Ace anti cheat.

[Lucifer_Singh]

Can anyone confirm me that ace anti cheat doesnot latch onto any other process other than this game and doesnot send back a ton of packets outside the domains of this game
plus as this game is made by tencent a china based company can anyone of you please let me know it it is safe to install it ?

[Zipyslav®]

for me it slows down my pc completely for other games i unistalled + unistalled anticheat on kernel level and now pc is in normal as usually .

[Elemeno.]

Lucifer_Singh の投稿を引用：

Can anyone confirm me that ace anti cheat doesnot latch onto any other process other than this game and doesnot send back a ton of packets outside the domains of this game
plus as this game is made by tencent a china based company can anyone of you please let me know it it is safe to install it ?

it only runs when game is active , its terminated when the game is , its not even as evasive as vanguard , you lot need to stop worrying ...

[Sanguinius]

Yeah so far it seems to only be active when game is running. I had some doubts but so far so good.

[Th0mpsons]

Aztecoatl の投稿を引用：

Yeah so far it seems to only be active when game is running. I had some doubts but so far so good.

Correct.

[Monarchco]

Aztecoatl の投稿を引用：

Yeah so far it seems to only be active when game is running. I had some doubts but so far so good.

Yeah I wanted to know this too, especially after Helldiver's 2 nuked my PC completely with its anticheat corrupting my entire windows install.

[derSanitoeter]

https://nvd.nist.gov/vuln/detail/CVE-2024-22830

Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.



Can anyone with deeper knowledge evaluate how critical this is.
On 1 page it has a 7.x of 10 and here it has a 5.3 of 10 rating.

[EAX]

The most critical vulnerability is plugging in a cable in order to connect to the internet and the user in front of the system straight after.
If ppl are truly concerned about privacy and all that stuff they shouldnt even use an Iphone since even Siri knows where you live, neither should u use any electronical devices for payment, including your bankcard usage at mcdonalds.

Get a second system for private data, and dont connect it with internet, simple as that.
Everything else id personally consider trolling.
Not even microsoft or big car manufacturers are save from hacks and hence nobody is.
Just visiting a doctor and him saving data of you is a much bigger risk already, best is when they talk about passwords loudly and you can hear it and the password beeing super trash PC amateur style, gg.

[derSanitoeter]

EAX の投稿を引用：

The most critical vulnerability is plugging in a cable in order to connect to the internet and the user in front of the system straight after.
If ppl are truly concerned about privacy and all that stuff they shouldnt even use an Iphone since even Siri knows where you live, neither should u use any electronical devices for payment, including your bankcard usage at mcdonalds.

Get a second system for private data, and dont connect it with internet, simple as that.
Everything else id personally consider trolling.
Not even microsoft or big car manufacturers are save from hacks and hence nobody is.
Just visiting a doctor and him saving data of you is a much bigger risk already, best is when they talk about passwords loudly and you can hear it and the password beeing super trash PC amateur style, gg.

You have no ♥♥♥♥♥♥♥ clue what you are talking about and how serious kernel-level anticheats should be seen.

They work on a level that not even a user with admin account can operate on. And this specific here has serious security level vulnerabilities.

Such an anticheat has already been hacked and abused in the past.

[Lucifer_Singh]

EAX の投稿を引用：

The most critical vulnerability is plugging in a cable in order to connect to the internet and the user in front of the system straight after.
If ppl are truly concerned about privacy and all that stuff they shouldnt even use an Iphone since even Siri knows where you live, neither should u use any electronical devices for payment, including your bankcard usage at mcdonalds.

Get a second system for private data, and dont connect it with internet, simple as that.
Everything else id personally consider trolling.
Not even microsoft or big car manufacturers are save from hacks and hence nobody is.
Just visiting a doctor and him saving data of you is a much bigger risk already, best is when they talk about passwords loudly and you can hear it and the password beeing super trash PC amateur style, gg.

I understand from where you are coming from. But any kernel level peice of software that we install on out system works with the "nt authority" privilege on our system i.e the highest of the privilege any peice of code can have to run plus this game and software coming from a developer and studio that is based from china and the game offer too much of a good stuff for free is the only reason I have my ears straight up for them. I would want to do a full network analysis and process analysis of the anti cheat and the game and would love to publish some results but sadly I'm away from my gaming rig , thats why wanted some advice from the community for the same.

[Lucifer_Singh]

derSanitoeter の投稿を引用：

https://nvd.nist.gov/vuln/detail/CVE-2024-22830

Anti-Cheat Expert's Windows kernel module "ACE-BASE.sys" version 1.0.2202.6217 does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.



Can anyone with deeper knowledge evaluate how critical this is.
On 1 page it has a 7.x of 10 and here it has a 5.3 of 10 rating.

I appreciate you sharing this.
The issue involves improper access control, which allows a local attacker to elevate their privileges from a regular user to a higher level.
So likey 2 scenario can unfold

1. Someone is lurking in the system and happens to stummble across this service and using the said CVE gets a privilege escalation and vertical escalations on the target system/network.

2. Since this service is already gonna be running with a privileges as nt authority it is already going to have a system wide access and nothing else will happen.

[Big Boss]

This is also one of those anti cheats that do not uninstall with the game (same as Helldivers 2)

[Elemeno.]

Big Boss の投稿を引用：

This is also one of those anti cheats that do not uninstall with the game (same as Helldivers 2)

it does technically ... but lives in your registry

[PoofSol]

Elemeno. の投稿を引用：

Big Boss の投稿を引用：

This is also one of those anti cheats that do not uninstall with the game (same as Helldivers 2)

it does technically ... but lives in your registry

Which I assume can be removed after the fact.

[Elemeno.]

PoofSol の投稿を引用：

Elemeno. の投稿を引用：

it does technically ... but lives in your registry

Which I assume can be removed after the fact.

everything can removed , but everything you uninstall ... registries are left behind ,

ive yet to hear anything bad about ACE thus far...

except for a post here where someone said it made their gpu usage go high ... thats about it

[Xash]

"kernel level has been hacked in the past"...

By far my favourite thing in here.

EVERY program on EVERY PC has been hacked in the past fully or at least to some degree!
Microsoft OS? Millions of times!
Linux? Sure.
Discord? As well.
Many little programs or games? Certainly!

EVERYTHING can be hacked as long as it somehow connects to the internet or is simply on a device that is able to connect to the internet/mobile network.

Grow up, be responsible and stop being paranoid because something is based in China or Russia.

Fun fact? I use a russian email provider and it's BY FAR the safest, fastest and most reliable where i get the least spam compared to eg google, outlook and others!