• @[email protected]
    link
    fedilink
    5911 months ago

    Amazing video! I like how it explores the history of cheating and how anti-cheat software hasn’t gotten rid of cheaters, but only made them less obvious.

    Wall hacking is obvious to other players, but a program that pulls the trigger when crosshairs are over an enemy isn’t. That leads to people thinking that cheating doesn’t exist because nobody is flying around the map only getting headshots. People are willing to install this rootkit to their machine because their lobbies don’t have cheaters. But they still do. It’s that their lobbies don’t have obvious cheaters.

    Also an interesting point that Riot has done little to deal with smurfs in their games. Now players are more likely to think they got matched with a smurf rather than a cheater.

    • ampersandrew
      link
      fedilink
      711 months ago

      From my experience with fighting games, people are also prone to mislabeling others as smurfs when they just know one or two more things about the game that give them an edge. I’ve observed replays in Street Fighter 6 that people claimed were smurfs, but they were absolutely playing at the level their rank said they were.

      • @[email protected]
        link
        fedilink
        English
        111 months ago

        The only way to stop it is to stop letting people play with strangers and to go back to local LAN sessions, or for games to be private only with temporary invite codes that have to be shared manually, with a maximum number of users allowed.

        Online anonymity really has ultimately harmed us as a species and conferred little if any benefit.

        • ampersandrew
          link
          fedilink
          2
          edit-2
          11 months ago

          There are plenty of ways to curb cheating. It still happens in fighting games too, but the way the genre works makes it far less prevalent. FPS games these days are largely designed around things that are hard for humans but easy for computers to do while looking like humans. Just spitballing, but if aiming was less of a concern, like it might be in the likes of old James Bond games or Metroid Prime, there are other ways to build competitive strategy around an FPS besides how well you can get your tiny crosshair to line up over a tiny target. Otherwise though, I’m with you on it being inevitable. There’s no way to truly stop it.

          • shastaxc
            link
            fedilink
            211 months ago

            I’m a fan of projectile-based objective-based shooters like Tribes. It’s a shame they are not more popular. Just the nature of the game design makes aimbots nearly useless.

  • @[email protected]
    link
    fedilink
    5011 months ago

    It’s frustrating how much trouble people will go to to cheat in a game that’s supposed to be fun.

    • @[email protected]
      link
      fedilink
      3811 months ago

      For many people the challenge of breaking it is the fun. Just like lots of very wealthy people who don’t have to steal will steal for the fun of it.

      • littleblue✨
        link
        111 months ago

        Stranger Things have happened, for sure.

    • @[email protected]
      link
      fedilink
      3611 months ago

      Most of the fun for the people breaking anti-cheat is the actual breaking of anti-cheat, not the cheating itself. It’s the script kiddies who use the already completed work with little to no effort involved who are doing most of the actual cheating.

      • @trashgirlfriend
        link
        6
        edit-2
        11 months ago

        Most of the fun for cheat devs (that sell cheats) is the thousands they get off of children and neckbeards paying stupid amounts for their cheats.

        • littleblue✨
          link
          311 months ago

          Ironically enough, those that sell cheats are more often cheating the cheat devs that wrote the script in the first place, not being able to do so on their own.

      • @[email protected]
        link
        fedilink
        211 months ago

        Yeah I could see the appeal of breaking the anti-cheat code. But the actual cheaters find the cheats, often pay for them, install what could easily be malware, and take the risk of getting banned for using them. I don’t get the appeal.

  • @[email protected]
    link
    fedilink
    2311 months ago

    I watched this video yesterday. Holy fuck it was so good for someone who only had 3k subscribers.

    I actually believed that kernal level anti cheats stopped all cheating. I had never considered the lengths people would go to.

    • @rdri
      link
      19
      edit-2
      11 months ago

      I actually believed that kernal level anti cheats stopped all cheating.

      This is what allows AC devs to continue working on their useless code that only makes a mess out of everyone’s PCs and getting money with it. Same with DRM devs.

    • @[email protected]
      link
      fedilink
      611 months ago

      All software has bugs, so you’ll never have a 100% effective anti-cheat. It’s going to be an arms race between cheaters and game devs, and the cheaters will always find a way.

      All kernel-level anti-cheat does is introduce security vulnerabilities to your system and delay the inevitable.

      There will also always be external methods to cheating, like screen recording based.

      • @Crashumbc
        link
        English
        511 months ago

        MSI is releasing a monitor, with cheating built in… Granted it only “highlights” things but still.

  • @[email protected]
    link
    fedilink
    2211 months ago

    Client-side anti-cheat doesn’t make any sense. The player will always control the client if they really want to (and they have every right to do so).

    AI-supported server-side cheat detection should be where it’s at. I doubt it’ll be much worse than the half-baked “solutions” we currently have.

    Running essentially part of a game in ring 0 is completely unacceptable. Vanguard even runs when the game does not. It’s just cocky the publishers pretend like their anti-cheat is secure. Someone finding an exploit in the anti-cheat can use it to own systems running it.

