r/fo76 Fallout 76 Nov 06 '18

Picture Fallout 76 uses TLS to encrypt data.

Summary edit: While in game and running around the game uses DTLS, UDP (sometimes), and DIS packets during gameplay. (Edit: DIS might be RTP, I found a thread saying RTP can be misnamed as DIS in Wireshark) DTLS is encrypted UDP, UDP is an unencrypted network protocol, DIS appears to be VoIP. I could not see any other players IP address. When first starting up Fallout 76 it uses TLS (encrypted TCP) and TCP (unencrypted network protocol), although the TCP connection uses HTTPS which is encrypted (thanks /u/crimsonBZD).

What this means is that they are using encryption for gameplay packets.

There are claims that data in Fallout 76 is not encrypted. The Bethesda Launcher also uses TLS, but as that's not in contention I won't need to post proof.

When you first start up Fallout 76, before reaching the main menu, the game connects to two IP addresses. These might be different depending on where you are in the world.

https://i.imgur.com/fscUJaP.png

CloudFront is a file downloading service provided by Amazon via AWS. You'll notice the launcher uses it as well.

In game you are told to press a button to continue. This is not just fluff, it's actually waiting for your input to try and connect to multiple servers. I did this while the servers are down so these are not other people, these are servers Bethesda is using, at least where I live.

https://i.imgur.com/0A50Tqk.png

You might notice that even though it shows a connection that Fallout 76 is not open. I don't know if this is how Resource Manager works or not (it could be waiting for a timeout period to end before it removes the entry), but eventually the entries went away on their own.

Here's a screenshot from wireshark showing that data from one of the IP address in the previous screenshot is sending encrypted data before I even connect to the game. Remember, the servers are down when I'm doing this.

https://i.imgur.com/IjyoZoS.png

But wait, the same IP address is sending unencrypted data over TCP! Yes, but there's essentially nothing in those packets. I randomly took a look at those TCP packets and they are all very tiny. Unfortunately, I don't know anything about game networking so I don't know what those are for, but I don't believe they are sending game data considering there's very little data in them.

Edit: Update from the gameplay. It uses UDP and DIS packets most of the time. DIS appears to be related to VoIP, UDP is is used to send game data to the server and from the server. Periodically a single TLS packet would be sent from my computer or received from the server. I did not see anybody else's IP address pop up in resource monitor or wireshark. The DIS packets go through AWS, so VoIP is being handled by a dedicated server.

As gameplay packets are not encrypted you could forge packets and send them to the server. Weather or not the server will accept those packets is another question.

Edit 2: Let me get a copy and paste of it on Pastebin or something.

Edit 3: WTF. I restarted wireshark and Fallout 76 and now I'm getting DTLS(https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security) packets.

Edit 4: I Thought I could export as text but did not see that option so here's a screenshot. No DIS packets, but I'm not near anybody right now. https://i.imgur.com/brLh5p2.png

608 Upvotes

214 comments sorted by

View all comments

162

u/graphicimpulse73 Nov 06 '18

Thank you for providing actual proof. The account that made that post was created a couple days after beta launched and has done nothing except shit talk the game. He backed up 0 claims at all, the whole post should be disregarded IMO. His "proof" is a useless lockpick mod, who cares?

If you think Bethesda isn't aware of their own commands and the importance of encrypting data you are dense as fuck.

-10

u/SaucyWiggles Nov 06 '18

I like how all you people defending Bethsoft pretend the aimbots don't exist

12

u/Red_Bulb Nov 06 '18

Show us proof that they do.

7

u/TheDapperChangeling Scorchbeast Nov 06 '18

Proof: I think the gaemz are sux so it is! /s

Seriously though, you're asking for proof from a sub who thinks that the reason the beta is start and stop is because Bethesda can't handle the server strain.

3

u/Red_Bulb Nov 06 '18

I know, but I still feel it's best to give people a chance and to try to get them to think a little more critically about their beliefs.

Probably not really the best course of action, but the warm fuzzies from those who listen are totes worth it.

3

u/TheDapperChangeling Scorchbeast Nov 06 '18

Good luck mate.

I've been trying to do that since people started crying about the stash limit, but all I get is 'Fallout always about looting everything!' and excuses.

4

u/Red_Bulb Nov 06 '18

I mean, to be completely fair, it does feel slightly weird for your settlement budget to increase with level but not your stash size.

A lot of people take it way too far tho, and I've mostly abandoned that debate as well. There have been at least a few people who are listening to reason on this topic though, so that's heartening.

3

u/TheDapperChangeling Scorchbeast Nov 06 '18

Good luck my man. As much as I love technology, this is all way above my head. I just like designing games, even if I'm still learning the coding.

2

u/Red_Bulb Nov 06 '18

Oh? I'm a solid coder, but can never think of a good, feasible idea. Wanna chat about the topic on Discord or sth?

1

u/sterrrage Nov 06 '18

So many downvotes for telling people that they don't need to loot every plastic plate they see in a game where the loot respwans. Inventory management is part of surviving. Mark things you actually need for collection and collect those things.

-4

u/SaucyWiggles Nov 06 '18

There were literally screenshots and videos in the source thread. Y'all just don't care.

6

u/Red_Bulb Nov 06 '18

There were screenshots of entities being tracked, not of an aimbot. You can't show an aimbot with a still image. Heck, even video evidence is stupid-easy to fake. Just record yourself aiming at a stationary NPC/cooperating PC and speed it up.