81 comments

  • Centigonal 2 hours ago

    I wish there was a model for anti-cheat that wasn't "grant irrevocable full control of your hardware via rootkit to the developer and anti-cheat manufacturer via a secure boot chain that you're not allowed to touch (on your device!)"

    I don't think trust is a bad thing, but this feels forced and unpleasant.

    • RunSet 2 hours ago

      The model is this:

      Let players run their own servers and host their own playgroups as they did before game servers were monetized.

      Then when someone cheats you ban them until they apologize in person and sing the Very Sorry Song.

      This has been proven to work time and again. The only reason it is not the default is that some value extractor just has to feed their kids.

      • extr an hour ago

        No. This model doesn't really work for Battle Royale games, plus the userbase of modern gaming is so much larger and more casual than it was back in CS2 days or whatever you're imagining. People who only have time to play a couple matches at the end of the day do not want to spend half the time available hunting around for a "good server" appropriate to their interest/skill level or develop a personal relationship with the mods.

      • Notatheist 22 minutes ago

        Any community smaller than 200 people is going to have you typing !add in an mIRC channel and waiting 20 minutes during prime-time for a pickup game between 10 mismatched players. Any community larger than 200 people is going to be unmanageable cheat wise.

        If I had the option of Quake 3 Arena-style "matchmaking" and no cheats, or 2024 matchmaking and cheats I'd choose option 2 every time.

      • thot_experiment an hour ago

        Correct. 1000% correct. This is also how you build community.

        Also the f2p model isn't doing us any favors by making new accounts cost zero, though iirc cheats can cost like $100/mo so I assume dedicated cheaters would still cheat if games all cost money.

      • mjr00 an hour ago

        How do dedicated servers work with skill-based matchmaking and ranking systems?

        • VyseofArcadia an hour ago

          I think they are orthogonal models. With dedicated servers, people sort of self-organize into groups of people they want to play with, maybe based on skill or fun or something else. Maybe you know who runs the server IRL, or you just randomly tried the server. Maybe you just get along with that group of people, maybe they're a group that is dedicated to improving and that's exactly what you want.

          I think parent's point is that you don't need skill-based matchmaking and ranking systems if you give players the ability to self-organize.

          • mjr00 an hour ago

            The question was somewhat facetious. Being able to click "Find Match" and be able to match up against someone close to your skill level in a few seconds is a feature that players want. A ranked leaderboard that's somewhat legitimate and has prestige in climbing is a feature that players want.

            You don't need this stuff, of course, but people (who don't play games) love to dismiss these things as if they don't matter.

            • VyseofArcadia an hour ago

              So, then, why not both? The players that want to just jump into a match can deal with the kernel anticheat, and the players that are willing to find a dedicated server don't have to deal with rootkits.

              I mean, I know the answer, it's because doing both would be significantly more work for unproven returns, but still, a guy can dream.

        • cherryteastain an hour ago

          You go on a server. You're getting smoked. They kick you or you leave because the people there are way above you. Alternatively, you're too pro and you get bored and look for a server with higher average skill.

        • Spunkie an hour ago

          Ranking/competitive systems truly are a cancer on games.

          So many quality of life standards have been sacrificed just to let jackasses feel superior to others in what is supposed to be a fun game.

          • mjr00 an hour ago

            On the contrary, skill-based matchmaking is a godsend for casual players, as long as they don't care about their rank. If you're a bottom 50% player, you really don't want to get matched up against a Challenger League of Legends player or Master Street Fighter 6 player or The Wazzler in Marvel vs Capcom 2.

            • Spunkie 44 minutes ago

              I played plenty of unranked LoL back in the day, it was generally a better over all experience.

              Mostly because ranked games were full of tryhards that raged constantly and in general didn't actually treat the game like a game.

              ___

              In fact now that I think about it... some of my funnest LoL games back in the day was when I got paired with someone way out of my league in unranked and they would spend a lot of the game mentoring teammates.

              And when the opposite happened, we would get stomped quickly and would be able to into a new match quickly. No one felt the need to drag out a unfun/mismatched game because their ranking would get hurt. Wasn't really an issue.

      • mulmen an hour ago

        Feed their kids… on a yacht.

    • foresto an hour ago

      There is. At least two, actually.

      1. Allow community-hosted servers, as were common 20 years ago. These can be moderated with greater attention than a massive global server, and tend to eject cheaters quickly.

