• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

Valorant's anti-cheat starts upon computer boot and runs all the time, even when you don't play the game

PSYGN

Member
This game was so boring to watch and a literal mashup of Counterstrike and Overwatch, it's amazing that it's still popular. I'm guessing the streamers are getting paid and the sheep follows.
 

M1chl

Currently Gif and Meme Champion
yes

at the time when was released(2015) there were guides like this everywhere

Oh I 'member that, but as far as I know is no longer there (which means you have to turn it off, it's there, but not active by default), because you are specifically asked about this. Maybe, because I am in EU. But sure, I did not recelled this from memory, so I apologize for my slow brain.
 

VN1X

Banned
Interesting that the cheaters that make all this shit necessary aren't the ones anybody is complaining about.
I mean that's a bit of a naive stance isn't it?

Majority of crimes are committed are because of financial reasons but you don't hear someone complaining about the dark side of capitalism when someone commits a murder out of greed/fraud/financial gain, etc

Cheaters are the scum of the earth but we don't need a Chinese funded company to install rootkit nonsense on our computers lol. I guess the only viable alternative for now is either premium accounts (to an extent) or fuckin'' Google Stadia.
 
Last edited:

Woo-Fu

Banned
I mean that's a bit of a naive stance isn't it?

Majority of crimes are committed are because of financial reasons but you don't hear someone complaining about the dark side of capitalism when someone commits a murder out of greed/fraud/financial gain, etc

Cheaters are the scum of the earth but we don't need a Chinese funded company to install rootkit nonsense on our computers lol. I guess the only viable alternative for now is either premium accounts (to an extent) or fuckin'' Google Stadia.
You're comparing anti-cheat software to murder. For fuck's sake, man.

If you don't like the anti-cheat software don't play the game. Take your overwhelming sense of entitlement and apply it to something you actually pay for.

I don't like Riot either but I'm not going to assume that they're going to jump into a new genre and suddenly do everything exactly right. Companies that have been building shooters for decades routinely fuck up anti-cheat implementation. Why would anybody expect Riot to do any better?

The "Chinese company" bit is the funniest part of your statement. If the decisions were being made by the Chinese on this one there wouldn't be anti-cheat at all. If you don't cheat in China you're not really trying.
 
Last edited:

Lanrutcon

Member
Interesting that the cheaters that make all this shit necessary aren't the ones anybody is complaining about.

It doesn't make this shit necessary. If it did, then every online shooter would do it. If they're so worried about what's happening client-side then I'd wager a guess they developed the game in a way that puts way too much trust in the client. It's basically an excuse to not develop proper server side security.

Besides, If you fuck your normal customers in the process of fighting the cheaters then what's the point? It's a free to play title. You need to keep those people happy to make money since you make nothing up front. It's only going to take one asshole taking advantage of their anti-cheat approach to sink the game's reputation.
 

VN1X

Banned
You're comparing anti-cheat software to murder. For fuck's sake, man.
You're the one pretending that because we have cheaters in a videogame we should allow companies to install all sorts of nonsense on our desktops. Wat.

Also obviously I'm not equating the two. It's called using an example, in the case an extreme one, to make a point but I see that went completely over your head.

If you don't like the anti-cheat software don't play the game. Take your overwhelming sense of entitlement and apply it to something you actually pay for.
Done and done! Uninstalled and hoping there's a solution soon to completely scrub any remaining pieces of their software from my PC!

The "Chinese company" bit is the funniest part of your statement. If the decisions were being made by the Chinese on this one there wouldn't be anti-cheat at all. If you don't cheat in China you're not really trying.
I said "Funded". And let's not pretend any sort of funding by any company doesn't have some sort of influence in the long run. Give me a break.
 
Last edited:

Guilty_AI

Member
that was my experience overall with "clients", friends and in forums, people that consulted me about it were concerned but unable to do much about it, all that at the time it was in the news, if people want to be apathetic about it its ok by me, I still use windows 7 in a couple machines and my brother also use windows 7 for gaming exclusively other thatn that my parents use osx

I cannot check if its still there as I dont use the OS and when I repair a windows 10 machine is usually a favor and I prefer not touch anything that is not the problem, when I do a repair is usually hardware problems mostly recover data from faulty hdds, password resets and things like that and mostly old machines its not my job I only fix pc in my free time

if its still there I guess it means people just "accepted" the keylogger, can you confirm is still there?
I remember disabling that stuff back then. I went to check it again and apparently its still there, although in a slightly different place from before.
Settings -> Privacy -> Diagnostics & feedback. It requires another setting to be turned on in Settings -> Privacy -> inking & typing personalization
 
This seems like a solid solution to be honest. It's not like driver-level software is uncommon and especially easy to use as an entrypoint (otherwise we'd see way more exploits using other drivers). I can see their point in this being a solid way to prevent loading of cheats before the anti-cheat is in memory.

In the end it's not unethical or anything like that. It's just a "if you don't trust it, don't install it" situation.
Give feedback to the developers and don't consume the product. If the impact is enough to varant it, they'll change their methods. It's as easy as that.
 
