[TechSpot] Valorant's anti-cheat software loads kernel-based driver on system boot - Overclock.net - An Overclocking Community
Forum Jump: 

[TechSpot] Valorant's anti-cheat software loads kernel-based driver on system boot

Reply
 
Thread Tools
post #1 of 106 (permalink) Old 04-17-2020, 09:13 AM - Thread Starter
Graphics Junkie
 
UltraMega's Avatar
 
Join Date: Feb 2017
Location: USA
Posts: 1,959
Rep: 54 (Unique: 49)
[TechSpot] Valorant's anti-cheat software loads kernel-based driver on system boot

Quote:
Riot Games' new team shooter Valorant has an anti-cheat system called "Vanguard" that has raised some security concerns. When the game launches, the Vanguard client loads with it into the userspace. However, there is a kernel-mode driver for the system that loads when you boot into Windows.

Riot claims that it needs this since some cheating software uses kernel-mode drivers to evade detection. Regular applications cannot detect kernel-mode drivers because of the higher privileges required.

Back in February, Riot explained the new anti-cheat software, initially designed for use in League of Legends, and why it was needed.

"In the last few years, cheat developers have started to leverage vulnerabilities or corrupt Windows' signing verification to run their applications (or portions of them) at the kernel level. The problem here arises from the fact that code executing in kernel-mode can hook the very system calls we would rely on to retrieve our data, modifying the results to appear legitimate in a way we might have difficulty detecting. We've even seen specialized hardware utilizing DMA1 to read and process system memory—a vector that, done perfectly, could be undetectable2 from user-mode."

Running a driver in kernel-mode raises concerns that Riot is only improving its cheat detection at the cost of increasing the attack surface of Windows, and at the root level no less. If you recall the 2005 Sony DRM rootkit fiasco, this level of risk might make you nervous.

Source: https://www.techspot.com/news/84841-...ed-driver.html

Sounds like they're playing with fire.

4K Rig
(7 items)
CPU
Intel 7700k @4.2ghz
GPU
Zotec 1080 Ti
RAM
16GB 3200mhz DDR4
Hard Drive
250GB nvme + 500GB SSD + 4TB HDD
Monitor
Samsung 4K 65 inch TV
Monitor
Pixio PX276 27inch 144Hz 1ms 1440p
Audio
Sound Blaster z
▲ hide details ▲
UltraMega is offline  
Sponsored Links
Advertisement
 
post #2 of 106 (permalink) Old 04-17-2020, 10:09 AM
Food Editor
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Bradentucky
Posts: 24,511
Rep: 719 (Unique: 378)
simple solution - continue to avoid freeware games partially owned by the CCP.

Add me on Steam, same name
R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
Best R0ach Quote of all time : TLDR: Haswell might be the last legit gaming platform unless mice get their own non-USB interface on some newer architecture.
skupples is offline  
post #3 of 106 (permalink) Old 04-17-2020, 11:12 AM
mfw
 
ToTheSun!'s Avatar
 
Join Date: Jul 2011
Location: Terra
Posts: 8,186
Rep: 498 (Unique: 233)
Quote: Originally Posted by skupples View Post
simple solution - continue to avoid freeware games partially owned by the CCP.
I've been doing that successfully since 2 days ago, back when I heard this news.

CPU
Intel 6700K
Motherboard
Asus Z170i Pro Gaming
GPU
Gigabyte 2070 Super Windforce OC
RAM
G.skill Trident Z 3200CL14 8+8
Hard Drive
Samsung 850 EVO 1TB
Hard Drive
Crucial M4 256GB
Power Supply
Corsair SF600
Cooling
Noctua NH C14S
Case
Fractal Design Core 500
Operating System
Windows 10 Education
Monitor
ViewSonic XG2703-GS
Keyboard
Vortex Race 3 RGB
Mouse
Glorious Odin
Mousepad
SteelSeries QcK+
Audio
Fiio E17K v1.0 + Beyerdynamic DT 1990 PRO (Dekoni pads)
▲ hide details ▲
ToTheSun! is online now  
Sponsored Links
Advertisement
 
post #4 of 106 (permalink) Old 04-17-2020, 12:24 PM
ٴٴٴ╲⎝⧹˙͜>˙⧸⎠╱
 
TK421's Avatar
 
Join Date: May 2011
Posts: 5,770
Rep: 164 (Unique: 128)
Quote: Originally Posted by skupples View Post
simple solution - continue to avoid freeware games partially owned by the CCP.



