not_a9

Are the other Zero IT Lab products like their code virtualizer of similar quality to Theia? My only exposure has been that one RE//verse presentation and shitposts on UC.

While the page decryption trick should work in Wine just fine (ZeroIT Lab Theia does that too, right?), I don’t remember if Wine provides workingset info like Windows.

EAC is a kernel mode anti-cheat on Windows, though?

And given the whining on UC it seems to be fairly effective.

Wine doesn't provide every userspace facility Windows does.

Do humans often repeat JSON spewed by integrations? It’s still very much a LLM.

Given 5.6 and K3 I’m sure the window will be extended again. Have to maintain being somewhere on the frontier.

Shame Fable is completely useless for me due to security classifiers.

They’d need to either poach folks from other firms or go for a third party solution.

Cursed timeline: Valve pays Epic for good EAC build on CS2 + whatever encryption solution they have for Fortnite executable, 99.9% P2Cs disappear day 1

https://github.com/vtil-project/VTIL-Core

https://github.com/can1357/selene

no more cancerous giant Electron app to move a few sliders and set an RGB hex code

That will also ship vulnerable drivers.

Presumably for much the same reason glibc has all the heap protections?

Interesting exercise. Why does 1/1 matching to original asm matter, though? Maintaining same timing as original game?

There’s also fun stuff like VEH hooking and SLAT hooking, though SLAT hooks are not very useful in this case.

kernel level spyware

What does it spy on? I can only assume you’ve fully devirtualized and reversed Easy Anti-Cheat to be making such statements

full access to your operating system

Man Epic Games must be cooking if they can poke at VTL1

The slop engine can drive IDA just fine. Does hitch a bit on obfuscated code, but with some poking it does fine there too.

Lolzteam et al still exist. Buying a Steam account is one click or so.

OK. What if I want to mod my singleplayer game? Or, God forbid, make mods for it?

for people who want to play PC games with a console-like experience, without any hassles of manual setup and tweaking that the hacker crowd normally are into.

Until they want to play Fortnite/Roblox/whatever else.

Steam is in the unique position to create a kernel anti-cheat

Valve has a long-term policy of being utter trash at game security.

I know that's not popular. But they are the only ones with the install base AND ability to pull it off in a such a fashion that wouldn't be so god-awful.

Epic Games does fine (though they did it by purchasing an anticheat startup).

EDIT: Oh, you're talking about making an anti-cheat focused Linux kernel build? Meh, still would not trust Valve on that front given their long-standing policy of not giving a shit.

Maybe some KVM patching to use SLAT for breakpoints/watchpoints would fit your bill? Not sure.

This does not fit DRM/anticheat threat model anyway.

Maybe kinda sorta https://github.com/momo5502/sogen? It can even virtualize Modern Warfare 2 these days.

The actual presentation: https://www.youtube.com/watch?v=3LtwqJM3Qjg.

An interesting look at what modern code obfuscation looks like, the example used being Riot Vanguard's kernel mode component.

They include a fun follow-up with a stronger obfuscator: https://www.youtube.com/watch?v=3LtwqJM3Qjg

You can still hit guardrails with this enabled for your account. Had a silly moment a day or so ago when Claude Code hit the guardrail after a web search (presumably because the websearch contained badbad anticheat stuff like https://github.com/0avx/0avx.github.io/blob/main/article-3.m...). Codex with the ID verification has no qualms like this.

only ppl using AI are shops with clueless ppl getting flooded in nonsense.

Are Hex-Rays and Vector35 clueless?

There is undoubtedly AI-written code in the Linux kernel now

You can grep commit logs by “Assisted-By” these days and there sure is a whole bunch of LLMs.

Visual Studio and Visual Studio Code are different beasts.

Either everyone on Earth who’s working on this has a skill issue (which is probably hubris?) or there’s not enough differing humanized enough aimbot from human aim (note: Valve manages to screw up even here, with cheaters in Premier basically rage aimbotting these days IIRC)

In addition, there’s not much these things can do against subtler stuff like ESP.

I’m interested in finding out how attack-defense style CTFs are affected by slopping. ENOWARS skorbor will probably significantly differ from the last time around.

Games very much are using server-side statistics analysis for cheat detection. Valve made a presentation about it and Epic has an API for feeding game state data to ML anticheat for aimbot detection (game-specific and in addition to their existing anticheat measures)

It’s just that it doesn’t work.