8 ms·
Rainbow Six Siege hacked as players get billions of credits and random bans
- butz 10mo agoNice to see anti-cheats working and protecting Linux players from hacks, by preventing them from actually playing the game.
- sylware 10mo ago"kernel anti-cheat" is actually a re-branding of "anti-(non steamdeck)-linux" software, probably to please msft (since sole beneficiary). We all know they are inefficient and weaponized by hackers. You know on linux there is a feature for a process to snoop into another process, that for the same user (non root), can be use for anti-tampering: with a proper "security" team, as all live-service games should have, you can give hell to hackers without a kernel module...
- firtoz 10mo agoHow trivial is it to pretend to be a steam deck?
- Thaxll 10mo agoKernel anti cheat in the client are the strongest form of protection by far, your comment makes no sense, anything userspace is easily spoofed. You can create a driver ( module ) that intercept calls and that is completely invisible to userspace processes. The default security measures on Linux are pretty bad compared to windows, it's not even close. People like to bash windows but they have a way better security model.
- sylware 10mo ago1 - kernel module from anti-cheats are weaponized by hackers. 2 - if I recall properly, that linux feature is a direct mapping of the target user process allowing extreme dynamicity in time, performant, and much more powerfull mechanisms than basic 'calls'. Namely hell for hackers if a live service game has a proper "security" team, all that without a kernel module.
- dijit 10mo agoWhat are you even talking about? The parent is right. I'm quite literally the first person to bash Windows for being a shitty operating system, but the requirement for signed modules puts a massive barrier to entry for cheaters, where Linux can load just about anything. If every system call can lie to you, there's a few things you can do, but it's not many. I know this because I've actually done a lot of due diligence on anti-cheat. One mechanism I attempted to employ was to replay initalisation vectors and determinism of inputs; this means I could replay your session out of band and witness the same outcomes. If there was variation then there's a fault. Except as soon as you introduce floating point numbers there's no more determinism... Oh well. The other was to watch for "impossible" things, but then you need to run full complex physics simulations for every client. If your game requires you to effectively buy an i7-11700k for every user then you'd have to sell your game for a lot more money, and limit how long they can play - nobody wants this. The third option was to score our best players and anyone who performs better than that gets their behaviour tracked. The problem is, coming up with a scoring system that's server side is much harder than you think. GameDevs don't actually like paying a shit load of money for anti-cheat (that also breaks their debugging systems and causes bugs: a wonderful combination)... so if you've got a better way: join the industry and fix it. You'll be a moderately wealthy person.
- sylware 10mo agoWhat are you talking about? 1 - kernel anti-cheats ARE weaponized by hackers. This is not a matter of discussion unless you are into the AI generated HN news conspiracy. 2 - this linux feature should provide (if I recall properly) a very complex and flexible (not limited to "calls"), and performant, set of interactions between a set of anti-cheat processes and the set of game processes. All that as being non-root priviledge (I think you must be have the same effective user id). The actual and real parameter is the level of competence and creativity of the "anti-cheat" team which is a requirement of any "live-service games" with frequent updates. 3 - for FPS games where aiming skill is critical, anti-cheat are close to useless due to "external" AI based aim assist hardware.
- well_ackshually 10mo agoMan, even "Area 51 has aliens" is a better and more backed up conspiracy theory than this. Kernel AC isn't to please MS, nor is it to shit on Linux/Steam Deck. They don't matter. They're inexistent. They're a blip of very vocal users that keep believing that Proton is going to save them from EA making shit games. KACs exist because they want to have higher privileges to not be injected into, closed or otherwise touched by any other process. That's also why a bunch of them have started to ask for Secure Boot, so that they can guarantee at least some chain of trust that ensures you've probably not tampered with your machine. Your Linux example 1/ turns anti cheats into not only something that analyzes what runs on your machine, but actively tries to attack it, which is the textbook definition of malware, but also a gigantic liability should you happen to say, write into word.exe because you fucked up and thought it was a cheat. 2/ turns it into an infinite game of chasing each others with you injecting into cheats, cheats injecting into you, back and forth. In addition, you're running on an actively hostile machine with a hostile user that _wants_ to fuck over your anti cheat. Please do some proper research on the subject.
- sylware 10mo agoA user level anti-tampering software (and more with such linux feature) is not a kernel module which is weaponized by hackers.
