News for hackers. Stuff that matters.
Re:Riot: Source code for League of Legends and TFT were exfi... by ehhthing on Wednesday January 25, 2023 @12:49AM (#34514876)
League of Legends does not use a Kernel-level anti-cheat. If you had actually read the article in question, this would have been made clear.
Re:Riot: Source code for League of Legends and TFT were exfi... by adql on Wednesday January 25, 2023 @01:40AM (#34515154)
On "people that didn't read the shit they quote" today!

> TL;DR Yes we run a driver at system startup, it doesn't scan anything (unless the game is running), it's designed to take up as few system resources as possible and it doesn't communicate to our servers. You can remove it at anytime.

Re:Riot: Source code for League of Legends and TFT were exfi... by ehhthing on Wednesday January 25, 2023 @12:21PM (#34521151)
You're quoting something from Valorant, not League of Legends. They use two different anti-cheat systems.

As a person who actually plays the game on a M1 Pro MacBook running in x86 emulation, which is not supported by kernel mode drivers, I can tell you with absolute certainty (unless of course Riot has found an exploit that allows installation of unsigned system drivers), that my computer has no non-apple drivers installed.

Re:Riot: Source code for League of Legends and TFT were exfi... by filiphorvat on Wednesday January 25, 2023 @01:21PM (#34522085)
On "people that don't know what they're talking about" today!

That's the anti-cheat which only Valorant uses

Re:Riot: Source code for League of Legends and TFT were exfi... by mattwilsonn888 on Wednesday January 25, 2023 @01:27AM (#34515068)
> ...entire game code for League of Legends and its tools, as well as Packman, your usermode anti-cheat. We understand the significance of these artifacts and the impact their release to the public would have on your major titles, Valorant and League of Legends

Mate you are chastising him for not reading the article and you are contradicted by the first paragraph.

Re:Riot: Source code for League of Legends and TFT were exfi... by Operyl on Wednesday January 25, 2023 @01:41AM (#34515163)
And in your own quote they stated it’s the user mode anticheat, and in Riot’s statement they said it’s an old/legacy anti cheat. This is not Vanguard, the kernel level anti cheat.
Re:Riot: Source code for League of Legends and TFT were exfi... by worthless-trash on Wednesday January 25, 2023 @02:00AM (#34515258)
Just to further clarify,

Code running in the kernel context is different than code running in the user context. Another process can modify user context, whereas it is expected that code running in the kernel context is "much harder".

A dedicated attacker could write kernel code which does the modifications, however this raises the bar and the anti cheat software could the game from running if it detects any unsigned drivers.

All this does is raise the bar to where the game is run into virtualization where the host OS can inspect the guests memory and infer details that way. The cat and mouse game goes on forever, the trick is to make it just hard enough so that the average person who wants to cheat will not not have the time, patience or financial incentive to do so.

Re:Riot: Source code for League of Legends and TFT were exfi... by filiphorvat on Wednesday January 25, 2023 @01:22PM (#34522106)
Why is your comment greyed out? Are people being so confidently incorrect that they downvoted this comment?