It’s frustrating how much trouble people will go to to cheat in a game that’s supposed to be fun.
For many people the challenge of breaking it is the fun. Just like lots of very wealthy people who don’t have to steal will steal for the fun of it.
It’s much more frustrating to see “anti cheat” and game developers forcing us to install a bad OS and a rootkit, for the benefit of fewer 10 year olds cheating. How about you develop server side anti cheat, instead of slowing down games by 25%?
Cheats are too sophisticated for that. Server doesn’t have enough data. It’s getting to the point where even the client might not, by using a 2nd device with image recognition for example.
Server side AC is there to stop people doing actions that are impossible, not to stop possible actions from being automated. Server AC can stop people from moving too quickly, for example. The server knows your position, velocity, and the amount that velocity can change in a tick. It can prevent anything from going above this. It can’t tell if you clicked on someone’s head really quickly, or accessed memory you shouldn’t be allowed to access.
Which, as this video shows, client side AC can’t either. So there is absolutely 0 benefit to these invasive solutions, effectively making Server side AC the only sensible solution to game developers who are actually interested in safety (instead of syphoning of user data)
Pretty much every game has server side AC. They aren’t mutually exclusive. I’m certain Valorant is varifying data on the server and not accepting any packets a user sends without question.
They’ve all got server side anti cheat too.
Most of the fun for the people breaking anti-cheat is the actual breaking of anti-cheat, not the cheating itself. It’s the script kiddies who use the already completed work with little to no effort involved who are doing most of the actual cheating.
Yeah I could see the appeal of breaking the anti-cheat code. But the actual cheaters find the cheats, often pay for them, install what could easily be malware, and take the risk of getting banned for using them. I don’t get the appeal.
Most of the fun for cheat devs (that sell cheats) is the thousands they get off of children and neckbeards paying stupid amounts for their cheats.
Ironically enough, those that sell cheats are more often cheating the cheat devs that wrote the script in the first place, not being able to do so on their own.
More like to flex their programing skill
Client-side anti-cheat doesn’t make any sense. The player will always control the client if they really want to (and they have every right to do so).
AI-supported server-side cheat detection should be where it’s at. I doubt it’ll be much worse than the half-baked “solutions” we currently have.
Running essentially part of a game in ring 0 is completely unacceptable. Vanguard even runs when the game does not. It’s just cocky the publishers pretend like their anti-cheat is secure. Someone finding an exploit in the anti-cheat can use it to own systems running it.
If a CCP-comtrolled company wants kernel-level access, the game should be banned. Full stop.
But if a non-CCP controlled company wants kernel level access, then I would love to give them that control!
Fascinating. I work with FPGAs and previously with openCV on a Pi-based platform. The DMA hacks are a technical tour de force.
Amazing video! I like how it explores the history of cheating and how anti-cheat software hasn’t gotten rid of cheaters, but only made them less obvious.
Wall hacking is obvious to other players, but a program that pulls the trigger when crosshairs are over an enemy isn’t. That leads to people thinking that cheating doesn’t exist because nobody is flying around the map only getting headshots. People are willing to install this rootkit to their machine because their lobbies don’t have cheaters. But they still do. It’s that their lobbies don’t have obvious cheaters.
Also an interesting point that Riot has done little to deal with smurfs in their games. Now players are more likely to think they got matched with a smurf rather than a cheater.
From my experience with fighting games, people are also prone to mislabeling others as smurfs when they just know one or two more things about the game that give them an edge. I’ve observed replays in Street Fighter 6 that people claimed were smurfs, but they were absolutely playing at the level their rank said they were.
The only way to stop it is to stop letting people play with strangers and to go back to local LAN sessions, or for games to be private only with temporary invite codes that have to be shared manually, with a maximum number of users allowed.
Online anonymity really has ultimately harmed us as a species and conferred little if any benefit.
There are plenty of ways to curb cheating. It still happens in fighting games too, but the way the genre works makes it far less prevalent. FPS games these days are largely designed around things that are hard for humans but easy for computers to do while looking like humans. Just spitballing, but if aiming was less of a concern, like it might be in the likes of old James Bond games or Metroid Prime, there are other ways to build competitive strategy around an FPS besides how well you can get your tiny crosshair to line up over a tiny target. Otherwise though, I’m with you on it being inevitable. There’s no way to truly stop it.
