Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
1–10 of 26 posts
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#2Some cheats are using PCIe FPGA boards to get access to game memory totally outside of the OS. The boards are controlled from a separate computer.
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#3Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routines.
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#4Some cheats are using PCIe FPGA boards to get access to game memory totally outside of the OS. The boards are controlled from a separate computer.
wow, sounds exciting :D
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#5How does that work with having say 2 copies of the same OS (Win) on the same computer? On 2 separate drives? If I have the game on one does the kernel access affects both or just one? Obviously I'm not an expert but I actually want to give a game a try but I'd not install just on its own as is. Apart from buying an other PC or waiting an eventual console release I wonder what else can be done
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#6How does that work with having say 2 copies of the same OS (Win) on the same computer? On 2 separate drives? If I have the game on one does the kernel access affects both or just one? Obviously I'm not an expert but I actually want to give a game a try but I'd not install just on its own as is. Apart from buying an other PC or waiting an eventual console release I wonder what else can be done
If you install Windows on two separate drives, each copy of Windows has its own kernel drivers, so the Valorant installer would only install the driver onto the drive you were currently using. As far as I know, you can't install multiple copies of windows onto the same drive (barring partitions).
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#7Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routines.
They've usually thought of that level of the arms race.
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#8How does that work with having say 2 copies of the same OS (Win) on the same computer? On 2 separate drives? If I have the game on one does the kernel access affects both or just one? Obviously I'm not an expert but I actually want to give a game a try but I'd not install just on its own as is. Apart from buying an other PC or waiting an eventual console release I wonder what else can be done
You can only have one running at once, so presumably the game simply won't run if it's kernel-level countermeasures aren't in place.
Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#9Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?
#10It’s important to know that Riot Games is 100% owned by Tencent, making it a Chinese company.
This doesn’t even mean a grand conspiracy is required. They have an office in Shanghai, so it’s trivial for the CCP to persuade a couple employees and leverage this as a kernel level backdoor into hundreds of millions of western PCs.
If you think this is unfounded speculation, remember US intelligence was accusing Karspersky with distributing malware for Russian state backed cyber operations just a number of years ago...
Or the recent BGP hijackings on US ranges that are transparently obvious by China Telecom.