Now that Stop Killing Games is actually being taken seriously - maybe we need to take a look at Stop Fucking Around In Our Kernels
I haven’t really been personally affected by it before - I don’t play any competitive multiplayer games at all. But my wife had her brother over, and he’s significantly younger than us. So he wanted to play FortNite and GTA V, knowing I have a gaming PC. FortNite is immediately out of the question, it’ll never work on my computer. Okay, so I got GTA V running and it was fun for a while, but it turns out all of those really cool cars only exist in Online. But oh look, now they’ve added BattlEye and I can no longer get online.
While this seems like a trivial issue (Just buy a third SSD for Windows and dual boot), it’s really not. Even if I wanted to install Windows ever again, I do NOT want random 3rd party kernel modules in there. Anyone remember the whole CrowdStrike fiasco? I do NOT want to wake up to my computer not booting up because some idiot decided to push a shitty update to their kernel module that makes the kernel itself shit the bed. And while Microsoft fucks up plenty, at least they’re a corporation with a reputation to uphold, and I believe they even have a QA team or 2. CrowdStrike was unheard of outside of the corporate world before the ordeal and tbh nobody has ever heard of it afterwards again.
So I think this would be a good angle to push. That we should be careful about what code runs in our OS kernels, for security and stability reasons. Obviously it’d be impossible to just blanket ban 3rd party kernel modules to any OS. However, maybe here in the EU at least we could get them to consider a rule that any software that includes a component running in the OS kernel, MUST justify how that part is necessary for the software to function in the best possible way for the user of the computer the software is running on. E.g I expect a hardware driver to have a kernel module, and I can see how security software needs to have a kernel module, but I do NOT see how a video game needs to have an anti cheat with a kernel module. How does that benefit me, the customer paying to be able to play said video game?
It’s been time. Game companies have no right to access that level of any system I paid for. If they want to use kernal level anti-cheat on their consoles, that’s on them. But my computer? Absolutely not. They don’t have a right to that, when I bought the computer I didn’t agree to that in a EULA or TOS, and they do not make it apparent that their games carry this level of anti-cheat at sale.
You agree to that in the EULA/TOS of the game you want to play (and how legally binding that is is anyone’s guess). You just never read it (because nobody does).
The reality is that it is just another layer of risk. You are or are not choosing to install software on your personal computer that may or may not increase your risk level. It is no different than going to that website that makes your GPU spin up real hard or grabbing something from itch that is actually malware and so forth. Its why people increasingly suggest having a dedicated device for taxes and anything else private.
Personally? I understand the benefits to kernel level anti-cheat and, while we have no data as consumers, it is clearly effective considering the state of games today versus games in the 00s and publishers are willing to allocate funds for it. I still firmly believe that there are better methods that involve analysis of player behavior but I also understand the compute costs of that will be insane.
But also? I don’t want that shit on my computer (not that it would work because… Linux). So I choose not to play the games that require it. It means I miss out on some games but the good news is that there are way more games out there than I can ever play.
All that said: I increasingly think the end state is going to be competitive multiplayer games being console exclusive due to a mix of exclusivity rights and having a walled garden ecosystem that actually CAN be controlled.
We literally have a cloudstrike report giving direct examples of how bad it is potentially as a vector for malware. Additionally it doesn’t solve the problem it aims to solve, as reported by several outlets because it doesn’t stop hardware level cheating, just potentially stops scripts. So you could absolutely enable cheats through a device like a keyboard and mouse or controller and the Anti-cheat does nothing.
Additionally though, I am not buying products with kernel level Anti-cheat and that is intentional, so I am not agreeing to the TOS or EULA of those games. If you add to this the fact that some games retroactively added kernel level anti-cheat, it’s bogus to assume that people are in the know or that they agreed to such things in the original TOS or EULA. Steam only recently made developers list kernel level anti-cheat on store pages for their game.
Also, kernel level anti-cheat in single player games is just ridiculous and invasive.
There are a few layers to that
First: The crowdstrike issue had little to nothing to do with any kernel level hooks. The issue was one of software engineering and deployment. It could just as easily have… taken out an entire country by triggering false positives that prevent systems from connecting to the network.
Second: You’ll ALSO note that even after… taking out an entire country businesses still use crowdstrike. Because it is that damned good at its job.
Third: Yes, Current anti-cheat solutions are less than effective at hardware based hacks. It is lamost like there is a reason that the Delta Force (?) game made a big deal about banning people for thumb drives. That kind of scanning and testing is coming.
Fourth: Crowdstrike is not something you install on your personal device (unless your job’s IT department are idiots). It is something you install on company owned devices.
Cool. I am also not. So no “rights” are being violated.
AMD had a graphics driver blocked because kernel level Anti-cheat flagged it as a cheat program. Genshin Impact’s anti-cheat was literally used to stop anti-virus programs running on people’s computers and mass deploy ransomware, and the gaming industry as a whole is extremely lax about the security of their users. Several companies anti-cheat have been flagged by anti-virus software as malicious.
