Re:Ring 0 of fire: Does Riot Games’ new anti-cheat measure g...
by 0x8BADF00D on Wednesday April 15, 2020 @04:04AM
(#22875562)
Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routines.
[ Parent
| on HN ]
Re:Ring 0 of fire: Does Riot Games’ new anti-cheat measure g...
by akx on Wednesday April 15, 2020 @09:56AM
(#22877721)
The... ring0 process?
Re:Ring 0 of fire: Does Riot Games’ new anti-cheat measure g...
by 0x8BADF00D on Wednesday April 15, 2020 @05:14PM
(#22883165)
That's a good point. It will be a bit harder, but not entirely impossible. Position independent code/memory layout will complicate any attempts to modify the AC.