Now if only they could more clearly communicate when games are playable offline.
This will be helpful for discerning if a game can run on the Steam Deck. There’s not many games that don’t have verification (Either by Valve or ProtonDB) but for newer games with anticheat it will serve as a good rule of thumb i imagine
Lots of games with anti cheat auto work under wine/proton. The most on top of my head example is Elden ring. Runs fine on my desktop with arch, as well as my steam deck.
I think that’s the main goal behind,
To avoid frustration for steamD owners and avoid a bad reputation of “all games are unplayable on it”
I wonder if you phrased it the way the Play store does: This game wants permission to:
- send SMS messages
- make calls
- know your location
- stalk your family
- raid your fridge
- access, read and upload files
- manage and add contacts
- cup your balls
- go through your trash
- irritate your boss
etc.
Think anyone would install them?
Cup my balls? Go on…
looks at Disney pluses binding arbitration clause
Yup
i dONt hAVe anYThinG To HIdE
Anyone who says that while wearing pants is a filthy liar.
I mean it’s also pretty cold without pants.
of course, people don’t even look at play store permissions
I suppose they do suffer from the “Known in the state of Cancer to cause California” problem. A bubble level app wants in-app purchases and GPS access.
Is this a Linux problem? I’ve never had to look for this detail before in Windows.
No its common for anti-cheat on Windows to have full root permission to your entire system Windows users are just on average less intelligent, less concerned about privacy, and, more ignorant about technology. This doesn’t mean using Windows makes you stupid its just the OS of choice for the stupid and ignorant.
Holy logical fallacy batman. Ad hominem much?
Mostly, and even some Windows users don’t want to install software that has such a great amount of permission over the entire system just for a game’s anti-cheat.
It’s nice that users can now know beforehand if a game uses such software. Avoids refunds.
Unless, of course, they add it months after release drastically limiting your chances of refunding (looking at you EA WRC 2024 😡)
If they change the deal they should have to offer refunds. This makes it an expensive choice after the fact.
That sucks : (
It does prevent Linux compatibility, but even if it didn’t, it’s a computer security problem, for those who care. You’re essentially allowing different game companies to install a rootkit on your computer so you can play a video game.
You’re essentially allowing different game companies to install a rootkit on your computer so you can play a video game.
Put like that, makes it even more obvious how insanely stupid slash desperate slash addicted some gamers are, doesn’t it?
Most gamers don’t know that easy anti-cheat is a rootkit to begin with.
is “easy anti-cheat” a brand name? Or was that just your wording?
Well - if people still trust any piece of software coming from Epic…
I bought Sea of Thieves about 5 years ago. Recently, they added kernal-level anticheat (which does precisely fuck-all to actually stop cheating). While that is annoying, I’m not particularly worried because the studio that makes that game is owned by Microsoft, and like all Microsoft products, it was banished to my windows partition with the rest of the spyware.
Well… kernel level software can access everything on your computer. That includes other partitions and unmounted drives
Only if those other partitions are not encrypted. Sure, it could still wipe them - but that’s something that backups are good for, and something you would certainly notice immediately :)
Easy Anti Cheat - requires manual removal
Wait, so this sketchy, privacy-invading stuff remains even after a game is uninstalled?! I had no idea.
How is this stuff not classed as malware at this point?
Plenty of games use it, if it uninstalled with each one then others would stop working.
Do you remember when Sony released cds that when inserted into Windows computer auto ran an installer that installed a rootkit that made it impossible for Windows to see any processes or files that started with a certain sequence of characters instantly turning any malware that named its files or processes similarly powerful rootkit. Oh and it installed a cd driver that made it impossible to copy their music.
Suggested removal was a full reinstall of windows.
Wikipedia says malware is
any software intentionally designed to cause disruption to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, deprive access to information, or which unknowingly interferes with the user’s computer security and privacy
It does not do any of these things. Like any software, it may have vulnerabilities, and being a kernel module it can be high risk. But that’s no different from any kernel module, like your graphics driver.
