Fake servers in Counter-Strike #1014

Open
ghost opened this Issue Jan 29, 2013 · 29 comments

Comments

Projects
None yet
8 participants
@ghost

ghost commented Jan 29, 2013

This is not a bug, but rather a feature request to fix an annoying thing in Counter-Strike. The server list is plagued with redirect and fake servers. It's really hard to find a regular server, most of the servers redirect to a specific one.

In order to spot a fake server I have to right click it and check "show server info". On fake servers everyone has played the exactly same amount of time.
2013-01-29-094656_413x437_scrot

It's really annoying, I guess it shouldn't be too hard to do something to them. Most of these servers also rebind your z, x, c keys to spam a specific spam message. Some of these servers also change my Gamemenu.res so I can join their servers from the main menu. They also bind some keys to join their servers. Ridiculous!

Most of these servers are also still Protocol 47 (with some kind of a compatability patch for 48 clients).

I hope you could do something about this. I want to play CS the way it's supposed to be played. This affects all OSes.

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

This effects all versions?

Member

MrSchism commented Jan 29, 2013

This effects all versions?

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jan 29, 2013

Yes, it affects all mods, regular Half-Life as well. All GoldSrc based games are affected by this, on all OSes. It's really a game breaker. I thought I report this "bug" here since it affects all OSes.

At the moment, 75% of servers are like this. It tries to connect to them (3 bars), then it joins an another server, which will hack my game.

5548340c

The best solution would be getting rid of the fake servers on the main server list.

ghost commented Jan 29, 2013

Yes, it affects all mods, regular Half-Life as well. All GoldSrc based games are affected by this, on all OSes. It's really a game breaker. I thought I report this "bug" here since it affects all OSes.

At the moment, 75% of servers are like this. It tries to connect to them (3 bars), then it joins an another server, which will hack my game.

5548340c

The best solution would be getting rid of the fake servers on the main server list.

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

Sadly, this is not the place to report it; this is for bugs regarding the linux version, not the service (which is causing the issue).

Member

MrSchism commented Jan 29, 2013

Sadly, this is not the place to report it; this is for bugs regarding the linux version, not the service (which is causing the issue).

@MrSchism MrSchism closed this Jan 29, 2013

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jan 29, 2013

But it affects the Linux version too, and it should be fixed. I don't get why Valve allows players to host fake servers and hack other players' computers. It's impossible to play the game via server list.

As I said, it's not a bug, but it's a game breaker. It's a feature request just like #1006 is and it should have been in first place already. The game is completely unplayable to me because of this.

I hope Valve could AT LEAST take a look at this.

ghost commented Jan 29, 2013

But it affects the Linux version too, and it should be fixed. I don't get why Valve allows players to host fake servers and hack other players' computers. It's impossible to play the game via server list.

As I said, it's not a bug, but it's a game breaker. It's a feature request just like #1006 is and it should have been in first place already. The game is completely unplayable to me because of this.

I hope Valve could AT LEAST take a look at this.

@unrealz0r

This comment has been minimized.

Show comment
Hide comment
@unrealz0r

unrealz0r Jan 29, 2013

How is this NOT a bug? If this is the way you treat your customers I'm pretty so I won't be buying anything from you again. I'm in the same situation as nullcollision is. I can't find any proper games, just a list full of fakes.

This seems to also affect the Steam server browser.

How is this NOT a bug? If this is the way you treat your customers I'm pretty so I won't be buying anything from you again. I'm in the same situation as nullcollision is. I can't find any proper games, just a list full of fakes.

This seems to also affect the Steam server browser.

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

@unrealz0r. I'm not a Valve employee, first and foremost. Second, this isn't a bug regarding the linux client; there are other places for this report to go.

Being the linux client is still in beta and so many people are having a problem even connecting, you'll probably see a change in what servers are available. The issue is a well-documented one with a LONG history. Lets not forget that the game is from '99~'00. Many of the servers available were created ages ago and were hijacked sometime in the recent past (I'm reading some of the hijack articles going back 5 years).

