Most active commenters
  • charcircuit(6)
  • codedokode(5)
  • CircleSpokes(3)
  • kortilla(3)
  • takeda(3)
  • account42(3)

←back to thread

658 points transpute | 38 comments | | HN request time: 1.773s | source | bottom
Show context
codedokode ◴[] No.35844123[source]
Isn't it good? Does leaked key mean that now owners of hardware will be able to read and modify the firmware, including IME, and check it for backdoors?

Such keys should be in the hands of users, not Intel.

replies(5): >>35844144 #>>35844419 #>>35844928 #>>35845513 #>>35845801 #
tapoxi ◴[] No.35844419[source]
Realistically it means a lot more people are going to cheat in Valorant.
replies(2): >>35844572 #>>35844631 #
1. shrimp_emoji ◴[] No.35844631[source]
Oh no! Here, please, backdoor my OS with a kernel anticheat -- anything that saves me from cheaters in the current bideo game of the month! D:
replies(4): >>35844767 #>>35844891 #>>35844904 #>>35845450 #
2. charcircuit ◴[] No.35844767[source]
Wanting to play competitive games without cheaters is something that real users actually want and they get real value from. Your mockery of these people doesn't remove the value they get from being able to play without cheaters.
replies(2): >>35845964 #>>35846948 #
3. juliusgeo ◴[] No.35844891[source]
Riot anti cheat is quite invasive but Valorant is a competitive ranked first person shooter, allowing cheaters violates the integrity of any ranking system of players, and that ranking system is one of the primary appeals of the game.
4. CircleSpokes ◴[] No.35844904[source]
I honestly don't understand why people act like this. Wanting to be able to ensure firmware isn't maliciously modified is a good thing. Open firmware is also a good idea obviously but there has to be a way to ensure firmware is signed either by OEM or your own keys like secure boot.

As for games, lots of people play games and want good anticheat. If you don't like that you don't have to play those games but no need to act like the way you are because other people want decent anticheat.

replies(5): >>35845630 #>>35845936 #>>35845943 #>>35846925 #>>35847251 #
5. fafzv ◴[] No.35845450[source]
So don't play the game. Personally I want kernel level anticheats because they make it much harder to cheat in the game. I want to know that my opponents are not cheaters. That's something I don't have in CS:GO, a game ripe with cheaters, or TF2, a game ripe with bots. (Valve's usermode anticheat is absolutely useless)
replies(2): >>35845559 #>>35845949 #
6. von_lohengramm ◴[] No.35845559[source]
Yet it's still pretty dang easy to bypass VGK and cheat in Valorant if you even slightly know what you're doing. Now you have the worst of both worlds. In theory, Valve's VACnet and Trust Factor are the ideal solutions, but in practice... not so much.
replies(1): >>35845573 #
7. fafzv ◴[] No.35845573{3}[source]
How is VAC the ideal solution? It is weak even in theory.
replies(1): >>35846011 #
8. kortilla ◴[] No.35845630[source]
>honestly don't understand why people act like this.

Because it’s social pressure to compromise your computer to a gaming company to get to play a game.

People don’t care about the anticheat on their computer, they want it foisted on everyone else who plays, which is a sucky proposition for privacy and security minded people.

It’s like advocating for the TSA to be controlling access to the grocery store because you want to feel safe there and don’t mind the privacy violation.

replies(3): >>35845722 #>>35845938 #>>35861062 #
9. charcircuit ◴[] No.35845722{3}[source]
>to compromise your computer

What do you mean by this? As the user you are intending to have the game and its anticheat run. Having to download and run a game on your computer isn't compromising your computer either. Maybe the only thing which doesn't give the game company power to run potentially malicious code on your machine is cloud gaming. That also solves the cheating problem at least.

replies(2): >>35846785 #>>35846952 #
10. codedokode ◴[] No.35845936[source]
> As for games, lots of people play games and want good anticheat

Great, let's install a backdoor in every computer so that some people can play games and watch movies. No. Computer is a thing for computing numbers not a replacement for a TV.

replies(1): >>35846065 #
11. CircleSpokes ◴[] No.35845938{3}[source]
>People don’t care about the anticheat on their computer, they want it foisted on everyone else who plays, which is a sucky proposition for privacy and security minded people.

No they want games without hackers. Which kernel based anticheats helps with. Can it also impact privacy and security? Yes no doubt but so can any program running on the computer even in userspace. Remember we are talking about kernel anticheats on windows lol.

If you are really worried about it you could dual boot like many people. Either way this whole argument seems silly to me.

replies(1): >>35846775 #
12. thomastjeffery ◴[] No.35845943[source]
1. It doesn't actually work.

2. All it actually does is keep users trapped in Windows. God forbid anyone actually use Linux, or even a VM!

The only actually effective anti-cheat is the original: moderation.

Now that users aren't able to host their own servers, they can't do moderation. Game studios don't want to do moderation themselves, so they keep trying (and failing) to replace it with automated anticheat systems.

replies(3): >>35846035 #>>35847376 #>>35847661 #
13. codedokode ◴[] No.35845949[source]
Make every player pay a deposit which is confiscated when they get caught cheating. Make servers with different deposit levels, so that people who really care about cheating pay over $1000 for example.

Better than having keys which I cannot control on my computer. And I don't play games anyway.

replies(1): >>35847017 #
14. codedokode ◴[] No.35845964[source]
Having encryption, keys and software that I cannot control because game makers and copyright owners want more profit is ridiculous.
replies(1): >>35846363 #
15. von_lohengramm ◴[] No.35846011{4}[source]
VACnet, not VAC. Server-side ML model analyzing player actions influencing their Trust Factor (or just straight up banning in more egregious cases).
16. ◴[] No.35846035{3}[source]
17. CircleSpokes ◴[] No.35846065{3}[source]
I can't take people like you seriously. The anticheat isn't a backdoor. It doesn't ship with the operating system or come preinstalled in anyway. You opt into it when you play the game. Literally nothing is forcing you to use it or have it installed on your computer.

I understand this is the internet and being super dramatic is part of it but can we please be for real for one moment?

replies(2): >>35846511 #>>35847526 #
18. charcircuit ◴[] No.35846363{3}[source]
Again. You are ignoring that users gain real value from this. The reason why copyright owners are making more profit is because user's are finding value in their product and they are being given what they want.
19. codedokode ◴[] No.35846511{4}[source]
I meant things like Microsoft's signing keys embedded inside BIOS, Microsoft Pluton CPU, secure enclaves inside CPU (now deprecated though) and things made for Secure Boot and DRM.
20. kortilla ◴[] No.35846775{4}[source]
You say “no” but then repeat what I said worded differently. When the current market for “games without hackers” is filled with kernel modules, it sucks.
replies(1): >>35860481 #
21. kortilla ◴[] No.35846785{4}[source]
Do you think the 30+ years of user-space isolation improvements that have gone into modern OSes are not undone by a kernel module?
replies(1): >>35846821 #
22. charcircuit ◴[] No.35846821{5}[source]
The whole point of a kernel level anticheat in that it can bypass the isolation to find cheats.

The isolation still exists for normal programs when the anticheat is present.

replies(1): >>35846992 #
23. ekianjo ◴[] No.35846925[source]
> I honestly don't understand why people act like this.

Good anticheat? Just play with people you know instead of random strangers. Thats your anticheat right there.

replies(1): >>35860659 #
24. ekianjo ◴[] No.35846948[source]
If they care that much make them pay for it.
replies(1): >>35847629 #
25. takeda ◴[] No.35846952{4}[source]
You're advocating for installing a kernel module that you don't even know what it does exactly when running a random game.

Would you also support a full cavity search each time you decide to fly a plane?

The kernel module has full access to your hardware, you don't know what it does exactly. You don't even know if it does something more than anticheat.

People got so complacent in recent years, and this is on a technology forum no less. I guess today the Sony rootkit[1] would be totally acceptable.

