almost 4 years ago - /u/0xNemi - Direct link

While we normally don't plan on documenting changes to Vanguard, our Anti-Cheat system for VALORANT, on a frequent basis, this new update to Vanguard adds a new visual component that will give you, the player, more visibility and control over it. This post serves to provide some context.

 

Starting today, Vanguard will start showing a system tray icon

(after a reboot) while it's running. From there, you'll be able to turn off Vanguard at any time. Turning off Vanguard puts your machine in an untrusted mode and will prevent you from playing VALORANT until you reboot. If you want to keep Vanguard off indefinitely until you play VALORANT (e.g. persisting across multiple reboot sessions), you'll be able to do so more easily now by uninstalling it from the handy dandy system tray
. Vanguard will automatically be reinstalled when you launch VALORANT. If you dislike the new system tray icon, you'll be able to disable (or re-enable) it at any time by going into your Windows Notification Area.

 

Vanguard may block certain incompatible or vulnerable software from running on your machine. If this happens, you'll see a notification like this

pop up. Clicking on the notification
will give you more information on what exactly was blocked. You're able to opt-out of this at any time by following the instructions in the previous paragraph.

 

Frequently Asked Questions (and Answers)

 

1. Why did Vanguard block my favorite tool, ?

We're trying very hard to minimize the amount of software we block using Vanguard. Most players will never run into such a scenario. Vanguard will always notify you if it blocks or modifies anything on your system. We believe in transparency.

 

For the folks that do get a notification indicating that something was blocked, 9 times out of 10, the particular software has a known vulnerability or is being exploited in the wild. Cheaters (and malware) typically use vulnerable drivers to load their code in the kernel and attack the operating system. By protecting against these attacks, Vanguard will be able to provide better competitive integrity and a more secure environment for all players. You can self diagnose whether or not your particular piece of software is vulnerable by checking a CVE database (basically a list of known vulnerabilities for software) and searching for your vendor or software name.

 

Ultimately, you get to choose what software you run on your computer. You can uninstall or stop Vanguard to allow your software to work, but that will have the side effect of not allowing VALORANT to work until you reboot.

 

2. But, Riot, why are you doing this if there’s already cheats out there?

The purpose of Vanguard is to make it difficult for all but the most determined to cheat, while also giving us the best chance to detect the cheats that do work. We’re not going to be able to prevent all cheating completely, but our intention is to raise the barrier to entry so that cheating isn’t a common occurrence in VALORANT.

 

Our most recent set of changes help increase the bar that cheaters need to operate in.

 

For those that are willing to solder a computer part from Siberia to cheat, we’re still going to be able to remove them from our ecosystem by leveraging other game systems.

 

3. How come other games don’t make me jump through all these hoops? Why do I have to restart my computer to play VALORANT when I disable Vanguard?

We take competitive integrity seriously. We want to operate at the highest possible standard for our players so that they never have to question whether or not they lost to a cheater. In order to do that, we’re going to operate at the cutting edge for anti-cheat on VALORANT.

 

4. Is Vanguard safe to use on my computer?

Yes, but I’m biased. Our official messaging regarding this:

Both the client and the driver of Riot Vanguard have been developed in-house, with both game safety and personal computer safety being a priority. We’ve made this commitment through extensive testing and by reviewing the product both internally and with external security reviews by industry experts.

Our commitment to safety includes our commitment to your privacy. Riot Vanguard was made with Riot Games' dedication to data privacy specifically in mind, and we worked with our legal and compliance teams to ensure it adheres to regional data privacy laws. Specifics on what data we use and collect are available here.

 

So, no, we’re not selling your data to China.

 

5. Ever since I installed Vanguard, I noticed that my toaster started producing soggy bread. What should I do?

While we’re trying our best to maintain compatibility with as much third party software as possible, if you notice any incompatibilities with Vanguard and a particular piece of tech, please feel free to exit Vanguard or completely uninstall us to validate the issue. We’re still working on squashing as many bugs during this closed beta while we prepare for a wider rollout.

