Hey I have a question on pyGG2:
You mentioned mod lobby being disabled until you think of a policy, but how is vanilla-capable modding done? Because right now some things that should be skill indexed are easily emulated by the computer.
Aimbot, spy visibility hacks, etc. Even besides those obvious hacks some things, like the MinePath plugin in L3's PluginLoader, shouldn't really be possible(since you see the mines coming off screen)
Spoilered to possibly not informs more people of these hacks
Aimbot: Preventing this is not really possible unless somebody writes an algorithm which detects if somebody is constantly aiming at somebody without flaws relative to their ping, or unless we really want to annoy the modding community by placing restraints on modding.
Spy visibility hacks: Even though this could possibly cause many issues, a solution could be transmitting a position like "0 0" while a spy is cloaked and on the enemy team. This would probably go well if the server had the ability to manually tell clients that they hit something.
What Port said is mostly correct. Those two hacks are
very hard to prevent, as they are completely independent of the server, and are only client-side.
The easiest fix would be making gg2 closed-source (which of course won't and can't happen). The next easiest is making the server check by some hash-check whether the client is a vanilla client, which would kill any sprite-mods too, and still be hack-able by the best.
As for the fix for the second problem, I'm a bit scared of that because of desync. Imagine shooting in the air. You'll only see blood when the server confirms there was a spy there, which means an extra event to confirm that, the need to sync graphical stuff (usually a very bad idea), and just in general a huge desync.
The only viable solution I see is just to ban distribution of them as best as possible (which we're already doing), so at least only the coders can do it (they usually don't).
Also, although this is inconsequential, the first mod ever of pretty much every modder is usually some form of a hack (It is so damn easy to make the second kind of hack, and it teaches much).
Hey I have a question on pyGG2:
You mentioned mod lobby being disabled until you think of a policy, but how is vanilla-capable modding done?
Although I have yet to discuss this with NC, we need a policy for automatically downloading stuff (a server can tell a client "go download and execute that"). Mods like they exist now are fine.