people keep saying this but China's control over its population and mostly uncontested surveillance methods is what other countries want to get

nͫٴiͤٴcͫٴeͤ੮Һ૯ ცɿ૭ ૭คעٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴ ٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴ ٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴٴ ٴٴ
█▀█ █▄█ ▀█▀ ▀█▀
PC 1
(6 items)
CPU
Ryzen 9 3950X 1900FCLK
Motherboard
Crosshair VIII Hero Wi-Fi
RAM
B-die 2x16 3800MHz F4-3600C16D-32GTZN
Hard Drive
Samsung 960 Pro 512GB
Power Supply
EVGA 750G2
Cooling
Swiftech H360X3
▲ hide details ▲


TK421 is offline  
post #5 of 106 (permalink) Old 04-17-2020, 01:44 PM
Food Editor
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Bradentucky
Posts: 24,511
Rep: 719 (Unique: 378)
Quote: Originally Posted by TK421 View Post
people keep saying this but China's control over its population and mostly uncontested surveillance methods is what other countries want to get
governments are envious of other government's abilities to enact extreme authoritarian measures? As for the People in support of these kinds of measures... Well, the good news is, there's TONs of documentation that covers this debate, dating back hundreds, of not thousands of years. I suggest you read up on it if you're in favor of universal medical ID/medical chipping/quantum dotting.

shocking... Almost like this isn't the story of human history for... always? man forms government, government turns evil, man and government fight. government gets burned to the ground, as a new, totally better, totally more wholesome government gets built atop the ashes. This government, totally for and by the people, until its not. Which can and does happen under any party's control. See Michigan for democrat example, see Louisiana for republican example.

still has nothing to do with 1,000 talons, and us wholeheartedly supporting it in the gaming industry.

this is why its all downhill after 2024. The stock market knows this, thus why it barely reacted, and has all but recovered from COVID19.

much bigger things/attacks/acts of god coming in the future.

Quote: Originally Posted by ToTheSun! View Post
I've been doing that successfully since 2 days ago, back when I heard this news.
its never too late to chaaaangeeee youuuuur waaaaaaaaaaays

Zeppelin and Robert Frost agree.

Add me on Steam, same name
R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
Best R0ach Quote of all time : TLDR: Haswell might be the last legit gaming platform unless mice get their own non-USB interface on some newer architecture.

Last edited by skupples; 04-17-2020 at 02:06 PM.
skupples is offline  
post #6 of 106 (permalink) Old 04-17-2020, 03:10 PM
Overclocker
 
JackCY's Avatar
 
Join Date: Jun 2014
Posts: 10,820
Rep: 358 (Unique: 255)
Riot who?

The game sounds like a Counter-Overwatch with the graphics of TF.

Last edited by JackCY; 04-17-2020 at 03:14 PM.
JackCY is offline  
post #7 of 106 (permalink) Old 04-17-2020, 04:17 PM
Watercooler
 
Socks keep you warm's Avatar
 
Join Date: Feb 2011
Location: Melbourne, Australia
Posts: 3,333
Rep: 144 (Unique: 123)
Doesn't surprise me. Another game i was never going to play anyway as freeware games are full of hackers and cheaters anyway, no matter what anti-cheat they have. PC gaming is the worst, you find more games with cheaters than legit players.
On my Xbox One i had no problems with cheaters.

I like to have fun.
https://stats.foldingathome.org/donor/110855
https://www.trueachievements.com/gamer/II+TH3PRO+II
16 Threads is Good
(10 items)
CPU
Intel Core I9 9900K 4.8Ghz
Motherboard
Gigabyte Aorus Elite
GPU
Aorus 2080Ti Xtreme Waterforce WB 11GB
RAM
Trident Z
Hard Drive
Samsung 250 SSD
Power Supply
Cooler Master Silent Pro Hybrid
Cooling
Watercooling Custom
Case
900D
Operating System
Windows 10 x64
Monitor
28" ACER 4K Monitor
▲ hide details ▲


Socks keep you warm is offline  
post #8 of 106 (permalink) Old 04-17-2020, 04:54 PM
New to Overclock.net
 
Join Date: Dec 2016
Posts: 74
Rep: 2 (Unique: 2)
Quote: Originally Posted by Socks keep you warm View Post
Doesn't surprise me. Another game i was never going to play anyway as freeware games are full of hackers and cheaters anyway, no matter what anti-cheat they have. PC gaming is the worst, you find more games with cheaters than legit players.
On my Xbox One i had no problems with cheaters.
Definitely more cheaters on PC platform, but saying their are more cheaters than legit players is ignorant. Most likely you are just bad at the game.

