[2020] A Message About Vanguard From Our Security & Privacy Teams

Originally posted by Shinwrathen

I haven't installed the game due to concerns over the anti-cheat. (And it doesn't help that it won't run on a vm)

I have two questions:

1) Are you planning to create an option to uninstall it when one installs Valorant? (Talking about Vanguard, I think since it only supports one game it should go away when you remove said game)

2) I've had a shitty experience with Halo Master Chief coming with EAC without letting me know in advance during download or during installation. Does your download / install process make it clear to the players that Valorant is bundled with extra software that also has a kernel driver? As a fellow gamer I imagine you also don't miss the good 'ol StarForce days.

Thanks for the time you took reading and possibly replying to someone that isn't a customer.

Originally posted by xRobert1016x

Hey Arkem, would I be banned for injecting cheats into another game while not playing valorant or having it running? I play on HvH servers in csgo.

Originally posted by Shinwrathen

Thank you.

This is something I've been saying for a while here and there and I know a handful of people also echoed this and agreed so it would be nice to have the answer a little more public, but I won't complain either way

Stay safe and have a nice weekend.

Originally posted by PM_ME_UR_BCUPS

In a largely different vein from the other questions I've seen -- for those of us who are glad that Riot is taking anticheat seriously, when can we hope to see this implemented with League as well?

Originally posted by mvujas

This post is a great place with ton of valuable information for anyone looking for facts and arguments. Unfortunately, I fear many people complaining aren't going to listen, I feal like most of them complain for sake of complaining and somebody just manipulates them for their own good. What insults me so much is that everyone keep repeating that the software runs on kernel ring, yet I bet easily more than 90% of those don't have clue what kernel even means...

The only way to shut everyone would probably be to publish the code, yet it would highly compromise the security of the software and I guess would go against the rules of company since Riot doesn't seem to advocate opensource code, correct me if I am wrong.

At last both arguments concerning security and privacy could be used for any software running in the forementioned mode and I have yet to see so much complaining about anything like the last few days about Valorant...

EDIT: text formated to be easier to read

Originally posted by Newfypuppie

How many wrinkles does your brain have

https://i.imgur.com/XPZhgGW.png

Originally posted by [deleted]

[removed]

Originally posted by d4rkph03n1x

Hey, I recently sent a message in discord to a Riot member regarding the use of vulnerabilities that apply to all video games on a network/hardware level, which includes 1. the parsing of network data in order to get game data, 2. the usage of HID devices in order to simulate mouse movements, and 3. The combined use of those two in order to parse network data and create a HID controlled aimbot that is fully hardware-sided and done 100% externally.

Theoretically, you could just use OBS to "stream" a game to another computeror application, and create a low-latency aimbot that uses a PID loop with the error being the distance from the center of the screen/crosshair to the pixels that make up the image of a head. You then could use a raspberry pi, usb rubber ducky, or any other badusb/programmable HID device (there are thousands) and create an aimbot that goes off of the distance between the head and the crosshair.

If I created a proof of concept of the screengrab-based or a network-based method, and sent that in, would I be able to recieve any of the bounty, or would that not be in any of the bounty sections due to being completely external and 99% impossible to detect?

Originally posted by alpha_berchermuesli

i know you are not here to talk harassment, but i was wondering how you treat verbal abuse, harassment and other, uncalled and unnecessary, toxic behaviour. Is the option a placebo, or are there consequences to such behavour/reporting such players?

Originally posted by [deleted]

[deleted]

Originally posted by Cr4gor

Vanguard seems to make it impossible to play Valorant on linux. It does not work on vine or a VM because of the anti cheat. Are you just going to neglect linux gamers or are you going to make the game/anticheat run natively on linux at a later time?

Originally posted by [deleted]

[deleted]

Originally posted by BertDeathStare

And props to you guys for the communication, this thread turned into a bit of a Q&A. A bit off topic but the games the devs did against Shroud and his team were really fun to watch. The devs showed there's a high skill ceiling and now I'm already excited for future tournaments. It'd be cool if you guys did more of that, devs vs players. That's pretty rare I think, that the devs of a game can go up against really skilled players and slap them up and down. Do any of those devs happen to stream? I kinda wanna see their perspective and hear the voice comms between them :P

Originally posted by CthulhuLies

I was talking with someone and they were very aggressive about the fact that you haven't named the auditors auditing Vanguard. Is this information you can share?

Originally posted by Same--Advice

Ultimately, who owns the product that you're developping. You? Riot? or Tencent?

What would happen when who ever own this product decides on some changes.

Originally posted by EnglishDentist

Why not ? :c

Originally posted by Varonth

Your bounty program is nice, but how exactly are you going to ensure that everyone who has Vanguard on their computer has the latest version?

Does it auto-update? Is it just manual updates?

Both don't sound too great. I can understand an anti-virus program asking once in a while to restart my computer for an update it loaded in the background. But that does not sound like something an anti-cheat system for a computer game should do.

But manual, for example when the user starts the game sounds not so great either. Imagine a game like WoW asking to restart your computer after updating.

And worse than that, what about someone who does not actively play at the moment. Or worse, uninstalled the game which still keeps Vanguard installed. Is it just sitting on a users PC, unpatched, for months?

Nowhere does it mention how you plan on distributing security patches for Vanguard, and that should be mentioned somewhere shouldn't it?

Also tagging /u/RiotArkem as I don't know who of you is responsible for this type of problem.

Originally posted by LowSeason3

couldn't this also mean that riot has worse programmers that allow so many vulnerabilities to slip through?

Originally posted by Panaxzz

I don't wanna sound annoying as I have requested this many times but I'll say it anyway. Sorry in advance if you've seen this point repeated before:

Hi, I'm a DevOps Server Software Administrator working mainly remotely. My system runs Arch. I play games in Virtual Machines with mounting a graphic card to that specific Virtual Machine. I currently can't play Valorant due to this. Are there plans for a Linux version of the game or being able to play it in a Virtual Machine? If no can I please have a reason why? Thanks for reading my question.

Originally posted by raulgbcr

I don't really wanna push or throw any shit over this, but could you give us an aproximate ETA of when this feature will be added?

Also, I know its probably out of question, but any plan on supporting linux players with vanguard? Currently wine does not support most of the kernel driver features, so probably will need some kind of reimplementation or native support for linux in any way, I know linux players would probably represent 1% or less of your player base, but we do still exist...

Originally posted by raulgbcr

I don't really wanna push or throw any shit over this, but could you give us an aproximate ETA of when this feature will be added?

Also, I know its probably out of question, but any plan on supporting linux players with vanguard? Currently wine does not support most of the kernel driver features, so probably will need some kind of reimplementation or native support for linux in any way, I know linux players would probably represent 1% or less of your player base, but we do still exist...

Originally posted by raulgbcr

Wow that was quick, thanks for letting me know! Seems to be working pretty fine, thanks for that <3