3 ms·
The original game code, as well as automatically installed updates can be vetted and compared to other installations. Any malware injected into either of them r
by mike_hock 7y ago
The original game code, as well as automatically installed updates can be vetted and compared to other installations. Any malware injected into either of them risks being exposed over time.
This allows the server to execute arbitrary, ephemeral code fragments on any client at any time, with no trace. If the server is ever compromised, so are all clients, instantly.
This is absolutely insane from a security POV. Just because I gave you a program once that you're using doesn't mean that you want to give me an SSH login to your machine.
- cortesoft 7y agoWhat is to stop them from sending an update only to you? Followed by an update that deletes that code? Or an update that allows them to run arbitrary code sent from a server? I think you overestimate the ability for this to be detected. These aren't open source.
- smileybarry 7y agoSome games -- recently Overwatch -- send hotfixes as live hotpatches. Those couldn't be scrutinized by anyone except the developer until they're included in the next formal patch.
- jcranmer 7y agoYou say that like people aren't capable of converting the current memory space back into an executable.
- cortesoft 7y agoWhich also applies to the code the anti-cheat stuff is having you run. The point is they have a mechanism to download and run code without you explicitly validating the code. That is happening with or without this anti-cheat stuff, so what is the difference?
- smileybarry 7y agoOf course you can dump the current executable from memory (with varying effort depending on anti-tamper tech), but the point is that you can't examine them ahead of time. They're pulled & applied right before a match starts and the relevant code is used immediately.