Preferences

charcircuit parent
>violating the principle of user choice

What do you exactly mean by this as right now no users can use Linux and play the game. Allowing more Linux operating systems to be able to play the game is providing users more choice than before.

>Client-side anticheat is inherently security through obscurity

There is nothing fundamentally wrong with security through obscurity. It's just that for some problems the return on investment (security gained for the resources needed) is not worth it. For anticheat the obscurity can slow down cheat developers and raise the barrier to entry for developing cheats. Cheaters just have to make one mistake to get caught.


frollogaston
I think other commenters explained this better, but in Linux, the user is supposed to have full control over their own system. The only way for this kind of anticheat to work is by introducing some part of the kernel that users can't touch. I'm not saying security through obscurity is inherently bad, but Linux isn't about obscuring the system from its owner.
charcircuit OP
>the user is supposed to have full control over their own system

Realistically most Linux users are using a stock kernel and not something custom compiled. You can have both customization and a way to offer a secure environment for apps that need it. Even if you want to allow for custom kernels and drivers, the game could be setup to run in a secure virtual machine.

>The only way for this kind of anticheat to work is by introducing some part of the kernel that users can't touch.

To be clear, attestation is not anticheat. But yes, there would be components that end users would be unable to modify without removing their ability to attest to there being a secure environment for the game. Either these customizations need to be turned into policy for a trusted component to handle, or the customization needs to itself become trusted.

>but Linux isn't about obscuring the system from its owner.

Nothing about attestation requires obfuscation.

frollogaston
This attestation does require obfuscation (often via hardware), otherwise there's always a way for someone to force a positive attestation. Like run a modified kernel that tells the game it's unmodified.
charcircuit OP
Requiring a key to be practically impossible to extract from hardware doesn't require obfuscation to be effective.
frollogaston
The hardware itself is obfuscation.

What you're asking for does exist though, in the form of Android devices and game consoles. Was curious about Steam Deck and... turns out it doesn't have secure boot. Someone could build a desktop OS on top of an anticheat-friendly kernel, but it'd probably not be big enough for gamemakers to care, and Linux desktop people would be uninterested in it to say the least. (I'm on a Mac btw, I have no horse in this race, just understand people who do)

This item has no comments currently.