I’m a fan of projectile-based objective-based shooters like Tribes. It’s a shame they are not more popular. Just the nature of the game design makes aimbots nearly useless.
I watched this video yesterday. Holy fuck it was so good for someone who only had 3k subscribers.
I actually believed that kernal level anti cheats stopped all cheating. I had never considered the lengths people would go to.
All software has bugs, so you’ll never have a 100% effective anti-cheat. It’s going to be an arms race between cheaters and game devs, and the cheaters will always find a way.
All kernel-level anti-cheat does is introduce security vulnerabilities to your system and delay the inevitable.
There will also always be external methods to cheating, like screen recording based.
MSI is releasing a monitor, with cheating built in… Granted it only “highlights” things but still.
So, what’s next? Mouse and keyboard DRM? Also, not sure how’d cheaters would cheat in lan games nowadays. Great video btw
Here is an alternative Piped link(s):
https://piped.video/watch?v=RwzIq04vd0M
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I’m open-source; check me out at GitHub.
I’ve always wondered why not just ban their key from the platform entirely? Or is it free to play?
The anti-cheats are there to detect the cheats, not necessarily stop them (though they usually do that too, at least the basic ones). When they’re detected, they can ban accounts or whatever. They usually do this in waves to prevent cheat developers from knowing exactly when their cheats were detected and what triggered the anti-cheat.
Most games suffering from cheaters are at least partially free. LOL, Valorant, COD, CSGO, Fortnite, Overwatch, Various MMOs.
Getting a new bot-leveled account for any of these games costs somewhere from 0.30€ to 5€. Ban one account and they just use the next one for pretty much free.
Most of these games do account ban waves every few weeks to months, but if its this easy to create new accounts that’s useless. IP bans aren’t possible anymore since public IPs are dynamic and change every few days to weeks. Hardware bans, while technically possible, can still be circumvented easily by spoofing your mac-address and serial numbers.
The only way to minimise cheating would be linking your Social security number (or the equivalent for your Country) with your account, which leads to a lot of privacy issues. And even that isn’t foolproof. LoL in Korea already uses this system and still has issues with a lot of trolls, scripters and wintraders.
Because having a low barrier of entry and smurfing is part of the business strategies of these sort of games.
Much like using a condom, the point isn’t a protection scheme that’s impossible to fail.
Valorant is the first FPS I’ve played where, after two years, I’ve never encountered a cheater. They’re there, you can find some clips… Until they’re banned. They’re rare. Counter Strike, Call of Duty, Titanfall, you name it, I would encounter cheaters with a much higher frequency.
So while Vanguard can be bypassed… I don’t worry about cheaters on Valorant, they’re rare and the cheats are expensive and annoying to use. Vanguard did its job.
You don’t mind giving up your privacy and system security to a company for a single game?
How is it giving up your privacy and security?
It’s a rootkit. When it runs it basically has complete access to your system. You’re at the mercy of the guys at Riot and pray that no one breaches their system.
IIRC Genshin Impact uses a similar system and a breach has already happened.
It’s a driver.
Here the attacker installed the driver after gaining remote access.
So it’s not actually anything to do with having the game installed.
But it’s still a massive problem.
You’re missing the point of what he is saying. The anti-cheat itself runs in a level with extreme access to anything on your computer. The anti-cheat is like almost all software almost certainly exploitable. You are trusting that no one will ever crack Vanguard in a way that exposes your user data, and that Riot will never change it to collect more than you think they are.
It’s kernel-level control of your system, basically rootkit malware that you choose to infect your computer with. Keep in mind, it’s always running, whether you’re playing a game or not! By definition, it literally has more control of your system than you do signed in with your own private password. Ask yourself this: if the anti-cheat was compromised, sold, re-prioritized, bypassed by hackers or foreign interests, etc… How would you even know?
