3 ms·

Everyone waits for your client's next step. Your client can basically pause the game whenever it wants, giving you time to do something. But there are bigger e

Everyone waits for your client's next step. Your client can basically pause the game whenever it wants, giving you time to do something. But there are bigger exploits. IIRC, the client sends separate actions for buying a unit/tech/building and paying resources, and the other clients don't enforce that they go together. This allows malicious clients to buy without paying. It's been seen a few times even in the ranked mode of the Definitive Edition remake. https://www.reddit.com/r/aoe2/comments/fjjudp/cheaters_are_a_thing_in_de_apparently/ https://www.reddit.com/r/aoe2/comments/fjjudp/cheaters_are_a... This way of doing things made sense for the time, and the execution was impressive. It was pretty reliable, nobody wanted to cheat anyway, and yes lag was a big problem but there wasn't another good way to do it back then. Nowadays they should have something else IMO.

ComputerGuru 4y ago
> Nowadays they should have something else IMO. Finally found a genuine use for the blockchain, since the server is only used for the lobby! Mine virtual AoE gold and record it in the distributed ledger. Primitive path finding is also AI, so now you just need some investors!
- hot_gril 4y ago
  DE seems to use a relay server. Old version relied on P1 setting up port forwarding and always being present in the game, not an issue anymore.
lolinder 4y ago
That problem doesn't seem inherent to the model, it's a flaw in the selection of client steps. Is there any reason transactions like building and paying couldn't be atomic?
- hot_gril 4y ago
  I don't know why it's that way. My guess would be complexity. Yeah, they could fix that later, but they can't fix the fog of war cheat, which would also be pretty powerful.
- Emjayen 4y ago
  The problem is simply the lack of validation -- I detailed it a bit below in my top-level comment. The only exploits that are inherently applicable in the case of a simultaneous deterministic simulation model are those of the information-revealing class (e.g, "maphack"). This is where a standard AH system comes in.

ComputerGuru 4y ago

> Nowadays they should have something else IMO. Finally found a genuine use for the blockchain, since the server is only used for the lobby! Mine virtual AoE gold and record it in the distributed ledger. Primitive path finding is also AI, so now you just need some investors!

hot_gril 4y ago
DE seems to use a relay server. Old version relied on P1 setting up port forwarding and always being present in the game, not an issue anymore.

lolinder 4y ago

That problem doesn't seem inherent to the model, it's a flaw in the selection of client steps. Is there any reason transactions like building and paying couldn't be atomic?

hot_gril 4y ago
I don't know why it's that way. My guess would be complexity. Yeah, they could fix that later, but they can't fix the fog of war cheat, which would also be pretty powerful.
Emjayen 4y ago
The problem is simply the lack of validation -- I detailed it a bit below in my top-level comment. The only exploits that are inherently applicable in the case of a simultaneous deterministic simulation model are those of the information-revealing class (e.g, "maphack"). This is where a standard AH system comes in.