Comment by sylware
kernel anti-cheat are notoriously inefficient and are weaponized by hackers.
kernel anti-cheat are notoriously inefficient and are weaponized by hackers.
I remember the anti-cheat of Valorant being exploited where basically the hackers could turn a bug in the game code into full kernel-level root access via the anti-cheat.
Video games are not engineered to withstand sophisticated hacking attacks which is fine mostly since the bad guys can only use their access to cheat - in this case they could fully compromise your system thanks to the kernel access of anti cheat
The thousands of RGB drivers from the various manufacturers that are just copy+paste jobs on RWEverything is actually disgusting and Microsoft letting that just happen is a serious problem. Ah yes you added AES to your IOCTL very secure! I'd say the only reason that these drivers haven't been exploited is because of the insane bug bounties in place. There are also other big issues in games, see the whole hack with Apex Legends lmao
Are they? Cheats for games like Fortnite, CS (Faceit), Rust, LoL have become very expensive (100 USD per month are not unheard of) or require you to purchase special hardware.
And I have yet to come across an anti cheat driver of the big publishers (EAC, Faceit, Javelin, Vanguard) being exploited and allow access to r/w kernel memory. It is more likely that the driver of some hardware is being exploited for, rather than anti cheat drivers.
Personally, I only remember the ac driver of Capcom ever being exploited. Compare this to the dozen hardware/av drivers which were exploitable, like the Intel LAN utility driver, ASUS IOMap64, MSI NTIOLIB or that one Razer driver. Oh, and CPU-Z and the Avast Hypervisor driver were exploitable too and allowed r/w on kernel memory. These drivers are way more likely to be weaponized than ac drivers.