4 ms·
A quick reminder - this is the same game which had a ring-0 anti-cheat system installed and run with the game. They stepped it back a bit after the outcry (and
by falcolas 6y ago
A quick reminder - this is the same game which had a ring-0 anti-cheat system installed and run with the game. They stepped it back a bit after the outcry (and install on people's system), but IIRC it is still installed and run if you play Doom Eternal multi-player.
So, it's entirely conceivable that this very "covered" data was collected and pushed up to their systems as a part of their "anti-cheat" detection, either from a HD sweep or from in-memory data in other applications (like the browser).
- chrisseaton 6y agoI don't understand - how do they escape from user-space to ring zero?
- falcolas 6y agoWhen it's installed, via a ubiquitous UAC dialog. It runs as a system kernel extension.
- chrisseaton 6y agoOh right - can you not install it with only user permissions? Why does it need administrator privileges to be installed? Just for this escalation?
- falcolas 6y agoThe installer does not allow modification to the privileges it gets by the user. You can install it or not. If not, you’ll consequently be locked out of all or part of the game it’s associated with.
- dcow 6y agoWhen you click “allow” when its installer (or originally its store’s installer) asks for administrative privileges.
- deleted 6y ago[deleted]
- Kuinox 6y agoThis is not something new, I don't know why people now specifically target this one game. Easy Anti Cheat, BattleEye and Vanguard are ring 0 anti cheats.
- falcolas 6y agoThe HN post is about overreaches in Doom Eternal’s privacy policy. This is about how that privacy policy could matter in terms of data collected by Doom Eternal’s anti-cheat mechanisms. EDIT: Also, not being new doesn’t make it right, moral, or even desired.
- Kuinox 6y agoThis is well known that Anti Cheat behavior is the same as a rootkit. They do memory scan, Hard Drive scan, and send suspect files to home server.
- gentleman11 6y agoDo they really send your files to their servers?
- Kuinox 6y agoIf the local agent found it suspicious, yes. https://www.reddit.com/r/arma/comments/2750n0/battleye_is_sending_files_from_your_hard_drive_to/ https://www.reddit.com/r/arma/comments/2750n0/battleye_is_se... Also read the comments, they are really interesting. Especially the Gabe quote.