[1] https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...

replies(1): >>35847622 #
26. takeda ◴[] No.35846992{6}[source]
Sure, isolation exists except for Riot Games (and any other company that adds similar mandatory modules, which eventually will be all). Oh yeah, assuming there also won't be any vulnerabilities, but that's impossible, because we all know about the high quality software coming from gaming industry.
27. takeda ◴[] No.35847017{3}[source]
Or allow people running their own gaming servers that they can moderate. Solves cheating problem and when gaming company stops supporting their online game or goes out of business.
28. makeitdouble ◴[] No.35847251[source]
> Wanting to be able to ensure firmware isn't maliciously modified is a good thing.

I'm not sure it's a good thing at its core. The intent seems legit on the surface, but digging into the implementation you'll always end up having an adversarial relation with your user's security and device ownership.

On games, I kinda see this as an argument for preserving a special status for consoles, where the maker keep a right to secure everything to insane levels. Doing the same on general purpose computing platform isn't acceptable. Banking and digital currencies are morr of a blurry line, but games definitely shouldn't be accessing the utter most secure system of the platform.

If anything, opening the door to a whole community to hack the base security of your computing life when litteral life and death applications also rely on those shouldn't be allowed.

29. selestify ◴[] No.35847376{3}[source]
Why did hosting your own server stop being a thing?
replies(2): >>35851627 #>>35860511 #
30. chaps ◴[] No.35847526{4}[source]
What's wrong with people being upset that in order to play the game they have to install low level kernel modules? It's flawed software that hits an ant with a sledgehammer. Adding to injury, tons of reports online of people getting BSODs and other security features not working while the module is enabled. It's invasive and it's silly to be as dismissive as you are around peoples' concerns.

https://www.reddit.com/r/riotgames/comments/12wr2hz/kernelmo...

https://www.reddit.com/r/ValorantTechSupport/comments/kfxy9a...

31. charcircuit ◴[] No.35847622{5}[source]
>You're advocating for installing a kernel module that you don't even know what it does exactly when running a random game.

You don't know what the game will do either. It requires trusting Riot even if there isn't an anticheat.

Also most users will never know what the other kernel level drivers do.

>Would you also support a full cavity search each time you decide to fly a plane?

I don't see how this is related?

>The kernel module has full access to your hardware, you don't know what it does exactly.

The same can be said about any other kernel level driver and even about Windows itself.

>People got so complacent in recent years, and this is on a technology forum no less.

What Riot wants to do is not possible with a user level anticheat. Once Windows eventually gets its security improved such that apps can query the integrity of the system Riot would likely be able to get away with a less privileged anticheat.

>I guess today the Sony rootkit[1] would be totally acceptable.

If it didn't try and hide itself I would agree with you.

32. charcircuit ◴[] No.35847629{3}[source]
They are by purchasing skins.
33. Cloudef ◴[] No.35847661{3}[source]
This here. Cheaters will always find ways to cheat. Theres already cheats that run on completely separate machine so they cant be detected. Legimate customers keep getting screwed.
34. dexterdog ◴[] No.35851627{4}[source]
Because people prefer to pay 10x as much to have apple/google/etc host it for them. It's still a thing for people who know what they're doing and the experience is vastly better and more private and secure.
35. account42 ◴[] No.35860481{5}[source]
It's worth reminding that we already had a solution to the games with hackers problem: smaller community-run servers where people can get to know each other. But game companies want the centralized model so that they can stay in control of how the game is used to continuously monetize it and to forcefully retire it once they want to push a newer one.

Hackers are mainly only problem for anonymous ranked matchmaking. That's not to say cheaters don't exist without it but they are a) much less disruptive b) have much smaller reach and therefore c) are less motivated.

Like most ills being used to push anti-user technology, cheating is primarily a problem created by the industry itself.

36. account42 ◴[] No.35860511{4}[source]
Game companies want the centralized model so that they can stay in control of how the game is used to continuously monetize it and to forcefully retire it once they want to push a newer one.
37. account42 ◴[] No.35860659{3}[source]
But how will this provide the game company with continous revenue streams from selling you database entries that you can show of to complete strangers.
38. 1827163 ◴[] No.35861062{3}[source]
It's a bit of a stretch, but maybe we as a society should be considering the social pressure as being the problem. Why do we allow ourselves to be 'controlled' in this way by others? Especially young people? If we could learn to move past this?