Neineon77

I've been told I'm "pocketable"

I make my own patches, sometimes draw and I like old/cute video games. I work on computers and retro handhelds/consoles


threeoh6000
@threeoh6000
This page's posts are visible only to users who are logged in.

sirocyl
@sirocyl

"third party anti-cheat kernel driver" should strike the same kind of fear in you as "debug port left exposed" or "default root telnet password"

there should be no business sense for MS to sign these; they should not be signed, signing them should result in fines and sanctions, and the OS already doesn't load unsigned kernel drivers.

this shit should, honestly, be illegal through and through.


fwankie
@fwankie

I can only imagine how much restraint it took to wait for this tournament while knowing you have this and it could possibly get patched at some point, either you end up with nothing or you get the funniest possible way to show off a hack

edit: you're wasting your time asking for security advice for software I don't use, I can't help you


fwankie
@fwankie

like they could have easily just installed crypto miners on a bunch of random people's PCs instead of doing this so I'm glad it was this


You must log in to comment.

in reply to @threeoh6000's post:

I mean, anti-cheat is like safes - they're never impossible to unlock by someone unauthorised, it's a matter of making it as hard as possible to do so.
But then, having a titanium safe does not install a backdoor in your damn house. There are no promises that anti-cheat makers could give to make it feel secure (that is, not having a damn hole in kernel level software) - if anyone ever was able to make 100% unexploitable software, anti-cheat wouldn't have to exist.

this tbh. there's all these dingus dongles for thunderbolt, PCIe and even firewire, to poke arbitrary memory over DMA in a way that's almost completely undetectable. a veritable hacker's dozen of 'em

in reply to @sirocyl's post:

crikey is that what I think it is
edit: whatever I thought it was, it's worse than that.
tl;dr: x86 I/O port level access to any unprivileged program. yes that includes superio, vesa, and BIOS, PCI, ISAPNP config space, and so on.

And if you have a Windows computer you may just find you have it installed unexpectedly! Lots of stuff bundles it because they're too lazy to write a proper driver for the narrow case they want.

Huh? "Keep intrusive bullshit off my computer" is like, the one thing gamer-ass-gamers are typically on the right side of. Sure they'll still play the games anyway, but when it comes to steam reviews and reddit posts gamer spaces are generally hostile to this stuff almost to a fault

Only the people playing the games that already have it, people playing other games see any sign of cheating and start begging for more invasive anticheat thinking it will actually fix things (it doesn’t, though).

in reply to @fwankie's post:

Most likely not. Since each instance of a Proton drive is effectively sandboxed, unless you interact with that drive in a VM or something it most likely can't escape into your primary system. Linux doesn't have a central registry the same way Windows does, so unless the rootkit is configured in such a way that it can navigate a Linux system as well you're probably good.

Still, I recommend deleting any games using EAC, since this is less about Linux being more immune to these sorts of attacks and more about defense through obscurity. I also recommend backing up your data and maybe doing a complete uninstall and reinstall of Steam, just to be safe.

It's a shame too since EAC was one of few anticheats that played nice with Linux :/

in reply to @fwankie's post: