From a purely technical standpoint: normal (unprivileged) anti-cheat can only look inside the process its running on, kernel anti-cheat has access to the entire OS, is this correct?
Are there cases of cheating which unprivileged anti-cheat absolutely cannot catch? Or is it that kernel anti-cheat is just so much easier to implement.
yes, kernel level cheats are a thing, but nowadays hardware level is getting common, plus with AI people have been making models who only use the video output which you can just get by splitting the signal and is completely undetectable and inject inputs directly at the hardware level with special periphals and runs in a separate computer, these AI cheats only provide aim assist and trigger assist, but are completely undetectable outside of Valve’s style of server anticheat that actually analyses the inputs the clients send
cant do much outside of forcing physical presence on a monitored enviroment with trusted hardware, even with consoles, what stops people from modding controllers and analyze the raw video feed from the hdmi? nothing really, it just more hassle, people will simply develop tools to make the hassle smaller
From a purely technical standpoint: normal (unprivileged) anti-cheat can only look inside the process its running on, kernel anti-cheat has access to the entire OS, is this correct?
Are there cases of cheating which unprivileged anti-cheat absolutely cannot catch? Or is it that kernel anti-cheat is just so much easier to implement.
yes, kernel level cheats are a thing, but nowadays hardware level is getting common, plus with AI people have been making models who only use the video output which you can just get by splitting the signal and is completely undetectable and inject inputs directly at the hardware level with special periphals and runs in a separate computer, these AI cheats only provide aim assist and trigger assist, but are completely undetectable outside of Valve’s style of server anticheat that actually analyses the inputs the clients send
Damn never thought of hardware level cheats but makes sense.
hardware-level anti-cheat when
cant do much outside of forcing physical presence on a monitored enviroment with trusted hardware, even with consoles, what stops people from modding controllers and analyze the raw video feed from the hdmi? nothing really, it just more hassle, people will simply develop tools to make the hassle smaller