 

As of recently, we’ve made great progress on addressing most of the performance issues that players have reported with Vanguard. If you’re still running into problems, we recommend that you file a ticket with player support.

External link →
almost 4 years ago - /u/RiotArkem - Direct link

/u/0xnemi knows what he's talking about but I'm also happy to answer questions!

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by Jefneri

Heya, is there a fix coming for the "Vanguard requiring reboot" -bug? Kinda annoying to safeboot and manually overwrite the files everytime I wanna play. Great game otherwise, and I've been enjoying it a lot.

P. S. Ive tried the method where you remove the drivers and ran as administrator etc. This is the only way I get my game to run. :(

This update will hopefully help. If you keep noticing problems though, please reach out to player support so that they can help with triage!

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by Rakinare

Vanguard is blocking VMWare Virtual Machines from starting. This has impacted a lot of people's workspaces and by now, is already known to VMWare. Is this issue already known to you guys? Will something be done about this?

We've addressed this a few times already. We're aware that some folks are having issues, but we haven't been able to repro it on our ends. We'll continue testing, though.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by robinlol

In the latest patch that you pushed everyones FPS was dropped by huge amounts. What exactly in that update made us lose so much? For example when I look into a wall I have around 4-600 fps. Spraying with with the vandal or phantom lowers me to 200 and sometimes even below. In the real world I have around 200~ fps, but spraying guns makes me go even lower causing stutter and extreme screen tearing.

Before the patch was pushed I were above 300 fps in 99% of the times resulting in an extremely smooth gameplay with almost none visible screen tearing.

Why did this happen and why is the next patch going to solve the problems as stated by other people on Riot?

Well you've come to the right place!

About a month ago I changed a build setting for how VALORANT-Win64-Shipping.exe is compiled. It's a security related setting but not related to Vanguard.

Due to a bunch of factors this change didn't get tested as well as usual, some of those factors were:

  • a lot of disruption due to COVID-19, reducing QA availability
  • a focus on our 0.49 patch rather than the 0.47+ hotfix
  • not enough playtesting on our dev branch because we were testing the closed beta release candidate
  • the problem wasn't obvious on our work computers

This meant that despite the large performance degradation the change made it into the patch and to players. Once our stats showed that FPS for players had decreased an investigation started. Since the 0.47+ patch was a small one it was relatively fast to narrow down the suspect changes and to my security change in particular.

Once my change was suspected last Wednesday I tried to reproduce the problem locally without success. However, to be extra sure, I reverted my change and then /u/Koalifier got a playtest group together to try out a build without the security change.

The data from the playtest confirmed that the game build settings change was the culprit and so just before our next patch was promoted to release candidate I pulled the change.

Hopefully this means that this patch (ETA tomorrow I think) will give you back your perf and I'll head back to the drawing board to try and find a better way to improve security.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by Bloodnoskie

when will there be fps fixes? i get microstutters every time i try retake a site and everyone is shooting and fps is broke in other games :(

Most of these issues should already be fixed by now, however, there'll be more optimizations in the new VALORANT build coming out soon (hopefully this week).

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by bloodkp

will the patch tomorrow include the addition of ranked matchmaking?

If the next patch goes well we will turn on ranked matchmaking. It won't be immediate because we'll want to make sure the patch is stable and no major issues are discovered.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by otherchedcaisimpostr

any plans to involve third party development for AI anti cheat systems? any in house systems being built? please update us!

We've got our data science team experimenting with machine learning techniques for aimbot detection, right now it's not production ready but initial results are promising.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by OWPD

Awesome write up hopefully, this shutdown all the AHK meme aimbots that people think will be the end of this game lmfao

/u/riotarkem is conjuring something for that one. SoonTM.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by CodenameOccasus

Is there any way to have vanguard off all of the time besides ingame without uninstalling

The two options right now are either uninstalling (you can do that from the system tray) or exiting Vanguard as soon as your system starts (also from the system tray icon).

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by numbingdiagram5555

When is the next patch coming out?