The solution will be twofold. First, as more legit players come to play, there will be more clean servers. Second, there will be an increase in awareness of the issue due to an increased amount of players. More complaints about a given server, the more that will be taken down. Because of how these servers function, you have to take them down as they are detected; a fell-swoop won't do much.

The community has to be as proactive as the developers.

Valve can and will see this; closed issues don't go away.

On an aside, There are dozens of walkthroughs on how to easily hijack a CS1.6 server. CS:S and CS:GO are both safer until a patch can be made.

Member

MrSchism commented Jan 29, 2013

@unrealz0r. I'm not a Valve employee, first and foremost. Second, this isn't a bug regarding the linux client; there are other places for this report to go.

Being the linux client is still in beta and so many people are having a problem even connecting, you'll probably see a change in what servers are available. The issue is a well-documented one with a LONG history. Lets not forget that the game is from '99~'00. Many of the servers available were created ages ago and were hijacked sometime in the recent past (I'm reading some of the hijack articles going back 5 years).

The solution will be twofold. First, as more legit players come to play, there will be more clean servers. Second, there will be an increase in awareness of the issue due to an increased amount of players. More complaints about a given server, the more that will be taken down. Because of how these servers function, you have to take them down as they are detected; a fell-swoop won't do much.

The community has to be as proactive as the developers.

Valve can and will see this; closed issues don't go away.

On an aside, There are dozens of walkthroughs on how to easily hijack a CS1.6 server. CS:S and CS:GO are both safer until a patch can be made.

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jan 29, 2013

We can only hope Valve fixes this, as with Linux support I can bet there will be more angry customers. Valve should make some kind of a authentication system for the master server as well, as I can see there are many unauthorized servers there (everyone has VALVE_ID_LAN).

I can only hope for the best.

ghost commented Jan 29, 2013

We can only hope Valve fixes this, as with Linux support I can bet there will be more angry customers. Valve should make some kind of a authentication system for the master server as well, as I can see there are many unauthorized servers there (everyone has VALVE_ID_LAN).

I can only hope for the best.

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

Like I said, part of it is finding servers you know are good. Most communities that hosted CS1.6 servers dropped them for CSS. Those that remained (many being home-based servers) got hacked and hijacked because of a very big security gap.

13 years ago, game 'sploits were everywhere.

The only way that these servers will become less of an issue is people actively moderating their own servers... which requires more people playing. There will be the same amount (potentially a few more), but the percentage of them in the server list will drop.

Member

MrSchism commented Jan 29, 2013

Like I said, part of it is finding servers you know are good. Most communities that hosted CS1.6 servers dropped them for CSS. Those that remained (many being home-based servers) got hacked and hijacked because of a very big security gap.

13 years ago, game 'sploits were everywhere.

The only way that these servers will become less of an issue is people actively moderating their own servers... which requires more people playing. There will be the same amount (potentially a few more), but the percentage of them in the server list will drop.

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jan 29, 2013

The problem is that the server admins are doing this themselves, they want more players on their servers. In my opinion doing this is wrong.

I still know many communities which play 1.6, it's a very popular game in my country as well.

It shouldn't be too hard for Valve to filter out these servers. The redirect ones, I mean. It's not fair against other server owners. Pirates also have their own, redirect filtered masterserver, why can't we have one?

I respect Valve as a company, but it just seems kinda random to me to not filter them. I hope you get my point. :)

ghost commented Jan 29, 2013

The problem is that the server admins are doing this themselves, they want more players on their servers. In my opinion doing this is wrong.

I still know many communities which play 1.6, it's a very popular game in my country as well.

It shouldn't be too hard for Valve to filter out these servers. The redirect ones, I mean. It's not fair against other server owners. Pirates also have their own, redirect filtered masterserver, why can't we have one?

