Everyone's read the superuser remote-access story by now where compromised builds of 3rd party tools planted a remote-access agent on players' PCs and gave the attacker a live view of their hole cards for months. What a lot of the affected players can't get their heads around is how it ran that long, with such obvious outliers in win rate and other signals, and with multiple players reporting something was wrong.
We at AceGuardian (A5 Labs' anti-cheat team, we run anti-cheat for 7 sites, QuintAce is our solver platform) have put our superuser detection method and code on GitHub, under an MIT license which is free to use. It works off hand histories alone and no access to anyone's computer is needed. The write-up below walks through 1 heads-up match from this attack: 757 hands at $25/50, the suspect was up about $45K, and his decisions put him top 1% on 6 of 7 signals. 15 of the flagged hands are in there with both players' cards so you can judge for yourself:
https://quintace.ai/blog/superuser-d...on-open-source
So there's no excuse any more. If you play online, ask your site whether they've run this or something like it on your hands and what they found - if they haven't, ask them if they can. If you were one of the players affected by this and have hand histories or anything else from the case, AceGuardian is taking submissions at [email protected]. We're looking at opening up more services like this if there's demand.
If you have any questions, do let me know as we'd like to get a discussion going about this very important topic.
We at AceGuardian (A5 Labs' anti-cheat team, we run anti-cheat for 7 sites, QuintAce is our solver platform) have put our superuser detection method and code on GitHub, under an MIT license which is free to use. It works off hand histories alone and no access to anyone's computer is needed. The write-up below walks through 1 heads-up match from this attack: 757 hands at $25/50, the suspect was up about $45K, and his decisions put him top 1% on 6 of 7 signals. 15 of the flagged hands are in there with both players' cards so you can judge for yourself:
https://quintace.ai/blog/superuser-d...on-open-source
So there's no excuse any more. If you play online, ask your site whether they've run this or something like it on your hands and what they found - if they haven't, ask them if they can. If you were one of the players affected by this and have hand histories or anything else from the case, AceGuardian is taking submissions at [email protected]. We're looking at opening up more services like this if there's demand.
If you have any questions, do let me know as we'd like to get a discussion going about this very important topic.
