Re:Valve's Proton Has Enabled 7000 Windows Games on Linux
by rkangel on Monday March 08, 2021 @05:48AM
(#26384326)
> Riot's Valorant rootkit is active from boot and actively monitors everything you run and will block things it doesn't like or doesn't recognize.
Honestly, if I was responsible for building an anti-cheat system this is the way I'd go about it. Anything that can run that you don't know about (e.g. because it ran before you started) is a potential risk.
Most of the other kernel anticheat rootkits are more polite and don't run until a game starts them, at least.
In general having a bunch of random stuff from video games running with kernel permissions is spooky. You never know whether someone will find an exploit in one of them, or if it will cause performance, stability or data integrity problems.