I respect Valve as a company, but it just seems kinda random to me to not filter them. I hope you get my point. :)

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

That's just it though; the server admins largely -aren't- doing it themselves; the person who hijacked the server set up the hijacked system to forward it to one of theirs which modifies the client into adware..

True, a master server would help. Here's hoping they take suitable action.

Member

MrSchism commented Jan 29, 2013

That's just it though; the server admins largely -aren't- doing it themselves; the person who hijacked the server set up the hijacked system to forward it to one of theirs which modifies the client into adware..

True, a master server would help. Here's hoping they take suitable action.

@AnAkkk

This comment has been minimized.

Show comment
Hide comment
@AnAkkk

AnAkkk Jan 29, 2013

That's wrong. A lot of these servers are put especially by some server admins, mostly from eastern europe if you check the IPs. Some IPs have hundred of fake servers, they just have different ports. It's quite easy to do, there are tools available that let you do it.

Checking the server list, it looks like 95% of servers are fake ones for me. There are more thousands of fake servers coming from 2-3 different IPs. I get a few real servers, which seem to be mostly empty.

And I have noticed a few times that the servers were able to replace the client files with different ones, I had my game menu modified as well, and other menus too. That's not limited to fake servers. Some real servers do it as well.

AnAkkk commented Jan 29, 2013

That's wrong. A lot of these servers are put especially by some server admins, mostly from eastern europe if you check the IPs. Some IPs have hundred of fake servers, they just have different ports. It's quite easy to do, there are tools available that let you do it.

Checking the server list, it looks like 95% of servers are fake ones for me. There are more thousands of fake servers coming from 2-3 different IPs. I get a few real servers, which seem to be mostly empty.

And I have noticed a few times that the servers were able to replace the client files with different ones, I had my game menu modified as well, and other menus too. That's not limited to fake servers. Some real servers do it as well.

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Jan 29, 2013

Member

This was discussed all over the place. http://forums.steampowered.com/forums/archive/index.php/t-1667666.html has a great article from two years ago which gives a few work-arounds.

This is a nice early one: http://www.shoot-em.com/forum/how-i-removing-the-ads-t590.html which offers a way to prevent the config re-write.

Utilizing both is a good way to keep yourself safe until a fix comes.

Member

MrSchism commented Jan 29, 2013

This was discussed all over the place. http://forums.steampowered.com/forums/archive/index.php/t-1667666.html has a great article from two years ago which gives a few work-arounds.

This is a nice early one: http://www.shoot-em.com/forum/how-i-removing-the-ads-t590.html which offers a way to prevent the config re-write.

Utilizing both is a good way to keep yourself safe until a fix comes.

@alfred-valve

This comment has been minimized.

Show comment
Hide comment
@alfred-valve

alfred-valve Jan 30, 2013

I do plan to address the issue of fake servers, perhaps not with the initial release but certainly shortly there after.

I do plan to address the issue of fake servers, perhaps not with the initial release but certainly shortly there after.

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jan 30, 2013

I'm glad to hear about that. :)

ghost commented Jan 30, 2013

I'm glad to hear about that. :)

@Neeeeeeeeeel

This comment has been minimized.

Show comment
Hide comment
@Neeeeeeeeeel

Neeeeeeeeeel Feb 1, 2013

Just a comment about this screen:
https://f.cloud.github.com/assets/3123539/106262/c207014a-69ed-11e2-849e-34156af9e610.jpg

What you showed can be done using a non-steam client (protocol 47), if you use Steam CS Client (protocol 48) nobody can do that to your game client

Just a comment about this screen:
https://f.cloud.github.com/assets/3123539/106262/c207014a-69ed-11e2-849e-34156af9e610.jpg

What you showed can be done using a non-steam client (protocol 47), if you use Steam CS Client (protocol 48) nobody can do that to your game client

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Feb 2, 2013

@Neeeeeeeeeel: This has happened me to with Protocol 48 client on Steam, too, so I doubt that.

ghost commented Feb 2, 2013

@Neeeeeeeeeel: This has happened me to with Protocol 48 client on Steam, too, so I doubt that.

