Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Games

Steam Games Must Fully Disclose Kernel-Level Anti-Cheat On Store Pages (gamingonlinux.com) 53

An anonymous reader quotes a report from Gaming On Linux: Valve announced a change for Steam today that will make things a lot clearer for everyone, as developers will now need to clearly list the kernel-level anti-cheat used on Steam store pages. In the Steamworks Developer post Valve said: "We've heard from more and more developers recently that they're looking for the right way to share anti-cheat information about their game with players. At the same time, players have been requesting more transparency around the anti-cheat services used in games, as well as the existence of any additional software that will be installed within the game."

Developers with games already on Steam will also need to do this, as it's not just for new games coming up for release, and it is also part of the release process now too. So Valve will be doing checks on games to ensure the notices are there and correct. However, it's only being forced for kernel-level anti-cheat. If it's only client-side or server-side, it's optional, but Valve say "we generally think that any game that makes use of anti-cheat technology would benefit from letting players know".

Steam Games Must Fully Disclose Kernel-Level Anti-Cheat On Store Pages

Comments Filter:
  • by fafalone ( 633739 ) on Wednesday October 30, 2024 @06:29PM (#64907667)
    Wherever there's anti-cheat, there's cheaters trying to bypass it. Cheat makers have moved into kernel mode too, and even though I don't make cheats (or even play any games besides a couple 20+ year old ones) these communities have been a wonderful source of information for learning how to make nontraditional drivers. I love making things a language isn't supposed to be able to make, and that's required learning a lot of details about Windows kernel drivers that simply aren't covered by books and classes on the topic. Want to see the nightmare fuel of a kernel mode driver written in VB6*? Really lol [github.com]

    Here's hoping the war escalates.

    (* VB6 can only compile 32bit binaries so drivers are limited to 32bit Windows; but a beta-stage project called twinBASIC is backwards compatible with VB6 so the unmodified code can be compiled for x64 Windows too, and indeed while I wasn't the first to write one of these in VB6, a distinction [vbforums.com] belonging to far more brilliant programmer The trick, I was the first to have one run on x64 and Windows 11. No WOW64 in km. Have since made more advanced ones I couldn't have made without knowledge from kernel cheat groups).
    • by higuita ( 129722 )

      many cheats are moving to hardware to bypass the kernel... the war goes on

      • And so have the cheaters. There's videos online about people using raspberry pis, Arduinos, custom asics, etc to emulate input devices and capture data from the host. Intrusively (DMA) or not (Video capture and external processing).

        Of course at the end of the day one thing will always hold true: "You can't call it a competitive sport if it takes place in your mother's basement." So long as the hardware used to play is in perpetual possession by the players, there will always be a way to cheat. No software
  • Windows 10 user. Just opened Steam, went to the store, and looked up a game I am 100% sure has anti-cheat software (Endless Dungeon). Didn't see any warnings. Oh well - yet another incentive to make the switch to Linux.
    • by SlashDotCanSuckMy777 ( 6182618 ) on Wednesday October 30, 2024 @06:46PM (#64907709)

      "Which games need to do this?
      Going forward, when you submit a new game to Steam, if your game installs a client side, kernel mode anti-cheat, you will need to fill out this new field. We will be going through old games and contacting partners with games that fall into this category."

      New games will have to do it, but games already on Steam will need updating.

      Not sure the 3 hours this decision has been out will be enough time for all old games to update their game pages.

    • Why would it be Linux only? That makes no sense. Actually nothing you wrote makes any sense. Firstly the announcement only came out today which means few (if any) store pages would have been updated already. Secondly Endless Dungeon does not use any kernel level anti-cheat (e.g. Easy Anti-Cheat). Thirdly most games which do use kernel level anticheat have compatibility problems with Linux.

  • by Valgrus Thunderaxe ( 8769977 ) on Wednesday October 30, 2024 @06:35PM (#64907683)
    Why isn't this considered like a virus? Why don't AV vendors alert the owners of these machines and try to remove this code?
    • Re: (Score:2, Insightful)

      by thegarbz ( 1787294 )

      Why isn't this considered like a virus?

      Probably because it's not malware, not replicating, and not malicious. Why would AV vendors try and remove it? What next, AV vendors remove your display driver as well because it runs close to the kernel?

      • by evanh ( 627108 )

        It is fair to class any form of DRM as malware. It's primary function is interfere with normal operations. As such it also tends to play havoc even when not triggered for that interference.

        • by evanh ( 627108 )

          DRM has similarities to security back doors.

