed other bots and bots that killed everyone except other of the same bot. M4gic, my.gott, omega, bot hunter, there are so many...
I believe bots now started doing this with the achievement "Ghost in the machine".
oh
well this is a tad more amusing now that they're no longer friendly with eachother
I’m just surprised no one’s tried making their own bots that target bots but the bots don’t detect the bot killing bot to be against them
i find this really cool un popular opinion but i kinda like looking at how these bots work i find it interesting, i dont like that they are used maliciously but i do like learning about how they work.
So the only way to combat bots directly is to convert the friend/foe code to a script/program players can run there for masking you as a bot in their eyes
excellent thumbnail
Catbot has a func for understanding who uses catbot or who dont