Valorant

Valorant Dev Tracker




18 Apr

Comment

Originally posted by lulwhatno

Fair point about KDA. I do think it’s great to have the main focus be round wins and rounds played, in order to incentivize team work rather than KDA. That should remain the main focus.

I think that’s where it’s important, if you decide to implement something like this, to make sure the XP from kills, assists, and objectives is less, that way it doesn’t detract from the teamwork aspect.

Thank you for the response! You guys have made a great game and I’ve been enjoying the hell out of it.

Appreciate it my friend <3

So glad you’re having fun :)

Comment

Originally posted by LowSeason3

couldn't this also mean that riot has worse programmers that allow so many vulnerabilities to slip through?

it could also mean that maintaining the infrastructure for one of the biggest games in the world is fraught with risk and that we pay generously on bug bounty :)

Comment

Originally posted by Same--Advice

Ok i must have misunderstood your first point (1.VALORANT).

I'm really not qualified to answer that kind of question.

Let's be honest between you and me. Tencent own Riot. They can do whatever they want with it. Don't answer because you could get in trouble, but everyone knows that Tencent can do anything they want with your software. They OWN Riot.

Vanguard is owned and developed by Riot.

And Tencent own Riot, including assets. That's what ownership means. Can you confirm this.

Edit: This is an serious advice here: don't answer any of this, you could be in trouble.

Respectfully, it appears that you're trying to get a sound-bite out of me to confirm your suspicions and run with it (as you did with this thread).

This is way out of my area of expertise so I'm going to avoid replying to this. If you have questions specifically about application security, software engineering or privacy I am happy to answer them, but I'm not going to be able to reply to questions like this.

Comment

Originally posted by Same--Advice

So just to make it clear, you're saying Vanguard isn't owned by Riot, but by Tencent. Is my understanding ok?

  1. Tencent do have a majority fiscal stake in Riot but we retain full control of what we build and how we build it.

Indefinitely? Or could Tecent decide at any moment that they are in control, since you know, they own Riot.

I'm not some crazy conspiracy theory, I'm just a dude who wants to know exactly what's running 24-7 on my PC, including who owns it, and who makes the decisions about it. You made it seems like Riot owned the software and was the full decision maker, when in reality it's pretty clear that it's Tencent.

So just to make it clear, you're saying Vanguard isn't owned by Riot, but by Tencent. Is my understanding ok?

Vanguard is owned and developed by Riot.

Indefinitely? Or could Tecent decide at any moment that they are in control, since you know, they own Riot.

I'm really not qualified to answer that kind of question. Like, technically, yes, Tencent could become very authoritative over Riot, in a similar way to how the Queen of England is technically in charge of the UK.

Comment

Originally posted by ModsNeedParenting

/u/riotaredherring

can you look into this please? Plenty of people suddenly started having issues starting Vanguard.

When checking in services.msc we get this error: https://imgur.com/faCGU3M

hey friend, I've raised with the team, but I would recommend anyone experiencing issues please open a ticket with Player support, which will get your issue resolved faster than pinging individual rioters!

Comment

Originally posted by adamacuo

Is the driver uninstalled when the game in uninstalled?

Here are some instructions on how to uninstall Vanguard: https://support-valorant.riotgames.com/hc/en-us/articles/360044648213-Uninstalling-Riot-Vanguard

The TL;DR is that it's Riot Vanguard in Add/Remove programs but in the future we will automatically uninstall it when the game is uninstalled.

Comment

Wanna clarify some things here before it hits front page.

  1. VALORANT :) not Valorant
  2. I'm not a VALORANT dev. I'm an application security engineer at Riot. Whilst I have reviewed VALORANT and Vanguard, I do not work on it full (or even part!) time.
  3. Tencent do have a majority fiscal stake in Riot but we retain full control of what we build and how we build it.
  4. Ultimately, I'm a Rioter and paid by Riot. If you think that Riot is a propaganda arm of any particular government, an employee coming out and saying that it really isn't probably isn't going to convince you. We really aren't, but I'm not sure me just saying so is going to convince people.
Comment

Originally posted by Varonth

Your bounty program is nice, but how exactly are you going to ensure that everyone who has Vanguard on their computer has the latest version?

Does it auto-update? Is it just manual updates?

Both don't sound too great. I can understand an anti-virus program asking once in a while to restart my computer for an update it loaded in the background. But that does not sound like something an anti-cheat system for a computer game should do.

But manual, for example when the user starts the game sounds not so great either. Imagine a game like WoW asking to restart your computer after updating.

And worse than that, what about someone who does not actively play at the moment. Or worse, uninstalled the game which still keeps Vanguard installed. Is it just sitting on a users PC, unpatched, for months?

Nowhere does it mention how you plan on distributing security patches for Vanguard, and that should be mentioned somewhere shouldn't it?

Also tagging...

Read more

Vanguard checks for updates when a player tries to launch the game (it's done as part of the game update check). A player can't launch the game without the latest version.

If there was a serious security problem that required people to update or remove Vanguard we would try and get the message to everyone. We would also take whatever other steps we could to protect people from a vulnerable driver such as asking Microsoft to blacklist the driver and revoking the certificate.