      2. Server-side analysis. This is arguably more expensive to implement than forcing every player to accept a rootkit, but machine learning might reduce the cost. Moreover, it is more effective in at least one dimension: it can't be circumvented* like a rootkit can.

      * https://www.youtube.com/watch?v=RwzIq04vd0M

  • zeta0134 an hour ago

    > “You can freely manipulate the kernel, and there’s no user mode calls to attest that it’s even genuine,” says Koskinas. “You could make a Linux distribution that’s purpose-built for cheating and we’d be smoked.”

    These are features, not bugs. Cheating must be detected serverside. Never trust the client, this is basic security. Breaking the user's client security is not a valid solution, and I get increasingly frustrated with these gaming companies that insist that a rootkit is "fine" and "normal" and "something a regular user should install without question"

    • extr an hour ago

      Sounds like you have it all figured out. Apply to work at one of these companies and let them know they're doing anti-cheat all wrong.

      • Spunkie an hour ago

        Don't be a snarky ass, especially when you are wrong.

        The community HAS figured it out. If you want cheating reduced you do server side cheat detection not just client side and/or you release real dedicated servers.

        Neither of which shitty game companies are interested in, because it either cost more money to implement or means a minor loss of control.

        • cma an hour ago

          After the dedicated server code is decompiled, I could see that causing more cheats.

          • Spunkie 32 minutes ago

            It would also result in cheats getting identified and reported by the community.

            The TF2 dedicated server mailing lists, back in the day, were filled with new cheats, crashes, and exploits being found and reported by server admins.

    • yodon an hour ago

      >Cheating must be detected serverside. Never trust the client, this is basic security.

      As long as rendering happens on the client, it's going to require client-side anti-cheat to stop players from looking through walls or adding aimbots.

      Client side rendering means the client has information like the location of the opponent even when the opponent is not visible. The server is unable to tell on its own whether the client is using this information inappropriately.

      • Spunkie an hour ago

        Server side cheat detection is not just about actually detecting active cheating on the server side. It's also about the server providing the client the absolute minimum amount of information needed to function/render.

        • zeta0134 an hour ago

          Yes, for an FPS I don't really see a practical way around having the server do some rendering work, in order to detect occlusion and stop sending visual updates when it's pretty sure the client isn't able to see that object. There's a balance to be struck.

          Other techniques include simple statistical analysis: it's usually pretty damn obvious when a player is making inputs that shouldn't be humanly possible consistently, or reacting to information they shouldn't be able to see. That doesn't have to be done in realtime, it can be stored and reviewed later. (That might even be a feature on its own: delayed bans make it harder for cheaters to know if their techniques were detectable.)

          • mjr00 43 minutes ago

            > That might even be a feature on its own: delayed bans make it harder for cheaters to know if their techniques were detectable.

            Bans have typically been done in waves for a long time for exactly this reason, yes.

    • cma an hour ago

      How are you going to prevent automatically seeing people through foliage?

  • VyseofArcadia an hour ago

    I feel like eventually most genres of competitive game will just have to end up adopting the model that the fighting game community came up with organically. Online play is fine for practice and unofficial tournaments, but if you really want to get good and make a name for yourself, you need to play at weeklies, monthlies, and in-person tournaments where the hardware and software are controlled by the tournament organizers.

    It does help that cheating can only help so much in fighting games. I haven't thought about it much, but I guess you could have a macro that executes a devastating combo? Even then you need to be skilled enough at defense and hit confirming to even know when to press the "win the game" button. And most of the games I play have enough defensive options[0] that the player executing the combo might still need to react to something.

    [0] E.g. bursts in Guilty Gear

    • mjr00 an hour ago

      The FGC has a really interesting history with online play. Besides having a long tradition of in-person PvP in arcades, online fighting games were largely unplayable until the mid-late 2010s until GGPO/rollback[0] became popular. For a long, long time, the FGC largely (and rightfully) didn't see online play as legitimate.

      Now rollback is basically standard and you do see competitive tournaments happening online frequently. Obviously the big events like EVO are still offline, but you could say the same about the majors for DotA, LoL, even Brood War, which are all very "online-first" games.

      [0] https://en.wikipedia.org/wiki/GGPO

      • VyseofArcadia an hour ago

        Online play has definitely gotten bigger in the FGC, but the people I know in the community[0] still largely consider offline play king. In a game scene where individual frames matter, the preferred way to play for keeps is offline on a CRT. But, you know, halfway decent online play is fun and good for making sure you don't get too rusty.