Early this week hopefully

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by ItsGuitarDude

I’m sure this has been answered somewhere else but I can’t find it (If any other redditors can point me to it that would be appreciated). Do you guys have an official fix for when a system reboot doesn’t get rid of the “reboot required” message?

This update will help with that by at least notifying you when a component isn't compatible with Vanguard.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by ZeroKiller

I was excited for the update to help me troubleshoot, but still no luck. vgtray.exe seems to run fine, but the vgc service still will not start (even after vanguard reinstall). Manually trying to start the service gives the following error:

Windows could not start the vgc service on the Local Computer.

Error 1: Incorrect function.

Trying to manually start vgc.exe gives the following error:

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

Please god help me. I also have ticket ID #47827789 open if you need logs.

Edit:

Thanks to Riot's K3o for the fix. One of the earlier fixes I tried was related to those bcdedit commands. I must have fixed the driver issue and forgotten to turn it back off.

If anyone else is having this issue after fixing all driver issues, make sure to run cmd prompt command bcdedit /set NOINTEGRITYCHECKS OFF

The service isn't designed to be manually started, that error is expected.

If you add your Vanguard logs to the ticket (from "C:\Program Files\Riot Vanguard\Logs") we'll be able to take a look at it.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by fprof

Can false positives be reported somewhere?

If you submit a player support ticket we can review any bans for false positives.

almost 4 years ago - /u/RiotRaykay - Direct link

Originally posted by Sarg338

by reviewing the product both internally and with external security reviews by industry experts.

Are you guys able to release anything regarding the external audits of your software? Even just the companies?

I don't think Riot will and as the AC product owner I hope we never do. I want Players to trust us based on our actions and security standards, not for the brand of the companies we work with. We do work with excellent companies but in my experience it is the individuals that make the difference.

almost 4 years ago - /u/RiotK3o - Direct link

Originally posted by ZeroKiller

I was excited for the update to help me troubleshoot, but still no luck. vgtray.exe seems to run fine, but the vgc service still will not start (even after vanguard reinstall). Manually trying to start the service gives the following error:

Windows could not start the vgc service on the Local Computer.

Error 1: Incorrect function.

Trying to manually start vgc.exe gives the following error:

Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.

Please god help me. I also have ticket ID #47827789 open if you need logs.

Edit:

Thanks to Riot's K3o for the fix. One of the earlier fixes I tried was related to those bcdedit commands. I must have fixed the driver issue and forgotten to turn it back off.

If anyone else is having this issue after fixing all driver issues, make sure to run cmd prompt command bcdedit /set NOINTEGRITYCHECKS OFF

DMing a fix to your issue

almost 4 years ago - /u/RiotRaykay - Direct link

Originally posted by tehrebound

Since you're adding functionality to turn off Vanguard via a system tray icon, will there eventually be functionality added to turn it back on via the same system tray, or is that not possible?

We needed to get this out the door for Players but as time goes on we hope to improve functionality. However, as Ryeguy said we will most likely require a reboot to turn the service back on. 

almost 4 years ago - /u/RiotRaykay - Direct link

Originally posted by DuasDeColoide

How is the anti-cheat team dealing with all this feedback about vanguard?

Is this something they thought the playerbase would have such a strong opinion on or it caught them by surprise?

Since kernel level anticheat is nothing new in the gamming industry, do they feel that there's some sort of propaganda against their system in particular?

It has been an interesting ride. We knew that people were going to have concerns with a boot driver but frankly there has been more concern than I expected. I thought closed beta will give us some time to measure perception concerns and build solutions. This on is definitely on me for not being better prepared. I don't think I would have change the priority of the work but should have provided more messaging. On the positive side the team is very motivated to show the effectiveness of this approach. 

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by bapplebo

Thanks for this, adds a bit of extra transparency. Unfortunately, I imagine you'd still have those who think that disabling through this way is somehow psyops to trick people into giving information to CCP.

Anyway just wanted to also say your blog had a few articles that were interesting to read through /u/0xNemi.