  • @RubberElectrons
    link
    2111 months ago

    Fascinating. I work with FPGAs and previously with openCV on a Pi-based platform. The DMA hacks are a technical tour de force.

  • @[email protected]
    link
    fedilink
    1211 months ago

    So, what’s next? Mouse and keyboard DRM? Also, not sure how’d cheaters would cheat in lan games nowadays. Great video btw

  • 🦄🦄🦄
    link
    fedilink
    1111 months ago

    Incredible video. I wish the creator much success in the future :)

  • @kadu
    link
    -2611 months ago

    deleted by creator

    • @[email protected]
      link
      fedilink
      English
      5511 months ago

      You don’t mind giving up your privacy and system security to a company for a single game?

        • @sheogorath
          link
          5311 months ago

          It’s a rootkit. When it runs it basically has complete access to your system. You’re at the mercy of the guys at Riot and pray that no one breaches their system.

          IIRC Genshin Impact uses a similar system and a breach has already happened.

          • @[email protected]
            link
            fedilink
            -17
            edit-2
            11 months ago

            It’s a driver.

            Here the attacker installed the driver after gaining remote access.

            So it’s not actually anything to do with having the game installed.

            But it’s still a massive problem.

            • @[email protected]
              link
              fedilink
              28
              edit-2
              11 months ago

              You’re missing the point of what he is saying. The anti-cheat itself runs in a level with extreme access to anything on your computer. The anti-cheat is like almost all software almost certainly exploitable. You are trusting that no one will ever crack Vanguard in a way that exposes your user data, and that Riot will never change it to collect more than you think they are.

              • @[email protected]
                link
                fedilink
                911 months ago

                Not even about user data, this is just the side dish. You have complete control over the system and spy on, and probably even can do, whatever

                • @[email protected]
                  link
                  fedilink
                  211 months ago

                  You’re 100% right. Not only can they steal data, but they could use kernel level access to make your hardware misbehave, perhaps even to the point of damage. They could probably trash a hard disk or GPU for instance. It also gives them a locally controlled device on whatever network you’re on. From there they can weaponise their new access to attack other devices on the network, or cause the network itself to fail.

                  It just goes to show how dangerous this is, that even a programmer and security enthusiast like myself forgets to mention a huge chunk of the possible damages.

        • @[email protected]
          link
          fedilink
          English
          23
          edit-2
          11 months ago

          It’s kernel-level control of your system, basically rootkit malware that you choose to infect your computer with. Keep in mind, it’s always running, whether you’re playing a game or not! By definition, it literally has more control of your system than you do signed in with your own private password. Ask yourself this: if the anti-cheat was compromised, sold, re-prioritized, bypassed by hackers or foreign interests, etc… How would you even know?

          I understand that all this sounds paranoid, but remember that you chose to give it system-wide access! I likely hate online cheaters at least as much as you, but the potential security/privacy implications are far too great, not to mention the performance hit every single game with kernel-level anti-cheat suffers…

          • SuperDuper
            link
            -511 months ago

            Keep in mind, it’s always running, whether you’re playing a game or not!

            Not necessarily. You can close the software. You’ll need to restart your computer before launching Valorant, but it absolutely does not need to be running while you aren’t playing.

          • @Serinus
            link
            -1311 months ago

            This isn’t really different from most software on your system. I can exfiltrate plenty of your data on Windows without root. And are you reviewing the source code of every application you run?

            It’s a problem when Riot does it, but not Nvidia?

      • @kadu
        link
        -4711 months ago

        deleted by creator

        • @[email protected]
          link
          fedilink
          English
          42
          edit-2
          11 months ago

          I’m not making an accusation, it’s kernel-level access. If I know where you live, have keys to your house, know your security code, can change anything in your home without you knowing, that’s a problem.

          Why are you so dead-set on defending a company’s bad practices just because you like their game?

          • @kadu
            link
            -3811 months ago

            deleted by creator

            • @RubberElectrons
              link
              2911 months ago

              Yup, so you don’t care. Lmao you literally gave away the key to your house for an uninteresting video game. Pitiful.

              • @kadu
                link
                -2911 months ago

                deleted by creator

                • @RubberElectrons
                  link
                  2311 months ago

                  Some of us wouldn’t proudly admit to doing nothing with their time, but here we are.

                  I’ve got important stuff on my personal machine, and it’s the principal of the thing, besides. Good luck to you, I suppose.

                • @[email protected]
                  link
                  fedilink
                  411 months ago

                  I hope they use your PC as a botnet and steal your bank account some day when China has enough of us.

                • Lars :tux: :AFD:
                  link
                  fedilink
                  211 months ago

                  @kadu @RubberElectrons It seems you don’t understand how independent opinions in a democracy are made. It’s about privacy and the right for it. No company has the right to snuff in my life and collect private data. Everyone has secrets.