        I think the big difference between EVO and e.g. DoTA offline majors[1] is that anyone can show up at EVO and jump into the pools. For other esport events, to play in an offline event, you first have to have qualified online. If the whole process were offline beginning to end, that would be closer to the FGC model.

        [0] I myself only dabble, somewhere between filthy casual and semi-serious

        [1] and do correct me if I'm wrong, I don't know that much about the competitive MOBA and FPS scenes

        • mjr00 2 minutes ago

          Oh for sure offline is still king. But I mean, you look at the top of the SF6 rankings and it's Daigo, Fuudo, Tokido, Punk, Endingwalker... all the players who are winning offline, too. There's a tight correlation between being a top ranked SF6 player online and being really good at the game, to the point of winning offline tournaments. When you think about it, being able to (theoretically) get good enough that you can get matched up against the EVO champ in online play, even if you live in rural Arkansas and could never make it to an NYC local, and play a legitimate competitive game against him, is pretty sweet.

    • indigo945 an hour ago

      Cheating would help in fighting games mostly by just having a bot play the game. No way a human can compete with a computer that always has frame-perfect inputs.

  • fullspectrumdev 2 hours ago

    I might be old or something, but I really don’t give a fuck if someone’s cheating in a video game.

    It was basically the norm when I was growing up, there was always someone using wall hacks or whatever, it was just kinda funny and never ruined the fun.

    • extr 2 hours ago

      You are just old. Hacks absolutely ruin the game even for casual players, especially in the newly popular Battle Royale games where you might not run into the hacker until the very last part of the match. It feels bad to invest 20 minutes into a match, be feeling good about the finale showdown, only for them to aimbot you from nowhere - you never stood a chance.

      • 2 hours ago
        [deleted]
    • beart an hour ago

      Substitute any other pass-time for video games and I think most folks feel differently.

      A pick-up game of basketball

      A weekend mountain bike race

      A corn-hole tournament at your local bar.

      Someone cheating in any of these contexts would typically be upsetting. No one likes a cheater.

      Video games are different because you can't call them out on it in real-time. You don't usually have any way to prove it. You also can't really escape it because there might be another cheater in the next lobby. In person, you have a lot more power or control over the situation (typically).

    • Nadya an hour ago

      The issue you're missing is the scale of the cheating.

      When it is some small percentage of games you might shrug, hope you don't run into the cheater again, and move on to the next game where nobody is cheating. A few matches of your day get ruined but you still get to enjoy >95% of them so it's overall still a good experience. It has a very small impact on your enjoyment but you can move on and still enjoy most of your time.

      It becomes a problem when there are so many cheaters that you encounter one in nearly every single game you play. Making it nearly impossible to play or win because the aim botting, wall hacking, infinite ammo, one-hit-kill, teleporting, invincible hacker is mowing down you and your entire team and the round ends in a few minutes. Except now it is 5 out of every 6 games you play and you hardly get to enjoy playing.

      Additionally, back in the day you could leave matches without really getting punished for it. If you encountered an obvious hacker you could just leave and rejoin a new game. Now you get punished for leaving matches and might have to sit out a 15-60 minute timer if you leave too many games. Mix that with some high percentage of cheaters and you might be sitting in lobby waiting to play the game more than you're actually playing the game.

      Let's say you enjoy playing Chess. How long would you enjoy playing against Alpha Zero - especially when expecting to play against someone your own ELO? At what ratio of playing against people cheating with Alpha Zero would you stop bothering to try and play Chess? I could tolerate it occasionally but if every single person I was playing against was just using Alpha Zero I'd stop trying to play Chess at all. It's no fun to lose every single time because the other person is always cheating.

    • cortesoft 2 hours ago

      There are plenty of games you can play where cheating is allowed.

      I think a majority of people who play competitive online games enjoy fair competition, and it really isn’t fun to play against cheaters.

      I played NBA2k on PC for a few years, and unlike on consoles, cheaters were rampant. Half the games would be against players who were like 12 feet tall and could make every shot from anywhere on the court. It was zero fun, and I stopped playing.

      I think “just let people cheat” is not a viable option.

