Hacking into Kernel Anti-Cheats: How cheaters bypass Faceit, ESEA and Vanguard anti-cheats
Hacking into Kernel Anti-Cheats: How cheaters bypass Faceit, ESEA and Vanguard anti-cheats
Hacking into Kernel Anti-Cheats: How cheaters bypass Faceit, ESEA and Vanguard anti-cheats
It's frustrating how much trouble people will go to to cheat in a game that's supposed to be fun.
For many people the challenge of breaking it is the fun. Just like lots of very wealthy people who don't have to steal will steal for the fun of it.
It definitely feels like that once we get to DMA cheats. Very impractical for the vast majority of people, and yet considering the financial incentive of boosting...
Stranger Things have happened, for sure.
Most of the fun for the people breaking anti-cheat is the actual breaking of anti-cheat, not the cheating itself. It's the script kiddies who use the already completed work with little to no effort involved who are doing most of the actual cheating.
Most of the fun for cheat devs (that sell cheats) is the thousands they get off of children and neckbeards paying stupid amounts for their cheats.
Yeah I could see the appeal of breaking the anti-cheat code. But the actual cheaters find the cheats, often pay for them, install what could easily be malware, and take the risk of getting banned for using them. I don't get the appeal.
It's much more frustrating to see "anti cheat" and game developers forcing us to install a bad OS and a rootkit, for the benefit of fewer 10 year olds cheating. How about you develop server side anti cheat, instead of slowing down games by 25%?
Cheats are too sophisticated for that. Server doesn't have enough data. It's getting to the point where even the client might not, by using a 2nd device with image recognition for example.
They've all got server side anti cheat too.
Server side AC is there to stop people doing actions that are impossible, not to stop possible actions from being automated. Server AC can stop people from moving too quickly, for example. The server knows your position, velocity, and the amount that velocity can change in a tick. It can prevent anything from going above this. It can't tell if you clicked on someone's head really quickly, or accessed memory you shouldn't be allowed to access.
More like to flex their programing skill
Client-side anti-cheat doesn't make any sense. The player will always control the client if they really want to (and they have every right to do so).
AI-supported server-side cheat detection should be where it's at. I doubt it'll be much worse than the half-baked "solutions" we currently have.
Running essentially part of a game in ring 0 is completely unacceptable. Vanguard even runs when the game does not. It's just cocky the publishers pretend like their anti-cheat is secure. Someone finding an exploit in the anti-cheat can use it to own systems running it.
The real solution is designing around the problem. Pretend everyone has an aimbot and make aim matter less.
Players want to pull the trigger the moment their crosshairs touch the enemy? The game could just... do that. It's only an instant-win button if, for some reason, bullets are perfectly accurate when you just whipped your mouse around to land on a guy.
These games already add inaccuracy for movement. Why not for mouse movement? If you're holding an angle and someone walks into it, yeah, you should definitely hit them; you correctly predicted what they'd do. If you're smoothly tracking to align with someone, you should have great odds. If you did a 360 no-scope, get real. Why would that be any more accurate than leaping around wildly and hip-firing a submachinegun? A rifle bullet will be more accurate out the barrel, but you've expressed no precise control over where the barrel is pointed.
I watched this video yesterday. Holy fuck it was so good for someone who only had 3k subscribers.
I actually believed that kernal level anti cheats stopped all cheating. I had never considered the lengths people would go to.
I actually believed that kernal level anti cheats stopped all cheating.
This is what allows AC devs to continue working on their useless code that only makes a mess out of everyone's PCs and getting money with it. Same with DRM devs.
All software has bugs, so you'll never have a 100% effective anti-cheat. It's going to be an arms race between cheaters and game devs, and the cheaters will always find a way.
All kernel-level anti-cheat does is introduce security vulnerabilities to your system and delay the inevitable.
There will also always be external methods to cheating, like screen recording based.
MSI is releasing a monitor, with cheating built in... Granted it only "highlights" things but still.
Fascinating. I work with FPGAs and previously with openCV on a Pi-based platform. The DMA hacks are a technical tour de force.
Incredible video. I wish the creator much success in the future :)
So, what's next? Mouse and keyboard DRM? Also, not sure how'd cheaters would cheat in lan games nowadays. Great video btw
We got a solution https://www.youtube.com/watch?v=ne9bmMX82iY
Here is an alternative Piped link(s):
https://www.piped.video/watch?v=ne9bmMX82iY
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I'm open-source; check me out at GitHub.
Here is an alternative Piped link(s):
https://piped.video/watch?v=RwzIq04vd0M
Piped is a privacy-respecting open-source alternative frontend to YouTube.
I'm open-source; check me out at GitHub.
Not only can it be bypassed, but anti cheat with kernel level access can be used to distribute malware or spyware if it is compromised. Whether your personal anecdotes reflect the actual statistics or not, these anti cheats are dangerous and are not impenetrable.
Man if the only way to break the condom was with the expensive DMA cheat and shit like that I could agree with your logic but a $10 arduino and 2min google search is enough.
My sweet summer child, I will see you in 5 years when Valorant cheating is as bad as CS:GO cheating at its peak.
Kernel AC circumventation will only improve, as there's many cheaters putting money in this technology. In 5 years this stuff will be commonplace and mean that these solutions will be ineffective.
Amazing video! I like how it explores the history of cheating and how anti-cheat software hasn't gotten rid of cheaters, but only made them less obvious.
Wall hacking is obvious to other players, but a program that pulls the trigger when crosshairs are over an enemy isn't. That leads to people thinking that cheating doesn't exist because nobody is flying around the map only getting headshots. People are willing to install this rootkit to their machine because their lobbies don't have cheaters. But they still do. It's that their lobbies don't have obvious cheaters.
Also an interesting point that Riot has done little to deal with smurfs in their games. Now players are more likely to think they got matched with a smurf rather than a cheater.
From my experience with fighting games, people are also prone to mislabeling others as smurfs when they just know one or two more things about the game that give them an edge. I've observed replays in Street Fighter 6 that people claimed were smurfs, but they were absolutely playing at the level their rank said they were.
The only way to stop it is to stop letting people play with strangers and to go back to local LAN sessions, or for games to be private only with temporary invite codes that have to be shared manually, with a maximum number of users allowed.
Online anonymity really has ultimately harmed us as a species and conferred little if any benefit.