Comment

Originally posted by TheUberMoose

You may not want to be honest but A GDPR request will force you to hand over everything it collects.

The way your handling this is scummy and honestly I’ve 100% lost interest in the game over this.

I'm sorry to hear that, you might be interested in our latest article about the security and privacy of Vanguard: https://www.riotgames.com/en/news/a-message-about-vanguard-from-our-security-privacy-teams

Comment

Originally posted by EnglishDentist

Why not ? :c

Reasons that, as a security engineer, it's probably not my place to disclose as it's not my area of expertise.

Comment

Originally posted by brynjolf

Is this compliant with GDPR? What data are you collecting and how are you storing it? What is the main way you store it? Where are you storing it and why? Does it leave the borders of Europe while transferring? How long are you storing data? Can I see and remove the data somewhere? /u/RiotArkem ?

The baseline standard for all privacy across Riot is GDPR as a minimum. In other words, every time we develop something, we make sure it is compliant with GDPR (thanks to the so-called "Berlin Effect").

So, yes, it's GDPR compliant.

I can't answer the questions you have in this thread as I don't know them off the top of my head. You can currently send a GDPR request for League on the league support website; You can try sending that in and mention you want info on VALORANT too (this is likely because the league website, until very recently, was the only 'official' support site). We'll have RTK requests available for VALORANT on their support site very soon.

You can also send an email to ...

Read more
Comment

Originally posted by Same--Advice

Ultimately, who owns the product that you're developping. You? Riot? or Tencent?

What would happen when who ever own this product decides on some changes.

Riot owns everything we make.

The distribution of our games is sometimes delegated to partners, like Garena, who also own the publishing piece in those regions.

Comment

Originally posted by CthulhuLies

I was talking with someone and they were very aggressive about the fact that you haven't named the auditors auditing Vanguard. Is this information you can share?

We can't disclose them unilaterally. We'd have to consult with the parties before we made any announcement. So not yet.

Comment

Originally posted by BertDeathStare

And props to you guys for the communication, this thread turned into a bit of a Q&A. A bit off topic but the games the devs did against Shroud and his team were really fun to watch. The devs showed there's a high skill ceiling and now I'm already excited for future tournaments. It'd be cool if you guys did more of that, devs vs players. That's pretty rare I think, that the devs of a game can go up against really skilled players and slap them up and down. Do any of those devs happen to stream? I kinda wanna see their perspective and hear the voice comms between them :P

I'm not sure but you can always check out their twitters to find out more info, starting with Pwyff, Penguin.

Comment

Originally posted by [deleted]

[deleted]

Everyone who plays VALORANT on their work machines has Vanguard installed.

Comment

Originally posted by Cr4gor

Vanguard seems to make it impossible to play Valorant on linux. It does not work on vine or a VM because of the anti cheat. Are you just going to neglect linux gamers or are you going to make the game/anticheat run natively on linux at a later time?

We don't officially support Linux play of any of our games at this time.

Comment

Originally posted by [deleted]

[deleted]

Vanguard does not do cheat detection unless VALORANT is running.

it’s minecraft lol. i want to use a client in minecraft

Dude, creative mode exists

Comment

Originally posted by alpha_berchermuesli

i know you are not here to talk harassment, but i was wondering how you treat verbal abuse, harassment and other, uncalled and unnecessary, toxic behaviour. Is the option a placebo, or are there consequences to such behavour/reporting such players?

There are consequences. Players are who are verbally abusive, harass etc will get penalized if you report them.

The in-game report tool is enough in most cases but if you're super concerned you can clip a video of the behaviour (assuming the behaviour is done over voice) and send it to player support

Comment

Originally posted by d4rkph03n1x

Hey, I recently sent a message in discord to a Riot member regarding the use of vulnerabilities that apply to all video games on a network/hardware level, which includes 1. the parsing of network data in order to get game data, 2. the usage of HID devices in order to simulate mouse movements, and 3. The combined use of those two in order to parse network data and create a HID controlled aimbot that is fully hardware-sided and done 100% externally.

Theoretically, you could just use OBS to "stream" a game to another computeror application, and create a low-latency aimbot that uses a PID loop with the error being the distance from the center of the screen/crosshair to the pixels that make up the image of a head. You then could use a raspberry pi, usb rubber ducky, or any other badusb/programmable HID device (there are thousands) and create an aimbot that goes off of the distance between the head and the crosshair.

If I created a proof of concept of the screengrab-base...

Read more

So this sounds like an anti-cheat issue rather than a Vanguard driver issue (which is what the up-to-$100k bounties are for). We do accept anti-cheat issues in our bug bounty program. If you can create a POC, please do submit it, although I can't guarantee you'll get a payout until I actually see the POC.

Comment

Originally posted by [deleted]

[removed]

This is a excellent idea! It is actually similar to something that we talked about implementing during Vanguard development. At the time I just prioritized other work over this feature... Maybe a bad call but I do generally prioritize security, effectiveness, compatibility & performance over features. However, giving players the power to turn the driver off is something we can & should deliver on. For the risk averse I get how uninstalling every time you finish playing is not optimal.