Client side prediction exploit

Bug Tracking
, , ,
1

Describe your computer specs and game version [Ex: Windows, v0.5.0]

Describe the issue

pretty self explanotary

if a cheater wants to do speedhack etc they can it seems (kinda)

Steps to reproduce

cheat lol

2

Please put another demonstration video, because it is not available to be viewed anymore as i see. I’ll suggest you to film it and put on something like YouTube, or any other known website, because these types of weird media hosting websites are not so trustful to display what you are meant to show us.

3

bug1: https://youtu.be/zh2VJIxPahI (can bypass the block behaviour and jump over it, in the video block has instakill btw)

bug2: https://youtu.be/sJbmI2QFnZY (Weird client side prediction behaviour, sometimes can go thru objects on server side, or sometimes can go thru objects in client side but not in server side)

speedhack exploit: https://youtu.be/Od2T_VYjq8s

4

Update for the bug 1:

here as you can see its confirmed that the player can indeed touch the ground and then move away i thought it was a bug in Character Controller Motor, as from the video you can understand that the effects are given to the player locally, which in client side it knows it hit the ground while in the server side its not like that, idk about the Blokoto’s server backend but it might be due to the delta time diffrence between the server and the peer given that we can somehow cheat via speedhack (which kinda manipulates delta time), idk but setting the peer and the server to run in the same tick rate might be a problem solver (not limiting peer’s fps but maybe if its running inside the *process() maybe doing the work outside of that,or doing it via _*physics_process() )

5

Link to the video since i couldn’t upload

turns out this bug is harder to do on higher frame rates (if the time scaler goes below 1 its harder to do)

and way easier to do on lower framerates (if the time scaler goes over 1 its easier to do)