- not_a9 10mo ago> We all know they are inefficient and weaponized by hackers. Name an exploit in EAC/BattlEye/Vanguard/FaceIT/whatever other big name anticheat middleware (though Vanguard and FaceIT don’t sell their services I think) that has actually been used for anything. Genshin Impact’s driver got used as a vulnerable driver that one time, yeah. EAC had an exploit to inject your own code into processes, but that quickly got patched (https://blog.back.engineering/10/08/2021/ https://blog.back.engineering/10/08/2021/).
- Aerroon 10mo agoESEA's anticheat was used to mine Bitcoin on the players' computers. They are/were a major competitor of FaceIt. They supposedly had to pay a $1 million settlement over it. So not an exploit, but even worse.
- sylware 10mo agoWell, I read HN. I did stop counting. Unless you beleive in the conspiracy of AI generated news on HN. You are the same type of guys who is going to try to sell 'computer security' as a deliverable, thing which does not exist. Please, stop that.
- cedws 10mo agoGames using Easy AntiCheat can opt in to Linux support. Arc Raiders runs on Linux (but not in VMs) whereas Fortnite does not, because Epic has chosen not to support Linux. Ironic given Tim Sweeney's supposed anti-monopoly stance.
- bhargav 10mo ago> Ironic given Tim Sweeney's supposed anti-monopoly stance. This doesn't really make sense. If you are implying he is FOR monopoly, he would want the game on every possible platform right? He loses money by not having more players playing his game.
- brookst 10mo agoSweeney isn’t anti-monopoly, he’s pro-Sweeney. He sees an opportunity to let others do the work and investment to build platforms, then selectively swoop in to compete once the risk and investment pay off. It’s not a bad business model if he can get the courts on his side: let others spend billions and take risks, then cherry pick the successful platforms and compete with their distribution using a cost basis that doesn’t have those up-front costs and risks.
- michaelt 10mo ago> He sees an opportunity to let others do the work and investment to build platforms, then selectively swoop in to compete once the risk and investment pay off. Sure. Just as long as you agree Google and Apple let others do the work and investment to develop new games, apps and media, then swoop in and demand a cut if the risk and investment pay off.
- Thaxll 10mo agoThis hack has nothing to do with client cheats.
- Aurornis 10mo agoThese changes are occurring in a server backend database. They’re not client side cheats. The people receiving the credits aren’t even the ones initiating the changes. Also many anti-cheat packages do have Linux versions. The primary reason you’re not getting ports for Linux is because companies don’t want to do the port and support all versions of Linux clients they would encounter in the very tiny number of additional installs.
- netbioserror 10mo agoProton is a single build target, and it's just the Windows build target.
- reactordev 10mo agoExactly, this argument wasn’t a good one 10 years ago and it definitely isn’t one now.
- tpxl 10mo agoValve maintains a 'Steam Runtime', which is similar to a docker container, to ensure it's easy to develop games that run on many distributions.
- mschuster91 10mo agoThe problem is kernel level cheats, can't defend against those from pure userland.
- dvh 10mo agoIt's not random bans, the nicknames are words from longer text. It's lyrics from Shaggy - It wasn't me.
- ZeWaka 10mo agoGlobal game messages being used to meme - reminds me of Team Fortress 2 rings.
- s5300 10mo ago[dead]
- Levitz 10mo agoSaw a video earlier today with the lyrics of Billie Jean by Michael Jackson too.
- purkka 10mo agoPer the tweet linked in the article there were also random bans in addition to the ban feed shitposting. https://x.com/KingGeorge/status/2004902566434668686 https://x.com/KingGeorge/status/2004902566434668686
- Modified3019 10mo agoCopy of tweet: >@KingGeorge >Seems like R6 is completely fucked. It’s unreal how bad. >Hackers have done the following. >1. Banned + unbanned thousands of people. >2. Taken over the ban feed can put anything. >3. Gave everyone 2 billion credits + renown. >4. Gave everyone every skin including dev skins. >5:09 AM · Dec 27, 2025
- deleted 10mo ago[deleted]
- vogtb 10mo agoThe line "How could I forget that I had given her an extra key?" comes to mind. Maybe someone left an API key laying around somewhere? Although I could be giving the hackers too much credit...