    • ruune an hour ago

      It really depends on the level of cheats. Someone using wall hacks has a huge advantage, depending on the game, but it doesn't take that much more skill to outplay them. But when you get to a point where the cheats aren't just a tool anymore but do most of the work, the skills required to still win get so astronomically high that you will lose every time unless you are a top 0.1% player. Which isn't really fun anymore. And many cheats nowadays are exactly that: practically unbeatable. Not a challenge, not hard but doable with enough work, just unbeatable

    • segasaturn an hour ago

      This makes sense if you're playing games for fun with people you know, like on the old community servers, but nowadays games like CS are played competitively for money and clout, and usually with complete strangers. Fun isn't part of the equation anymore, or at least comes as a side-effect.

    • afavour 2 hours ago

      I think it depends on the kind of game. I played Team Fortress Classic back in the day and if someone was cheating it didn’t have a big impact. During the pandemic I got into FPSes again and played COD Warzone. In a game like that you have a multi minute build up to actually engaging another player, to go through all that then get beamed by someone with an aimbot is very frustrating.

    • mulmen an hour ago

      Speaking as a 40 year old card carrying old man you are wrong. Cheating was never fun except maybe for the cheater.

    • yosef123 an hour ago

      Wall hacks might be funny, but when you get killed on sight in .25 sec it’s not so fun anymore…

    • givemeethekeys 2 hours ago

      By the time multi-player FPS's came out, cheaters were definitely annoying enough that cheat detection / banning became a thing.

    • bravetraveler 2 hours ago

      I didn't even really care when it mattered. For money. We could dispute, an investigation would happen. Life went on.

    • Dilettante_ 2 hours ago

      People get sweaty in competitive online these days, especially on the AAA titles.

    • iamtheworstdev an hour ago

      not only that.. we're not far from the point where it becomes undetectable because a camera fed AI instance on one computer is manipulating the inputs on gaming machine

    • Coolbeanstoo 2 hours ago

      I kinda feel the same way.. I imagine games not having community servers and focusing heavily on rank/seasons etc makes it feel a lot more serious? Idk I used to find community on dedicated servers, it was part of the game, with in game text/voice chat, now the community exists entirely outside of it in discords etc.

    • beastman82 2 hours ago

      I mean try to play TF2 with the bots and report back. The game is ruined. Thank Jeebus for community servers

      • chikenf00t 2 hours ago

        I haven't touched TF2 in almost a year. The joy I felt playing that game has left since the cheating epidemic and I don't think it's ever coming back.

    • lasc4r 2 hours ago

      Getting a win is the intermittent reward players get from these battle royale games against 20 or so other teams, when a hacker ruins that it's pretty annoying.

  • lenerdenator an hour ago

    I was into vidya about 15 years ago when I was in college.

    Now that I've got all of the money to build a bitchin' system... I'm not into vidya.

    The MBAs got to it and we now _must_ have a multiplayer game with anticheat because if we don't have anticheat how are we supposed to sell the tournaments surrounding the game to streaming audiences as a way to monetize an otherwise free-to-play* game?

    We let people make this hobby into their whole lives and when you do that, it has to be monetized, and it begins to suck.

    • gary_0 an hour ago

      What online pastime we enjoyed 15 years ago hasn't been monetized all to shit? Making goofy YouTube videos? All about the big bucks now. Fuckin' blogging? Now there's Medium/Substack. Dicking around on a message board? Sorry, spez needs his billions. And if you're a gamer, don't forget to run some ads on your Twitch stream for easy money!

      The Internet is no fun anymore.

  • jampa 2 hours ago

    This sucks, but makes sense, nothing kills games community faster than cheating. And I don't think publishers spent time enought on combating it. I used to play Counter Strike since 1.5 era, and quit CS:GO entirely because there was a blatant cheater every match, even with the phone verification and AI trust factor (which Valve brags about it, but it doesn't work at all).

    PUBG also had an era with lot of cheaters and lot of people dropped the game.

    Like the article says, when Linux gets critical mass, with the Steam Deck's broader adoption for example (their market is still very limited) it will make more sense to support this.

  • cortesoft an hour ago

    I really don’t understand all the people on this thread acting like gamers should just deal with cheaters. Anyone who plays online games knows how quickly it becomes not fun when there are obvious cheaters. It isn’t like 10% less fun, it is 100% less fun. Online games where you play against other people are fun because of competition, and cheating makes it so there is no competition.

    There are a lot of games where cheating wouldn’t be an issue, but games like Apex legends aren’t those.

    • an hour ago
      [deleted]
  • ggu7hgfk8j 2 hours ago

    Is this casually related to the previous kernel anti cheat story https://news.ycombinator.com/item?id=41999314?

