Comment on Battlefield 6 dev apologizes for requiring Secure Boot to power anti-cheat tools
BrikoX@lemmy.zip 1 week agoNot entirely. The actual anti-cheat software that have access to the kernel with Secure Boot can be modified to either intentionally the developer or unintentionally by a hack. It’s unnecessary attack vector among many other non-security related issues.
9tr6gyp3@lemmy.world 1 week ago
My point stands. The anti cheat doesn’t modify your kernel though. Its not a rootkit.
Quatlicopatlix@feddit.org 1 week ago
No the anti cheat is just very intrusive and does wild stuff to look at what other process3s are doing and checks system calls etc. The fact that bf6 wont run if you have the riot games anti cheat running (wich alsso is very bad) is telling. If one company cant trust that the anticheat of another company may break something when it interferes with yours is bad. Look at the crowdstrike incident.
Microsoft itself wants all this stuff gone from the kernel after crowdstrike. If your anticheat needs root acess to look at every file, process and syscall to check if you are hacking it is a desaster waiting to happen. Look at all the anti virus programs that were hijaacked to get root acess before.
9tr6gyp3@lemmy.world 1 week ago
Sounds like these game studios are creating horrible software on a horrible OS, but this anti cheat is still not modifying the kernel, and secure boot also is not a rootkit.
Quatlicopatlix@feddit.org 1 week ago
It operates at kernel level, it lives in the kernel, i would argue it “modifies” the kernel since it lives there. Also you cant say that its not a rootkit since there is no way to know what the anticheat does. If ea or riot games or others eant they can look at your files processes or just do whatever since they habe access to everything. This is a rootkit, you just hope they only look at the processes to stop cheaters but you cant know if they may send something back or execute other code.
ragas@lemmy.ml 1 week ago
Technically you are not wrong with what you are saying, however you still miss all the important points.