Last night I posted this information to a hacking forum, explaining that he was sending back files from users' disks. And while I SUSPECT that it only sends back modules that detections occur on, since I didn't have access to the logs, only screenshots, I don't know. And it doesn't dump the modules from memory - it reads them from disk. If your client runs a detected piece of Arma script, it sends back the entire script expression to the master server:īut it's never done anything like sending back entire modules or executables until it became virtualized. For example, in its module scan, it sends back the address of the memory page the detection occurred on if a detection happens:
#None battleeye arma 3 servers full
You can see INT3/CC padding between functions and make out portions of the header, as well as obviously see the full file path to the modules and executable.īattleye has always sent back information to the master server, but usually only a few bytes. log files with IP addresses and dates attached, that appeared to be dumps of processes and modules: The people that broke into it contacted me to share information on what Battleye had been doing, and sent me screenshots as proof. When Bohemia's servers were compromised and the source for DayZ standalone was stolen, Battleye's master server was compromised as well. I also made a post in this subreddit maybe a month ago talking about Battleye's scans and false positives. If you Google my name and "Battleye decomp", you will find some of my previous decompilations and reverse engineerings of the Battleye module, as well as explanations of how certain scans work and how Battleye is able to detect common hacking techniques. I've been working on it since 1.204 (it's at 1.215 now for A2OA and DayZ). I've done a lot of reverse engineering work on Battleye. These are logged on the master server and kept indefinitely. It sends the whole file path and your IP address. Tl dr: Battleye sends files back to the master server from your hard drive if it is suspicious of you. If your post has been removed, it's probably violated a subreddit rule.ĪRMA 3 OFFICIAL WEBSITE ARMA 3 DEV HUB ARMA 3 DEV FEEDBACK TRACKER BOHEMIA INTERACTIVE FORUMS ARMA 3 DISCORD GENERAL CHAT ARMA Units - OFFICIAL ARMA Servers - OFFICIAL /r/FindAUnit - Unit Recruitment /r/ArmaDev - Game Development You are responsible for reading the sidebar and subreddit rules. Use the Weekly Questions Thread pinned to the frontpage for general questions. Search the subreddit before posting your question has probably been asked and answered before! See /r/FindAUnit if you're looking for a community to join. Read the ARMA 3 Getting Started Guide in the Wiki.
Please try to remain polite and follow reddiquette. Please take it up with your unit or the server admins.ĭon't be a dick. We can't fix your ban or resolve your internal issues.
#None battleeye arma 3 servers mods
Mods can be found on the Steam workshop or Bohemia Forums. Please do not post links to pirated/ripped content. Please use the resources available in the subreddit Wiki to find a group to play with or check out /r/findaunit. "Looking For Group/Server" posts will be removed. Accounts must be older than 10 days to get past our automoderator and submitters should be actively participating with the subreddit. You can post videos, but please do not dump your YouTube channel or livestream on this subreddit. Please do not recruit for your unit here or advertise your server.