Submitted 3 weeks ago by ampersandrew@lemmy.world to games@lemmy.world
Now if only they could more clearly communicate when games are playable offline.
However, it’s only being forced for kernel-level anti-cheat. If it’s only client-side or server-side, it’s optional, but Valve say “we generally think that any game that makes use of anti-cheat technology would benefit from letting players know”.
I will always love Valve for their ability to use corpospeak against corpos.
How does vac play into all of this then …
VAC is not kernel level, because surprise you don’t actually need kernel level to do anti cheat well.
VAC games would just get the standard AC message banner, not the scary yellow kernel level warning banner.
It doesn’t run at the kernel level?
That’s awesome! GTA V just screwed everyone on Linux! What a rug pull.
Adding kernel malware after the fact should entitle every single owner who requests one to a full refund no matter how long has passsed.
Full agree. I do want some kind of policy for games that introduce anti-cheat both during early access and after release. Bricking a game you paid for should offer some sort of recourse.
I’d really like Valve to take an official policy on post-release changes that break games, but for what it’s worth they have not given me any hassle with refunds in these scenarios.
That’s exactly what Valve did. The automated refund system wasn’t available, but you could request a manual review and cite the added anti cheat; Valve was refunding those who did so.
That should be any update
Valve was giving refund when riot added the anticheat
I don’t think that’s fair. I “own” GTA5 and don’t really care for the last… 8 years? what they add. I had the full content of my purchase. Why should I be able to gain money for this?
Easy Anti Cheat - requires manual removal
Wait, so this sketchy, privacy-invading stuff remains even after a game is uninstalled?! I had no idea.
How is this stuff not classed as malware at this point?
Oh it was initially classed as insanely intrusive malware when kernel level AC was introduced about a decade ago, by anyone with a modicum of actual technical knowledge about computers.
Unfortunately, a whole lot of corpo shills ran propaganda explaining how actually its fine, don’t worry, its actually the best way to stop cheaters!
Then the vast, vast majority of idiot gamers believed that, or threw their hands up and went oh well its the new norm, trying to fight it is futile and actually if you are against this that means you are some kind of paranoid privacy freak who hates other people having fun.
Do you remember when Sony released cds that when inserted into Windows computer auto ran an installer that installed a rootkit that made it impossible for Windows to see any processes or files that started with a certain sequence of characters instantly turning any malware that named its files or processes similarly powerful rootkit. Oh and it installed a cd driver that made it impossible to copy their music.
Suggested removal was a full reinstall of windows.
Jesus christ
I’ve been shouting from the rooftops for years that this stuff is malware. I’m not the only one. No one listens.
Wikipedia says malware is
any software intentionally designed to cause disruption to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, deprive access to information, or which unknowingly interferes with the user’s computer security and privacy
It does not do any of these things. Like any software, it may have vulnerabilities, and being a kernel module it can be high risk. But that’s no different from any kernel module, like your graphics driver.
It’s a much higher risk than average because games are often abandoned within one year of release and still run as long as 10-15 years later and connects to the internet and other randos on the internet. See the Call of Duty games that allow you to take over the computer of anyone who connects to your online match. It greatly degrades the security of its users.
Technically lots of things people call “malware” don’t actually do any of those things. For instance they may hijack your default search engine, pop up ads, or otherwise monetize your computer at your expense. The category that was invented by ass coverers is “possibly unwanted program” but outside of those who worry about being sued by scumbags people colloquially refer to both what you call malware AND PUPs as "malware the root of which is “bad” after all. Language being descriptive not prescriptive I think this broader definition of malware is fine.
It unknowingly interferes with my security or privacy, 100%. It has root access. What’s it doing in there? Nowadays you’re naive to think it’s just to prevent game cheating. I guarantee they’re collecting all kinds of information.
Plenty of games use it, if it uninstalled with each one then others would stop working.
I kind of assumed it would be packaged with each game, a waste of space (but how big could it be?) but leaving a game with anti cheat a global dependency seems like a bad idea.
EAC installation process includes “registration” of a game, and the uninstall process “unregisters” the game. If all games using EAC are uninstalled, EAC itself also should be uninstalled.
Any program having kernel level access is spyware. This is getting ridiculous.
Vanguard anticheat…
I feel like they’re doing this because they are going so hard with steam deck. Regardless, good on Valve for doing this.
The steam deck is also amazing, such a nice piece of hardware. I’ve been gaming on Linux for years and I’m surprised how well it works. Feels like a console.
I wonder if you phrased it the way the Play store does: This game wants permission to:
etc.
Think anyone would install them?