    • pixelpoet 2 hours ago

      Since it's for exactly that reason I'd assume so.

  • Spunkie 2 hours ago

    Sometimes it's silly to think about EA being voted the most hated/worst company of the year, multiple years in a row.

    And then I remember they literally spend their free time thinking of ways to piss off their own customers.

    • mvdtnz an hour ago

      An overwhelming majority of players (not the noisy ones on internet forums) prefer anti cheat and don't care about the details of how the software is installed.

  • SapporoChris 2 hours ago

    Progress has not followed a straight ascending line, but a spiral with rhythms of progress and retrogression, of evolution and dissolution. — Johann Wolfgang von Goethe

  • GiveOver 2 hours ago

    I always struggled with Apex Legends on Linux. It didn't pre-load shaders, which led to a very jittery experience for the first round or two. Even after that you still get jitters here and there when it needs to load something new. It wasn't worth doing every time there was a new update.

  • bogwog 2 hours ago

    > While the population of Linux users is small, their impact infected a fair amount of players’ games.

    So Linux users are malware?

  • citizenpaul an hour ago

    If only the steam deck were owned by a company with mountains of cash and could afford to pay a team dedicated to making the platform cheat resistant.

  • 2 hours ago
    [deleted]
  • PaulHoule 2 hours ago

    That’s about as smart as releasing an AAA title as a console exclusive.

  • stonogo 2 hours ago

    I said this in the other thread, but KLA isn't about preventing cheaters. It's about protecting the artificial scarcity of products for sale via microtransaction.

  • 2 hours ago
    [deleted]
    • ChocolateGod 2 hours ago

      What makes you doubt this?

      It's true, anti-cheat on Linux is ridiculously harder than it is on Windows. You have many more hard to detect methods for a cheat program to interact with the game and fool-proof way to verify the environment.

  • cevn 2 hours ago

    Nice, another game I can uninstall..

  • riversflow 2 hours ago

    I really wish we would see some legislative action on this. Selling and publishing cheats should be completely illegal and punished heavily.

  • zoklet-enjoyer 2 hours ago

    It's just a game. So what if there's cheating? Ban them if they get caught

    • moomin 2 hours ago

      Doesn’t work that way. Cheaters ruin regular player’s experience, bans are easily circumvented. This is a recipe for “No-one plays your game.”

      I think kernel-level anti-cheat is a security nightmare, but denying there’s a genuine economic motive here seems naïve.

      • Spunkie 2 hours ago

        Naw this is all bullshit.

        If apex legends released a real dedicated server tomorrow, within a month there would be a large selection of well moderated community servers and cheaters would be mostly a non-issue.

        EA doesn't care to actually moderate cheating, because that either takes ongoing money to pay people or a loss of control by releasing dedicated servers. They instead just want to pay 1 time to "automate" their "solution" to cheating... even though that pretty much never works long term.

      • jajko 2 hours ago

        How do cheaters circumvent bans? I would presume you have some unique copy key which is activated, and once it gets revoked should never ever allow you to connect to their game servers.

        Company runs entire ecosystem, how apart from hacking their DBs you can ever get back?

      • imtringued 2 hours ago

        I'm pretty sure nobody plays a game that actively prevents you from playing it.

    • KeplerBoy 2 hours ago

      That's the funny thing about it. People who are serious about cheating don't get caught and this Linux ban is all for naught.

      The tech behind is quite fascinating actually. These days people use FPGA boards connected via PCIe to directly stream the memory contents to another PC. There is no cheating software on the gaming machine.

      Disclaimer: I don't cheat, but these boards are the cheapest pcie fpga dev boards I could find.

      • whatshisface 2 hours ago

        Wow, I'd have thought it would be easier to cheat through a hypervisor.

        • jabroni_salad an hour ago

          It's surprisingly difficult to hide being virtual and a lot of competitive games dont like running in VMs.

    • aliasxneo 2 hours ago

      The whole reason I stopped playing competitive online games was due to cheaters. The keyword is competitive. At least for me, I was always striving to get better and to move up the ranks. When you're consistently coming across teams that have one or more cheaters in them, the whole match becomes pointless. If that happens enough times, you lose the drive to participate anymore.

      For non-competitive games, that drive generally isn't there, so it probably matters a lot less.

    • ChocolateGod 2 hours ago

      The issue is that it's hard to catch it on Linux and it ruins the game for other players.