Vanguard just went live and LoL players are already claiming it's bricking their PCs
Vanguard just went live and LoL players are already claiming it's bricking their PCs
Kernel-level anti cheat is spyware, say it with me everybody. Complain on steam about it. Post this nonstop. This standard is NOT OK and needs to change and that's the only way it might.
I would never let some random anticheat code have kernel access. Games are demanding something crazy, and users are stupidly letting them get it.
It's not just silently installed by Steam, or something, they have to explicitly confirm they accept it? I don't play this game, I am curious if players are unaware or actively stupid.
Riot's games can only be played with their own launcher, so no steam. They give a big message about "now installing vanguard, our anticheat," then inform you to reboot to finish the install, since vanguard is the only ring 0 anticheat that puts itself into the kernel start up, always running.
Yes
Some are unaware, but most are actively stupid. Bring this topic up in any helldiver's thread and you'll get down voted to oblivion.
I I stalled helldiver's and didn't realize I was doing that.
I'm not exactly savvy though.
The first time I installed Vanguard, for the Valorant beta, it decided to disable my mouse and keyboard on each boot.
Well, you can't cheat if you can't do anything
This is why I absolutely refuse to install Valorant (and now LoL) - I could somewhat understand if an anticheat refused to boot up the game in question if something triggered it, but it going massively outside of its scope and wantonly disabling or killing other processes is just nuts to me.
To be fair, if they were typical RBG mouse and keyboard, and you used the brands software to change their settings, it blocked that software. Those programs were absolute dog shit in terms of security. I have no idea if it forced them to make better software, or Riot just started to allow them. Regardless it's all pointless because Vanguard has been defeated. Imagine making ring 0 anticheat that loads on boot, and it still isn't good enough, fucking LoL pun intended.
Both had optional software, and I only used the keyboard. The software didn't have to be running for either to work, it was only to configure it and then it wrote the configuration to onboard memory. It was the generic mouse and keyboard input drivers provided by Windows that was blocked and it affected a pretty significant number of users.
What stops consumers with bricked PCs from claiming the max amount in small claims? That would drain funds quick
Someone is having me “fix their pc” to work with it and they understand the problem but say “i only play a little” and “it’s really important to me”
They asked about getting a separate computer just for the game
This is either the final nail on the coffin for playing league on linux or it will motivate linux devs to figure out a way around it. I don’t play league but I did enjoy playing TFT with friends always on Linux.
I installed Fortnite to check out the LEGO mode without realizing EAC was a rootkit and the next Windows update bricked my PC.
I've never had any issues with EAC, it's probably one of the least invasive kernel-level anticheats out there (with vanguard being the most invasive)
Have you actually audited its behavior? Both are proprietary and any kernel module is inherently dangerous.
Even ones like easy anticheat have given me problems where if a game didn't exit properly my whole system got bogged down and required a restart.
Others simply dubbed it “malware” and declared they would be quitting League until the program stopped breaking PCs.
Silly that malware is okay once it stops interfering with your day to day
One of my favourite games to have kernel level anticheat is Helldivers 2, and I think it's definitely caused a few issues for me.
Helldivers 2 works on Linux even with the anti cheat unlike Valorant so there must be some differences there.
Riot's Vanguard is the only one that needs to start with boot, and always run in the background. Others can initialize and close when the game is done, IIRC. Which is why they can work with proton/wine.
Supposedly it falls back to usermode anticheat on linux. That's what I heard but there wasn't a source, so could be BS.
It's really sad that they chose to implement it. I would've loved to play Helldivers 2 but I just refuse to allow them that level of access to my device, especially for a game that isn't even competitive.
That's where I'm at with the game.
Like yeah it looks fun, I'm not willingly installing malware. Especially after the apex legends debacle.
Thankfully on linux we have tools to heavily limit it's access such as firejail. It doesn't just get unrestricted root access
Their explanation for it makes sense though. They were running into the problem that a player could cheat and progress their games faster, etc. Since HD2 is essentially a MASSIVE, single DnD campaign that every player is a part of, those cheaters would break the campaign progress and ruin it for every single other player.
They also include shortcuts to install and uninstall only the anticheat. So you can remove it immediately once you finish playing.
what about making actual authoritative servers?
that would break most cheats except *-bots
also there's usually no need to replicate the entire game state on all clients, some details like movements of players out of view can be omitted (ofc this doesn't apply to lol but whatever)
But that`s haaaaaaard tho… :(
I've never played it, but aren't League of Legends servers already authoritative? Also, I'm pretty sure it would only deal with certain kinds of cheats. An authoritative server won't be able to prevent a player from using an aimbot, for example, since nothing says that a player isn't allowed to have super accurate aim. The server can't tell if they are cheating or just insanely good. Nevermind I missed your sentence mentioning *-bots.
I wonder whether, even with an omnipotent anticheat software installed, cheating would still be possible by having the router manipulate your packets on the way to the server (ie. having all the *-bot work being done on that device). I imagine TLS could maybe thwart that attempt, since the router can't decrypt the packets, but I don't think it's really a problem since the client could also just provide it with the unencrypted packet and the server's public key, so that the router may fabricate the packets. On the other hand, anticheat software would be aware of that since the client has to send those extra packets, but how could it know that those packets are being sent for nefarious purposes and not just simply some other normal software doing it's thing?
I loved the way CS:GO1 had an anticheat program called Overwatch. If you are experienced enough and a trusted user, you can review games that players have reported and ban the cheaters if you deem them cheating. I don't know if csgo2 has this but I haven't seen it so far.
Wow, who could have anticipated that kernel-level anti-cheat was a bad idea? It's like people haven't been warning that giving an increasing number of programs that level of access might be a Bad Idea.