        • by thegarbz ( 1787294 ) on Thursday October 31, 2024 @04:01AM (#64908313)

          DRM and kernel level anti-cheat are not the same thing. One benefits only the company at the expense of the user (malware from the user's perspective), the other objectively benefits the user (not malware). You should see some online games get released without any anti-cheat software and they virtually instantly turn into a cesspool of cheaters and shit and frequently end up tanking in reviews in only the first week of release with the *users* calling for anti-cheat to be adopted.

          For DRM I'm right there with you. Especially Denuvo which for some games ends up horribly crippling performance. I recall Denuvo devs saying it wasn't them, but then somehow the pirate version of some games ran at 10-15fps higher and I don't think Empress went out of her way to optimise game code while cracking Denuvo :-)

      • It absolutely is malicious. kernel level anticheats, and even non-kernel DRM, have a LONG history of causing harm to users' machines. Sometimes even physical damage.

        • It absolutely is malicious. kernel level anticheats, and even non-kernel DRM, have a LONG history of causing harm to users' machines. Sometimes even physical damage.

          Then you can provide some evidence of the physical harm to machines since the list is so long. I'll wait.

    • by sinij ( 911942 )
      Unfortunately, because a typical user will pick lack of security over inability to play a game every time. Do not interpret this as me saying that AV vendors offer any measure of security.
    • by DrXym ( 126579 )

      As annoying as anti cheat / DRM crap is in the kernel it's not a virus. Arguably the stuff AV vendors shove into the kernel is just as bad or worse for destabilizing the software. That said, it would be nice if there were a simple way to identify anti-cheat software by name which is in the kernel, what game likely put it there, and be able disable or uninstall it

    • They sometimes do when the anti-cheat updates itself and the new binary ash is no long whitelisted :D

  • by WaffleMonster ( 969671 ) on Wednesday October 30, 2024 @10:33PM (#64908037)

    Won't even consider running a game that installs kernel drivers for any reason.

    • Clearly you don't play anything online. These days online games that don't use something like Easy Anti Cheat are a cesspool of shit not worth playing. Welcome to 2024 where everyone is a cheating arsehole and the only way to play is to cede a bit of control to the likes of EAC.

      But this is Slashdot, you shouldn't care about using kernel level anything because you are only using Windows exclusively to play a few games in a VM anyway right ;-)

    • by AmiMoJo ( 196126 ) on Thursday October 31, 2024 @04:37AM (#64908365) Homepage Journal

      Just say no to Steam entirely. Good Old Games (GOG) give you an installer that doesn't requite a client app like Steam does, and which is DRM free. You can keep it forever, it's not tied to your GOG account and there is no online requirement or licence check.

      • by flink ( 18449 )

        Anti-cheat drivers aren't DRM. I mean sometimes, I'm sure game makers roll DRM and anti-cheat into one module, but the functions are distinct. Anti-cheat plugs into the kernal and makes sure nothing is driving the mouse except the mouse driver (to detect aim bots), nothing is driving the display except a recognized display driver (to detect x-ray wall hacks), stuff like that.

        Anti-cheat is annoying, because it might pop a false positive if you are running some odd-ball configuration, but it's not malicious

        • by AmiMoJo ( 196126 )

          Seems like the kind of thing that Microsoft should create an API for, a bit like how Google has an API in Android that lets an app verify that the device is not rooted or otherwise compromised.

          If I wanted to play a game with that kind of anti-cheat I'd probably look at getting it on console, or having a dedicated gaming machine. But most likely I'd just not play it.

          • by flink ( 18449 )

            If I wanted to play a game with that kind of anti-cheat I'd probably look at getting it on console, or having a dedicated gaming machine. But most likely I'd just not play it.

            Yeah, that is often the play. Unfortunately, if you are into competitive online mutiplayer games, there is not much alternative. Games that don't include these measures quickly degenerate into cesspools of nothing but cheaters and people stop buying/playing them, and some games like MOBAs and RTSs aren't really playable on console as they virtually require mouse and keyboard.

      • by Mozai ( 3547 )

        Would love to keep buying from GOG, but the taxes part of their billing is screwed up, insisting I live somewhere i don't, and part of the purchase process is swearing that I will take responsibility for their mistakes. I asked tech support, got a big shrug and "what if you went to a friend's house and bought the game using their account?"

  • by Improv ( 2467 ) <pgunn01@gmail.com> on Wednesday October 30, 2024 @10:38PM (#64908041) Homepage Journal

    I don't buy games with Denuvo. Would be nice if I could set something so I don't see such games in the listings. At all.

Those who do things in a noble spirit of self-sacrifice are to be avoided at all costs. -- N. Alexander.

Working...