Cup my balls? Go on…
i dONt hAVe anYThinG To HIdE
Anyone who says that while wearing pants is a filthy liar.
looks at Disney pluses binding arbitration clause
Yup
of course, people don’t even look at play store permissions
I suppose they do suffer from the “Known in the state of Cancer to cause California” problem. A bubble level app wants in-app purchases and GPS access.
Can someone explain like I’m stupid on kernel level anti cheat and why I should watch out for it? Not a dig at all, a genuine question!
To put it very simply, the ‘kernel’ has significant control over your OS as it essentially runs above everything else in terms of system privileges.
It runs at startup, so this means if you install a game with kernel-level anticheat, the moment your system turns on, the game’s publisher has software running on your system that can restrict the installation of a particular driver, stop certain software from running, or, even insidiously spy on your system’s activity if they wished to. (and reverse-engineering the code to figure out if they are spying on you is a felony because of DRM-related laws)
It basically means trusting every single game publisher with kernel-level anticheat in their games to have a full view into your system, and the ability to effectively control it, without any legal recourse or transparency, all to try (and usually fail) to stop cheating in games.
And it’s worth noting that trusting the game developer isn’t really enough. Far too many of them have been hacked, so who’s to say it’s always your favorite game developer behind the wheel?
More importantly, if traditional anticheat has a bug, your game dies. Oh no.
If kernel level anticheat has a bug, your computer blue screens (that’s specifically what the blue screen is: a bug in the kernel, not just an ordinary bug that the system can recover from). Much worse. Sure hope that bug only crashes your computer when the game is running and not just whenever, because remember a kernel-level program can be running the moment your computer boots as above poster said
Not all anti cheats run at startup. Some only run when you play a game. I think vanguard for valorant ran all the time at first and people were pissed. Meanwhile easy anti cheat runs only with a game. So it depends. It all sucks though.
It’s not just trust of the game developer. I honestly believe most of them just want to put out profitable games. It’s trust that a hacker won’t ever learn how to sign their code in a way that causes it to be respected as part of the game’s code instructions.
There was some old article about how a black hat found a vulnerability in a signed virtual driver used by Genshin Impact. So, they deployed their whole infection package together with that plain driver to computers that had never been used for video games at all; and because Microsoft chose to trust that driver, it worked.
I wish I could find an article on it, since a paraphrased summary isn’t a great source. This is coming from memory.
Thank you! Really clear and appreciate you taking the time to explain!
Making it super simple, it runs with full access on your machine, always. It can fuck anything up, and see everything. It can get your browser history, banking details or private messages you enter, activate your webcam or mic without you knowing, or brick your computer even.
And you can’t even check what it’s really doing on your computer because it’s a crime under US law.
And you can’t even check what it’s really doing on your computer because it’s a crime under US law.
Is this specifically for kernel level anticheat? Because this isn’t a thing for software in general right??
Easy, a bug in battle eye forced me to reinstall windows, this kernel access has to go.
Also, the most games that don’t work in linux is for this reason (and steamdeck works in linux)
Imagine a game having higher privileges than what you get with “Run as administrator”
Common valve W
W steam
Why is kernel-level anti-cheat even a thing?
If I was trying to prevent cheating, I’d hash the relevant game files, encrypt the values, and hard-code them into the executable. Then when the game is launched, calculated the hash of the existing files and compare to the saved values.
What is gained by running anti-cheat in kernel mode? I only play single-player games, so I assume I’m missing something.
Because there are kernel-level cheats
What you proposed can very easily be bypassed without even needing kernel access by just editing the executable code that checks hashes to always return true
Boo freaking hoo.
It’s not like there are so many other ways to cheat, actually used in many games with anticheats.
We should all stop pretending it’s necessary to put malware into your computer just so some company can claim they have no cheaters, which is never even true.
… Buuut you can still defeat Kernel level Anti Cheats.
m.youtube.com/watch?v=RwzIq04vd0M&t=2s&pp=2AECkAI…
Which means that you still have to end up relying on reviewing a player’s performance and actions as recorded by the game servers statistically via complex statistical algorithms or machine learning to detect impossibly abnormal activity.
… Which is what VAC has been doing, without kernel level, for over a decade.
All that is gained from pushing AC to the kernel level is you ruin the privacy and system stability of everyone using it.
You don’t actually stop cheating.
It is not possible to have a 100% full proof anti cheat system.
There will always be new, cleverer exploitation methods, just as there are with literally all other kinds of computer software, which all have new exploits that are detected and triaged basically every day.
But you do have a choice between using an anti cheat method that is insanely invasive and potentially dangerous to all your users, and one that is not.