Can't please everyone! Glad you enjoy the blog 😉. I haven't had a lot of time to work on it recently.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by x4D3r

To be honest i already updated and the fps look the same or even worse, i don't know what u guys did but it sucks, graphics are worse than csgo and we fall to sub 100fps if a gun shoots

The performance improvements are in the game update which isn't out yet (not the Vanguard update).

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by EuG_GreeD

Today i've been disconnected from a match like 2 or 3 times, vanguard telling me it has encountered an error (makin me lose the buy phase) but not telling me whats causing it. Is there any way i get to know whats going on?

Looks like we're having server troubles, I'm looking into it.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by throwaway138492

Any ETA on either patches?

Vanguard patch should be out now but the Valorant patch is coming today or tomorrow I think.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by Smt923

are these logs encrypted? is there any chance we could at least have user readable logs for things that are being blocked and why?

The system tray icon notification will tell you what's blocked if you click on it.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by sylvainmirouf

Unrelated question but will we have better or more servers when the game launches? I live in the south of France and I isually get 45-75 ping playing Valorant while I usually get around 20 in other games like CSGO. I have 800mbps fiber, 5 ping locally.

Usually these issues are configuration related between our ISP and your ISP, if you submit a support ticket we can in turn talk to your ISP to see if we can improve things.

We're also planning on adding more network access points and servers too which could help.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by 4bstract_Air

Are frequent ping spikes a common complaint from players or is it most likely just my internet?

Valorant does send and receive a high number of packets and some routers and some ISPs can have trouble with that causing ping spikes.

The last patch should have helped with this significantly (by not sending unimportant updates as often) but maybe there's more we can look at.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by robklg159

@ /u/RiotArkem & /u/0xnemi

there's a discussion going on here and I was wondering if perhaps considering the frame by frame seemingly exact shots is there an animation difference in when these guns actually hit?

We've seen that video and we're discussing it internally to figure out what's going on and whether there's a problem (and what kind).

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by nivek_c

After the most recent update I noticed that in menu my GPU usage is 100% and hits high temps very rapidly, but when playing my usage is only around 60% and the card sits in the 50 to 60* C range. Is this normal for AMD cards (5700xt)?

That's very unusual, I'd normally think it was impossible for Valorant to max out that GPU unless you were playing at 4K (and even then I wouldn't expect it)

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by pro185

u/RiotArkem u/0xNemi https://imgur.com/a/30RN9s2 Vanguard is disabling boot procedures for my MSI motherboard and causing temperature issues across my GPU and CPU.

That's because that driver has a known security problem that's being exploited by cheat developers (and malware developers) there's some more technical information about it here:

https://www.exploit-db.com/exploits/40426

https://www.cvedetails.com/cve/CVE-2019-16098/

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by necky2

Did you have to develop an aimbot for your game, so you could test the AI?

Yes, I wrote a couple of different types of aimbots! It's not as good for testing as the real thing (because my aimbots bake in my assumptions on how aimbots should work which biases the models we build) but it was a good starting point.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by Kurakuno

/u/0xNemi /u/RiotArkem So those notifications from Vanguard will maybe tell us what is causing the issue for the reboot bug? I've tried everything i found here on Reddit and at some poit I even started a support ticket, which ended with the supporter saying to me that i basically had 2 options, wait for a fix or reset my PC (and I'm not gonna do that). Will this update make it easier for us to play Valorant?

Clicking on the notification should tell you what is causing the issue, we hope it helps you track down the problem.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by DabSlingz

Odd thing to ask, what time zone are you in? Wondering 16 hours ago when you said patch eta tomorrow if it was Tuesday or Monday for you

I'm in LA and was referring to Tuesday 28th but the patch doesn't have a fixed time yet as far as I know so I was estimating. I probably should have just said "soon" or "early this week".

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by KKingler

Could there be a way to hide the system tray icon if I wish? I do not care about it running in the background but a system tray icon would be a little bit annoying. I like keeping them tidy. (also pinging u/RiotArkem if he can answer this!)