It unknowingly interferes with my security or privacy, 100%. It has root access. What’s it doing in there? Nowadays you’re naive to think it’s just to prevent game cheating. I guarantee they’re collecting all kinds of information.
It’s a much higher risk than average because games are often abandoned within one year of release and still run as long as 10-15 years later and connects to the internet and other randos on the internet. See the Call of Duty games that allow you to take over the computer of anyone who connects to your online match. It greatly degrades the security of its users.
Technically lots of things people call “malware” don’t actually do any of those things. For instance they may hijack your default search engine, pop up ads, or otherwise monetize your computer at your expense. The category that was invented by ass coverers is “possibly unwanted program” but outside of those who worry about being sued by scumbags people colloquially refer to both what you call malware AND PUPs as "malware the root of which is “bad” after all. Language being descriptive not prescriptive I think this broader definition of malware is fine.
EAC installation process includes “registration” of a game, and the uninstall process “unregisters” the game. If all games using EAC are uninstalled, EAC itself also should be uninstalled.
I’ve been shouting from the rooftops for years that this stuff is malware. I’m not the only one. No one listens.
Oh it was initially classed as insanely intrusive malware when kernel level AC was introduced about a decade ago, by anyone with a modicum of actual technical knowledge about computers.
Unfortunately, a whole lot of corpo shills ran propaganda explaining how actually its fine, don’t worry, its actually the best way to stop cheaters!
Then the vast, vast majority of idiot gamers believed that, or threw their hands up and went oh well its the new norm, trying to fight it is futile and actually if you are against this that means you are some kind of paranoid privacy freak who hates other people having fun.
W steam/valve
Any program having kernel level access is spyware. This is getting ridiculous.
Vanguard anticheat…
I imagine the alternative way to combat kernel-level cheats would be asking player for all his game state data, validating it on a server?
Wouldn’t work on peer-to-peer and you’d have to do a bunch of unnecessary compute(recalculating every tick if player-generated data is possible according to game rules) but its the only way I can think of.
Most games already do this lol Cheats usually don’t do anything that is technically impossible to do on a vanilla client, just highly improbable
True, can’t think of how would you combat a cleverly written aim-bot.
That does not detect things like wall hack and aim-bots that don’t modify the game state directly.
Don’t tell the client what’s going on outside its vision, I suppose? Add a small buffer to compensate for latency, so wall hack would be more of a “corner hack”.
I mean sure, that is how some (mostly strategy and tactical) games do it, but for an FPS, figuring out where the buffer should be would be a programmers nightmare. I guess you would have to try to calculate all possible lines of sights a player could have within some buffer time (100-1000ms) and then all players that could in theory enter them… Add physics and it is practically impossible.
Also, corner hack is useful enough and it does not address aimbot. IMO the answer is some combination of human moderation and ability to play with “friends” instead of randos. E.g. you could ask people to like or dislike a player at the end of a match and try to pair players that liked each other in the past.
Or bring server browsers back and let server mods handle it.
I’ve rarely, if ever, had a bad time using a server browser.
A more modern idea. Put all the chesters into the same lobbies through matchmaking
Or bring server browsers back and let server mods handle it.
How will you handle competitive matchmaking? I agree for casual matchmaking though
A more modern idea. Put all the chesters into the same lobbies through matchmaking
Maybe moderm in relative termy but notnreally. One of the articles I could find on the quick is from 4 years ago: https://www.ign.com/articles/cod-warzone-cheaters-are-being-matched-up-together-as-punishment
I do everything important like banking etc on a separate device that isn’t my gaming PC. This has been quite liberating since I worry less things about invasive anti-cheat, drm etc. I realize not everyone wants to do this but it’s been a nice compromise.
That’s one way to do it, but I worry less about those things by not supporting them with my time and money.
god damn right!
I wish Valve would just ban them. It’s weird to have something that looks like pure malware in a Game store.
Luckily Valve seems to believe in freedom of decision for their users so they won’t do this. There are kernel level cheats so there are kernel level anticheats. Obviously anticheats are mostly lame in what they do so it would probably be better for them to not be kernel level. Still there are “pure malware” anticheats and Valve thinks it’s up to the user to decide if they want one, their job is to inform the user. And that’s the best approach here in my opinion.
