Users can bypass timer when tick rate is lowered.

Symmettry commented 7 months ago

Describe the bypass and how to replicate it

Step 1. tick rate of 10 Step 2. timer of 2 Step 3. bypass timer checks; you'll go at normal rate and others will be at half rate, so you're double speed.

Also something noteworthy; if I try to set tick rates of individuals using packets they can also bypass this; so potentially any sort of API for plugins which could allow setting tick rate of a player would be nice for my server (it does tick rate things)

Grim version

2.3.60

Server version

git-Purpur-2155 (MC: 1.20.4)*

Plugins

Chunky, CoreProtect, DangerLevel, DiscordSRV, Factions, GraveStonesPlus, GrimAC, InventoryRollbackPlus, InvSeePlusPlus, InvSeePlusPlus_Clear, InvSeePlusPlus_Give, LiteBans, LuckPerms, mcMMO, Movecraft, *ObsidianDestroyer, SkBee, Skript, skript-reflect, spark, TwerkGrowth, VanishNoPacket, Vault, VeinMiner, ViaBackwards, ViaVersion, Vulcan, WorldEdit

ManInMyVan commented 7 months ago

They still flag if they go over vanilla speed right?

9x00 commented 7 months ago

This does not work on the newest ver of grim i had this bug before

Symmettry commented 7 months ago

Problem is if i send tick rate packets for client side timer only, grim will not know, and therefore they can use timer to bypass it.

GrimAnticheat / Grim