- Scaevolus 10mo agohttps://x.com/vxunderground/status/2005008887234048091 https://x.com/vxunderground/status/2005008887234048091 Here's the word on the internet streets: - THE FIRST GROUP of individuals exploited a Rainbow 6 Siege service allowing them ban players, modify inventory, etc. These individuals did not touch user data (unsure if they even could). They gifted roughly $339,960,000,000,000 worth of in-game currency to players. Ubisoft will perform a roll back to undo the damages. They're probably annoyed. I cannot go into full details at this time how it was achieved. - A SECOND GROUP of individuals, unrelated to the FIRST GROUP of individuals, exploited a MongoDB instance from Ubisoft, using MongoBleed, which allowed them (in some capacity) to pivot to an internal Git repository. They exfiltrated a large portion of Ubisoft's internal source code. They assert it is data from the 90's - present, including software development kits, multiplayer services, etc. I have medium to high confidence this true. I've confirmed this with multiple parties. - A THIRD GROUP of individuals claim to have compromised Ubisoft and exfiltrated user data by exploiting MongoDB via MongoBleed. This group is trying to extort Ubisoft. They have a name for their extortion group and are active on Telegram. However, I have been unable to determine the validity of their claims. - A FOURTH GROUP of individuals assert the SECOND group of individuals are LYING and state the SECOND GROUP has had access to the Ubisoft internal source code for awhile. However, they state the SECOND GROUP is trying to hide behind the FIRST GROUP to masquerade as them and give them a reason to leak the source code in totality. The FIRST GROUP and FOURTH GROUP is frustrated by this Will the SECOND GROUP leak the source code? Is the SECOND GROUP telling the truth? Did the SECOND GROUP lie and have access to Ubisoft code this whole time? Was it MongoBleed? Will the FIRST GROUP get pinned for this? Who is this mysterious THIRD GROUP? Is this group related to any of the other groups?
- Group_B 10mo agoCan’t help but laugh a bit. Not a great day for Ubisoft. Hopefully this didn’t ruin the holidays for too many employees. That would absolutely suck to get a call in for this.
- adzm 10mo ago> Will the SECOND GROUP leak the source code? Is the SECOND GROUP telling the truth? Did the SECOND GROUP lie and have access to Ubisoft code this whole time? Was it MongoBleed? Will the FIRST GROUP get pinned for this? Who is this mysterious THIRD GROUP? Is this group related to any of the other groups? Find out in the next episode of... Tales from Cyberspace!
- navigate8310 10mo agoIt's a shame this game has to pander to eSports fanatics rendering it into a completely hollowed out soulless experience. From the early days of Operation Chimera to selling half of your stake and IPs to Tencent, Ubisoft has seen it all.
- reactordev 10mo agoUbisoft kept making garbage and sacrificed their IP’s for the sake of keeping the company alive… It was doomed.
- Insanity 10mo ago+1. Can’t believe how they held amazing IPs and then milked them to death while lowering the quality game over game. Whether it’s far cry or assassin’s creed, all the later iterations are worse than the series start.
- chatmasta 10mo agoI’m still bitter at them for canceling XDefiant… it wasn’t a COD killer but it filled a comfortable niche and had potential.
- Insanity 10mo agoOh wow, they cancelled it? I played it for a bit on release. Kinda fun, didn't stick with it, but surprised it's already cancelled so short after release.
- reactordev 10mo ago>”too far away from reaching the results required to enable further significant investment” That’s the statement they said when they shut it down. Ubisoft only had one goal all of 2010s, to turn item shop marketplace micro transactions into their primary business. They failed. They failed because they forgot why they existed. So let’s all make them remember.
- lysace 10mo agoA 9 year old random FPS game. WTF happened to non-shooter games? I am so bored of these FPS variations.
- tyre 10mo agoPlay Hades 2!
- dmbche 10mo agoMaybe check out game awards finalists
- lysace 10mo agoI checked them out. I guess I just miss a time when Falcon 3.0 and https://en.wikipedia.org/wiki/Stunt_Island https://en.wikipedia.org/wiki/Stunt_Island sold really well.
- ThrowawayTestr 10mo agoWe've come a long way in the past 30 years
- lysace 10mo agoYeah, 1000 variations later, the latest Doom/Quake iteration looks great.
