News for hackers. Stuff that matters.
Re:/dev/null: Anti-Cheat Kernel Driver (2020) by josephcsible on Sunday July 24, 2022 @04:50PM (#32217573)
> The risks of kernel mode anticheat have been wildly overstated

How many things like https://github.com/Luohuayu/evil-mhyprot-cli and https://mobile.twitter.com/TheWack0lian/status/7793978407622... have to happen before you'll believe that there really is a significant amount of risk here?

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by prvit on Sunday July 24, 2022 @04:53PM (#32217598)
In both of those cases someone has already hacked your machine and can run arbitrary binaries. They’ve already stolen all of your credentials from browser databases, all of your secret files from your homedir and so on.

Besides, Windows LPEs are a dime a dozen anyway.

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by josephcsible on Sunday July 24, 2022 @05:00PM (#32217656)
And if I do banking from one user account and gaming from a different (limited) user account?
Re:/dev/null: Anti-Cheat Kernel Driver (2020) by prvit on Sunday July 24, 2022 @05:00PM (#32217662)
Literally nobody does that. That riots anticheat driver might interfere with your incredibly niche use case is fundamentally not a very compelling argument.

Besides, Windows LPEs are a dime a dozen anyway.

Re:/dev/null: Anti-Cheat Kernel Driver (2020) by smileybarry on Sunday July 24, 2022 @05:34PM (#32217977)
Accounts are not a good separation of context already, let alone privilege escalation exploits.

If you’re concerned about one use affecting the other you’re much better off dual-booting two Windows installations, both using BitLocker. They’d use separate keys and AES-XTS means there’s tamper protection as well. One partition could, at worst, destroy the other.