Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> China-owned

State owned is problematic, I'm not in disagreement with you. But so is corporate owned. I'd like to see an industry standard anti-cheat root-kit developed as a publicly reviewable open source project at the very least.



>I'd like to see an industry standard anti-cheat root-kit developed as a publicly reviewable open source project at the very least

An anti-cheat is one of the few areas that truly would ruin its security by going OSS. A cheater can quickly enumerate every method the AC uses to detect cheats, then they know EXACTLY which goalpost to kick into, per-se. 85% of Vanguard's effectiveness is their CONFUSING ban protocols, whether that's delaying a ban to confuse someone testing what's bannable, not divulging details about what avenues are tested, constant updates that aren't specified anywhere, etc.

Case in point, even in CSGO: Just changing the offsets of some game values will break some cheats for several days.


Then handle it server side. Anything you ask the user to install into their kernel should not be closed source.


Anti-Cheat is the only industry where security by obscurity is valid.


Obscurity is always valid because it increases security, doesn't it?


They're referring to this idea: https://en.wikipedia.org/wiki/Security_through_obscurity

Obscurity can be a layer, but it can't be the only layer, and in general systems (such as web servers) need to be designed to withstand full-knowledge attacks. That isn't likely to be possible when it comes to anti-cheat, so obscurity plays a larger role.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: