frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection

https://s4dbrd.github.io/posts/how-kernel-anti-cheats-work/
45•davikr•3h ago

Comments

Retr0id•1h ago
This got me wondering how easy it'd be to automate discovery of BYOVD vulns with LLMs (both offensively and defensively)
metalcrow•1h ago
>TPM-based measured boot, combined with UEFI Secure Boot, can generate a cryptographically signed attestation ... This is not a complete solution (a sufficiently sophisticated attacker can potentially manipulate attestation)

I was not aware that attackers could potentially manipulate attestation! How could that be done? That would seemingly defeat the point of remote attestation.

gruez•57m ago
The comms between the motherboard and the TPM chip isn't secured, so an attacker can just do a MITM attack and substitute in the correct values.
metalcrow•44m ago
That's fair, although aren't most TPMs nowadays fTPMs? No interceptable communication that way.
Retr0id•31m ago
Until they require fTPMs, an attacker can just choose to use a regular TPM.

A more sophisticated attacker could plausibly extract key material from the TPM itself via sidechannels, and sign their own attestations.

edoceo•13m ago
Can a TPM be faked in a QEMU VM?
carefree-bob•11m ago
Yes! https://github.com/stefanberger/swtpm
invokestatic•10m ago
Technically yes, but it would produce an untrusted remote attestation signature (quote). This is roughly equivalent to using TLS with a self-signed certificate — it’s not trusted by anyone else. TPMs have a signing key that’s endorsed by the TPM vendor’s CA.
kay_o•7m ago
We don't allow games to run in virtual machines and require TPM. Check TPM EK signing up to an approved manufacturer.

It is not "fake", a software TPM is real TPM but not accepted/approved by anticheat due to inability to prove its provenance

(Disclosure: I am not on the team that works on Vanguard, I do not make these decisions, I personally would like to play on my framework laptop)

halayli•7m ago
That doesn't sound accurate. The T in TPM stands for trust, the whole standard is about verifying and establishing trust between entities. The standard is designed with the assumption that anyone can bring in their scope and probe the ports. This is one of several reasons why the standard defines endorsement keys(EK).
eddythompson80•1h ago
While I’m not really a gamer, I do think the conundrum of online games cheating is an interesting technical problem because I honestly can’t think of a “good” solution. The general simplistic answer from those who never had to design such a game or a system of “do everything on the server” is laughably bad.
abofh•22m ago
I think it's somewhere between halting and turing - given infinite resources it's likely solvable, but lacking that it's just narrowing bounds
hakkoru•20m ago
I think from a purely technical viewpoint, cheaters will always have the advantage since they control the machine the game and anti-cheat is running on. Anti-cheat just has to keep the barrier high enough so regular players don't think the game is infested with cheaters.
akersten•15m ago
> Anti-cheat just has to keep the barrier high enough so regular players don't think the game is infested with cheaters.

And even that's the (relatively) straightforward part. The hard part is doing this without injuring the kernel enough that the only sensible solution for the security conscious is a separate PC for gaming.

eddythompson80•3m ago
I agree, but that’s precisely the interesting ‘technical’ problem. Like bitcoins “proof of work” in 2011 (it took me few years to comprehend) was an eye opening moment for me. While I do believe that it firmly failed to achieve its lofty goals, the idea of “proof of work” was a really captivating and interring technical idea. Can a video game client have a similar zero-trust proof of their authenticity? I personally can’t think of one. I can’t think of a way to have remote random agents (authenticates or not) to proof they are not cheating in a “game”, and like you, I suspect it’s not really possible. But what does that mean?

I grew up with star trek and star wars wondering what a “I’ll transfer 20 units to you” meant. Bitcoin was an eye opener in the idea of “maybe this is possible” to me. But it shortly became true to me that it’s not the case. There is no way still for random agents to prove they are not malicious. It’s easier in a network within the confines of Bitcoin network. But maybe I’m not smart enough to come up with a more generalized concept. After all, I was one of the people who read the initial bitcoin white paper on HN and didn’t understand it back then and dismissed it.

karmakaze•14m ago
Do what Netflix did and run servers at ISPs (or at their providers or Cloudflare points).

It's kind of weird that we still don't have distributed computing infrastructure. Maybe that will be another thing where agents can run near the data their crunching on generic compute nodes.

Retr0id•3m ago
What does that have to do with solving the problem?
istillcantcode•11m ago
I could have sworn online gambling people fixed this years ago with just wifi. I thought I remembered reading a comment on here about the online gambling for kids no cheating people not talking to the online gambling for adults no cheating people.
matheusmoreira•4m ago
Never forget the risks of trusting game companies with this sort of access to your machine.

https://www.vice.com/en/article/fs-labs-flight-simulator-pas...

Company decides to "catch pirates" as though it was police. Ships a browser stealer to consumers and exfiltrates data via unencrypted channels.

https://old.reddit.com/r/Asmongold/comments/1cibw9r/valorant...

https://www.unknowncheats.me/forum/anti-cheat-bypass/634974-...

Covertly screenshots your screen and sends the image to their servers.

https://www.theregister.com/2016/09/23/capcom_street_fighter...

https://twitter.com/TheWack0lian/status/779397840762245124

https://fuzzysecurity.com/tutorials/28.html

https://github.com/FuzzySecurity/Capcom-Rootkit

Yes, a literal privilege escalation as a service "anticheat" driver.

