Live data from Hacker News

Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?

arstechnica.com

21–26 of 26 posts

Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?

#23

Apparently, the anti-cheat system is also blocking VMs from running the game https://twitter.com/RiotSupport/status/1248402073269309441

I wonder if this also prevents running the game if you have Hyper-V or Hyper-V based technologies (Windows Defender protection, Container support, WSL2) installed. That would be a real bummer - because you can't game on your dev-computer then.

Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?

#24
post #17

Earlier quoted context omitted.

> It's getting to the stage that games, a distraction, can't be trusted to be on the same machine as anything else. The iOS/macOS sandbox, for games purchased through the App Store/Apple Arcade, provides some degree of reassurance.

Unfortunately the continuing spat between Apple and Nvidia, and the lack of games available, make the Mac a path less travelled for gamers. Which is a shame, I'd love to use it for more, but it's poorly supported.

I've been gaming on a Mac for years. There are many Windows-only games, but I don't really miss that operating system. Between native Mac ports and the Nintendo Switch/3DS, my gaming needs are well covered. When there's something I really badly want to try on Windows, I fire up CrossOver, Parallels, or Boot Camp, in that order.

Right now the GPU in my 2019 16" MBP (5300M) seems to be good enough for everything I want to play, and the 5500M is said to be even better. Of course the problem remains optimization for macOS which most ported games don't have.

Apple Arcade is actually a ray of hope, even for core gamers. There's some good stuff on it, give it a try.

Right now I'm going to remove anything Riot-related I find on my macOS installation.

Re: Ring 0 of fire: Does Riot Games’ new anti-cheat measure go too far?

#25
post #22

Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routines.

The... ring0 process?

That's a good point. It will be a bit harder, but not entirely impossible. Position independent code/memory layout will complicate any attempts to modify the AC.
Post reply on HN