Comment by tapoxi

2 days ago

It's telling that Valve uses a user space anti-cheat (VAC) for Counter-Strike 2, but the competitive community overwhelmingly rejects that and ops to use a third-party Windows-only kernel mode anti-cheat (FACEIT).

I think even the "Major" tournaments that are officially sanctioned and sponsored by Valve, though organized by third parties, usually run on FACEIT or similar.

Cheating in CS2 is rampant and VAC2 seems to be just about useless.

FACEIT is significantly more effective.

I mean, people are dumb.

Anti cheats are as much a marketing ploy as they're actual anti cheats. People believe everyone is cheating so it must be true. People believe nobody bypasses the FACEIT anti cheat so it must be true. Neither of those are correct.

Riot revels in this by marketing their anti cheat, but there are always going to be cheaters. And sooner or later we will have vulnerabilities in their kernel spyware. I much rather face a few cheaters here and there (which is not as common as people make it to be on high trust factor).

You think tournament organizers or pro players know the first thing about anti cheats? They buy the marketing just like everybody else.

  • The marketing works because online games get destroyed by cheats. Losing in online games can be full of “feel bad” moments, even without cheaters (network issues, cheesy tactics, balance issues). To think that your opponent won because they outright cheated just makes you wanna quit.

    I’ve seen so many players saying “look you can own my entire pc just please eliminate the cheating.”

    It would be great to see more of a web of trust thing instead of invasive anti cheat. That would make it harder for people to get into the games in the first place though so I don’t know if developers would really want to go that way.

    • The marketing works because of what I said: people are dumb.

      Anyone that's not dumb will know (maybe after the heat of the moment) why they lost, but the vast majority of people will blame anything they can instead. Teammates, lag, the developers, etc. Cheating is merely one of these excuses.

      > I’ve seen so many players saying “look you can own my entire pc just please eliminate the cheating.”

      This entire idea is so dumb it makes my head hurt. You can't eliminate bad actors no matter how hard you try. It's impossible in the real world.

      All these "if only we could prevent X with more surveillance/control" ideas go up in flames as soon as reality hits. Even if a single person bypasses it, we can question everything. Then all we're left with are these surveillance systems that are then converted into pure data exfiltration to sell it all to the highest bidder (assuming they weren't doing this already).

      I applaud Valve for not going down the easy route of creating spyware and selling it as "protection".

    • To me the "web of trust" element frankly seems like the only viable solution. And in fact, its almost here already: https://playsafeid.com/

      I predict that hacker news in particular will dislike using facial recognition technology to allow for permanent ban-hammers, but frankly this neatly solves 95% of the problem in a simple, intuitive way. Frankly, the approach has the capacity to revitalize entire genres, and theres lots of cool stuff you could potentially implement when you can guarantee that one account = one person.

Eh, some employers also have root for your work PC, that’s different from asking to install a rootkit on your personal PC.