Trusting these companies is insane.

Every game should be sandboxed and virtualized to the fullest possible extent so that they can access nothing on the real system and ideally not even be able to touch each other. We really don't need kernel level anticheat complaining about virtualization.

Ageless Linux – Software for humans of indeterminate age

https://agelesslinux.org/
381•nateb2022•5h ago•246 comments

How Kernel Anti-Cheats Work: A Deep Dive into Modern Game Protection

https://s4dbrd.github.io/posts/how-kernel-anti-cheats-work/
48•davikr•3h ago•19 comments

Airbus is preparing two uncrewed combat aircraft

https://www.airbus.com/en/newsroom/press-releases/2026-03-airbus-is-preparing-two-uncrewed-combat...
78•phasnox•4h ago•39 comments

Tree Search Distillation for Language Models Using PPO

https://ayushtambde.com/blog/tree-search-distillation-for-language-models-using-ppo/
18•at2005•2h ago•0 comments

Treasure hunter freed from jail after refusing to turn over shipwreck gold

https://www.bbc.com/news/articles/cg4g7kn99q3o
8•tartoran•31m ago•1 comments

Show HN: Han – A Korean programming language written in Rust

https://github.com/xodn348/han
112•xodn348•5h ago•74 comments

SBCL Fibers – Lightweight Cooperative Threads

https://atgreen.github.io/repl-yell/posts/sbcl-fibers/
39•anonzzzies•3h ago•3 comments

Bumblebee queens breathe underwater to survive drowning

https://www.smithsonianmag.com/science-nature/bumblebee-queens-breathe-underwater-to-survive-drow...
72•1659447091•6h ago•16 comments

From Braun T3 to Apple's iPod

https://drams.framer.website/journal/from-braun-t3-to-apples-ipod
17•corpano•4d ago•5 comments

Fedora 44 on the Raspberry Pi 5

https://nullr0ute.com/2026/03/fedora-44-on-the-raspberry-pi-5/
70•jandeboevrie•7h ago•21 comments

Launching the Claude Partner Network

https://www.anthropic.com/news/claude-partner-network
93•gmays•5h ago•38 comments

Hazardous substances found in all headphones tested by ToxFREE project

https://arnika.org/en/news/the-sound-of-contamination-all-analysed-headphones-on-the-central-euro...
91•microflash•4h ago•58 comments

Mathematics Distillation Challenge – Equational Theories

https://terrytao.wordpress.com/2026/03/13/mathematics-distillation-challenge-equational-theories/
10•picafrost•17h ago•0 comments

Learning Creative Coding

https://stigmollerhansen.dk/resume/learning-creative-coding/
50•ammerfest•5h ago•16 comments

Show HN: GrobPaint: Somewhere Between MS Paint and Paint.net

https://github.com/groverburger/grobpaint
23•__grob•4h ago•1 comments

Allow me to get to know you, mistakes and all

https://sebi.io/posts/2026-03-14-allow-me-to-get-to-know-you-mistakes-and-all/
25•sebi_io•5h ago•1 comments

Marketing for Founders

https://github.com/EdoStra/Marketing-for-Founders
125•jimsojim•7h ago•47 comments

Library of Short Stories

https://www.libraryofshortstories.com/
46•debo_•7h ago•1 comments

An ode to bzip

https://purplesyringa.moe/blog/an-ode-to-bzip/
102•signa11•11h ago•57 comments

A Recursive Algorithm to Render Signed Distance Fields

https://pointersgonewild.com/2026-03-06-a-recursive-algorithm-to-render-signed-distance-fields/
59•surprisetalk•3d ago•4 comments

Show HN: Ichinichi – One note per day, E2E encrypted, local-first

80•katspaugh•8h ago•27 comments

Baochip-1x: What it is, why I'm doing it now and how it came about

https://www.crowdsupply.com/baochip/dabao/updates/what-it-is-why-im-doing-it-now-and-how-it-came-...
280•timhh•3d ago•55 comments

Montana passes Right to Compute act (2025)

https://www.westernmt.news/2025/04/21/montana-leads-the-nation-with-groundbreaking-right-to-compu...
249•bilsbie•13h ago•211 comments

Changes to OpenTTD Distribution on Steam

https://www.openttd.org/news/2026/03/14/steam-changes
130•canpan•5h ago•82 comments

Postgres with Builtin File Systems

https://db9.ai/
42•ngaut•6h ago•11 comments

Refinement Modeling and Verification of RISC-V Assembly Using Knuckledragger

https://www.philipzucker.com/refine_assembly/
3•matt_d•3d ago•0 comments

Making Sense of the DXY

https://dm13450.github.io/2026/03/10/Making-Sense-of-the-DXY.html
5•dm13450•2d ago•2 comments

Python: The Optimization Ladder

https://cemrehancavdar.com/2026/03/10/optimization-ladder/
281•Twirrim•4d ago•101 comments

1M context is now generally available for Opus 4.6 and Sonnet 4.6

https://claude.com/blog/1m-context-ga
1126•meetpateltech•1d ago•481 comments

Starlink militarization and its impact on global strategic stability (2023)

https://interpret.csis.org/translations/starlink-militarization-and-its-impact-on-global-strategi...
135•msuniverse2026•18h ago•177 comments