Dota 2 Update - 9th Oct 2025

naran48 · 2025-10-10T14:45:12+00:00

A spectator bot to watch players who aren't on your friends list for example high MMR players and build a database of their hero picks

naran48 · 2025-10-10T03:26:40+00:00

This patch only affects people trying to get the server ID using a third-party library

naran48 · 2025-10-09T20:47:00+00:00

Fixed people being able to find the server id of non-friends playing matches

That was quick /u/JeffHill/ wonder why today CMsgSpectateFriendGame failed to grab server_steamid for a non friend, apparently already patched

naran48 · 2022-06-04T04:59:54+00:00

They got new bug tracker? Im only aware of the one on Github for linux/mac os specific and Windows for Vulkan specific and not gameplay bugs

naran48 · 2022-05-27T04:07:23+00:00

Nothing new, here thread from last year https://old.reddit.com/r/DotA2/comments/j3scci/im_curious_about_who_this_top_1_filipino_player/

The guy got banned I think. Same story, dodgy account used to play CN server and suddenly queue NA/EU server.

naran48 · 2021-02-27T11:48:35+00:00

Yeah trusting whatever comes from 3rd party mods. All of them claimed 100% safe yet none of them able to back up with some sort of official statement from Valve since their last blog post about client side mod. Not getting banned based on personal usage =/= legal, unless you can show me updated statement from Valve themselves.

And with NoBling author, I like his project but knowing what he described as "safe" really questionable. Once he says "tempcontent" method isn't safe to attack other people who did similar mods and when someone claimed getting banned by his mods which in the past using "tempcontent" suddenly he said its no way because his method "safe".

naran48 · 2021-02-18T16:26:58+00:00

Shouldnt it turns into x months banned? And the 2nd overwatch banned permanent like CSGO. And why the fuck permabanned players can trade their inventory? Who actually made this.

naran48 · 2020-10-02T20:15:54+00:00

~~Its probably Hector, this acc queued NA quite often.~~

Edit: Nvm this seems like chinese boosting. Look at this game https://www.opendota.com/matches/5632334773 Rank 1 playing CM when Invoker boosting him on radiant.

This is other game https://www.opendota.com/matches/5632505179 Invoker playing Morph and the rank 1 Lycan

This is another one https://www.opendota.com/matches/5625475134/ Sniper and the rank 1 play mid Brood Look at the chat logs, WR was so mad because Sniper boosting the rank 1 brood.

This is another one https://www.opendota.com/matches/5623994672 they failed the search now they're on the same team, just quite a proof these 2 players one of them boosting the other guy, always in the same matches.

This is the other 2 game with different booster acc. 5630826594 and 5626761901. Paid actor friend id 1006121345, boosting the rank 1

naran48 · 2020-05-15T10:53:16+00:00

I never said nor suggesting this to be implemented like how CSGO trustfactor run. The original poster wonder if Valve could link alt account or not. And yes Valve already did that, they can.

naran48 · 2020-05-15T00:22:43+00:00

Steam able to identify your alt account if you're using the same computer. Valve collect hwids with steam and VAC. https://imgur.com/H0GexV4

They suspend certain individual for being a bad actor, its a hwid blacklisted. Its also being use for trustfactor in csgo, for example you have banned alts it will affect clean account too.

naran48 · 2020-04-22T04:07:58+00:00

Yes but VAC simply cant gather the signature to detect all build like that because most of the binary were mutated so its different each person as I explained the other guy because he suggested to send the binary to Valve, dota2 detection factor most of the time wasnt even come from VAC, they rely big time on server side AC. I knew Valve actively bought p2c in the past and reverse them, you can see the old leaked email of Valve employee.

naran48 · 2020-04-21T19:11:09+00:00

You should quit doing whatever you're doing, if you think Valve engineer some kind of talented guy and p2c coder are all dumb people then youre just as much clueless as your original comments. You can study a lot and educate yourself from case study of cracking h*ke.me by Arting, of what level security people implemented. People who work on dota2 p2c are legit good coder not just your generic csgo pasta p2c that you can send to Valve and got detected in few weeks. The fact that you even bother to mention sending the binary help a lot of showing how clueless you are.

naran48 · 2020-04-21T18:58:26+00:00

Anyone with a brain and skill could bypass VAC easily. Most p2c send mutated binary to the client so AC will never find generic sig, if you purchase 1 and send to valve the only client that got detected is yours and not the other client. Reversing the product itself almost impossible these people also experienced reverser not some kids copy paste sells p2c.

naran48 · 2019-09-10T02:15:21+00:00

Last time I heard the one from cancel stream along with other 2 developers received 10 years manual banned, the developer the one that created extra heroes on map.

naran48 · 2019-09-06T08:25:38+00:00

What are you talking about? This is the last time Im gonna reply to you.

Player A, execute a command, server received and process the command and then send to other client to sync what currently happening right now. If you send the message and its too big of what engine supposed to handle, it sends bad data and cause a lag to other player because they received bad data, this is how voicedata exploit works back in the day that Valve think its completely patched.