We agree so we made sure there's an option to hide the tray icon! Just click on it once and you'll see the option :)

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by OfficialChairleader

Any chance to optimize the game a bit for AMD CPUs? I'm getting anywhere from 70 to 170 fps while people on a comparable or even worse system with an intel chip are getting a steady 200+. This has been an issue for league of Legends as well, it's super well optimized for potatoes that use intel chips but becomes somewhat unplayable even with some of the more recent AMD chips. It would be a bit sad to see Valorant leaves AMD users in the dust as well.

keep up the awesome work!

Currently the game performance scales best with single core performance which might be why intel CPUs seem to be doing well.

This next game patch should improve your frame rate but we also have more optimizations planned that could help.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by tr4p

So next patch is confirmed for tomorrow? Also. How long are we talking about before ranked gets turned on. Hours or days?

It's not my call but I think it'll be as soon as players confirm for us that no game breaking issues have slipped into the build.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by Auknight33

I've been getting a weird error whenever I boot up my computer with Vanguard on. Just, some random program will boot up for like 5 minutes and keep me from doing anything until it crashes. I found a video of someone else with the same problem. Any ideas? (BTW love you guys, you really stand head and shoulders above almost any other gaming company and I play some of your games specifically because I know and trust the company behind it <3)

https://youtu.be/dQw4w9WgXcQ

I'm sorry to hear about your problem. I hope you don't give up on us, we're never going to give up on you either.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by Eko1123

I know this may seem a bit minor compared to all of the other major bug fixes and patches that you guys are implementing right now, but is there any eta on when we’ll be able to disable profanity filter in chat?

It's on the list but I don't have an eta for you sorry

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by JakeFote

Hello, after this recent patch vanguard is now blocking me from checking my cpu temperatures on both nxzt CAM software and HW Moniter(A highly used software for temperature monitoring). I understand you can just exit vanguard now but that requires you to restart your computer just to play the game. I don’t think the intent of this anti cheat is to block you from monitoring your cpu temps, just some feedback. It is also blocking some features on MSI dragon center as well, which is kind of annoying.

Sorry for the inconvenience!

Usually this is because those drivers have security vulnerabilities that are commonly used by cheat developers to load cheats into the kernel (or by malware authors for ransomware).

I recommend that you see if there's a newer version of the software that you can use.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by JoNike

I use to be a mastering tech for one of the big publishers. I do not miss it when I read stuff like this. Keep on the good fight!

Thank you!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by valorantdatascience

Any chance you can include a saved binary file for semi-replay data. Your timeline capability shown in client is similar to the functionality I'm talking about, just stored in a more easily indigestible format. I am a professional data scientist who happens to love this game. I will do literally all of the format and documentation for free if I know you would use it.

Let me know.

Stuff like that will hopefully exposed via our developer API. I also hope that we'll eventually build a full replay system too.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by PM_UR_NSFW_ALT

Would it be possible to have a 'do not start on next reboot' option as a middle-ground choice?

This is basically what the uninstall option does. Vanguard won't run on your computer until the next time you want to play. Vanguard is relatively small (approx 16MB) so it reinstalls quickly.

We can look into a "disable for next boot" option if you'd like though. Can you give me an example of the use case so I know how to prioritize the feature request?

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by BjornHelheim

Hey there, sorry to be bothering. I'm not sure if you're the right person to be asking this but a lot of people (me included) have encountered a bug that prevents them from selecting a resolution. Whatever option the user chooses, the resolution will always bug out and the only fix is to disable the monitor driver in windows device manager. Is this issue being looked at? Can we expect this simple bug to be fixed by launch? Thanks for your time.

There are some display/resolution changes coming in the next game patch (today? tomorrow? something like that), hopefully that helps!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by awera

Out of curiosity was it the pak encryption setting? UE4 dev here and would love to avoid the same issue from happening to my game.

It was from one of our custom in-house security tools (one we use for League of Legends too).

We currently do PAK encryption but only for some files. PAK encryption didn't kill performance during gameplay for us but it did dramatically increase load times and makes patching more awkward.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by PM_UR_NSFW_ALT

While installing and uninstalling is a benign thing, it seems like a repetitive time waste as well as repeated installs not being something i'm in the habit of doing. So that would be my justification.

