News for hackers. Stuff that matters.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by yesbut on Thursday September 23, 2021 @04:02PM (#28634517)
> China-owned

State owned is problematic, I'm not in disagreement with you. But so is corporate owned. I'd like to see an industry standard anti-cheat root-kit developed as a publicly reviewable open source project at the very least.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by temporarrry0923 on Thursday September 23, 2021 @04:32PM (#28634925)
>I'd like to see an industry standard anti-cheat root-kit developed as a publicly reviewable open source project at the very least

An anti-cheat is one of the few areas that truly would ruin its security by going OSS. A cheater can quickly enumerate every method the AC uses to detect cheats, then they know EXACTLY which goalpost to kick into, per-se. 85% of Vanguard's effectiveness is their CONFUSING ban protocols, whether that's delaying a ban to confuse someone testing what's bannable, not divulging details about what avenues are tested, constant updates that aren't specified anywhere, etc.

Case in point, even in CSGO: Just changing the offsets of some game values will break some cheats for several days.

Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by yesbut on Thursday September 23, 2021 @05:55PM (#28636073)
Then handle it server side. Anything you ask the user to install into their kernel should not be closed source.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by schmorptron on Thursday September 23, 2021 @05:10PM (#28635451)
Anti-Cheat is the only industry where security by obscurity is valid.
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by tester756 on Thursday September 23, 2021 @05:27PM (#28635684)
Obscurity is always valid because it increases security, doesn't it?
Re:Epic launches anti-cheat support for Linux, Mac, and Stea... by nitrogen on Thursday September 23, 2021 @05:42PM (#28635886)
They're referring to this idea: https://en.wikipedia.org/wiki/Security_through_obscurity

Obscurity can be a layer, but it can't be the only layer, and in general systems (such as web servers) need to be designed to withstand full-knowledge attacks. That isn't likely to be possible when it comes to anti-cheat, so obscurity plays a larger role.