Doesn't even work though.
Depends how you see it. Does it shut down every way to manipulate the game? no. However it blocks some entries.
You can't say wheelchairs don't work for all disabled people so they are useless. You gotta cover all bases best you can.

I'm suggesting that you are not in fact here for honest discussion, or you are willfully naive. The driver is installed at a level that makes it an easy vector to create a rootkit, running from bootup.

But you do understand the intend of putting a part of your software on that level to circumvent the possibility of software just isolating your anti-cheat by manipulating it on startup/runtime?
 
Last edited:
H

hariseldon

Unconfirmed Member
But you do understand the intend of putting a part of your software on that level to circumvent the possibility of software just isolating your anti-cheat by manipulating it on startup/runtime?

Sooo.. you're saying that it's ok to put horrifically dangerous software on my machine, to compromise its security, in the name of preventing some cheating on a game. That's some interesting thinking there. If I install it, it gets hacked, and then I use the machine for online banking, or to manage my cryptocurrencies, what do you think might happen? Consider the harm that comes from a team who are not specialist security experts producing a piece of software that bypasses every single layer of security your computer has, and then try coming up with a sensible response.
 
How does blocking "some" entries matter here?

People who want to cheat will just use the cheats that do work.
You're wearing pants, shoes and a shirt to get dressed. Just because one doesn't do the job on its own doesn't mean you don't combine all possibilities to get the job done.

If you're a nudist, no offense.
 
H

hariseldon

Unconfirmed Member
You're wearing pants, shoes and a shirt to get dressed. Just because one doesn't do the job on its own doesn't mean you don't combine all possibilities to get the job done.

If you're a nudist, no offense.

That makes no sense. In your example, the shoes are highly flammable and are in fact roller-skates where the skates are under remote control by someone who fucking hates you. Do you still wear the shoes?
 

Alexios

Cores, shaders and BIOS oh my!
Good thing all this gets outs before it goes public, I'm sure they'll fix that (in terms of shutting down when not playing the game, if it's somehow super strict and heavy on the CPU it's perhaps necessary for a competitive game, as long as it works well) as it makes zero sense to keep it like that.
 
Last edited:
Mate, you have some of the worst analogies I've ever seen. How does this compare to an anti cheat like at all?

You asked me why using one vector to prevent cheating should be used when it's not closing down ALL possibilities at once. So I tried to explain the concept of combining multiple approaches to reach a common goal as that seemed to have you struggling.
One of these is the early establishing of your anti-cheat in the system to prevent memory manipulation on the anti-cheat itself. Of course that alone will not solve all issues and vulnerabilites but it will guarantee a solid foundation.
 
Last edited:

RedVIper

Banned
You asked me why using one vector to prevent cheating should be used when it's not closing down ALL possibilities at once. So I tried to explain the concept of combining multiple approaches to reach a common goal as that seemed to have you struggling.
One of these is the early establishing of your anti-cheat in the system to prevent memory manipulation on the anti-cheat itself. Of course that alone will not solve all issues and vulnerabilites but it will guarantee a solid foundation.

It's a shit analogy.

Because one piece of clothing doesn't accomplish the job on their own, but all off them together do.

The anti-cheat doesn't accomplish it's job.
 

Tesseract

Banned
Good thing all this gets outs before it goes public, I'm sure they'll fix that (in terms of shutting down when not playing the game, if it's somehow super strict and heavy on the CPU it's perhaps necessary for a competitive game, as long as it works well) as it makes zero sense to keep it like that.
giphy.gif
 

nemiroff

Gold Member
Installing a root kit for a game on someone's computer without at least clear opt-out (out of installing the game) or a warning should be punishable by death by a thousand cuts. It's fucking 2020, companies should know better.
 
Last edited:

CloudNull

Banned
Damnnnn this is shitty to hear. It’s not going to stop me from playing though. Game is like crack.
I’m lucky that I use my gaming for well gaming only and do everything else on other machines. Hopefully they will make this only run while game is being played.
 

Bwesh

Member
This is why I'll never play anything by Riot or Tencent. Yeah, that includes never installing epic games launcher on my pc.
 

magnumpy

Member
idiots are just encouraging piracy and cracked executables. I don't care, it's only an issue if I absolutely have to have day 1 releases. imo it's better to wait because day 1 games are susceptible to unpatched bugs and performance issues. but games typically make most of their money in the first month, imo it's better to stay away from that because the sensitive princesses might get their feelings hurt in that first month and sue me :(
 

Trogdor1123

Gold Member
PC gaming is becoming more and more like a 2 system requirement now days. One for any games and another entirely separate system for anything non-gaming.
 

Sophist

Member
Wasted efforts. The only way to implement an effective anti-cheat would be to rely on the CPU's enclave like do Netflix and Prime video to enforce DRMs.