There are layers to the kernel level anti-cheat business too and people still do buy games with kernel level anti-cheat. The fact that that kind of scanning is coming isn’t acceptable which is the point. I choose not to spend my money at companies that enable this kind of crap in their games. That’s not enough. It should be facing opposition from every quarter specifically because it is not only invasive, but also only raises the barrier to entry at the detriment to user’s security, and which is likely to cause the same boom that things like the campaign against piracy did in the 80’s/90’s. People didn’t know they could cheat so easily and now they do. Congratulations this has done the opposite of what is intended.
https://www.pcgamer.com/ransomware-abuses-genshin-impacts-kernel-mode-anti-cheat-to-bypass-antivirus-protection/
https://www.xda-developers.com/kernel-level-anti-cheat-tech-disaster/
Anti-viruses flag a lot of things. It is called a False Positive (or sometimes a “Someone didn’t pay us for an exception” Positive but…). It has nothing to do with something hooking into a kernel or just being a program you run in userspace.
I assume you are referring to https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html
Which… I’ll just raise you https://www.polygon.com/22898895/dark-souls-pvp-exploit-multiplayer-servers-remote-code-execution which allows for ridiculously dangerous RCEs without needing any kernel level hooks at all. So…
THAT I do not disagree with in the slightest. Which is why I am glad that most studios outsource anti-cheat because they are not at all qualified to handle it themselves.
I mean this in the most inflammatory and blunt way imaginable:
Nobody gives a shit about you. Nobody gives a shit about me either.
We are two people. We don’t fucking matter. What matters is the people who play every single Riot game ever made for thousands of hours each. THEY spend money.
Like I said before: it is about accepting risk. Knowingly or unknowingly, it doesn’t matter any more than telling your parents that you must have gotten a virus from that pokemon cheat code rather than the hardcore pornography that came in exe form for some reason.
You don’t want to compromise your security more than you already do. Cool. Most people playing these games are fine with that if it reduces the odds that they have their free time ruined for them by aimbots and wallhacks. And… clearly there is merit to this approach if studios are willing to pay for it.
Because, at the end of the day? We’ve been through this. Back then it was DRM. DRM was bad and DRM was horrible and EVERYONE had a super obscure russian (?) cd rom drive that Starforce would brick. And the same arguments of “ideologically this is bad and it could ruin things for a very small percentage of people” came up. And the answer was always “I refuse to buy anything”
And… everyone else DID buy things. The genuinely bad shit like starforce went away in favor of activation model DRMs (which continues to this day) but also… alternatives were actually presented. Steam is basically a variation of GOO (which is also basically what GoG does) but Steam has the added benefit of people being scared shitless of getting caught by Uncle Gabe and having their account taken away.
And that is what we need here. Not asinine requests for politicians who understand nothing to solve this for us. We need actual alternatives that work better AND are less invasive.
As an aside: I increasingly notice that you say very inflammatory things based on a misunderstanding or misconception of the thing you are criticizing. That is a bad habit in general but it is a REALLY bad thing when it comes to cybersecurity (which this basically is). Because it gives you a false sense of security when you think you are following best practices but are actually spewing nonsense and ignoring all your other risk vectors.
What is your argument here? Is it that Anti-cheat is good? Is it that Anti-cheat is necessary? Is it that it’s bad but you feel my information is incorrect? Because you’re all over the place. “I’ll raise you” is you literally saying, malware can be spread without anti-cheat at kernel level so anti-cheat at kernel level is okay? And it’s not relevant to the conversation because it’s not about whether or not some threat actor can use other means to compromise a system or several thousand of them.
Like. Even if you feel you needed to add context you actually seem to be intentionally using inflammatory language in order to in some way try to discredit not my reasoning but my stance that Anti-cheat is invasive and should in fact see opposition.
My argument is that refusing to buy isn’t going to fix the problem and I thought that was obvious from what I said, but apparently not. So, the question originally was "is it time to take a stand (not as individuals, but as a group) against kernel level anti-cheat. And my answer is that it’s been time and bad things keep happening and have the potential to keep happening because of it, and no it doesn’t matter if it’s only a handful of users, especially if those users are rocking $3K worth of parts in a gaming rig.
You’re suggesting that a security issue that is wholly ignored by both the public and the government as well as the industry that should be regulated is going to be fixed not by regulating it with laws and that’s extremely confusing give. The fact that we know it’s not how this works and “Uncle Gabe” has already implemented a solution and that solution is to make it apparent that games have kernel level anti-cheat so some of us are more informed. Because some random corp is going to do a better job than the government at regulating the industry.
I’m not sure why you think that’s what’s going to happen or even how you might believe it’s any less of a pipe dream than these companies (Microsoft included) doing the right thing and safeguarding the data they are allowing access to. Anti-cheat at kernel level is running all the time regardless of whether you’re playing the game that has it or not. It’s not just one singular program. It’s all different ones because there’s not any regulation in this space to speak of. And companies don’t want there to be. Valve is not strong enough in this space to make this go away by themselves.