@xPaw

This comment has been minimized.

Show comment
Hide comment
@xPaw

xPaw Feb 2, 2013

@Neeeeeeeeeel: That is still possible to do on latest public version. However, Alfred said that he fixed that in beta version, I didn't test that yet, so I can't confirm.

xPaw commented Feb 2, 2013

@Neeeeeeeeeel: That is still possible to do on latest public version. However, Alfred said that he fixed that in beta version, I didn't test that yet, so I can't confirm.

@Neeeeeeeeeel

This comment has been minimized.

Show comment
Hide comment
@Neeeeeeeeeel

Neeeeeeeeeel Feb 2, 2013

Mmm I remember I tested (some time ago) and I can't
But he fixed it so i won't care about xd

Mmm I remember I tested (some time ago) and I can't
But he fixed it so i won't care about xd

@MrSchism

This comment has been minimized.

Show comment
Hide comment
@MrSchism

MrSchism Feb 4, 2013

Member

If anyone's still having issues (and didn't bother reading the articles I mentioned), the best way is to chmod your config file so it's readable, but not writable. 544 or something of the sort should suffice as a stop-gap.

Member

MrSchism commented Feb 4, 2013

If anyone's still having issues (and didn't bother reading the articles I mentioned), the best way is to chmod your config file so it's readable, but not writable. 544 or something of the sort should suffice as a stop-gap.

@ghost ghost assigned alfred-valve Feb 5, 2013

@alfred-valve

This comment has been minimized.

Show comment
Hide comment
@alfred-valve

alfred-valve Feb 5, 2013

The update today has changed the serverbrowser to not include bots in the player count for a server, so this should help filter out these fake servers. Just tick "has users playing" in the filter options.

The update today has changed the serverbrowser to not include bots in the player count for a server, so this should help filter out these fake servers. Just tick "has users playing" in the filter options.

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Feb 6, 2013

Is this just for 1.6 or for Steam as well?

ghost commented Feb 6, 2013

Is this just for 1.6 or for Steam as well?

@alfred-valve

This comment has been minimized.

Show comment
Hide comment
@alfred-valve

alfred-valve Feb 6, 2013

Just for Goldsrc games (so cs and hl1 for now, and the rest soon).

Just for Goldsrc games (so cs and hl1 for now, and the rest soon).

@AnAkkk

This comment has been minimized.

Show comment
Hide comment
@AnAkkk

AnAkkk Feb 9, 2013

The filter helps with fake servers, though there are still quite a lot of No Steam/Cracked servers which are full of people that are using non-steam cracked versions of the game. It can be seen with their SteamIDs which are invalid. Most of these servers are full of cheaters.
Unfortunately, there is no way to find out if a server is cracked before joining it. Any chance these servers can be delisted?

AnAkkk commented Feb 9, 2013

The filter helps with fake servers, though there are still quite a lot of No Steam/Cracked servers which are full of people that are using non-steam cracked versions of the game. It can be seen with their SteamIDs which are invalid. Most of these servers are full of cheaters.
Unfortunately, there is no way to find out if a server is cracked before joining it. Any chance these servers can be delisted?

@Yulike

This comment has been minimized.

Show comment
Hide comment
@Yulike

Yulike Feb 9, 2013

@anakin1 under filters set Anti-Cheat to secure, is that what you're looking for?

Yulike commented Feb 9, 2013

@anakin1 under filters set Anti-Cheat to secure, is that what you're looking for?

@AnAkkk

This comment has been minimized.

Show comment
Hide comment
@AnAkkk

AnAkkk Feb 9, 2013

No. These servers are all showing as secured, while they are not. I guess they are either faking the status, or it's just that their crack allow clients that are not running VAC to connect anyway.

