tfrancisl

How are the actions of the feds at Waco and Ruby Ridge "left"? Authoritarian, yes, but supporting collectivism, shared ownership, etc? Nothing at all left wing about their actions.

Why is this being voted down? This is fundamentally how states and governance work. The state has a monopoly on legitimate violence, and can, at any moment, make that a problem for its citizenry.

Again, no true scotsman. If all the people who call a spade a diamond get together and call themselves spade-truthers, their perspective is spade-trutherism, however much that upsets true spade-trutherists.

Classic no true Scotsman. All the people who proclaim to be absolutists or advocates but dont meet my definition clearly are not.

Down voted for suggesting the most salient analysis of US history. Sad!

Agreed, looks very sloppy and unpolished. I was immediately turned away when i saw the recommended install method was `sudo sh` this random script.

I would argue TPM 2.0 is the security theater. A leaked key is all it takes to throw it all away. EAC v1 combined with behavior-based detection seems to be sufficient for some of these studios, so I don't know what Epic is struggling with.

I play CS2 plenty. The cheating problem is overstated as all hell. It seems to be concentrated around accounts that are being sold for lots of cash, so Valve is apparently taking that route for banning accounts more often lately.

Now, if we want an interesting case study in intrusive anticheat not necessarily being more effective than behavior-based, we should compare FACEIT to Valve servers. FACEIT is riddled with cheaters, and yet requires ring-0 anticheat on Windows. So fascinating!

And it's all a shame, in my opinion. They're too lazy to develop effective behavior-based anticheat (should be easier than ever with better NN architectures and more compute), and so they resolve to screwing over consumers or spying on them. Did not know about Embark's stance, that's too bad.

If this were about solely myself and no one else, I might agree. However, even I do play one or two games that use EAC v1 and they work perfectly fine on Linux. They also have very few cheaters, and employ behavior-based detection as their first line. I would hate to lose those games.

No, LPEs escalate you to root. Root access is specifically protected against by their requirements.

You could have just not replied if you werent going to try to be productive. Yes, lots and lots of people play video games on NixOS and Gentoo. Who is playing video games on Fedora, Debian? I dont care that I can switch kernels, I shouldnt have to.

I suppose I read into the Steam Deck not supporting all of the requirements right now a bit much. Thats the section I was referencing. I am still hopeful they'll at least object to IOMMU and get some movement from Epic there...

> Because your kernel could have the ability to allow a program to modify the game memory and hide the fact it's doing so?

I understand this, and my contention with this is that a signed kernel could have that too, so requiring the kernel to be signed locks us into very few ways of getting the kernel with little benefit to the AC if a key is leaked.

> Most Linux users are probably using a signed kernel. I don't think this is as big of a deal as you're making out.

I don't think this is true of most people interested in gaming on Linux in particular. Aside from that, the chain of things you need to do to prove you have a signed kernel are onerous and incompatible with many bootloaders and other tools many Linux users use regularly.

Now you're thinking like ... NVIDIA circa 2015 or something like that

Aside from the fact that this is obviously not true (secure boot is possible on Linux, limine/lanzaboote come to mind), I would argue these security modules / attestations do very little for security and are more about lock in and control.

Look, if Canonical had one of their keys leaked, I can go and sign my kernel and kernel modules and secure boot just fine as if my kernel is one distributed by Canonical. There are no checks on whether the contents of the kernel are correct. So, let's exclude people entirely from tuning their kernel for performance etc, and tell them they have to go to a narrow set of approved vendors, who must listen to Epic rather than their users. This is about control over the ecosystem, an ecosystem Epic has spent their years spitting in the face of.

I can't disagree with that, of course. I can only point to Valve at least shipping their games (notably CS2 and Deadlock) native, and the overall improvement in the performance and ergonomics of Proton in the past decade.

Right, well, for me I ditched Windows entirely because every serious development workflow is way more involved and complex, performance is really poor, random weird bugs after mandated updates, and so on. The cherry on top is all of Valve and the open source folks work on Proton and gaming on Linux in general.

Many, many issues with the requirements here that essentially make this unusable for most Linux users. I really hope they don't force current EAC games to upgrade. I would also love to see companies like this actual give behavior-based AC the college try before resorting to shipping spyware.

> Signed Kernel and Kernel modules

Probably the most egregious. Why am I not allowed to compile my own kernel? Why do I have to get a kernel, and modules, from specific, approved, vendors?

> TPM 2.0, Secure Boot, Measured Boot

Also all impractical for most linux users.

> IOMMU

You may not spy on my memory, thank you very much. What's stopping Epic from taking snapshots and phoning home?

> Kernel Lockdown Integrity mode at boot time

Preventing root from doing root things for the sake of it. I mean, maybe this makes sense.

They're also trying really hard to make Linux distros that "don't support this" look like the bad guys. They encourage distro maintainers to reach out to work together on the requirements, but many distros are effectively excluded by default (Arch, Gentoo, NixOS, which I believe have most of the gamers, at least in the online spaces I chat in).

And luckily, according to the article, Valve has no immediate intention of getting the Steam Deck to meet those requirements.

Sure, but again, you could in theory distribute said builds and stop wasting compute compiling yourself. I know nixpkgs, for example, builds with very generic targets and not super aggressive compiler flags, but at least the machinery exists to do this.

Yes, and unlike NixOS they dont calculate build hashes for the sake of making binary caches. So truly, you have to build from source, even if your recipe is exactly the same as everyone else's. I've never really understood this zealotry around compiling things myself, and boy are there some big (slow to compile) programs out there these days.

Thats gonna depend on the state in the US, but you can definitely get charged for negligently failing to do background checks as someone operating a daycare center. Operating computers on public networks, you assume a level of responsibility to not wreak havoc, just like a daycare operator assumes the responsibility of vetting caretakers.

IMO, yes. You are the computer operator, and you operated the computer in such a way as to cause it to take that action. Others will mention "mens rea" but that doesn't really apply to negligence.

Anything hackers may find interesting...

Any discussion that is at least slightly explicitly political (as opposed to everything, which is at least implicitly political) is liable to be removed by the mods. It's up to whether they see it and whether it offends their sensibilities in the moment.

I'm not going to engage with willful ignorance about the concept of Greater Israel. The zionists want most of lebanon, syria, all of the west bank, parts of Jordan. They have laid this out clearly.

Its pretty clear when one of the countries wants to have a Greater form of their country with much of the land said "proxies" are defending in it.

Absolutely insane denial of reality. How many hospitals are left in Gaza?

I very much appreciate the framing of being highly skeptical that these are "rogue" agents. We must stop taking these companies at their word for what they are doing, and a credible organization like this calling the spade a spade is a good start.