Live data from Hacker News

Steam games will need to disclose kernel-level anti-cheat on store pages

gamingonlinux.com

141–150 of 660 posts

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#141
post #95

Earlier quoted context omitted.

When was the last time you had to install a Linux driver from out of tree?

Most people do install Nvidia’s out‐of‐tree graphics driver. It is definitely a risk.

It's a risk, but a very minor additional one - if you trust their hardware with direct access to your PCIe bus, you have already given them the metaphorical keys to the vault.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#142
post #94
post #32

Earlier quoted context omitted.

I think server side statistical analysis can go a long way to detect stuff like that. Obviously its always a cat and mouse game between devs and cheaters, and there are always workarounds, but theres a lot more the devs could be doing without relying on invasive client side detection.

I've always wondered about this too. It should be pretty easy to recognize statistical outliers. I'm sure cheaters would start to adapt but that adaptation might start to look more in-line with normal skill levels so at least the game wouldn't be utterly ruined

Valve has adapted this kind of thing in Counter Strike for almost a decade.

They try to make own matchmaking for possible statistical outliers so cheaters end up playing against each other. Of course, real good players can still get there and there are (at least used to) real humans on reviewing on those games to see if someone is actually a cheater. It is not a simple task, since you can cheat to be just slightly better than others and that is enough to be good.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#143
post #62

Earlier quoted context omitted.

> one could say it's critical to stop hackers. It's never critical to stop hackers in a videogame IMO. We need to stop being so damn serious about gaming .

Rampant cheating will wreck competitive multiplayer games fast, so there are perspectives from which this critical. (I’d still lean towards expecting game houses to find another way, kernel drivers are still client side trust mechanisms).

If not having hackes is critical for a competitive videogame CS and Dota 2 will be dead.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#144
post #72

Does anyone know whether disclosure of Denuvo and similarly controversial "add-ons" does negatively affect sales? Maybe I am cynical, but I have come to the conclusion that whether it is always online DRM, rootkit-level anti-cheat or the need to have an account for offline play, community anger is often only maintained when a game had other things going against it from the get-go. Not against disclosing this of cours…

The most recent study I saw showed that Denuvo significantly helps revenue capture within the first few months of a game's release https://www.sciencedirect.com/science/article/abs/pii/S18759...

[flagged]

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#145
post #123

Earlier quoted context omitted.

Ah, yes, for most of us, getting our computer pwned is just like being murdered .

l o l Fine, they'll gladly eat shit

How much shit, and how does it compare to the risk profile of, say, not wearing a five points seat belt and motorcycling helmet while driving, or a bulletproof vest when going to school, or an N95 mask literally everywhere?

Security theorists are always ready to tell us about the horrifying risks of installing kernel-level code from a vendor, but can they actually quantify the likelihood times damage those billions of installations have inflicted on Joe Random's life?

And contrast them to other risks that we regularly take in the name of comfort and convenience?

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#146
post #95

Earlier quoted context omitted.

When was the last time you had to install a Linux driver from out of tree?

Most people do install Nvidia’s out‐of‐tree graphics driver. It is definitely a risk.

If you've already put a piece of hardware into your computer made by nvidia, installing a kernel driver also made by nvidia does not increase your risk at all.

Installing some random anti-cheat kernel driver is not the same thing, at all.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#148

I think the population of game developers and their knowledge of multiplayer networking is fundamentally getting worse over time, because I see things that should not be architecturally possible in a lot of newer multiplayer games. This whole thing anti-cheat thing is just a separate problem entirely, but it's so painfully exacerbated by the first.

The anti-cheat also goes hand in hand with the predatory business models of "always online" and micro transactions. Those things sell because of advantage over other players or just social factors in the case of cosmetics. Wouldn't be as relevant in an offline game. But now, since the game is online (for business, not technical, reasons), we need some way to keep everyone honest.

I'm just hoping this entire business model dies, along with the anti-cheat and everything else with it.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#149
post #115

Earlier quoted context omitted.

The API doesn't provide root access, it's typically a simple "is this game running in a secure environment" read API. I really hate "it's a rootkit!" posts like this because it diminishes the severity of actual rootkits.

Can you please clarify how an API which runs in the kernel does not have root access? Because I don't believe that's possible, but perhaps I'm wrong.

That's the promise of eBPF.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#150
post #60
post #55

Earlier quoted context omitted.

That's exactly what I tell my friends. I can't play certain games, because they don't run on Linux and even if they did, I am not gonna install a rootkit to run them.

Getting a Steam Deck has done wonders for my piece of mind. I don't need to worry if whatever games I'm installing are malicious, because the machine is airgapped from anything critical.

piece of mind? or peace of mind?

/nitpick ;-)

Post reply on HN