AnAkkk commented Feb 9, 2013

No. These servers are all showing as secured, while they are not. I guess they are either faking the status, or it's just that their crack allow clients that are not running VAC to connect anyway.

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Apr 16, 2014

Alfred, Too much fake game server displayed in the list of masterserver.

The following fake servers IP's:

88.255.155.2:27015
88.255.155.5:27015
88.255.155.20:27015
88.255.155.110:27015
88.255.155.3:27015
88.255.155.51:27015
88.255.155.80:27015
88.255.155.54:27015
88.255.155.59:27015
88.255.155.73:27015
88.255.155.60:27015
88.255.155.29:27015
88.255.155.9:27015
88.255.155.6:27015
88.255.155.31:27015
88.255.155.101:27015
88.255.155.75:27015
88.255.155.99:27015
88.255.155.50:27015
88.255.155.4:27015
88.255.155.49:27015
88.255.155.83:27015
88.255.155.202:27015
88.255.155.8:27015
88.255.155.57:27015
88.255.155.56:27015
88.255.155.61:27015
88.255.155.84:27015
88.255.155.41:27015
88.255.155.47:27015
88.255.155.77:27015
88.255.155.43:27015
88.255.155.33:27015
88.255.155.58:27015
88.255.155.32:27015
88.255.155.13:27015
88.255.155.95:27015
88.255.155.91:27015
88.255.155.7:27015
88.255.155.78:27015
88.255.155.115:27015
88.255.155.11:27015
88.255.155.17:27015
88.255.155.39:27015
88.255.155.85:27015
88.255.155.81:27015
88.255.155.18:27015
88.255.155.200:27015
88.255.155.22:27015
88.255.155.40:27015
88.255.155.30:27015
88.255.155.34:27015
88.255.155.107:27015
88.255.155.86:27015
88.255.155.114:27015
88.255.155.48:27015
88.255.155.16:27015
88.255.155.113:27015
88.255.155.76:27015
88.255.155.106:27015
88.255.155.94:27015
88.255.155.90:27015
88.255.155.42:27015
88.255.155.19:27015
88.255.155.112:27015
88.255.155.53:27015
88.255.155.92:27015
88.255.155.71:27015
88.255.155.82:27015
88.255.155.102:27015
88.255.155.111:27015
88.255.155.89:27015
88.255.155.62:27015
88.255.155.96:27015
88.255.155.201:27015
88.255.155.88:27015
88.255.155.23:27015
88.255.155.74:27015
88.255.155.97:27015
88.255.155.37:27015
88.255.155.38:27015
88.255.155.44:27015
88.255.155.103:27015
88.255.155.28:27015
88.255.155.98:27015
88.255.155.87:27015
88.255.155.79:27015
88.255.155.109:27015
88.255.155.105:27015
88.255.155.45:27015
88.255.155.55:27015
88.255.155.14:27015
88.255.155.100:27015

ghost commented Apr 16, 2014

Alfred, Too much fake game server displayed in the list of masterserver.

The following fake servers IP's:

