RCE (Remote Code Execution)- What we know

[nullpo]

UPDATE
On dark souls 3 side the creater of bluesentinel is working on a fix. Also so far only 4 person know how to do this exploit so not widespread yet and the person only do it to spread awareness that it can be done.

Bamco already knows about the situation and currently fixing it
https://twitter.com/DarkSoulsGame/status/1485210967009071108

Dark souls 3 server and dark souls remastered server is down, some speculate it has to do with this exploit, will update once the cause is confirmed

Video of the situation
https://youtu.be/GrVn7hD5Y2Y

Just got this from vaati discord server, I'll just copy paste it here.

Hey everyone, it's come to our attention that a Remote Code Execution (also known as RCE) exploit has emerged for Dark Souls III on PC. This means that potentially malicious players connected to your game may be able to execute code by sending information to your game that directly affects aspects of your operating system. This can lead to sensitive information leaks, including but not limited to: installation of malicious programs such as keyloggers or viruses, theft of account information or login tokens, and access to other sensitive information such as banking info or other things that may be stored on your computer.

We've referenced the program Blue Sentinel, a community-made program that serves as a third-party anti-cheat in the past for issues like this; however, it has apparently been made known that RCE can bypass Blue Sentinel. For this reason, it is recommended that if you play Dark Souls III on PC, you may want to stay offline until a further development is made against this exploit. If you still really want to play online, know that there is still a risk of the aforementioned effects, and it would still be recommended to do some research in to the Blue Sentinel mod to see if it can help with anti-cheat effects.

Question: will this exploit also work in elden ring since they use same engine at least from my knowledge.

[Northstrider]

Publicado originalmente por nullpo:

Publicado originalmente por Freak4Leeks:

*Facepalms*

yes it's totally possible that it will be in ELDEN RING.

Well guess I'll wait until an anticheat mod is available in elden ring before buying then. Thank god I resisted the urge to preorder.

This is nonsense. You can still just buy and play the game... just offline.

[Freak4Leeks]

Publicado originalmente por Northstrider:

Publicado originalmente por nullpo:

Well guess I'll wait until an anticheat mod is available in elden ring before buying then. Thank god I resisted the urge to preorder.

This is nonsense. You can still just buy and play the game... just offline.

Eh... no... that really isn't an excuse.... you really shouldn't have to cut off a whole part of the game because the devs haven't bothered to fix an issue that would quite literally kill your PC if they wanted.

[Tander]

Publicado originalmente por nullpo:

Publicado originalmente por Freak4Leeks:

*Facepalms*

yes it's totally possible that it will be in ELDEN RING.

Well guess I'll wait until an anticheat mod is available in elden ring before buying then. Thank god I resisted the urge to preorder.

Although it is possible, the game will receive patches, I would be surprised if something like that was around for longer than an hour.

[Xzi]

Blue Sentinel has been updated to protect against this RCE exploit. Hopefully FromSoft continues working to fix this on their end nonetheless.

[nullpo]

Publicado originalmente por Xzi:

Blue Sentinel has been updated to protect against this RCE exploit. Hopefully FromSoft continues working to fix this on their end nonetheless.

Yes at least for elden ring

[Unmotivated]

Publicado originalmente por Xzi:

Blue Sentinel has been updated to protect against this RCE exploit. Hopefully FromSoft continues working to fix this on their end nonetheless.

so, what exactly IS Blue Sentinel anyway and how does it work?

[SoulSlayer]

this 99% will be a thing in Eldin Ring. Same engine same exploits from dark souls 3 existed in the beta. This game will fail unless they step up the anti-cheat. The fans shouldnt be the ones fixing their game with stuff like blue sentinels in Eldin Ring. But we all know from doesnt care about the security of their multiplayer.

[King]

Will Elden Ring have an Offline mode like every other Dark Souls game?

[Blozzy]

Publicado originalmente por nullpo:

Also so far only 1 person know how to do this exploit so not widespread yet and the person only do it to spread awareness that it can be done.

So the real thing haven't been done yet? Right then, Fromsoft should be aware of this. Im thanking Blue Sentinel for making the fix. Ill install Blue Sentinel from now on

[cridus]

Publicado originalmente por King:

Will Elden Ring have an Offline mode like every other Dark Souls game?

It's not even needed. As long as you don't summon other players you won't be invadeable.
... Buuuut I guess there will also be covenants that can auto-summon you into other worlds, so yeah, maybe also activating the offline mode is safer.

[Blozzy]

Publicado originalmente por King:

Will Elden Ring have an Offline mode like every other Dark Souls game?

It will most probably, but you can play online too, without summoning a phantom incase you don't want to be invaded

[Lylliana of Mirrah]

with people like Amir and people at BS they maybe will made an Official Anti-Cheat For ER.

[nullpo]

Publicado originalmente por TheSUSGaming:

with people like Amir and people at BS they maybe will made an Official Anti-Cheat For ER.

If the community can make an anti cheat pretty sure the dev can make one as long as they spend the resource on it

[nullpo]

I want to make this clear
1. In dark souls 3 blue sentinel mods developer managed to release hotfix for this exploit. If the community can do it fromsoft can do it too at least on elden ring. Not fixing this seems like a bad move.
2. Only 4 people know how to do this exploit so far and those are blue sentinel devs and the guy who discover the exploit. In DS3 it is recommended to play offline just in case after this become public knowledge someone attempt to do the exploit and successful in doing so.
3. If you still want to preorder this game and fears the exploit supposedly PS4 and PS5 are not affected. I personally will still wait till release to buy the game when the issue is 100% solved but if you want there's that.

[Awaken]

PC Master Race moment.