2 ms·
Well it’s not that it “detects” it but most game AC (Valgrind or BattleEye) install at the ring0 layer (kernel). So on VMs, that doesn’t exist (from what I unde
by xyst 3y ago
Well it’s not that it “detects” it but most game AC (Valgrind or BattleEye) install at the ring0 layer (kernel). So on VMs, that doesn’t exist (from what I understand). But with this it should be enough to fool it into thinking it’s installed in the right space.
- amarshall 3y ago> So on VMs, [ring0 layer (the kernel)] doesn’t exist (from what I understand) The kernel still exists in a VM. The “dedicated kernel” bit of Kata distinguishes it from typical containers, not from VMs. Kata is an abstraction atop existing hypervisors that are themselves just an abstraction over KVM. There’s nothing new here w.r.t. VM detection evasion. > fool it into thinking it’s installed in the right space Most VM detection is about observing devices, drivers, timings, or other side-channel type data that is often only seen in a VM.