The use case would be that it doesn't require the install/uninstall. That's (small, but still) a burden on a user to remember to uninstall or whether they did uninstall last time and if they need to restart. The interface could (hopefully) be as simple as a right click on the system tray icon, with a list item of the checked/unchecked variety, to see the status of "[✔️] Load Vanguard on next restart" or "[ ]Load Vanguard on next restart]." That saves time from checking add/remove programs or booting Valorant up.

This would also seem to be in line with what seems to be the intent of the change you've already described - to make Vanguard feel less intrusive and to give the user control. This would further respect a user's time and attention, as well as reduce the amount of cycling a user would put their hardware through (by eliminating reboots, unintentional or unneeded install/removals and related read-write cycles)

Just want to to finish with this note - your already described change is an awesome initiative and i'm happy to have it. I hope my feedback has been constructive and amicable. That is certainly my intent.

Edit: minor grammar edit

Thanks for elaborating!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by sliceoftoasr

/u/RiotArkem I'm unable to reinstall the game anymore because it says I need to install the required dependencies, but it won't let me install it. I don't know where else to go with this since I submitted a ticket a week ago and still haven't received a response. Do you have ant clue as to how I can fix this? Thanks 😊

Hopefully support gets back to you soon! (they've been really swamped this last week)

Sometimes this error is due to anti-virus blocking the new Vanguard version (because it hasn't been seen by many people yet), sometimes it's due to a software incompatibility (I know the messaging is bad, sorry). Other times it's a bug on our side.

When support gets back to you hopefully they can help you troubleshoot but if you don't hear from them let me know and if I get some time I'll try and help you out.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by THISAINTMYJOB

How do you enable the system tray icon though?

Opened valorant to have it download the update but there's still no icon after reboot.

You can run "C:\Program Files\Riot Vanguard\vgtray.exe" manually but I'm not sure why it isn't starting for you :(

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by tr4p

u/RiotArkem where do we report false positives in regards to vanguard? it just flagged my MSI mysic light (for GPU RGB)

Unfortunately that's not a false positive, that driver has a serious security vulnerability that's commonly used by cheat developers to load their cheats.

I recommend looking to see if there's an update available from MSI or asking them for a fix.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by [deleted]

Because HWMonitor loads a driver that can be abused by third party applications to read and write physical memory, read and write MSRs, perform IO operations (privileged); all from usermode. It's unsafe to load anyways and they're blocking it because it can be potentially used by hackers to read and write memory for the game.

This is accurate.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by DingusDong

Well you've hit the nail on the head. Not having perfect security on what essentially a backdoor to potentially hundreds of millions of computers around the world is frankly a little terrifying given who's at the top of the Valorant totem poll.

Quoting what was said in another thread:

It depends how brazen they want to be. Small scale they could gather a whole heap of data. Like where do people look for their news and information would be really handy in prioritising propaganda efforts. Between Tik Tok monitoring phones and Riot monitoring PCs they can probably get a solid sample size for young westerners. On the other end of the spectrum, they could use it for distributed attacks (credential stuffing/DDOS) or to try and hide the origin on a more sophisticated attack (i.e. using compromised user credentials to exfiltrate data). They have administrator access to the machine, they can do with it whatever you could do with it.

Going really tinfoil hat here but it could make for a really secure onion router style network for secret coms. Assuming China doesn't trust TOR (which it shouldn't) they can't deny the inherent benefits of that style of routing. It's effectively untraceable and if it's machines and ports that they compromised it reduces their potential exposure even further. The Tl;Dr of onion routing is that messages you send get broken up and sent to multiple machines before reaching its target. Nothing is perfectly secure, but that is as close as we can really get. Let's say your computer is picked to be one of the middle stops for the data. Assuming you were running wireshark, and looking for data traveling through ports assigned to Valorant (or any other CCP program) you would likely only see a packet full of junk data coming from a random IP, going to a random IP. If there is any P2P data exchange in that game then it would be even harder to find.

