I think it's time I think it's time for an amazing amazing write up. Call of Duty remote permaban exploit NOW. Thor whispered in my ear what happened, I could not believe it myself. He sent me the article, we're going to go through

this this can't be real. This has to be the most insane thing we've we've seen potentially ever on this stream. The following is a quote and paste from AOR, the founder of the exploit detailing the exploit he found and its abuse. These are

not my words. Please contact him on session regarding the exploit if you have questions. I will provide a session ID to anyone who asked me for it. Overview: The signature scanning is a mechanism implemented by all modern anti-cheats. When used correctly, it is

an effective way to catch and ban cheaters in video games. Also, antiviruses use this technique to catch and identify malware. So the method is not new or fundamentally flawed. Now I don't really know what signature scanning is. I only just had like a basic understanding of

it. Uh I believe it's where you you scan various regions of memory to see if they've been altered by the program and if they've been altered by the program, then they something that has gone deeply wrong with your program, which means that somebody is tampering with it. The way

signature scanning works oh here it is is that it scans your computer's memory for footprints of known cheat software. This requires that anti-cheat Dev devs carefully analyze the cheat and create a unique signature that is only found in your RAM when the cheat is loaded and

never found when the cheat is not loaded all right all right footprint or fingerprint this would be a footprint because that's the shape of the memory it leaves but to turn it into a hash that's the fingerprint but anyways this isn't someone saying this is so stupid

this how is this stupid spam bot SP spam bot guy what what's so stupid about it help me understand this what is so stupid about doing that come on big screen let's go spam bot guy let's go anti-cheat is the last hold back for gaming

on Linux what is stupid about analyzing memory on your system and identifying various anti-cheats yeah let Tim Cook we're going to let Tim Cook the cheat developers can just recompile the cheat it's not as simple as just simply recompiling the cheat the stupid part is

that is literally any kind of compiled code that functionally a similar thing to what the cheat does and ends up in your memory can raise a red flag well that's why that's I think that's why uh you know just let the man get CH chill

that's why I said you have to uh you have to alert let's see they have to carefully analyze the cheat and create a unique signature that is only found in your RAM when the uh cheat is loaded and never found when the cheat is not

loaded so yes there's there's going to be some unique part of it that if they can figure out what it looks like in memory then they can tell that you're running it all right Ricochet and signature scans as expected Ricochet uses signature scanning as one of the

one of its many methods to detecting and banning cheaters earlier this year when I was tracking memory allocations of their kernel module I stumbled upon a memory region that caught my attention unlike most regions this one contained a lot of strings and all of them were cheating

related reversing the structure confirmed my suspicion it was a list of signatures for uh a signature scan routine the signatures as I said before anti-cheats must care uh be extra careful when creating signatures for cheats a bad signature could lead to innocent players being banned well

without further ado let's take a look at a few signature Ricochet has been using I assume these are all um I I assume this is the this is kind of like the uh what's it called this right here is the translation because these are like zero

characters right oh sorry hey Janet appreciate the raid by the way Janet for those that don't know Janet is an All-star closure programmer which I will be getting deep into the closure closing here shortly starting here in just one how long about 40 days and then I will

be officially a closure a closure boy for a while yeah yeah Recreation just some recreational programming in closure you know hey if you're not following Janet yeah I can't wait well we'll see maybe you might want to wait by the way thank you Call of Duty for the one uh

the 102.7 gigabyte update last night dude Call of Duty has the worst updating in the universe all right so this is these are all just simply ASCII characters is that's all that's happening here because this is a new line right 20 is 20 a new

line or no that's a space so that would be yeah so that's a space and so this must be B this must be trigger and so this must be literally the ASCII translation of each one of these as you can see ricochet is a big fan of using plain

text ASCII and multi-byte strings for their signature scans what could go wrong I mean the hard part I mean to be completely fair any binary is effectively a string a string is just binary and so it's like you know it's it's just like right there I this is

technically binary which is also just a string which is also just ASCII I thought it was hex well I mean hex is how you write binary out right these are ASCII strings yes they're not UTF-8 encoded strings because they'd be illegal or I

mean they are technically UTF-8 encoded strings uh these are also UTF-8 but they're just it's just hex right hex is just a grouping of binary yes and so uh by way Call of Duty is so realistic that it now starts with you in the mall with

a recruiter trying to trick you into signing up for the military yep that's actually the new Call of Duty a Pluto imp thank you all right the exploit so now that we know that anyone who has the sentence triggerbot in their game's memory will be flagged as a cheater by

the way that's nuts how was this not discovered this might sound reasonable at first glance triggerbot is a common occurrence in cheat menus surely you're you are using one let's see one if this phrase is found in your game right you think it

would be a little bit more than just simply looking for text characters. There's no way they just went that simple, like there's no way they're just doing a like that. That is entirely too simple, right? Entirely too simple. Uh, ridiculous, ridiculous. This might sound

reasonable at first glance. Yeah, I know. Uh, well unfortunately for Ricochet, that's not the case. Someone sends a message in game chat, the message will be in your game's memory. Someone sends you a friend request, their name will be in your game's memory when you're, let's see,