And then a game gets updated so the hashes don’t match and uh oh, everything is fucked. Oh, but we can change the hashes of the files in the executable! Yeah, so can they. People modding shit into the executable is basically a given. Let alone the fact that you’d need to sit through a steam “validation of files” length of time every time you’d need to launch a game (because validation works exactly as you have described).
What is gained is that it has access to more information. Some cheats use an entirely different program / process that reads memory and outputs info that is available to the game but hidden from the player. Like a client needs to know where a person on the other team is to be able to draw their model. So you read that, you put a little box over where they are, and bang you have wallhacks.
I think the popular thing now is to mod your mouse so it clicks on the enemy player’s head.
They can prevent you from running cheats that other anti-cheats can’t detect. For instance, they could modify the value in memory so that your calculated hash always succeeds even when it’s modified. This doesn’t stop cheating though; it just means cheaters have to use cheat hardware that exists at a layer that even kernel anti-cheat can’t detect.
You don’t need to modify the files to modify data in memory.
I bought Sea of Thieves about 5 years ago. Recently, they added kernal-level anticheat (which does precisely fuck-all to actually stop cheating). While that is annoying, I’m not particularly worried because the studio that makes that game is owned by Microsoft, and like all Microsoft products, it was banished to my windows partition with the rest of the spyware.
Well… kernel level software can access everything on your computer. That includes other partitions and unmounted drives
Only if those other partitions are not encrypted. Sure, it could still wipe them - but that’s something that backups are good for, and something you would certainly notice immediately :)
Anything sensitive is encrypted and I never decrypt it while running windows.
This will be helpful for discerning if a game can run on the Steam Deck. There’s not many games that don’t have verification (Either by Valve or ProtonDB) but for newer games with anticheat it will serve as a good rule of thumb i imagine
I think that’s the main goal behind,
To avoid frustration for steamD owners and avoid a bad reputation of “all games are unplayable on it”
I wish Valve would just ban them. It’s weird to have something that looks like pure malware in a Game store.
Not to be annoying, but can someone please ELI5 how kernel level anti-cheat software actually works, or link good resources where I can read about it.
god damn right!
I imagine the alternative way to combat kernel-level cheats would be asking player for all his game state data, validating it on a server?
Wouldn’t work on peer-to-peer and you’d have to do a bunch of unnecessary compute(recalculating every tick if player-generated data is possible according to game rules) but its the only way I can think of.
Nice.
Is this a Linux problem? I’ve never had to look for this detail before in Windows.
gofsckyourself@lemmy.world 3 weeks ago
Jtee@lemmy.world 3 weeks ago
Wow, mad because you can be held accountable. That’s sad.
Thanks for the steam link!
yamanii@lemmy.world 3 weeks ago
4 likes on him complaining that modlogs being public is something bad, cowards that only want to be shitty in the shadows.
PyroNeurosis@lemmy.blahaj.zone 3 weeks ago
I’m still fairly new. Where do I go for modlog drama?
Voyajer@lemmy.world 3 weeks ago
He used to relentlessly spam the /r/linux_gaming subreddit and argue with people there too until he deleted his reddit account lol
mrvictory1@lemmy.world 3 weeks ago
He’s still on Reddit
NuXCOM_90Percent@lemmy.zip 3 weeks ago
I really don’t see a need to drag community drama everywhere. GoL is one of the biggest aggregator blogs out there for… linux gaming. Whether we should prioritize original sources over aggregators is a different discussion.
But yeah. Liam is great for news aggregating but he is 100% the stereotypical linux gamer and has a long history of starting random shit. Still annoyed by how fast he got everyone to shit on the Duckstation devs because they didn’t want to be exploited.
Sunny@slrpnk.net 3 weeks ago
Being a big(“great”) news aggregator doesn’t excuse bad behavior.
finitebanjo@lemmy.world 3 weeks ago
I was going to ask why the thumbnail on this post is a hexagon shaped bear, but your comment explains it well enough.
Blisterexe@lemmy.zip 3 weeks ago
the thumbnail is a hexagon bear because it’s the logo for easyanticheat, the most recogniseable anticheat
Dremor@lemmy.world 2 weeks ago
As he said, modlogs are public, and it seems like other user retreived the trace of this “abuse of power” : sopuli.xyz/comment/12732467 .
To me it isn’t, as it is in his right as a moderator to chose how he moderate the communities he has the right to. If he finds your comment pedantic and annoying, and chose to remove it, so be it.
but this community has a pretty clear rule against harrassement, which you are breaching, offense for which I’ll use my g… mod given right of banning you for 30 days. Take this time to reflect on your actions.