88.255.155.2:27015
88.255.155.5:27015
88.255.155.20:27015
88.255.155.110:27015
88.255.155.3:27015
88.255.155.51:27015
88.255.155.80:27015
88.255.155.54:27015
88.255.155.59:27015
88.255.155.73:27015
88.255.155.60:27015
88.255.155.29:27015
88.255.155.9:27015
88.255.155.6:27015
88.255.155.31:27015
88.255.155.101:27015
88.255.155.75:27015
88.255.155.99:27015
88.255.155.50:27015
88.255.155.4:27015
88.255.155.49:27015
88.255.155.83:27015
88.255.155.202:27015
88.255.155.8:27015
88.255.155.57:27015
88.255.155.56:27015
88.255.155.61:27015
88.255.155.84:27015
88.255.155.41:27015
88.255.155.47:27015
88.255.155.77:27015
88.255.155.43:27015
88.255.155.33:27015
88.255.155.58:27015
88.255.155.32:27015
88.255.155.13:27015
88.255.155.95:27015
88.255.155.91:27015
88.255.155.7:27015
88.255.155.78:27015
88.255.155.115:27015
88.255.155.11:27015
88.255.155.17:27015
88.255.155.39:27015
88.255.155.85:27015
88.255.155.81:27015
88.255.155.18:27015
88.255.155.200:27015
88.255.155.22:27015
88.255.155.40:27015
88.255.155.30:27015
88.255.155.34:27015
88.255.155.107:27015
88.255.155.86:27015
88.255.155.114:27015
88.255.155.48:27015
88.255.155.16:27015
88.255.155.113:27015
88.255.155.76:27015
88.255.155.106:27015
88.255.155.94:27015
88.255.155.90:27015
88.255.155.42:27015
88.255.155.19:27015
88.255.155.112:27015
88.255.155.53:27015
88.255.155.92:27015
88.255.155.71:27015
88.255.155.82:27015
88.255.155.102:27015
88.255.155.111:27015
88.255.155.89:27015
88.255.155.62:27015
88.255.155.96:27015
88.255.155.201:27015
88.255.155.88:27015
88.255.155.23:27015
88.255.155.74:27015
88.255.155.97:27015
88.255.155.37:27015
88.255.155.38:27015
88.255.155.44:27015
88.255.155.103:27015
88.255.155.28:27015
88.255.155.98:27015
88.255.155.87:27015
88.255.155.79:27015
88.255.155.109:27015
88.255.155.105:27015
88.255.155.45:27015
88.255.155.55:27015
88.255.155.14:27015
88.255.155.100:27015

@erm3nda

This comment has been minimized.

Show comment
Hide comment
@erm3nda

erm3nda Jul 4, 2015

You should publish that fake list to some "hack me if you can list" :D

erm3nda commented Jul 4, 2015

You should publish that fake list to some "hack me if you can list" :D

@ghost

This comment has been minimized.

Show comment
Hide comment
@ghost

ghost Jul 4, 2015

These servers should definitely be blacklisted. There's far too many of them.


Lähettäjä: M3ndamailto:notifications@github.com
Lähetetty: ‎4.‎7.‎2015 18:53
Vastaanottaja: ValveSoftware/steam-for-linuxmailto:steam-for-linux@noreply.github.com
Kopio: nullcollisionmailto:villesalminen@outlook.com
Aihe: Re: [steam-for-linux] Fake servers in Counter-Strike (#1014)

You should publish that fake list to some "hack me if you can list" :D


Reply to this email directly or view it on GitHub:
#1014 (comment)

ghost commented Jul 4, 2015

These servers should definitely be blacklisted. There's far too many of them.


Lähettäjä: M3ndamailto:notifications@github.com
Lähetetty: ‎4.‎7.‎2015 18:53
Vastaanottaja: ValveSoftware/steam-for-linuxmailto:steam-for-linux@noreply.github.com
Kopio: nullcollisionmailto:villesalminen@outlook.com
Aihe: Re: [steam-for-linux] Fake servers in Counter-Strike (#1014)

You should publish that fake list to some "hack me if you can list" :D


Reply to this email directly or view it on GitHub:
#1014 (comment)

@erm3nda

This comment has been minimized.

Show comment
Hide comment
@erm3nda

erm3nda Jul 4, 2015

What i learn on my life, is... if the weird things are NOT SOLVED, you must guess that the owner of service is benefiting from this. You MUST CLAIM for remove that ASAP.

erm3nda commented Jul 4, 2015

What i learn on my life, is... if the weird things are NOT SOLVED, you must guess that the owner of service is benefiting from this. You MUST CLAIM for remove that ASAP.

@ghost ghost referenced this issue in dreamstalker/rehlds Mar 26, 2016

Closed

compiling error #190

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment