Email or username:

Password:

Forgot your password?
halva's posts Post Back to profile
halva is

a remotely controlled kernel level anticheat

there's no way anything could ever possibly go wrong with that :clueless:

#genshinimpact #Security #anticheat

a post on discord about hsr's anticheat modifications, including the introduction of a new remote controlled one (mhyprot)
15 Nov 2023 at 9:10 | Open on wetdry.world
10 comments
Emma (IPG)

@halva i remember some github project that used mhyprot as a way to read/write arbitrary process memory because they had little to no protection on malicious usage
and the driver was also used by some malware
so it was a really neat little signed kernel-mode driver :)

15 Nov 2023 at 9:21 | Open on wetdry.world
halva is

@ipg so it's either "you play on linux and can catch the banhammer" or "your computer includes a wide open backdoor on R0"

coooool :)

15 Nov 2023 at 9:26 | Open on wetdry.world
Emma (IPG)
halva is

@ipg yep yep, saw that already

actually fucking horrible, low-key scared of installing gi now that im back on windows

15 Nov 2023 at 9:46 | Open on wetdry.world
Susanna
@halva @ipg Honestly there is no need to worry. All these "vulnerable for abuse" things are usually something that require active participation from the user to pull off. If it would be that easy to do randomly over the internet it would be a huge scandal by now.
15 Nov 2023 at 10:23 | Open on blob.cat
Emma (IPG)

@halva it's not much of a risk in your use case, the only things to worry about are if the developer servers get hacked or demanded by a third party (incredibly unlikely) or if you run malware locally on your PC while the driver is installed, in which case you have worse things to worry about since Windows by default still lets you access a lot of shit (all your passwords) even when unprivileged

15 Nov 2023 at 10:24 | Open on wetdry.world
pivotman319 🦊 :aromantic: :flagace:

@halva @Rairii @amarioguy I have a feeling this anti-cheat driver change might end up triggering a data privacy lawsuit.

15 Nov 2023 at 10:06 | Open on wetdry.world
halva is

@winload_exe @Rairii @amarioguy good luck getting a *chinese* developer to court for data protection breaches lol

15 Nov 2023 at 10:31 | Open on wetdry.world
Rairii

@winload_exe @halva @amarioguy i think all the well-known anticheats can run encrypted shellcode from a remote server

possibly when specifically triggered from the remote C2, ie, only "interesting" targets get it

15 Nov 2023 at 10:31 | Open on haqueers.com
Reiddragon :ablobcatattention:
Go Up