Live data from Hacker News

Call of Duty Adds Kernel Level Driver for Anti-Cheat

callofduty.com

71–80 of 332 posts

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#71
post #48

This is an arms race that game developers won't win, it's just whack-a-mole. They should invest instead in server-side models for detecting cheating, then it can't be circumvented and you don't need to bother learning all the different ways they can produce inhuman inputs.

Still, I think it's worthwhile research and engineering to attempt. Technology and techniques developed can likely be used to secure other types of systems.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#72
post #32

Earlier quoted context omitted.

Easy: code your game correctly and check for impossibilities server-side. But that costs money in development and infra.

Could you expand on "code your game correctly"? Let's say I'm playing your (correctly coded) game and I've got an aimbot, that snaps onto someone's head, how do you detect/stop that from the server-side (the only place you can trust)?

You look for aim that is too perfect. E.g. humans nearly always overshoot their target before correcting, aimbots never do (unless they are trying to imitate humans)

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#73
post #58
post #24

Earlier quoted context omitted.

Then there's CS:GO, whose developers refuse to use intrusive practices to counter cheating. And the game is ruined by rampant cheating. (Neither for nor against. Just saying.)

Then there's PUBG (BattlEye) ruined by rampant cheating. Then there's EFT (BattlEye) ruined by rampant cheating. Then there's (was?) Combat Arms (multiple anti cheats over the years) ruined in-part by rampant cheating. I wouldn't mind _that_ much if anti-cheats actually helped, but they don't.

I'm still playing PUBG, though just FPP, and rarely run into what is obviously a cheater - maybe once every two months? But while things have got better, you're right, when things were really, really bad it hurt the game's community terribly.

I do think that anti-cheat helps, if the developers are mostly engaged with it, but it's a long fight over a long time. Most of the strategies to do with 'ban waves' - ie, not banning cheaters immediately - are pragmatic concessions to that reality.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#74

Earlier quoted context omitted.

How about no? This will just lead these companies to implement anti-cheat to protect the "integrity" of their single player games (and their MTX) as well. Say goodbye to mods and other forms of benign game hacking (particularly hacks that fix games like Dark Souls).

Would it be in a game company’s interest to implement anti-cheat for single player games? Mods and other forms of benign game hacking increase the popularity and longevity of games which presumably benefit profitability.

I don't think it's a question of "would", it's a question of "why", since that's what's going on right now. You can point to single player paid cosmetics as a profiteering aspect. Greedy executives who care about short-term quarterly sales numbers for bonuses and stock influencing maybe aswell? I wouldn't consider myself knowledgeable of the game industry, but that's one of my bets.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#75
post #8

Microsoft should implement an Xbox mode for Windows that has these protection features for all games. It will probably require some virtualization and performance degradation but it's better than each game rolling out their own half assed drivers.

How about no? This will just lead these companies to implement anti-cheat to protect the "integrity" of their single player games (and their MTX) as well. Say goodbye to mods and other forms of benign game hacking (particularly hacks that fix games like Dark Souls).

They could do that regardless. Anti-cheat already exists in many forms. They just don't because it adds work for little gain.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#76
post #21

Aside: are there any good tutorials that provide an overview on how to write such an anti-cheat?

No tutorials to link you to, but there's significant overlap between anti-cheat systems and anti-virus/anti-malware systems, which makes sense when you consider their aims. Searching for academic papers about anti-virus approaches to dealing with networking, memory and filesystems will be helpful.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#78
post #32
post #4

Earlier quoted context omitted.

If I write a cheat for your game that operates on the kernel level, how would you detect it from the game that runs in user space?

Easy: code your game correctly and check for impossibilities server-side. But that costs money in development and infra.

> Easy: code your game correctly and check for impossibilities server-side. But that costs money in development and infra.

Do you have any experience developing networked multiplayer games? I do it for a living, and it's not that easy, at all. In a situation where I shoot at your head on my screen, but you were already around the corner on your screen, what happens? This happens _all_ the time due to latency, and has nothing to do with development costs or infra. There's no way to avoid the problem when you have people with varying levels of connection quality, and different distances to the game server.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#79

Cheaters are going to figure out a way to cheat. Even if it means some kind of TASBot device to physically press the buttons on a controller there will always be a way for someone to cheat.

If we imagine we're in a world where all cheaters are forced to use a physical device to cheat - that's a big win. Sure some people will still cheat but the number of players who would go this far and spend this much to do so would be vanishingly smaller than those who can download some sketchy .exe in an afternoon.

Re: Call of Duty Adds Kernel Level Driver for Anti-Cheat

#80

It's cheating really that big of a deal? How do they try to stop it now? Do they really need a kernel driver?

It's not just a big deal, it's a massive market. There are many people who will pay an enormous amount of money for custom written cheats, there are whole SAAS-style subscription services for different game hacks, it's... all a bit silly.

It's when there's a whole cottage industry around this that you know things are out of hand.

Post reply on HN