3 ms·
> They expose a kernel API to allow games to verify the state of the system And that API has root access... thus it's a rootkit.
by bigstrat2003 2y ago
> They expose a kernel API to allow games to verify the state of the system
And that API has root access... thus it's a rootkit.
- tapoxi 2y agoThe API doesn't provide root access, it's typically a simple "is this game running in a secure environment" read API. I really hate "it's a rootkit!" posts like this because it diminishes the severity of actual rootkits.
- bigstrat2003 2y agoCan you please clarify how an API which runs in the kernel does not have root access? Because I don't believe that's possible, but perhaps I'm wrong.
- AlotOfReading 2y agoThat's the promise of eBPF.
- coretx 2y agoI'm already counting down the days for eBPF to blow up in our face. But admittedly, it's the cheapest way of gaining more capabilities and privileges than you need, thus it's here to stay.
- odo1242 2y agoThe API itself has root access, but does not give user space root access, is what I think the commenter is trying to say.
- brokenmachine 2y agoHow do you think it is able to tell if the game is "running in a secure environment" without having root access itself?