The trick is to hire security experts at game companies. CrowdStrike was just a stupid rookie mistake due to missing testing for a patch, which caused a huge outage. I'd argue that large game companies likely have better QA testing than a security company anyway.

Just to finish the conversation, here's an article I wrote on the subject: medium.com/@Pheelbert/k...

If you disagree and feel like it, please reach out on Discord.

I don't mind having a deeper chat about it somewhere else like Discord. Just annoyed by the format. Never liked Twitter much. I've been in security for about 8 years and now specifically in games. I'm "pheelbert" on Discord if you want to chat!

300 word limit is too little to have this conversation honestly. Have a nice day. Probably the first and last time I use this app.

I personally work in anti-cheat and I totally get that there are many ways to detect cheating. In the current windows ecosystem, using kernel access does increase the bar for cheat development, as shown in that study, decreases cheating and makes it more expensive. It's just a fact.

It's true that random game developers shouldn't be developing KLAC. That kind of development needs to be made by accountable experts. This is mostly only needed for competitive shooters since aimbot and ESP are more difficult to deal with than other types of cheats such as god mode or whatever.

Expensive in terms of resources, which also means cost. It's all a trade-off. Right now, KLAC is the cheapest most effective solution until Windows changes their OS dramatically.

You're saying to remove kernel access. I provided a study showing that those most intrusive ACs are the best and most expensive to cheat against. Of course effort should be spent protecting from all avenues possible. Most often than not server side solutions can be expensive and introduce lag.

If they'd remove their Anti-Cheat solution their games would be riddled with cheap cheats and cheaters. A study was made which shows how effective these solutions are to deter cheaters and increase the resources needed to develop cheats: www.linkedin.com/posts/mirage...

If a company wants access to your data or system, they don’t need kernel-level access to get it. By installing their software, you’ve already placed a significant level of trust in these companies. So why draw the line at kernel access if it helps ensure fair play in competitive gaming?