FYI - the owner of this site, gamingonlinux, was a mod on the !linux_gaming@lemmy.ml community until they were caught abusing their moderator powers. Then they deleted their account and complained on mastodon that it’s stupid design that mod logs are public. [Screenshot]
Instead, here’s a link to the official post https://steamcommunity.com/groups/steamworks/announcements/detail/4547038620960934857
As he said, modlogs are public, and it seems like other user retreived the trace of this “abuse of power” : https://sopuli.xyz/comment/12732467 .
To me it isn’t, as it is in his right as a moderator to chose how he moderate the communities he has the right to. If he finds your comment pedantic and annoying, and chose to remove it, so be it.
but this community has a pretty clear rule against harrassement, which you are breaching, offense for which I’ll use my g… mod given right of banning you for 30 days. Take this time to reflect on your actions.
I really don’t see a need to drag community drama everywhere. GoL is one of the biggest aggregator blogs out there for… linux gaming. Whether we should prioritize original sources over aggregators is a different discussion.
But yeah. Liam is great for news aggregating but he is 100% the stereotypical linux gamer and has a long history of starting random shit. Still annoyed by how fast he got everyone to shit on the Duckstation devs because they didn’t want to be exploited.
Being a big(“great”) news aggregator doesn’t excuse bad behavior.
Are you the lemmy cops? Is it your responsibility to chase any link to someone’s website across every instance and make sure people know they are a bit of a jackass?
If you think GoL should be a banned source, take it up with the various moderators. If you think only primary sources should be allowed (which I actually agree with), that is also a discussion to be had.
But rushing in to berate people for linking to one of the most popular news aggregators for a story that people would be interested in because you don’t like the guy who owns that site? All you are doing is discouraging people from making posts in the future.
🚨 🚨 🚨 FREEZE! STOP RIGHT THERE!! 🚨 🚨 🚨
As the official lemmy police I am arresting you for defending a mad lad caught abusing powers. You do not have to say anything. But, it may harm your defence if you do not mention when questioned something which you later rely on in court. Anything you do say may be given in evidence.
Jokes aside… I do think people should be allowed to post opinions an discuss other peoples behavior. Gol dude was caught abusing his powers, which is a disgusting thing to do, personally don’t mind him being called out for that in a post here and there. It’s not an attack on the poster, it’s a reminder to folks who the guy really is.
I’m all for the truth, no matter who it is.
He used to relentlessly spam the /r/linux_gaming subreddit and argue with people there too until he deleted his reddit account lol
He’s still on Reddit
He would make another account account
Yes he said he made an alt but I think his main is still active? Not sure.
I was going to ask why the thumbnail on this post is a hexagon shaped bear, but your comment explains it well enough.
the thumbnail is a hexagon bear because it’s the logo for easyanticheat, the most recogniseable anticheat
Well thats somewhat unnerving.
You will love the spyware bear.
Wow, mad because you can be held accountable. That’s sad.
Thanks for the steam link!
4 likes on him complaining that modlogs being public is something bad, cowards that only want to be shitty in the shadows.
I’m still fairly new. Where do I go for modlog drama?
There is a sub for sanity checking mod actions, aita-style.
If you keep in mind it is for active unconfirmed situations, and that votes there are not meant to mark the cases of mod abuse, I think it can fill that niche.
Nice.
Not to be annoying, but can someone please ELI5 how kernel level anti-cheat software actually works, or link good resources where I can read about it.
It runs with higher priveleges than you have and can see anything that happens on your computer.
It also creates a giant additional attack vector.
Eli5: your PC has different access levels a program can run at. This prevents a malicious or badly coded program from completely fucking your computer. Kernel level anti cheat runs at the lowest level access that exists under windows. It can do basically whatever it wants to your PC, and if a backdoor is coded in (happens way more than you’d think), it gives malware basically total access to your PC.
Can someone explain like I’m stupid on kernel level anti cheat and why I should watch out for it? Not a dig at all, a genuine question!
