Decktracker Exploit?

Yes, my bad, I just checked, it’s not guaranteed.

It just so happens to be the case mostly because of how hard it is to collect more points than someone who finished rank 1 last month, since that person is basically guaranteed more additional points simply by finishing the placement games and hitting Legend.

I heard Norwis explaining he’s guaranteed a place if he finishes 1st, so I assumed that was the rule, but it’s incorrect, he’s just generalizing the most likely scenario.

1 Like

Okay i thought maybe i misunderstood Mcbanter when i was listening to him explain it. Either way it sounds like a nightmare to try and qualify versus how it used to be.

1 Like

Forgot to add something last time…

I might be mistaken, but aren’t such drastic measures excessive to that end? As far as I understand, there are ways (trusted execution environment, enclaves — all that) to ensure that only signed binaries be allowed to execute. Of course, there is a matter of hardware vulnerabilities, but apart from that, if applied to this game (akin to DRM of sorts, if you will), wouldn’t it solve the issue of both ‘deck trackers’ and malicious client software?

1 Like

There’s always more they could do. Their track record on this suggests it’s not something they will do. There have been several abuses to the client side of things in HS and all they ever seem to do is just ban the players who abuse it.

2 Likes

Yeah, I know.

‘Maphacking’ was a thing back in games such as D2 / WC3, for example (for the specially talented people out there: yeah, these games too rUn oN a SeRvEr), and still we observe similar issues, even though technologies have advanced since.

By the way, not that is has seemingly been that effective with bots in particular — they could always just create new accounts, especially the ‘barcode’ ones, banning which is kinda pointless.

1 Like

People on mobile should go play Tetris and stop complaining that using PC is more convenient.

1 Like

Absolutely not. Those calculations take from milliseconds to microseconds even on your phone.

It’s a severe security flaw to calculate gameplay outcomes on clients.

Basically your client is extremely easily hackable,

the Blizzard datacenter is not.

I’m not sure it does. Not in any significant way. I’m just saying that when “random” cards go into your deck, the tracker does not know (or at least does not display) what they are. I’d expect the same for the demon portal. Wasn’t there a card that transformed all your spell into spells that cost 3 more but kept the same cost? Would the deck tracker show the new spells?

As an update… I watched another NoHands video this morning. He plays KJ at 29:48 and the deck tracker only shows one “card” of ? Mana Cost and 30 quantity.
https://www.youtube.com/watch?v=5mry00PmBiQ&t=2186s
So I guess either Blizzard hot fixed what information they release to the tracker or the Deck Tracker modified their program to not display the information. Hopefully it’s the former.

1 Like

Hi everyone,

Though I quite agree to the “extra help” a deck tracker can give a player when taking decisions, instead of using the memory of the player, I can still understand that deck trackers can be also used like a “note book”, as a substitute to someone ticking with a paperlist the cards already played. From this point of view it wouldnt be like a cheat but more like a “taking notes” substitution.

I do not use deck trackers though, but I kind of see it like a non-cheating tool also.

Thanks for sharing anyway and good game! :slight_smile:

1 Like

It might honestly be time to implement separate queues for tracker vs no tracker players to even the odds a little bit, because yeah, if a person is playing on mobile against another person who’s playing on a PC with a tracker, it’s double the advantage for the latter, as their animations resolve faster/cards get processed faster AND they have a tracker helping them save some mental resources.

The way I see it, it’s similar to how they’re thinking about implementing another chess league, this one for human + AI vs human + AI, like a chess on doping or something. That sounds cool to me - it’s not quite the good, old chess we all know, but an evolved version of it, cyborg one, if you will.

I know for a fact they’re thinking about something along those lines, but ofc, not even they know if they’re going to go forward with it or not, yet.

The card doesn’t say “random” though. It says replace your deck, and your deck is something that can be tracked by the decktracker. :slight_smile:

Be sure it does. E.g. you may hold on a buff because it may be a huge buf on a special demon, or a demon might have special attributes like a spellburst.

You can probably even tutor specific demons, the possibilities are endless and it’s not that much different than knowing any deck well.

People on PC should go play C.O.D and stop complaining about the complaints that mobile users have.

Yeah, anything that happens client side, you can influence.

My favorite was when Halo 2 made a random person in the lobby a host, so all the other clients trusted what that one said.

So the host could just pause their internet traffic for a moment, kill everyone on screen, and when they reconnect all the other clients were like “well, looks like you died, and that guy is destroying all of you.”

That didn’t even require editing game files.

It’s really dangerous in a multiplayer game to trust a client’s outcomes of almost anything.

1 Like

I read the top 20 replies and conclude that somebody is being stubborn to admit he was wrong.
It’s not hard to realize that the see-through decktracker is giving advantage to someone who doesn’t run it. It’s unfair no matter how small that advantage is.

That’s quite funny and disturbing to read at the same time. Assuming, there was a hot fix soon after? It’s completely broken, if you can manipulate a lobby / stats like that

There was no way to actually fix it. Best thing they could do is ban people they detected doing it often.

That’s a lot of why online games these days are hosted on servers that the company owns, and the calcs are largely done server side.

There’s absolutely nothing wrong with that. In fact, in some other posts I was saying that implementing an official deck tracker as one of the features the community wanted was an advantage:

Heh, you wish.

The funniest thing is the rumours that the creator(s) of that ‘deck tracker’ is/are close to developers, has/have access to the source code and such. Thus, their reluctance to upset their patron too much has probably been the only thing keeping this cheating software (or at least the most advertised one) somewhat in check.

It’s called ‘advanced chess’, it’s a very old idea, and it hasn’t really taken off.

Yet another person making a great discovery of America… through his window, but other than that, almost like that Columbus ‘dude’.

Hey, would you please narrow your requirement to ‘people on PC who write stupid comments’? :grinning: Not all PC players are such bozos. Thank you.

Not really. See above re ‘secure enclaves’, besides, things like VAC have apparently been quite successful, if I’m not mistaken. It’s just that this story isn’t about this game — or Blizzard in particular, as Dallaen aptly noted.

1 Like

Crazy stuff, as said. But thanks for sharing!

Absolutely not. VAC exists EXCLUSIVELY for gameplay that you can not offload to the server; e.g. the input of the players (autoaim); e.g. the graphics of the player (wallhacks).

When they can offload the gameplay to the server they ALWAYS do; e.g. Valve calculating hits on the server; e.g. Blizzard calculating card outcomes on the datacenter etc.

It’s just a completely unnecessary risk and it’s also computationally extremely cheap to keep it at the servers.

It’s EXTREMELY easy to manipulate the memory (machine code) of you client once it’s in RAM too.