Live data from Hacker News

Steam games will need to disclose kernel-level anti-cheat on store pages

gamingonlinux.com

11–20 of 660 posts

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#11

After the crowdstrike disaster 3rd party kernel drivers need to be shunned for non critical applications. Games publishers have been bad actors in this space for a long time now. The genshin impact anticheat was used in a malware campaign. Rockstar was very misleading trying to imply their kernel driver not being compatible with the steam deck was valves fault.

What decides critical or non-critical. One could argue that a game isn't critical but one could say it's critical to stop hackers. If you were to take the stance that gaming isn't critical than with that logic you're then claiming multiplayer hacking is a feature of the game. Doesn't do well for the community or the company. But nor do the rootkits do good for the consumer.

If they worked to any acceptable level of efficacy then they could be tolerated. They're only tolerated by people who think they work as well as they claim to work (security theater) but anyone who knows about the performance impacts and/or are tech-savvy enough to understand it is a rootkit and potential exploit (that would fully pwn your device) hates them.

Some cheats are getting rather sophisticated now. There's an ever-increasing number of Pi-devices where the cheating is done externally.

https://www.youtube.com/watch?v=QpvwjC1_Luo

https://www.youtube.com/watch?v=revk5r5vqxA

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#12
I built a dedicated gaming PC a couple of years ago. Too much cowboy coding in the industry for me to feel safe running this code on my main computer. Even games for which I pay have supposedly* been scanning/uploading personal data presumably for some adtech purposes.

Why should I ever trust a gaming company to take security seriously? There was a story a few years ago about how one guy at home debugged GTA5’s atrocious loading times without any resources. Loading times which were notoriously bad and surely had a negative impact on revenue, yet nobody in the company could be bothered.

*Never verified it, but I recall the new owners of Kernel Space Program were accused of reporting personal data files to the cloud.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#13
post #4

Good, the sooner devs realize they need to do server side properly, the better

I think most of these companies do do the server side properly. There are plenty of hacks that just make a client play ungodly well. Like macros, aimbots, cooldown tracking, auto-hex

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#15

Earlier quoted context omitted.

What decides critical or non-critical. One could argue that a game isn't critical but one could say it's critical to stop hackers. If you were to take the stance that gaming isn't critical than with that logic you're then claiming multiplayer hacking is a feature of the game. Doesn't do well for the community or the company. But nor do the rootkits do good for the consumer.

Critical as in "my gpu is a paperweight without a driver".

GPU driver can technically be userland too.

Look at what Apple has done in recent years. kexts (kernel-level drivers) are basically all but unsupported today, and both DriverKit and IOKit are fully userland.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#16
post #4

Good, the sooner devs realize they need to do server side properly, the better

It's impossible to prevent cheating from the server-side only. Something like an aimbot can operate purely on information you need to have as a client (to render the other players on the screen), and still be a huge advantage because it can respond faster than any human can.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#17

After the crowdstrike disaster 3rd party kernel drivers need to be shunned for non critical applications. Games publishers have been bad actors in this space for a long time now. The genshin impact anticheat was used in a malware campaign. Rockstar was very misleading trying to imply their kernel driver not being compatible with the steam deck was valves fault.

Lets call them what they really are, rootkits.

First party malware.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#18
post #4

Good, the sooner devs realize they need to do server side properly, the better

What? The current PC gaming model where things run on a machine controlled by the user is fundamentally against solving the issue of cheats. You can't prevent everything server-side.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#19

After the crowdstrike disaster 3rd party kernel drivers need to be shunned for non critical applications. Games publishers have been bad actors in this space for a long time now. The genshin impact anticheat was used in a malware campaign. Rockstar was very misleading trying to imply their kernel driver not being compatible with the steam deck was valves fault.

Lets call them what they really are, rootkits.

Can't wait to find out what China hid in Riot's Vanguard rootkit for all their games. It's 100% a conspiracy theory, but nobody can convince me it's perfectly clean, or if it is, that there isn't an easy way to add some power to it quietly.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#20

Earlier quoted context omitted.

Critical as in "my gpu is a paperweight without a driver".

GPU driver can technically be userland too. Look at what Apple has done in recent years. kexts (kernel-level drivers) are basically all but unsupported today, and both DriverKit and IOKit are fully userland.

Performance critical drivers are always going to be kernel mode.
Post reply on HN