Imagine a game having higher privileges than what you get with “Run as administrator”
Also, the most games that don’t work in linux is for this reason (and steamdeck works in linux)
Making it super simple, it runs with full access on your machine, always. It can fuck anything up, and see everything. It can get your browser history, banking details or private messages you enter, activate your webcam or mic without you knowing, or brick your computer even.
And you can’t even check what it’s really doing on your computer because it’s a crime under US law.
Finally, it can get hacked and other people than the creator can do all these to your computer as well,as it already happened once.
And you can’t even check what it’s really doing on your computer because it’s a crime under US law.
Is this specifically for kernel level anticheat? Because this isn’t a thing for software in general right??
It’s a thing for any measure said to enforce copyright under the DMCA.
So it’s a thing for most proprietary software.
If anything reverse engineering is more permissible in the USA than many other places, IIRC
Not if you’re running afoul of the DMCA.
Easy, a bug in battle eye forced me to reinstall windows, this kernel access has to go.
To put it very simply, the ‘kernel’ has significant control over your OS as it essentially runs above everything else in terms of system privileges.
It runs at startup, so this means if you install a game with kernel-level anticheat, the moment your system turns on, the game’s publisher has software running on your system that can restrict the installation of a particular driver, stop certain software from running, or, even insidiously spy on your system’s activity if they wished to. (and reverse-engineering the code to figure out if they are spying on you is a felony because of DRM-related laws)
It basically means trusting every single game publisher with kernel-level anticheat in their games to have a full view into your system, and the ability to effectively control it, without any legal recourse or transparency, all to try (and usually fail) to stop cheating in games.
It’s not just trust of the game developer. I honestly believe most of them just want to put out profitable games. It’s trust that a hacker won’t ever learn how to sign their code in a way that causes it to be respected as part of the game’s code instructions.
There was some old article about how a black hat found a vulnerability in a signed virtual driver used by Genshin Impact. So, they deployed their whole infection package together with that plain driver to computers that had never been used for video games at all; and because Microsoft chose to trust that driver, it worked.
I wish I could find an article on it, since a paraphrased summary isn’t a great source. This is coming from memory.
It’s trust that a hacker won’t ever learn how to sign their code in a way that causes it to be respected as part of the game’s code instructions.
That’s not an accurate description of the exploit you describe. It sounds like the attacker bundled a signed and trusted but known vulnerable version of the module, then used a known exploit in that module to run their own unsigned, untrusted code with high privileges.
This can be resolved by marking that signature as untrusted, but that requires the user to pull an update, and we all know how much people hate updating their PC.
Not all anti cheats run at startup. Some only run when you play a game. I think vanguard for valorant ran all the time at first and people were pissed. Meanwhile easy anti cheat runs only with a game. So it depends. It all sucks though.
That’s definitely true, I probably should have been a little more clear in my response, specifying that it can run at startup, but doesn’t always do so.
I’ll edit my comment so nobody gets the wrong idea. Thanks for pointing that out!
Thank you! Really clear and appreciate you taking the time to explain!
More importantly, if traditional anticheat has a bug, your game dies. Oh no.
If kernel level anticheat has a bug, your computer blue screens (that’s specifically what the blue screen is: a bug in the kernel, not just an ordinary bug that the system can recover from). Much worse. Sure hope that bug only crashes your computer when the game is running and not just whenever, because remember a kernel-level program can be running the moment your computer boots as above poster said
And it’s worth noting that trusting the game developer isn’t really enough. Far too many of them have been hacked, so who’s to say it’s always your favorite game developer behind the wheel?
Or, even better, when you let a whole bunch of devs have acces to the kernel…
… sometimes they just accidentally fuck up and push a bad update, unintentionally.
This is how CrowdStrike managed to Y2K an absurd number of enterprise computers fairly recently.
Its also why its … you know, generally bad practice to have your kernel just open to fucking whoever instead of having it be locked down and rigorously tested.
Funnily enough, MSFT now appears to be shifting toward offering much less direct access to its kernel to 3rd party software devs.