AMD Ryzen 3900X | Evga CLC 360 | Asus ROG Strix OC 2080Ti 2130Mhz/8500Mhz| Gigabyte Aorus Master x570 | T-Force Extreem 16GB CL16 3800/1900 1:1 FLCK | Lian Li PC-O11DX 011 | Acer XF270HUA 2K 144HZ
Uns33n is offline  
post #9 of 106 (permalink) Old 04-17-2020, 05:05 PM
Food Editor
 
skupples's Avatar
 
Join Date: Apr 2012
Location: Bradentucky
Posts: 24,511
Rep: 719 (Unique: 378)
Quote: Originally Posted by Socks keep you warm View Post
Doesn't surprise me. Another game i was never going to play anyway as freeware games are full of hackers and cheaters anyway, no matter what anti-cheat they have. PC gaming is the worst, you find more games with cheaters than legit players.
On my Xbox One i had no problems with cheaters.
now now. clearly its just us, and being baddies.

its not noticed on console cuz we're all neutered by thumb sticks and 30FPS!

guarantee the "hax" cries will be yuge, as people play shooters @ 1080P120FPS with KB+M on their XBS/PS5

I do agree though. Theirs an incredibly well funded pay to play "trainer" community these days. It's kinda what caused my MMO burn out. Our progression guild got clued in on how to glitch multiple weapon stones. Low n behold our raid DPS quickly started looking just like the #1 & #2 uncontested guilds.

Add me on Steam, same name
R.I.P. Zawarudo, may you OC angels' wings in heaven.
If something appears too good to be true, it probably is.
Best R0ach Quote of all time : TLDR: Haswell might be the last legit gaming platform unless mice get their own non-USB interface on some newer architecture.

Last edited by skupples; 04-17-2020 at 05:11 PM.
skupples is offline  
post #10 of 106 (permalink) Old 04-17-2020, 05:16 PM
9 Cans of Ravioli
 
The Pook's Avatar
 
Join Date: May 2006
Posts: 18,429
Rep: 1390 (Unique: 720)
Quote: Originally Posted by ToTheSun! View Post
I've been doing that successfully since 2 days ago, back when I heard this news.


Intel i9 9900K Coffee Lake @ X8 5309mhz (+47.5%)
AMD FX-8320 Vishera @ X4 5022mhz (+43.5%)
Intel i5 4690K Haswell @ X4 5013mhz (+43.2%)
AMD X4 960T Zosma @ X6 4870mhz (+62.3%)
Intel i7 6700 Skylake @ X4 4709mhz (+38.5%)
Intel i5 6400 Skylake @ X4 4588mhz (+69.9%)
2 OP pls nerf
(24 items)
NUC U
(10 items)
CPU
i9 9900K
Motherboard
AsRock Z390 Taichi
GPU
MSI GTX 1080 Ti
RAM
G.Skill DDR4 4133 32GB
Hard Drive
XPG SX8200 Pro NVMe 2TB
Hard Drive
HP EX950 NVMe 2TB
Hard Drive
2x Samsung 860 1TB RAID 0
Hard Drive
Toshiba X300 5TB
Hard Drive
Western Digital EZRZ 3TB
Power Supply
Seasonic Focus Plus Gold 750w
Cooling
Corsair H115i Pro
Cooling
Raijintek Morpheus II
Case
Fractal Design Meshify S2
Operating System
Windows 10 Education x64
Monitor
Acer XF270HU 27" 1440p
Monitor
LG 24UD58 24" 4K
Keyboard
CoolerMaster MK730 (MX Blue)
Mouse
Glorious Model D
Mousepad
X-Ray 27" x 14"
Audio
Klipsch PowerGate + Schiit Hel
Audio
Micca RB42
Audio
Philips Fidelio X2
Audio
Philips SHP9500S
Audio
Audio Technica ATH-M50X
CPU
i3 8109U
Motherboard
Intel NUC8i3BEH
GPU
Iris Plus 655
RAM
Kingston DDR4 2400 16GB
Hard Drive
Mushkin Pilot NVMe 1TB
Hard Drive
SanDisk Ultra II 480GB
Operating System
Windows 10 Professional
Operating System
MX Linux
Keyboard
Dierya DK63-BT 60% (Outemu Blue)
Mouse
Logitech G603 Wireless
CPU
i7 860
Motherboard
Gigabyte GA-H55N ITX
GPU
EVGA GTX 950 2GB
RAM
G.Skill DDR3-2133 8GB
Hard Drive
Dierya 120GB SSD
Hard Drive
Seagate Momentus 2.5" 500GB
Power Supply
Silverstone SFX-L Gold 500w
Cooling
Arctic Alpine 11 GT 2
Case
Silverstone Milo Z ML07B
Operating System
Windows XP x86 SP3
Keyboard
CoolerMaster MasterKeys Pro S (Browns)
Mouse
Logitech M512
▲ hide details ▲


The Pook is offline  
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Overclock.net - An Overclocking Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page


Forum Jump: 

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off