People say crazy things about how powerful Valve has become in the PC gaming space. But while they have consumers generally on their side, Microsoft is older and has been in the space longer, and is definitely more powerful (money, connections, longevity of the business etc), and they have no real intentions of doing away with kernel level access for anti-cheat despite what few articles there were suggesting otherwise just after the crowdstrike fiasco.
You’re right that corps don’t care about individuals. But they care about the masses because we’re the ones they exploit for money. That’s literally why any type of organized opposition from millions of people is successful at making any changes at all. So again, what point are you making here?
Is your intent to educate? Is it to say that I’m wrong for saying we should organize against Anti-cheat at kernel level? Is it that you think you have a better idea of how this works, and what changes should be implemented? Are you for keeping Anti-cheat because you feel it serves a purpose?
The point is that you are constantly spewing largely unrelated nonsense that mostly just demonstrates a lack of understanding of what you are arguing against. But you are Righteous so anyone who points this out is clearly a bad person so let’s whip out the ad hominem.
Because I see you working toward the same conclusions I increasingly see people make: You don’t know what should be done and you don’t care what it does to the game industry. You just want politicians to make laws to make the things you don’t like go away.
And… I really don’t understand how ANYONE can be privileged enough to think that is a good idea. Especially when the people who DO feel strongly enough to maybe educate themselves on a topic refuse to. But hey, 50-60 year old politicians who just want a handy from the nearest lobbyist are sure to act in good faith and make a great solution, right?
Again, this is the DRM wars. We lost. Used games are not a thing in the PC space and are rapidly fading in the console space. But what we did get was a removal of the genuinely bad DRM models (Starforce) and the more egregious activation models (formerly Securom, now Denuvo) are increasingly restricted to A-AAA releases. And that didn’t happen because people got angry on a message board and thought about asking jack thompson to draft a bill for them.
It happened because there was actual discussion between devs and consumers. I don’t like that EVERYTHING activates to an account with Valve (even if I like valve) but it is a really good middle ground that provides utility to all sides.
Rather than people throwing up complete nonsense that has nothing to do with the technology they claim to be against while also coming right off a studio being sent to the shadow realm harder than a themed deck user because of… a bad beta and character designs that weren’t sexy enough.
No one is forcing you to install their game.
It’s so easy to look up what kind of anti cheat games use.
You can’t eat the cake and have it too.
They don’t have a right to install anything without your consent. However. You pressed the “Install” button. And you boxed in “I understand” and clicked “I agree”.
That doesn’t really track here. My reasoning is simple. They are requiring access to something they didn’t initially make public or allow an informed decision on, and they did that on purpose. While I don’t currently own or buy games that have kernel level anti-cheat, that doesn’t make the obfuscation any better.
I actually have not pressed the install button, nor have I pressed the purchase button. However, I also want you to look up the phrase “eat cake and have it to” and figure out what you mean. I’m buying the cake. I’m buying the fork to eat the cake. Neither the cake company nor the fork company should be able to tell me what to do with the product from the other company. You don’t have to agree with my stance, but understand that this is the argument that I am making.
People need to take responsibility of their own machines.
While they might not hold out a sign that says “KERNEL LEVEL ANTI CHEAT”. There is information available to make an informed decision.
Your cake and fork argument makes no sense at all. The game company isn’t telling you what you can and can’t do with your hardware. But they are telling you what you will be installing. It’s there if you know where to look. And if you don’t know where to look. You have the combined knowledge of the world at your fingertips for guidance.
I don’t know what you do. But when I buy a cake. I look at the ingredients to see what and how much it contains of various things. If I don’t like what I see, I won’t be buying it. Because I certainly won’t be eating it.
And I’m also not going to buy a plastic fork to eat it with. See how I made that decision. The cake company didn’t make me buy a certain fork, and the fork company didn’t make me buy a certain cake. I decide.
It’s ultimately your responsibility to understand what you are installing. Information is available.
You did not read what I wrote in my response and it shows. I have taken responsibility for my machine. I don’t buy games with kernal level anti-cheat. I specifically view them as an attack vector for malware. They started the cake vs fork argument and my response was directly related to them using such a poor expression for the context of the conversation we were having and therefore it took that to its logical conclusion based on the argument they made.
Since you didn’t read and decided to downvote I am choosing to not discuss this with you further, having vetted the ingredients of your cake. Have a good day.
I read your comment. I didn’t downvote.
I’m using the “you” in the colloquial sense, i see that wasn’t apparent to you. (You as in you the singular individual)
I understand you are against kernel level anti cheat. That’s ok. That’s an opinion. But your argument that it’s some kind of secret which games have it or not, is not a matter of opinion. It’s verifiable. And It’s just not true. It’s not a secret. You can easily find out if you want to.
You can make the argument that platforms should make publishers divulge that information on the games page. And I say sure, why not.
But it always will be your responsibility to make sure you know what you’re installing.
Unfortunately. It is an armsrace against cheaters. And 1 single cheater can easily ruin the entire experience for hundreds of players. I understand why games might want it. I hope they can find more clever ways of detecting cheats without it.
As a final word. Lemmy is a big place. It’s utterly ridiculous of you to assume I’m the one who downvoted.