So that's the one thing I don't understand is how do you have a friend, how do you have someone that sends you a friend request that has the name of something that is triggerable, and they don't get banned for having that name? I

feel like they should also get triggered for having it, right? Uh, when you're playing the game, all the players' names in your lobby, guess what, are in your game's memory. The implication for quite some time, it has been possible to get people permanently banned by sending

them a friend request or posting a message, "Nice trigger bot dude," in the game chat. I even heard of someone who made an auto hotkey script to join uh, to spam Warzone lobbies and post a message in chat to get anyone in the lobby banned who is scanned by Ricochet during

the game. Couldn't be, couldn't be me, honest dude. This guy shipped fast. This is ship fast level security. Ship fast level security. Uh, I am in a position where I can say that several thousand random CoD players were banned by this exploit before streamers began to be

targeted sensor parasite Etc and the others were targeted before the big reveal I plan to target more but it seems uh when several major streamers are permanently banned Ricochet will turn on a ban off and investigate no fun wait on is this guy wait hold on did he just say

he's the reason why thousands of people got banned I I'm I'm misunderstanding this sentence am I not is he now wait he just said it wasn't him and now he's saying he is I'm in the position that I can say that several thousand random Call of Duty

players were banned by this exploit before streamers began to be targeted uh and others were targeted before the big reveal I planned to target more but it seems when several major streamers are permanently banned yeah yeah I know I know I know we we already read that this

is this is from uh what's it called visor so the guy just got he just banned several thousand people from the Call of Duty platform by sending them this guy's kind of a dick that is honestly just such dick behavior that's all I got to say about that if if

you're the one that did that you're just actually just a dick like that's all the that that's all there is you're just you're just a mean person you're a mean-spirited that's it actual Brown actual Brown hat Behavior it's still very funny I don't

think it's very funny honestly I don't think there's anything funny about uh taking money from somebody else right because they had to buy the game they probably spent money on it so that guy just said he stole somewhere between $60 to $200,000 from random people that's

like it's not great, this is Ricochet's fault. No, I understand that Ricochet put the exploit in, but tell me how, how wet hey wet, tell me how it's Ricochet's fault. Tell me how it's not how, tell me how it's, tell me how it is stealing when

someone says vandalism. Vandalism is taking ownership of your th of something and breaking it. Vandalism is saying it's mine now, I shall be able to do what I want to do. Like, vandalism is a subset of stealing, you just give it back afterwards. You take it, do what you want

with it, and then hand it back. Wet, you got to understand, you have to like, you have to uh, you have to help me understand how it's Ricochet's fault that's someone banned thousands of players. You got to help me on that one, because I, I'm a bit confused at how

shouldn't the outrage be with the incompetent anti-cheat? Yes, that the outrage is at the incompetent anti-cheat. You're absolutely right. I think that the, the incompetent anti-cheat is most certainly to blame for being incompetent, but to have let's see

they're the ones who wrote it to work this way. It is a very naive way to do anti-cheat. Just look for strings. I've been on the opposite side of anticheaters in Warzone. I've been blamed, let's see, I have blamed Activision and uh Ricochet

for being crap. What's funny to me is how poorly it's written. Yes, okay, that is funny to me also. I'm on your team. It is very, very funny, but Ricochet left the door open that caused the hackers to be able to do

something but to say it's Ricochet's fault that somebody got people banned is a little bit difficult for me to make that jump. It's the person's fault, right? Like I'm never going to, I will never ever ever in my life see that something is

bad and then look at that bad thing and then say because it was used bad, it's the person who created it's fault, right? Like no, I would never do that. Now Ricochet is at fault when, yes, Ricochet is obviously at fault when uh they're taking action when only big

streamers got caught, well big streamers have big voices and they get caught online when they're clearly not cheating and so becomes very good. It's negligence, yes, it's it's absolutely negligence. Negligence is is 100% on Ricochet's fault and it just shows it just shows how poor