Also,
 

Helios

Member
Riot issued a "response" :
We’re Chris Hymes (Data Protection Officer & Chief Information Security Officer), Mark Hillick (Director of Security), Clint Sereday (Anti-Cheat Product Lead), Daniel Hu (Data Privacy Product Lead), and Warren Kenny (Application Security Product Lead). And we’re here to talk about Riot Vanguard.

We’ve discussed Vanguard in the past, but over the last week there’s been a lot of conversation about Vanguard and its kernel mode driver. The biggest concerns we’re hearing are about the security of the driver and your privacy. Our buddy Paul “Riot Arkem” Chamberlain has been addressing questions where he can, but as a group of the most unapologetically paranoid Rioters, we wanted to give Riot Arkem a little backup and give you some added insight into how Vanguard was built with security and privacy at its heart.

A Little Background on Riot Security
A few years ago, we wrote about how security has evolved at Riot. We described our approach as being:

  • the guardian of Riot’s player-focused culture,
  • feedback-driven and audience-focused, and
  • centered around providing options, not roadblocks.
This is as true in 2020 as it was in 2017. The Anti-Cheat team made sure Vanguard was designed with our Security and Data Privacy teams coordinating closely at every stage of development. We understand the decision to run the driver component in kernel-mode can raise concerns, and that some of you want to know more about the tech behind Vanguard. We can’t get too deep into the technical specifics without potentially compromising Vanguard, but we’ll go as far as we safely can below, plus we can assure you that it has been reviewed by both internal and external security experts.

The bottom line is we would never let Riot ship anything if we weren’t confident it treated player privacy and security with the extreme seriousness they deserve. With that in mind, let’s look at our philosophy for Vanguard and the fundamentals of its architecture.

Riot Vanguard Philosophy
  • Riot’s committed to achieving the highest competitive integrity in our games. We want you to play in a world where you never have to doubt your abilities or your opponent’s.
  • The battle against cheats is constantly evolving and we’re always working on better ways of accomplishing our goals. Cheating has gone from merely seeking control of game client memory to methods that attempt to modify the underlying operating system.
  • If anti-cheat software is only run in user-mode, its capabilities would be compromised by a cheat running at a higher privilege level. For example, some of the more advanced cheating communities have used Direct Memory Access (DMA) to rebroadcast memory to a separate computer for later processing.
  • Vanguard is a solution that will help us achieve the vision of competitive integrity while enabling us to continuously adapt our arsenal in the war against cheaters.
  • Vanguard does not collect or process any personal information beyond what the current League of Legends anti-cheat solution does. Riot does not want to know more about you or your machine than what is necessary to maintain high integrity in your game. The game data we collect is used for the operation of the game and integrity-related services such as Packman and Vanguard.
Riot Vanguard Architecture
  • Vanguard consists of three components: the client, driver, and platform.
  • The client (user-mode) handles all of the anti-cheat detections while a game is running.
  • The client needs to communicate with the platform to receive detections and in order for a player to be able to play.
  • The client does not consider a machine trusted unless it recognizes the driver; untrusted machines cannot play VALORANT.
  • The driver (kernel-mode) is used by the client to validate memory and system state, and to make sure the client has not been tampered with.
  • The driver runs at start-up to prevent loading cheats prior to the client initialization.
  • The driver can be uninstalled at any time (“Riot Vanguard” in Add/Remove Programs), although VALORANT won’t run without it.
  • The driver does not collect or send any information about your computer back to us.
  • The driver has been signed by Riot’s own EV cert, which has in turn been signed by Microsoft as per their code signing process.
What’s Next?
As part of our commitment to player security and privacy, we’ve been running a Bug Bounty program on HackerOne for the past 6 years. We’ve rewarded security researchers with almost two million dollars in bounties and our scope includes everything that players interact with. Today we’re announcing that we’re creating a special scope for Vanguard vulnerabilities with even higher bounties. We want players to continue to play our games with peace of mind, and we’re putting our money where our mouth is. If you think you’ve found a flaw in Vanguard that would undermine the security and privacy of players, please submit a report right away and you may be eligible for a big bounty payout. Visit our HackerOne page for more details.

We’d never let Riot ship something we couldn’t stand behind from a player-trust perspective (not that we think Riot would ever try). Players have every right to question and challenge us, but let’s be clear—we wouldn’t work here if we didn’t deeply care about player trust and privacy and believe that Riot feels the same way. We’re players just like you, and we wouldn’t install programs on our computer that we didn’t have the utmost confidence in.

Please keep holding us accountable for protecting both the competitive integrity of your games and your personal privacy.
 
Last edited:

Caffeine

Member
those undetectable hacks run on 0ring this wont do anything.
on a security standpoint its stupid, if it is ever compromised so is your pc.
let alone an anticheat associated with tencent.
 
Last edited:
Yeah this is digusting. This fuckery shouldn't be legal

Thanks to this thread I uninstalled the anti-cheat and the game
no this is not disgusting.. it's simply the price you're paying for cheater free gaming....

it is too much for you? .... don't play this game.


ps. and Microsoft has allowed and signed it..... without MS permission no one can install such program on Windows 10.
 
Last edited:
Top Bottom