I understand that all this sounds paranoid, but remember that you chose to give it system-wide access! I likely hate online cheaters at least as much as you, but the potential security/privacy implications are far too great, not to mention the performance hit every single game with kernel-level anti-cheat suffers…
Keep in mind, it’s always running, whether you’re playing a game or not!
Not necessarily. You can close the software. You’ll need to restart your computer before launching Valorant, but it absolutely does not need to be running while you aren’t playing.
This isn’t really different from most software on your system. I can exfiltrate plenty of your data on Windows without root. And are you reviewing the source code of every application you run?
It’s a problem when Riot does it, but not Nvidia?
Otherwise known as a driver hehe
But they’re all valid points.
privacy and system security
The burden of proof is on the accuser. Show Vanguard doing something shady and I might care. Keep complaining because “it could if it wanted to” and I won’t entertain conspiracy theories.
I’m not making an accusation, it’s kernel-level access. If I know where you live, have keys to your house, know your security code, can change anything in your home without you knowing, that’s a problem.
Why are you so dead-set on defending a company’s bad practices just because you like their game?
I’m dead set on playing online games without cheaters. If Vanguard worked on Linux, half of this community wouldn’t care and wouldn’t rely on a fallacy of assuming it will be turned into malware.
As for kernel level access to the machine… Oh no, just like the third party driver I had to install on Linux to use my Xbox adapter? Crazy! That must be malware!
Yup, so you don’t care. Lmao you literally gave away the key to your house for an uninteresting video game. Pitiful.
Not only can it be bypassed, but anti cheat with kernel level access can be used to distribute malware or spyware if it is compromised. Whether your personal anecdotes reflect the actual statistics or not, these anti cheats are dangerous and are not impenetrable.
Do you have any sources on this happening? Or is it a personal anecdote hehe
There was a security vulnerabilitiy in the genshin impact anti cheat awhile ago.
That’s exactly the sort of source I was asking for
Edit: the driver file was used after gaining access to the pc. So quite an involved attack but still really bad.
Edit 2: so actually it’s nothing to do with having it installed. As the attacker installed it.
It was already done through genshin impact anti cheat. It will be done in Vangard.
With that the attacker installed that driver after gaining access. So having the driver installed wasn’t the issue.
What do you think ‘gaining access’ entailed?
Nothing to do with the game.
As mentioned, cheaters can already bypass it, so what’s the point? As for security, by definition it infects your whole system and has access to everything. That’s what kernel-level is.
By definition a driver is not an infection.
Actually, a driver can be an infection, just like any other program can be malicious. But I do agree that from a system access standpoint, running the Vanguard kernel driver is not much different than using kernel-level EAC/BattleEye. Except the annoying starting at boot part.
A program without elevated privileges already has access to almost all important things on your computer anyway. Luckily flatpak supports sandboxing which protects from exploits in online games.
“my aunt used a seat belt and died in a crash anyway! So what’s the point?”
Seems like a bad faith argument, seat belts are so that your skull (hopefully) doesn’t detach and fly through the window if you get into an accident - a life and death safety measure. It’s way more dramatic to make a fuss about that. However, in both cases you can choose to just not drive (or play the game) which people are choosing to do.
Then again, none of your comments here seem like they’re in good faith, so I guess I shouldn’t be surprised.
More like my aunt pointed a loaded gun at the back of her seatrest and it went off when she hit the brakes too hard
Cool beans. I’ll play ranked matches without cheaters, thanks.
Honestly a few cheaters in a game is way less of a problem than letting a company, especially one owned by tencent, have root access to my pc. Anyway in my experience with league the cheaters are either mostly nonexistent or subtle enough that it doesn’t impact the games. Also nobody in here’s going to have a rank that’s actually important and I don’t see why they can’t have the fun anticheat in tournaments and ranked but leave it out of the other things.
My sweet summer child, I will see you in 5 years when Valorant cheating is as bad as CS:GO cheating at its peak.
Kernel AC circumventation will only improve, as there’s many cheaters putting money in this technology. In 5 years this stuff will be commonplace and mean that these solutions will be ineffective.
Been hearing that since day 1 on Valorant, years in and that’s not the case. But sure bud, in five years if I’m wrong feel free to come to this post and reply.
