‘Never trust the client’, an adage that modern game developers have apparently forgotten. The only thing one can ultimately trust is the server. Anything client-side, beyond keeping honest people honest, is doomed to failure.
Regular (ie, not kernel-level) anti-cheat is as far as it needs to go. Anything delving past that, such as into kernels, is dumb and an increasing level of security risk for the consumer.
If you need kernel access because you don’t trust me not to cheat, I don’t really want to play your game.
Kernel access isn’t needed if they use signed boot and can verify everything running is what it should be.
but don’t you need kernel access to verify everything that is running
You want to be sure if the integrity of the binaries that are running. That needs a chain of trust from firmware to user space.
‘Never trust the client’, an adage that modern game developers have apparently forgotten. The only thing one can ultimately trust is the server. Anything client-side, beyond keeping honest people honest, is doomed to failure.
Regular (ie, not kernel-level) anti-cheat is as far as it needs to go. Anything delving past that, such as into kernels, is dumb and an increasing level of security risk for the consumer.