Live data from Hacker News

Keyhole – Forge own Windows Store licenses

massgrave.dev

281–290 of 319 posts

Re: Keyhole – Forge own Windows Store licenses

#282
post #40

Earlier quoted context omitted.

How do you do manual moderation on a massive fast-paced game like Valorant? It’s correct, that doesn’t scale

maybe not manual ... but ... log behavior, find outliers, make outliers play with outliers only

You're basically ignoring the past 30+ years of the gaming and cheating industry. Everybody already does log behaviour, try to find outliers, and have some systems to try to keep cheaters outside from the general player pool. That's what gaming companies have been doing since at least the early Halo days. That has its own set of side effects, such as creating a horrible experience for the most talented and active players — also the ones most likely to stream and advocate for your game, to produce youtube videos to complain about bad experience, and to have a very influential profile in the community.

The state of game cheating has professionalized A LOT, it is extremely competitive and cheating companies produce extremely good quality tools compared to what we had 20 years ago. There is a lot of money to be made, we are at the point where you can just pay a cheap monthly subscription and you get access to actively maintained cheating tools. I know people working on the anti-cheat side, it is a really messy, highly dynamic (the bad actors are constantly adapting), complicated problem that isn't solved once and for all. We are far from the situation where just a few people are using some hacked-together software that will obviously be spotted as cheaters.

Game dev companies (at least US/European ones) have zero interest in developing or paying for kernel-level anti-cheat. That's a massive barrier of entry for the player base and they know this. It's also far from being cheap.

(Note: ignoring geopolitical factors, Chinese companies such as Tencent or Russian companies could definitely have interests in developing kernel-level anti-cheat for information gathering)

Re: Keyhole – Forge own Windows Store licenses

#283

Earlier quoted context omitted.

Why would you need it? HEVC codec ships with the driver package from your GPU vendor.

This hasn't been my experience. Nvidia + Intel GPU drivers are installed but I still can't play HEVC with the default windows media player. MPC Black works fine though, and probably VLC too.

This is my experience also. VLC does work as it has its own HEVC

Re: Keyhole – Forge own Windows Store licenses

#284
post #271
post #264

Earlier quoted context omitted.

HN pedantry always amplifies the conversation

As long as you use accurate terms (ie. the right terminology) there wouldn't be such pedantry needed. You intentionally mudify the discussion by using the term property theft for non-phyisical intellectual property (which can even be shortened to IP), or preferably: copyright infringement (I stick to the term IP in this post but prefer the term copyright infringement). Different laws apply for IP compared to (physica…

No, it's property theft.

Re: Keyhole – Forge own Windows Store licenses

#285
post #242

Earlier quoted context omitted.

On an internet exposed server?

thats not what the discussion is about, stop hijacking the thread to push your narrative.

I understand that auto updates aren't ideal, because they cause breakage (most of my systems dont auto update), but I don't get not updating your systems at all.

Re: Keyhole – Forge own Windows Store licenses

#286
post #219

Earlier quoted context omitted.

The CFAA's broad enough so as to allow a lot of creative interpretation. A journalist using view source was breaking the CFAA was one district attorneys view.

This is the only carve out I could find for manufacturers of computers: > No action may be brought under this subsection for the negligent design or manufacture of computer hardware, computer software, or firmware. I guess Microsoft could argue their entire operating system business, app store, and update infrastructure are intentionally negligent, and so not covered. I’d think a reasonable court would say that it’s…

Intentional negligence is not a thing in law.

Re: Keyhole – Forge own Windows Store licenses

#287

Earlier quoted context omitted.

> property theft is wrong. It sure is, and those people should promptly return their stolen Photoshop bits to the front door of any local fire station so Adobe can put them back into their bit warehouse and ship them to paying customers next day air

It's not property theft by most definitions, but it's still harmful in much the same way as property theft is harmful -- and in exactly the same way that me watching you type in your password is harmful, even though afterwards you still know your own password.

One of our two mental models of property theft is incorrect: someone downloading Photoshop does not deprive Adobe of its ability to sell the Photoshop it manufactured to someone else

And I adamantly disagree with your password analogy if for no other reason than your password scenario creates temporal harm (assuming I do not change my password, of course) in a way that someone pirating version 1.0 does not automatically give them access to 1.1 or other product lines. In fact, I'll see your temporal factor and raise you: if someone pirates a product on Monday, and then buys the product on Tuesday, should they be jailed on Wednesday?

I'm eventually going to be sorry that I waded into this discussion, but I found the stolen bits == property theft so absurd I wanted to mock it, and now it seems this thread is somehow doubling down on false equivalences.

Piracy can be morally wrong for taking food out of software engineer's mouths, but one should not lump it into breaking-and-entering just to ratchet up the "look at how bad it is" factor

Re: Keyhole – Forge own Windows Store licenses

#288
post #118
post #91

Earlier quoted context omitted.

Yep. This seems to be the most overlooked part of the article, although maybe the most interesting. Unfortunately not for anyone who has activated the auto-update feature on his/her Xbox, as the latest system software version seems to include a higher kernel version than supported by the collateral-damage exploit.

Exactly why you should never, ever, enable auto update, for anything. Too often it ends up breaking something or patching something you don't want patched. It allows a profit seeking company to enable or disable software functionality on your device, regardless if it's in your interest.

Nobody should follow this advice. Not least because you (the person giving it) wouldn’t have to live with the consequences of following it, but mostly because it’s idiotic.

Re: Keyhole – Forge own Windows Store licenses

#289
post #186
post #166

Earlier quoted context omitted.

I wonder if this is the worst cryptography blunder since Nintendo Wii using 'strncmp' to validate a hash (which stops after the first matching 00 byte)

This "check the block signature and then read another one" bug is incredibly common. I'd say it's one of the top 5 bugs I see in Validating Things. Other examples of places I've seen this recently include some variants of VW AG infotainment systems (mostly MIB2 High, I think), but it's kind of everywhere (as was the `strncmp-a-hash` method of validating an RSA-PKCS#1.5 signature). This is probably the most egregious/…

> This "check the block signature and then read another one" bug is incredibly common

I don't have links handy, but Android fell prey to this bug twice checking .apk signatures due to .zip files having duplicated copies of the manifest

Re: Keyhole – Forge own Windows Store licenses

#290

Earlier quoted context omitted.

Yeah so give money to the companies that do it, that'll show them! Boycotting those products is capitulation somehow, because brain damage.

You're making a lot of weird assumptions here, and seem to have completely missed the point I am making.

I said that people shouldn't play games with rootkit anticheat and you gave me that damned "first they came for" crap as though I am the one capitulating to the abusive practice. How else am I meant to take it?
Post reply on HN