Live data from Hacker News

Steam games will need to disclose kernel-level anti-cheat on store pages

gamingonlinux.com

61–70 of 660 posts

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#61
post #55

Earlier quoted context omitted.

Lets call them what they really are, rootkits.

That's exactly what I tell my friends. I can't play certain games, because they don't run on Linux and even if they did, I am not gonna install a rootkit to run them.

And yet you install driver on Linux without knowing it, I mean Linux has 0 security for drivers.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#62

Earlier quoted context omitted.

What decides critical or non-critical. One could argue that a game isn't critical but one could say it's critical to stop hackers. If you were to take the stance that gaming isn't critical than with that logic you're then claiming multiplayer hacking is a feature of the game. Doesn't do well for the community or the company. But nor do the rootkits do good for the consumer.

> one could say it's critical to stop hackers. It's never critical to stop hackers in a videogame IMO. We need to stop being so damn serious about gaming .

Rampant cheating will wreck competitive multiplayer games fast, so there are perspectives from which this critical.

(I’d still lean towards expecting game houses to find another way, kernel drivers are still client side trust mechanisms).

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#63
post #60
post #55

Earlier quoted context omitted.

That's exactly what I tell my friends. I can't play certain games, because they don't run on Linux and even if they did, I am not gonna install a rootkit to run them.

Getting a Steam Deck has done wonders for my piece of mind. I don't need to worry if whatever games I'm installing are malicious, because the machine is airgapped from anything critical.

Same, but I am only using it for couch gaming

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#64
post #39

I've never seen a game request root privileges, and I would think installation of anything kernel-level would need that. None of the steam binaries have setuid nor capabilities set. Have anyone seen games that request root privileges? EDIT: I'm gathering from this[1] and the fact that no wine-related package have kernel modules included and no executable from any of those packages have setuid nor capabilities set, th…

The kernel level anticheats are almost always written for Windows. They are relevant to gaming on Linux because those games won't work on Linux even if wine/proton run the user space portions fine

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#65
post #16
post #4

Good, the sooner devs realize they need to do server side properly, the better

It's impossible to prevent cheating from the server-side only. Something like an aimbot can operate purely on information you need to have as a client (to render the other players on the screen), and still be a huge advantage because it can respond faster than any human can.

if you have a large enough player base to sample, you can determine who is cheating with math. EA Fairplay is pretty good.. Steam's VAC is good, and not some kernel level nonsense..

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#66
post #59
post #47

Earlier quoted context omitted.

Cheats and bots are ruining online games though.

Yeah life sucks when everything and everyone has to be untrusted (applies not just video games). The solution is to build trusted spaces again IMO. For video games assume that each user is trusted by default. As soon as they violate that trust by cheating, they are banned permanently for that copy of the game. If they want to be trusted again they have to buy another copy of the game to get another license. Make it h…

False positives would very much hurt in that model. But returning to a small multiplayer experience with chosen friends would work: the in/out decision is local and personal.

It’s only a problem when you game with strangers.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#67
post #32
post #16

Earlier quoted context omitted.

It's impossible to prevent cheating from the server-side only. Something like an aimbot can operate purely on information you need to have as a client (to render the other players on the screen), and still be a huge advantage because it can respond faster than any human can.

I think server side statistical analysis can go a long way to detect stuff like that. Obviously its always a cat and mouse game between devs and cheaters, and there are always workarounds, but theres a lot more the devs could be doing without relying on invasive client side detection.

BasicallyHomeless did a recent YouTube video on this.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#68
post #19

Earlier quoted context omitted.

Lets call them what they really are, rootkits.

Can't wait to find out what China hid in Riot's Vanguard rootkit for all their games. It's 100% a conspiracy theory, but nobody can convince me it's perfectly clean, or if it is, that there isn't an easy way to add some power to it quietly.

If it is written in C you can always introduce a buffer overflow or something similar by just adding a little bit of line noise here or there and nobody can prove it was deliberate.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#69
post #48

Earlier quoted context omitted.

Lets call them what they really are, rootkits.

I mean, they're not rootkits. Rootkits are either to gain root access (thus the name) or to hide something from a user. Anticheats don't do either of these. They expose a kernel API to allow games to verify the state of the system, and they're knowingly installed by the user.

> They expose a kernel API to allow games to verify the state of the system

And that API has root access... thus it's a rootkit.

Re: Steam games will need to disclose kernel-level anti-cheat on store pages

#70
post #50
post #48

Earlier quoted context omitted.

I mean, they're not rootkits. Rootkits are either to gain root access (thus the name) or to hide something from a user. Anticheats don't do either of these. They expose a kernel API to allow games to verify the state of the system, and they're knowingly installed by the user.

> They expose a kernel API to allow games to verify the state of the system, and they're knowingly installed by the user. Can you give examples of games where you do that?

Riot games use theirs (Vanguard) to improve detection of cheating software. basically the idea is by being on from the moment the computer is booted up it can validate the environment better.

Here's a recent blog post by riot detailing their recent deployment of the system for league of legends, the biggest online multiplayer game in the world

https://www.leagueoflegends.com/en-gb/news/dev/dev-vanguard-...

towards the end it talks about how and why it works

Post reply on HN