                • unfa🇺🇦
                  link
                  fedilink
                  111 months ago

                  @kadu @RubberElectrons It doesn’t have to be the company itself.
                  Imagine the unimaginable scenario where a group of hackers gains access to the company’s network and servers and plants a malicious patch to be sent in the next update.
                  I wouldn’t be afraid of the company exploiting this. I would be afraid that a bug or hacker can do whatever with my computer because I gave this software root access, and it gets remotely updated, has network access and can become an amazing tool in the wrong hands.

            • @rdri
              link
              1211 months ago

              I’m dead set on playing online games without cheaters.

              Then you should’ve stopped playing when you encountered the first cheater. The one that you knew was a cheater, at least.

              Things like this create false sense of safety where you assume the game has less cheaters but in reality you can hardly tell.

            • @[email protected]
              link
              fedilink
              311 months ago

              Xbox should be plug an play. Everythig is open and viewable so you can see the malware if there is any.

              Otherwise show me the driver to prove me wrong.

    • @[email protected]
      link
      fedilink
      2311 months ago

      Not only can it be bypassed, but anti cheat with kernel level access can be used to distribute malware or spyware if it is compromised. Whether your personal anecdotes reflect the actual statistics or not, these anti cheats are dangerous and are not impenetrable.

          • @[email protected]
            link
            fedilink
            -9
            edit-2
            11 months ago

            That’s exactly the sort of source I was asking for

            Edit: the driver file was used after gaining access to the pc. So quite an involved attack but still really bad.

            Edit 2: so actually it’s nothing to do with having it installed. As the attacker installed it.

            • @[email protected]
              link
              fedilink
              611 months ago

              Yes it requires access to the pc but it’s still a huge vulnerability. Many things can gain access to your pc but lack the permissions to do any damage. In this case simply having genshin impact installed put you at significantly more risk.

              To your 2nd edit yes it is to do with it being installed. The user or the attack installing the anticheat is still the anticheat being used to exploit.

        • @[email protected]
          link
          fedilink
          English
          211 months ago

          As mentioned, cheaters can already bypass it, so what’s the point? As for security, by definition it infects your whole system and has access to everything. That’s what kernel-level is.

            • Chewy
              link
              fedilink
              411 months ago

              Actually, a driver can be an infection, just like any other program can be malicious. But I do agree that from a system access standpoint, running the Vanguard kernel driver is not much different than using kernel-level EAC/BattleEye. Except the annoying starting at boot part.

              A program without elevated privileges already has access to almost all important things on your computer anyway. Luckily flatpak supports sandboxing which protects from exploits in online games.

          • @kadu
            link
            -1211 months ago

            deleted by creator

            • Russ
              link
              fedilink
              English
              811 months ago

              Seems like a bad faith argument, seat belts are so that your skull (hopefully) doesn’t detach and fly through the window if you get into an accident - a life and death safety measure. It’s way more dramatic to make a fuss about that. However, in both cases you can choose to just not drive (or play the game) which people are choosing to do.

              Then again, none of your comments here seem like they’re in good faith, so I guess I shouldn’t be surprised.

              • ampersandrew
                link
                fedilink
                011 months ago

                Cars are actually a great analogy here but probably not in the way that user intended. The way we use them and the scale at which we use them are inherently unsafe, but seat belts and air bags are an illusion sold to make us believe that we solved the problem as best we can, even though we didn’t.

                • @demonsword
                  link
                  111 months ago

                  seat belts and air bags are an illusion sold to make us believe that we solved the problem as best we can, even though we didn’t

                  As someone who has been in a few accidents (both as driver and as passenger), seatbelts saves lives. I wouldn’t be here typing this if they didn’t.

            • @[email protected]
              link
              fedilink
              511 months ago

              More like my aunt pointed a loaded gun at the back of her seatrest and it went off when she hit the brakes too hard

      • @kadu
        link
        -2911 months ago

        deleted by creator

        • @[email protected]
          link
          fedilink
          711 months ago

          Honestly a few cheaters in a game is way less of a problem than letting a company, especially one owned by tencent, have root access to my pc. Anyway in my experience with league the cheaters are either mostly nonexistent or subtle enough that it doesn’t impact the games. Also nobody in here’s going to have a rank that’s actually important and I don’t see why they can’t have the fun anticheat in tournaments and ranked but leave it out of the other things.

        • @[email protected]
          link
          fedilink
          English
          711 months ago

          Isn’t the whole point of this article to point out that no, in fact, you won’t ?

          Less volume perhaps, certainly less obvious, but not “without”.

    • @[email protected]
      link
      fedilink
      English
      611 months ago

      Man if the only way to break the condom was with the expensive DMA cheat and shit like that I could agree with your logic but a $10 arduino and 2min google search is enough.

    • @[email protected]
      link
      fedilink
      -111 months ago

      My sweet summer child, I will see you in 5 years when Valorant cheating is as bad as CS:GO cheating at its peak.

      Kernel AC circumventation will only improve, as there’s many cheaters putting money in this technology. In 5 years this stuff will be commonplace and mean that these solutions will be ineffective.

      • @kadu
        link
        111 months ago

        deleted by creator