URI:
   DIR Return Create A Forum - Home
       ---------------------------------------------------------
       Zerg Hex Forum
  HTML https://zerghex.createaforum.com
       ---------------------------------------------------------
       *****************************************************
   DIR Return to: Bug/Exploit Reports
       *****************************************************
       #Post#: 1094--------------------------------------------------
       I saw a guy editing his stats
       By: Asiown Date: December 2, 2020, 4:39 am
       ---------------------------------------------------------
       Hello, few days ago i played with a player name Algoritm and his
       stat was 71-0 i said "wow is that real"
       and he told me that its edited. i also played with him few times
       and he isnt even pro to maybe be able to luckily achieve that.
       anyways he was editing his stats... so my question is.. how did
       he do that and can you fix it? i am working hard to keep my
       stats the best in this mod and dont like seeing 71-0 people.
       also:
       1. please nerf infused area damage, and set maximum area damage
       possible for group of infused.
       2. please cancel the lock of the gas of the dead terrans. when
       terran die/leaves after 11 the zerg keep the minerals and the
       spawners terran should have the possibility to gas there as
       well. zerg can send there units normal. (now after chems out it
       seems reasonable)
       3.please cancel the option for players without 100 rating terran
       to go zerg. its just annoying to get them so much. they just
       cause other zerg to leave or borring game.
       4.please limit 2 itali max for player
       my nickname in game is Asiown/Creepremover in EU
       thanks
       #Post#: 1095--------------------------------------------------
       Re: I saw a guy editing his stats
       By: RickSanchez Date: December 2, 2020, 4:46 am
       ---------------------------------------------------------
       Yes that is possible. The Bankfile is basically a uncrypted XML.
       The game generates a string of chars via leftshift converted to
       letters to verify the stats. It is not that easy to recode a
       valid generator but possible.
       [code]<?xml version="1.0" encoding="utf-8"?>
       <Bank version="1">
       <Section name="signatures">
       <Key name="signature1">
       <Value string="RJRPRJPROYJRYOOUDP"/>
       </Key>
       </Section>
       <Section name="stats_player">
       <Key name="wins_zerg">
       <Value int="5"/>
       </Key>
       <Key name="games_zerg">
       <Value int="7"/>
       </Key>
       <Key name="wins_terran">
       <Value int="22"/>
       </Key>
       <Key name="games_terran">
       <Value int="25"/>
       </Key>
       </Section>
       </Bank>
       [/code]
       1 no
       2 yes
  HTML https://zerghex.createaforum.com/new-ideas/destructable-gasblockers/<br
       />feel free to bump
       3 no
       4 no :D
       #Post#: 1096--------------------------------------------------
       Re: I saw a guy editing his stats
       By: Speed Date: December 2, 2020, 5:18 am
       ---------------------------------------------------------
       Ah yes bankhackers.... I loved playing them in Probes vs. Zealot
       2, they were such a nice rating boost :D
       Guess in Zerg Hex there is no rating boost, but who cares.
       Hackers gonna hack, just like trolls will troll.
       #Post#: 1099--------------------------------------------------
       Re: I saw a guy editing his stats
       By: ZergTriumph Date: December 2, 2020, 9:37 am
       ---------------------------------------------------------
       Infused are already very weak in this patch. They're really only
       a counter to T1 marines.  Vets and elites eat them alive.
       #Post#: 1109--------------------------------------------------
       Re: I saw a guy editing his stats
       By: Hecari Date: December 2, 2020, 5:27 pm
       ---------------------------------------------------------
       It is also possible to game your .bank file by simply making a
       backup of it before playing a game. If you win, keep the new
       file, if you lose, restore the backup. Tada, no losses ever.
       As a side note, since the local client is the one that generates
       the signature, it is inherently insecure.
       #Post#: 1231--------------------------------------------------
       Re: I saw a guy editing his stats
       By: reh Date: December 9, 2020, 7:28 pm
       ---------------------------------------------------------
       Please note that there is a checksum. Therefore, editing the
       bank file requires a bit more effort than just setting different
       numbers. Zerg Hex will reset all stats to 0 if the numbers do
       not match with the hash.
       The hash function of Zerg Hex is not completely trivial, it
       requires some amount of minutes to reverse engineer it.
       (Technically, there are 2 checksums: Starcraft 2 itself encodes
       the xml files with a checksum and Zerg Hex calculates its own
       checksum within the xml. However, the Starcraft 2 checksum
       calculation is well documented and therefore not relevant. It is
       just a one time effort to solve for all bank files).
       High stats have no benefit in the game. I rarely, very rarely
       encounter stats that look modified and if, it just does not
       matter.
       In conclusion, the effort to modify this is it quite high and
       the benefits are quite low to questionable. It is impossible to
       fix this in a secure way, one can always find ways around it.
       That is maybe a bug in the game design as saves are stored
       locally, but not a bug from Zerg Hex side.
       Therefore, in my humble view, it is good as it is.
       I am still sad that Zerg Hex parses the integer in the bank file
       as unsigned and I cannot have negative statistics :( (corrected:
       Zerh Hex does not display negative scores, thanks to Hecari in
       the post below for correcting this)
       #Post#: 1468--------------------------------------------------
       Re: I saw a guy editing his stats
       By: Hecari Date: December 27, 2020, 8:57 pm
       ---------------------------------------------------------
       Correct me if I am wrong as I am not a Starcraft II mapper, but
       I do believe that scores are indeed parsed as signed integers,
       and you can definitely in theory have negative statistics.
       Specifically, retrieving statistics from bank files calls
       BankValueGetAsInt(), which returns a 32 bit signed integer,
       which is then stored into another signed integer array. In fact,
       according to my research, Galaxy does not have unsigned ints at
       all.
       You are however correct in that there is little point to editing
       one's stats since it has no bearing on gameplay whatsoever. If
       anything, resetting one's score to 0/0 provides the most
       metagaming benefit in that perhaps the Zerg will not focus you
       from stats alone.
       #Post#: 1682--------------------------------------------------
       Re: I saw a guy editing his stats
       By: reh Date: January 17, 2021, 7:44 pm
       ---------------------------------------------------------
       Thank you very much for the fact checking. I have further
       investigated this issue due to your remarks.
       Indeed, it is not an issue with the parsing of the value. The
       value can be negative and the int that is internally used is
       signed, you are totally correct here.
       However, negative scores cannot be displayed by the game logic
       due to some specific implementation detail.
       Details: To print the leaderboard, the game logic initializes it
       first with some sorting. The sorting is based on the score,
       which is calculated by number of games played and number of
       wins.
       The game logic uses a variable to store the highest score while
       iterating over all players. This variable is then used in a
       typical way to calculate a maximum (simplified): if (current >
       highest) highest = current
       This approach requires to initialize the variable highest with a
       value that is lower than all regularly expected values. In Hex,
       the initial value is -1. A negative score does not pass the
       check as described beforehand and the leaderboard is (I assume)
       incorrectly calculated and not drawn.
       Conclusion: Do not edit your stats, there are no benefits.
       *****************************************************