[bob1029]

Ah yes. A kernel-level security feature provided by a software company wholly-owned by a Chinese conglomerate.

I do not think I will continue running their software on my machines.

Also, many other posters here have commented that kernel-level mitigations are futile in the face of hypervisor or hardware attacks. What's to stop me from altering system memory arbitrarily using a PCIe device I control externally? How would you even detect this from the perspective of the OS kernel? What if I compromise the private key in the game's network "security" layer and start reading & altering packets? Unless you 100% control the hardware (including mouse, keyboard and monitor, network, internet backbone, etc), you will always have this problem. The only way to have a cheat-proof gaming experience is to set up a LAN tournament and have all hardware provided to players (and even then, you should pour epoxy into the USB ports).

At some point you are going to have to start looking in other directions for solutions to this problem. I believe other games have started using statistical and machine learning systems to detect cheaters rather than trying to match arbitrary binary hashes on my machine (which is what I presume Riot is going to do here). I feel statistical soft-ban systems are a much more reasonable way to handle this problem than the 100% confirmed binary signature permaban systems that seem an obsessive fantasy for some in the industry. Statistical methods directly deal with the impact of the problem whereas perfect match only gets at one of an infinite number of possible causes.

[Fire-Dragon-DoL]

Problem with those systems are the forums full of completely innocent people being banned

[zenexer]

Completely innocent people also get banned by clientside systems. Accidentally left some programming tools open from work, particularly for debugging or reverse engineering? Expect a ban. Tried to run the game on an unsupported platform, e.g. via WINE? Ban: https://www.reddit.com/r/linux_gaming/comments/9uk38b/was_ba...

[bob1029]

This is what happened to me on VAC. I was running some memory snooping tool for experimenting with an entirely unrelated process. It was simply minimized and I forgot it was running. At some point I then decided to play a game of TF2. A few days later the permaban hits with zero chance for recourse. I am far more open to a softer ban system where I can actually appeal a ban if something goes wrong.

[floatingatoll]

Many will read “completely innocent” as sarcasm. Do you intend it as such?

[Fire-Dragon-DoL]

To be fair, I meant actually innocent people, but the unintended sarcasm is funny

[DSingularity]

It can be done. Main way to detect is to detect the footprint of the VMExits.

[sudosysgen]

And a program from outside the hypervisor can just magically edit the instructions of the game to avoid such checks.