Ricochet has actually been implemented. I mean the developers should be very very sorry and everyone who got banned should get a special skin that they can wear with pride around and free Call of Duty for the rest of their life, boom, there you go, right? All right, uh this is the result

of a major oversight by the Ricochet team. Absolutely, just yeah, this is crazy. The fact that they just scanned because what they're really saying in here is that they're scanning all the memory. They're scanning the entire in-memory running Call of Duty like everything, so

if the thing takes what three gigabytes of memory, are they scanning literally the entire thing? Creating an anti-cheat is hard, oh absolutely, creating an anti-cheat is very very hard. No one is saying creating a good anti-cheat is easy, right? But they're they're taking

the entire running process with all of its memory and just scanning it like that for text for ASCII strings like that is crazy the thing is is even just like searching for that simple that small of a binary like that could just happen by accident in an image I assume right like

you could just run into that anywhere uh Activision has already started to unban accounts that were banned using this exploit but this comes at a caveat also real cheaters who were caught using these strings will get unbanned yeah but it's their fault they just had a poor

system they just simply have to unban everybody that runs into this that's that's just that also where Cas see not to understand how many people got poned by this small number of claims you can read their statement here oh yeah I want to read that let's read their statement

all right to go back to I think it was Wed who said uh it's their fault a good example of why this isn't like I would not put blame on Ricochet for the exercise of this exploit that caused thousands of people to be banned a good

example of that would be when Chase I believe it was Chase had that Oopsy Daisy where you could withdraw money by you know depositing a large check withdrawing the money and then not actually having it work like that was a bug in their system but to exploit it

requires you to consciously make a decision to do something that's kind of shitty the TikTok free money glitch yeah the infinite money glitch yeah you mean check fraud yes so typically you don't just go and get people banned yeah so typically vandalism right right typically you

You can't just blame someone just because they hand you a spray, you know? Like a spray paint doesn't mean you can just go and spray paint stuff anyways. Either way, I'm just saying this is just not good behavior. I just don't like the behavior.

Of this, you assume there's some sort of reasonable disclosure, some sort of stuff like that. And then at last effort, he doesn't, whoever made this, doesn't go anywhere in here to kind of show like they went through some sort of reasonable disclosure. And God, uh...

Right, there's no proof that he's saying, "Well, I tried to say these things. I went through the proper channels. No one would listen to me, so I had to make it so that they understand." That there's a whole bunch of, you know, bunch of stuff. Yeah, I...

Don't care about it, but it's not good behavior, exactly. I think someone said it perfectly. Uh, this is identical ethically to blaming the person that got robbed for leaving their door unlocked. Yes, like the person obviously did a terrible anti-cheat. I think we can all press one in...

The chat and agree that this chat is or this anti-cheat is absolutely horrible. Nobody is going to, nobody is going to deny that. I just really dislike shitty behavior when you discover something is open. Right? It just means that you're, you're also shitty. I've done...

Anti-cheat. Uh, let's see. Re- in the past for fun. I swear, I've never cheated on online games. Uh, using plain text content signatures is a really poor solution. Signatures are usually a combination of content and structure, not just that. Signatures themselves should never be a...

trigger of instantaneous ban that's my personal opinion it doesn't mean that the one doing the vandalism had an excuse but paid product as expensive as a AAA game has to have not garbage anti-cheat yes you should I mean I think what you're really saying is that there

should never be an anti-cheat that's put into place that can have a false positive I I think that that is I think that that is a perfect uh summation of what you're trying to say that if something like that happens it should minimally flag the account so that

there's some sort of review now false positives kill your player base if false positives are just bad right like we can all agree that false positives are bad right they're just they're just not the way we want to live uh private pile no why is your Foot Locker Unlocked it it

wasn't for the people like you it would it would it wouldn't have theft full metal jacket yeah we wouldn't have to have yeah that's also not true but I appreciate the Full Metal Jacket reference right if you follow he also points out that individual bans are

ineffective because they won't work as a canary in the cheat mine yeah I I I don't fully understand all those things but I think it is there's I'd have to understand more of what he's attempting to say there but

let's look at the Call of Duty response what's the Call of Duty response Ricochet anti-cheat has identified and disabled a workaround to detect detection system in Modern Warfare 3 and Call of Duty Warzone that impacted a small number of legitimate player accounts we have

restored all accounts that were impacted. An examination of our systems was conducted for safety and monitoring will continue. Is that really how they're going to spin it? What an what an [ __ ] way to say things dude, to be like you know what our

cheat system has been is it needs an absolute overhaul and we have we have hurt players who've been banned due to our poor programming. Right, just absolutely no accountability. A back door has been discovered, a back door has been discovered. What's crazy uh is this AAA

game basically has no anti-cheat. Dude, this is crazy. I by the way for those anyone who thinks like anti-cheat or removing cheat like here's the problem about I think all Gamers and you see this all the time on one hand you have Gamers that

absolutely absolutely hate cheaters. On the other hand you hate people that goof up making these anti-cheats. I mean there's there's still like to me what it says is that Ricochet is still trying to figure out how to do anti-cheats well.

