Re:Call of Duty Adds Kernel Level Driver for Anti-Cheat
by novok on Thursday October 14, 2021 @03:58PM
(#28869192)
I think making your cheat kernel level is a relatively minor hurdle compared to the lengths that people have been going with ML + hardware based cheats at this point. Maybe we need to stop the kernel anti-cheat just from a pure privacy perspective at this point, or make it an OS service you can implement as a user level module only, much like endpoint management and macOS. I get a feeling there is more to being in the kernel although.
The huge problem is that cheaters are very willing to go to extreme lengths of inconvenience or even risk, as in running random cheats as kernel level drivers.
So anything that makes the developers have to bypass another hurdle and another component you can patch in your anti cheat "rootkit" gives you a small boost in the cat and mouse game.
Your component starting at boot makes it more likely the cheat devs and cheaters will have to do the same and have a more complicated setup.