- manytimesaway 10mo agoSumming up the entire FPS genre as Doom-like is unfair and discredits you more than anything else. Heck, even Doom and Quake are wildly different. FPS haven't been under the spotlights for a while, these days it's mostly MOBAs.
- dmbche 10mo agoI do like Dusk (and most New Blood releases) if that's what you mean
- 476392647282 10mo ago[dead]
- mananaysiempre 10mo agoStreamer[1,2], formerly pro gamer[3]. “Creator” here is a clipping of “content creator”, an overtly ad-industry term that makes me a little sad(der) each time I hear it but is unfortunately universal nowadays, especially for people making videos (as we don’t really have another umbrella word for that). [1] https://www.youtube.com/channel/UCsHlla-bq0C_2OtEy8s2_Sg https://www.youtube.com/channel/UCsHlla-bq0C_2OtEy8s2_Sg [2] https://www.twitch.tv/kinggeorge https://www.twitch.tv/kinggeorge [3] https://liquipedia.net/rainbowsix/KingGeorge https://liquipedia.net/rainbowsix/KingGeorge
- leetbulb 10mo ago"Prominent" being sub 1000 views on YouTube?
- sammy2255 10mo ago[flagged]
- jay_kyburz 10mo agoI wonder if they could push out an update. That would be super scary.
- jacquesm 10mo agoThat depends, they might just fix some bugs and call it a day. There would have to be a trial of the pyx for sure to figure out what got changed and by who.
- petterroea 10mo agoHard to have sympathy for Ubisoft the company as they are regularly used as an example of the most anti-consumer practices out there. But the whole situation is a mess, and if anything, it is probably the consumers that will end up suffering the most for this.
- pjmlp 10mo agoThis is why security actually matters in game development.
- miohtama 10mo agoIt is Mongo https://x.com/vxunderground/status/2005008887234048091?s=20 https://x.com/vxunderground/status/2005008887234048091?s=20
- runtimepanic 10mo agoThis is the nightmare scenario for live-service games: once the integrity of progression and bans is compromised, trust evaporates fast. Rolling back “billions of credits” is easy compared to undoing random bans.
- Surac 10mo agoUbislop, Ubislop never changes. Never trust a Ubislop
- prmoustache 10mo ago"That wording has been met with heavy backlash from players, many of whom believe Ubisoft is attempting to downplay the severity of the situation." Come on it is just a game (◔_◔)
- luxuryballs 10mo agoRainbowhood
- mlacks 10mo agoIt appears to be from the mongo db exploit. Sort of like Heartbleed from a few years ago. https://github.com/joe-desimone/mongobleed https://github.com/joe-desimone/mongobleed https://beta.shodan.io/host/212.104.194.153 https://beta.shodan.io/host/212.104.194.153
- MattDaEskimo 10mo agoMy heart goes out to the devs forced to return to work to solve these issues. Numerous groups claiming numerous exploits - mostly MongoBleed. One has to wonder: why didn't anyone anticipate this happening? Surely the moment this exploit was discovered the team would've locked it down immediately?
- computerfan494 10mo agoIf this is a result of that vulnerability, Ubisoft only have themselves to blame. Our support contacts ensured that we knew about the vulnerability as early as possible and gave us a clear guide to remediation for our self-hosted clusters. Our Atlas clusters were automatically patched before this was announced publicly. You'd have to be running your database open to the internet (already a mistake), ignore the advice to simply turn off zlib, and ignore the fixed versions that have been available for over a week. If you're going to be in the business of running your own critical infrastructure, you better have spent a lot of effort planning for these situations, because they are inevitable. Otherwise, it's easier to just pay a vendor to do it for you.
- rldjbpin 10mo agopoured way too many hours into this game long back before it became too painful to play. this almost made me go back and check on the madness but unfortunately the servers are taken offline. while i don't agree with how devs and the publisher works on community feedback, it is still miles better than what EA does. not that it is a high bar to clear.
- kjkjadksj 10mo agoI remember when gta5 was getting hacked left and right when it was released. People would just hand you millions in in game currency and you’d get to unlock all the hypercars and military vehicles. Really made the game fun removing the grind and pay to win and allowing everyone to do anything. And it gave people a chance if someone was dominating a lobby with something broken or overpowered to actually fight back fire with fire.
- SAMUKE34 10mo ago[dead]