/u/0xNemi could we get your thoughts? Are we crazy for having these concerns?

There's nothing I can say to help reduce your concerns. You've already made up your mind.

Ultimately, you get to choose what you run on your machine.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by thetorsoboy

Yeah I get the same behavior from NZXT Cam, with Vanguard blocking driver cpuz_149x64.sys.

It prevents CPU temp monitoring and fan speed control. I've opened a ticket with NZXT, I guess we'll see if they're responsive towards this or not.

Feel like we'll get stuck in a he said/she said between Riot and the other companies that make these programs.

Yeah, that driver has a security vulnerability, here're the details: https://www.cvedetails.com/cve/CVE-2017-15302/

Versions later than 1.81 should be ok though!

I get it that when two pieces of software are incompatible it's easy for the two vendors to blame each other. We try not to blame the other software providers but in cases like this (with publicly documented security vulnerabilities) we're comfortable saying that the problem lies with the other software.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by 150297

/u/RiotArkem Hello there. Sorry for botherin you but i have a quick quiestion. League of legends has something called League Displays which let's you pick wallpapers from charmpions and skins etc. Have you thought about adding Valorant wallpapers?

I'd love for something like this to exist, not sure if/when it'll happen though!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by pro185

What would you recommend I do about this. I am more concerned over temperatures than fan wear so I always have my fans at 100% voltage using MSI command center. If I uninstall command center they immediately go to operating very slowly until my CPU gets hotter than I would like. Has this exploitable driver issue been fixed in recent updates to MSI command center, or am I going to be forced into choosing if I want excessively hot CPU/mobo or not playing valorant?

I haven't tested it but the change log from MSI Afterburner 4.6.2 says

  • Updated IO driver provides more secure MMIO and MSR access interface

Which sounds promising!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by vmalhan

Reading this makes me feel like someone from gaming community answering and not like someone from Dev side. You guys have won my heart. No matter what happens to the game, don't let this side ever wear off. Games will come and go over the years but humbleness and respect for the community will always be the things you will be remembered for.

P.S. I had a question too, forgot to ask 😂. My auto guns keep stop firing randomly while holding down LMB. I have checked outside the game and the LMB works fine. Is it because my laptop is on the lower end side of the spectrum? I have a laptop with i5-7200u with GeForce 940MX and 8GB of RAM.

We've seen a few reports of issues like this and we're investigating. Hopefully we can track it down but I suspect a game bug rather than something unique to your computer. Your computer sounds like it should run the game fine!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by IvoAlbino

Any info on the BSOD many people are having due to Vanguard? I'm struggling so hard with the AC I had to uninstall the game otherwise I keep having blue screens...

If it's still happening after yesterday's update can you file a support ticket and provide them the BSOD crash dump? (It'll be C:\Windows\Memory.dmp)

almost 4 years ago - /u/RiotK3o - Direct link

Originally posted by Cicciopalla001

Can i know the fix too?

The player edited their comment with the fix (NOINTEGRITYCHECKS was on), I just didn't want to publicly post it out of privacy respects.

Your issue may be different - Player Support has pretty good steps for finding known configurations that can cause issues.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by Theostru

Hi /u/0xNemi and /u/RiotArkem !

Is there a way to check what was blocked beyond the notification? On boot, the notification disappeared before I could click it, and when I then went to notification center and clicked on it, it went away without presenting any popup or additional information on what was blocked.

Reading this thread, I'm 99% sure it was HWMonitor, but the fact that I have to rely on an ephemeral popup rather than an actual application or even just a log file is pretty frustrating.

Run this command in command prompt:

reg query HKLM\System\CurrentControlSet\Services\vgk /v BlockedImage    

The tray icon reads from that location.

almost 4 years ago - /u/0xNemi - Direct link

Originally posted by [deleted]

Vanguard is blocking System32 .sys drivers on system start up. xtuacpidriver.sys to be exact. Which is Intel tuning software.