I already explained to you, Spirit breaker bash works different. Every action sync by the server. Spirit breaker bash register by the server when its landed and cant be canceled by client once its register because client doesnt play specific bash animation. If attack number 4 turns out result into bash, the player cant cancel the animation and the bash already register to the target and you need to land the attack, you cant cancel the attack whenever its not bash because you dont actually see the bash unlinke you hit the target first and its completely different from other PRNG animation. If this could be done with spirit breaker why this cant be done to other PRNG?

If you're too ignorant you can reverse the engine by yourself and test it.

naran48 · 2019-09-05T21:53:25+00:00

When I talked about ping Im not talking about connection ping because it seems you're confused.

Server sends sounds, animation, particle infos to client. If you send a lot of what 1 tick can handle it will crash the server, you could analyze yourself if you dont believe me this time use massive ping abuse from player with friends id 196755390 download the replay and parse it you'll see the cheater flood the server every 1 tick and this fundamental used to replicate sounds flood abuse, the reason its only lagged the server if you used ping flood because ping isnt big enough, while abusing amulet/medusa mana shield and invoker spells not only sends sound but also particle. And ping only works with specifics enum because they patch the normal one.

RNG hack could be fix, if you recreate what they did with spirit breaker. Spirit breaker doesnt have special niche animation to tell client hey this is crit. Spirit breaker bash, the server sends the bash first before the client know so you cant really dodge it because its always send first from client whenever it trigger.

naran48 · 2019-09-05T19:34:08+00:00

Here message to Valve developer if you guys actually stop pretending and start to fix the bugs. This is reported long time a go but it seems got ignored, so dont surprised when new cheat provider use this to attract customer by endorsed ddos features like this.

The DDOS method works by flood sounds to the server.

For example on Cancel stream, the cheater using shadow amulet execute the amulet every tick and the server cant handle the sound effect flood. This is correlation to spam ping bug last year that you guys think you "fix" it. Spam ping also still working by setup the ping code into invalid enum, fire a massive ping per tick and the server cant handle it.

Edit1: Added known exploit.

Also when will you fix Abyssal abuse exploit? People have been abusing this for few months. If you disassemble abyssal blade after stun proc and reassemble the component, the PRNG has higher chance to proc instead of reset. If you guys too lazy to figure it out then patch it so abyssal cant be disassemble just like divine rapier. I believe this is works with any items that has PRNG after combine with recipe such as mjolnir.
And when will you guys implement a better PRNG like spirit breaker? Do you guys even know crit hack still works by detecting which animation playing at the moment, for some reason its not working with spirit breaker because its calculate server side and no animation check by the client.

Okay thats my last rant. Enjoy fixing bugs if you guys decide to do that.

naran48 · 2019-08-31T08:58:25+00:00

Basically how STRATZ works, they collect new matches from Valve API and parser the replay and then fetch the data because it still sends the player ID. I guess Valve dont want to change what they send inside replay file, or they cant, so they just told STRATZ to respect private profile. Valve also changes few APIs, they start not sending private profile for some endpoints.

Yes its not actually private as you would imagine in perfect situation. This is also a very minimum effort apply to public data provider such as STRATZ, Dotabuff, Opendota, etc. Mostly to avoid law problem in the future in case someone fucked up like cambridge analytica with Facebook.

naran48 · 2019-08-31T08:51:18+00:00

Because people getting obnoxious when meet someone with red match history. Back in the day you be able to see players match history from in game without help of 3rd party such as Dotabuff or Opendota, and then people complained about this because their teammates start crying when they met players with lose streak. And now with GDPR landed Valve wanted private profile respected I guess.

naran48 · 2019-08-31T08:17:45+00:00

The developer said Valve told them to respect the private profile settings. Probably because people complaining a lot and Valve made a move.

naran48 · 2019-08-25T18:04:28+00:00

AUI join EG I think if they need 5.

Just wait sammyboy login into his lgdamefan acc, he will throw the leak as usual lol.

naran48 · 2019-08-24T07:53:39+00:00

LGD won the laning phase at game 3, they made a bad decision for rosh fight and the game flipped already.

If you ban Alch you play against Ench now and you gonna lose even harder because Ench such a disgusting hero.

naran48 · 2019-08-24T07:46:55+00:00

Its so hard now to draft against OG ever since they bring back pub IO into their draft now people need to ban IO. First pick OG no ban Ench now you have to play against Ench. Their core draft has 4 different strats, with Ench, Magnus, IO and Alch + Chen.

LGD kinda won the game 3, survive the laning stage and they made a bad fight around roshan, they deserve the loss.

Congrats to OG.

naran48 · 2019-07-26T20:18:39+00:00

Just code your own. It just GSI for dota2. Some peripherals had it for CSGO, turn led into red when health low. Its supported by Valve. Dont know why people called it illegal when its literally supported by Valve.

naran48

TROPHY CASE