I'm not I I think they did a horrible job and I think it should have been plainly obvious that what they're doing is bad, but understanding and building good anti-cheats I assume is a non-trivial task and there's going to be

a lot of mess ups and getting the right people in place is going to take a long time. My guess for them because everybody knows Call of Duty is a pretty horrible place to work. Activision is not the place you want to be so it's probably

really hard to get good talent right it's probably really hard to get good talent when you have a a uh a studio that's known to just be a meat grinder right it was a [ __ ] moment I guarantee you it was a [ __ ] moment

you you know it that they figured it out they knew this cheat existed they couldn't figure out how to get around it and then they totally just said you know we just need to get this thing to be done right now so people can have a good

time so there's no cheaters right and then lo and behold cheaters uh it's never going to be perfect DMAs uh making cheating virtually undetectable I mean at the end of the day the memory is in your computer you can always find a way to

create very least read the memory yeah yeah that's why there's that's why there's so much kernel level anti-che is my assumption these anti-cheats that go all the way down to kernel level is because they can they can just read everything right Talent is a is a

fallacy Talent is an illusion I I just simply disagree with you and we've already talked this to death right oh yeah but DMAs are external devices yeah there you go yeah I mean I would assume there's behavioral things you would much rather look up right like behavioral

things is probably better than doing anything else because like you said software stuff is is so difficult anyways um I don't know why this is even a thing yeah it's ridiculous anyways hey you know just remember we all make I mean if I I really just hope this just if

anything this should just make everybody breathe a breath of fresh air realizing that everybody cuts corners when you're programming My only encouragement would be to make sure you cut the corners that aren't very very important to security you know like maybe if there's

a security one maybe you don't want to cut the corner okay maybe that's like the one you don't want to do because that could be um that could be bad Also obviously use AI and Rust and Nix because if you would have used AI Rust

and Nix this check this cheat would have never happened Everybody everybody knows that everybody knows that Nix would have solved this but you didn't you didn't use Nix so obviously it's not solved That's your problem The name you heard it here first folks that's right you

heard it here first folks first folks the name is the prime

The Worst Anti-Cheat Ever

This is a place for all the things that are awesome on stream. 

ThePrimeTime

콜 오브 듀티 퍼마밴 익스플로잇 소개

놀라운 콜 오브 듀티 퍼마밴 익스플로잇을 발표합니다.

익스플로잇의 믿을 수 없는 특성을 강조합니다.

부정 행위 방지 메커니즘의 서명 스캔 개요.

서명 스캔과 그 기능에 대한 설명입니다.

서명 스캔이 실제로 어떻게 작동하는지에 대한 설명입니다.

리코쳇 안티 치트 및 서명 스캔

리코쳇은 부정 행위 탐지를 위해 서명 스캔을 사용합니다.

치트 관련 문자열이 포함된 메모리 영역을 발견했습니다.

오탐을 방지하기 위한 신중한 서명 생성의 중요성.

리코쳇의 시그니처 스캔 문자열 분석.

서명에 ASCII 문자를 사용하는 것에 대해 논의합니다.

'트리거봇'이라는 문구를 사용한 익스플로잇에 대한 설명.

익스플로잇의 단순성과 잠재적 결과에 대한 논의.

게임 내 채팅 및 친구 요청이 어떻게 차단을 유발할 수 있는지 설명합니다.

익스플로잇을 통한 대량 금지 가능성에 대한 논의가 진행 중입니다.

취약점을 익스플로잇하는 데 사용되는 자동 단축키 스크립트에 대한 언급이 있습니다.

익스플로잇의 윤리적 의미와 익스플로잇 공격자의 행동에 대한 토론.

익스플로잇의 재정적 영향에 대한 논의.

책임이 리코체에게 있는지, 아니면 익스플로잇자에게 있는지에 대한 논쟁.

무능한 안티 치트에 대한 분노에 대한 토론이 진행되었습니다.

부정 행위 방지 시스템의 부실한 설계에 대한 논의.

리코셰의 결함 분석과 콜 오브 듀티의 대응

리코쉐의 메모리 스캔 방법 분석.

좋은 부정행위 방지 시스템 구축의 어려움에 대해 토론합니다.

익스플로잇 및 계정 차단 해제에 대한 Activision의 대응.

윤리적 의미와 책임에 대한 추가 논의.

이 익스플로잇에 대한 콜 오브 듀티의 공식 대응입니다.

익스플로잇의 전반적인 영향과 게임 내 치트 방지 현황에 대해 논의합니다.

치트꾼과 결함이 있는 부정행위 방지 시스템에 대한 게이머의 관점.

효과적인 부정행위 방지 시스템 구축의 과제에 대해 논의합니다.

Activision에서 인재 채용의 어려움에 대해 논의합니다.

리코셰의 결함이 있는 구현의 이유에 대한 추측입니다.

커널 수준에서 부정 행위를 방지하는 데 따르는 어려움에 대해 논의합니다.

부정 행위 방지 개발에 대한 대안적 접근 방식에 대해 논의합니다.