Make sure you have the latest update from the vendor: https://downloadcenter.intel.com/download/24075/Intel-Extreme-Tuning-Utility-Intel-XTU

Extremely old versions of this have been known to cause issues.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by Theostru

Hi /u/0xNemi and /u/RiotArkem !

Is there a way to check what was blocked beyond the notification? On boot, the notification disappeared before I could click it, and when I then went to notification center and clicked on it, it went away without presenting any popup or additional information on what was blocked.

Reading this thread, I'm 99% sure it was HWMonitor, but the fact that I have to rely on an ephemeral popup rather than an actual application or even just a log file is pretty frustrating.

The name might be in this registry key, you can take a look: HKLM\System\CurrentControlSet\Services\vgk\BlockedImage

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by DrAgus_

I don’t have any questions, you’ve laid out everything very clearly and understandably. I just wanted to say that I appreciate the amount of transparency we’ve received from all you devs. As someone who as 2,500+ hours of CSGO (like many other VALORANT players) I’m beyond excited to actually see the dev team working with players, and communicating exactly what’s going on. Enjoying the game probably way too much, and I’m very excited for ranked to come out soon. Keep it up VALORANT Dev Team!

Thank you for the kind words!

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by SterbaM

Any chance you can say what the issue with Core Temp 1.15.1 is? Vanguard is blocking it from starting, and I get a notification that Vanguard has blocked something, but when I click the notification vanguard does nothing/doesn't give me any details.

I don't know what driver it uses but my guess would be either a vulnerable driver (like MSI Afterburner did) or the driver isn't signed in a way that complies with Microsoft's Secure Boot requirements.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by znaczki65

Don't know whether you read my direct message to you or you heard thousands messages of the community on Valorant reddit or Discord, tho good job Arkem.

One question does it only exits the Vanguard Client or also Kernel Driver (when I click Exit Vanguard). One more (I lied that is one only) does it require a reboot after exiting to exit completely?

Thanks for the kind words!

"Exit Vanguard" unloads the driver, so no components of Vanguard should be running afterwards. The Vanguard Client should only be running when the game is running so there's no need to exit it.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by pupp3h

After a bunch of trial and error, it appears to be down to iCUE and the cpuz149 driver it uses, however it would be cool if you can fix this issue so that the notification shows this rather than having to spend a couple hours to figure it out :)

I think there is a newer version of the cpuz driver that isn't blocked, I don't know if there's a way to manually update it or whether you'll need to wait for iCUE to update.

If you miss the popup in the future the name of the blocked image will be in your registry here: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vgk under "BlockedImage"

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by TheNamesFrosty

Fully serious question, if I usually use something like hw monitor to monitor my temps and voltage, and vanguard now blocks this. How am I supposed to tell if vanguard or valorant is actually the cause, if I can’t compare when it’s on and off? So is there a way to actually monitor differences in performance?

You can select "Exit Vanguard" from the system tray or "Uninstall Vanguard" and compare the performance that way.

Vanguard also isn't blocking hardware monitoring software specifically, just some vulnerable drivers that are sometimes used by hardware monitoring tools.

There are tools that work fine (I tested the latest NZXT Cam last night and it looked ok) and tools that don't currently work with Vanguard will likely be updated to replace the blocked driver soon.

almost 4 years ago - /u/RiotArkem - Direct link

Originally posted by the_arksis

While the uninstall option seems to act as a disable for next boot alternative, I feel that it isn't clear that Vanguard will be installed on startup of Valorant. I have hesitated to uninstall Vanguard due to this, thinking that it would require me to redownload Valorant entirely or break the current game state. Maybe providing some more information to the user would be beneficial, such as renaming the option to "Disable until next Valorant startup (requires reboot)"?

Thanks for the feedback!

almost 4 years ago - /u/RiotK3o - Direct link

Originally posted by SkinnyJeansMcGee

I have this same problem on my laptop + external gpu enclosure. I can't boot with vanguard installed or my computer bluescreens. Is there a fix for this / will there be one soon? Or are eGPU users out of luck?

Could you DM me your Vanguard logs? (C:\Program Files\Riot Vanguard\Logs)