I did a lot of cheat development and always read the related forums.
Let me tell you that kernel anti-cheats are the funniest and ugliest pieces of software out there.
Almost ALL exhibit rootkit behaviour. Capture all OS events, dig through system and user directories, list all processes, fetch DNS and browser histories, block certain system calls, and more just to name a few. But hey! Their software (including drivers) are signed by Microsoft, so that’s alright :))
Funny part is that all those drivers are created by no other than ex-community members, under no advisory from system specialists or security experts. So guess what? Security vulnerabilities all around. Pretty much all their drivers are wide open and unsecure.
Nice fun having persistent, kernel-level, system-trusted exploits auto-installed on your system!
Oh, almost forgot, BattlEye has the ability to download custom bytecode from their servers and execute it. RCE baked right in. Good stuff.
So your frustration is more than reasonable..
EDIT: I will try to find the posts pointing to all vulns that I mentioned, and cite them.
Almost ALL exhibit rootkit behaviour. Capture all OS events, dig through system and user directories, list all processes, fetch DNS and browser histories, block certain system calls, and more just to name a few. But hey! Their software (including drivers) are signed by Microsoft, so that’s alright :))
Funny part is that all those drivers are created by no other than ex-community members, under no advisory from system specialists or security experts. So guess what? Security vulnerabilities all around. Pretty much all their drivers are wide open and unsecure.
Nice fun having persistent, kernel-level, system-trusted exploits auto-installed on your system!
Oh, almost forgot, BattlEye has the ability to download custom bytecode from their servers and execute it. RCE baked right in. Good stuff.
So your frustration is more than reasonable..
EDIT: I will try to find the posts pointing to all vulns that I mentioned, and cite them.