War Thunder Anti-Cheat System Update

Wow. That’s a new information for me thank you!

Let’s be clear. Through the power of Google you found an undated, .TXT document on the BattlEye website that hasn’t been updated in over seven years, that is not actually linked from any of their actual website pages. Not anywhere.

If it was their standard EULA they would say so somewhere on their website, or link to the document you found, surely. Their privacy policy, which does not link to the .TXT document you found, states that the EULA “comes with the games we support”, not “can be found on our website HERE”.

You’re really grasping at straws. That .TXT file you found has no legal weight unless you, the player, is at least somewhat realistically able to consent to it or know where it is.

But hey, yeah, Gaijin has a responsibility to tell us if that .TXT file you found is the legal document we’re all consenting to by continuing to play with BattlEye installed. That’s all people are asking for, really.

2 Likes

Listen bud, you’re super pressed about the “not being updated” thing.
That was from Battleye’s website, so please, open the game and read your “updated” EULA you’re screaming for.

https://www.battleye.com/privacy-policy/

https://www.battleye.com/downloads/EULA.txt

have a good day!

This post was flagged by the community and is temporarily hidden.

3 Likes

Might aswell not have anti-cheat at all then.

Anti-cheat vs cheating software is a war, and you suggest putting up a sign that says “plz no invade” is enough to stop the war.

1 Like

Yep. People really do not understand ACs at all.

Hello,
What if I have a BattleEye Global ban from over 10 years ago will that not allow me to play WT anymore which I have sunk hours and a lot of money in to?

Do you still have the same hardware?

If they perma banned you, its most likely tied to your HWID of your tech, so if you have newer stuff, you might* be good.

*could be tied to steam/IDs as well

I do have newer stuff but when I did it I was like 14 years old and didn’t really know what it would have for effects, years later I try to play Arma and have a similar issue with BattleEye and I am just worried that I will not be able to play the game anymore.

Were you using the same acc?(Steam or launcher or whatever) Did you change the whole computer out or just some parts?

They could push it server-side and stay away from my property and personal data.

They could engage in very public audits regularly.

They could open-source what it does so people can audit them at any time.

VAC is an example that has far better and more consumer friendly approach to cheating - it has a significant portion of its functionality server-side and has only very limited computer access.

4 Likes

Same Steam account but a completely different PC. I think it might just be Steam account got a Global ban then but maybe since I use Gaijin account linked to steam it should hopefully be fine

Problem when you start letting people know how your AC works, its over.

And if someone has an external loader for cheats? What then?

See Quote 1.

Please show me their audits for their anti cheat, which you are requesting from Battleye.
Please let me know what Valve shares about VAC to the public.

Gaben VAC Link
take a sec and read this all the way through

I’de like to preface this by saying Im impressed the devs are going through the minimal effort required to keep Linux support when switching, which almost never happens when other games do this. I honestly applaud this. At least gives some hope this will be implemented better than others as these really depend on how the devs implement these things, that being said;

I have some experience in these things, upgrading from EAC to BE is really just like going from an off brand bandaid to on brand, for a bullet wound. The cheat/anti-cheat war has really kicked off with the rise of p2c (pay to cheat) services and has really shown client-side anti-cheat to not only be a privacy risk, but wholly ineffectual at combating cheating. The issue is that these programs really only look for hashes or strings known to be malicious (pathetically easily to bypass) or known malicious entryways like dll injection. At the end of the day its rather easily to completely make a cheat undetectable to these driver and kernel client anti-cheats.

To put that word wall out of the way, this is to say I feel this is misguided, server-side anticheat is the future out of necessity, barring edge cases it’s not something a normal user can exploit to cheat when implemented correctly, Im simply concerned that efforts (and by extension wasted money) is going towards an already outdated solution when it could be put towards a server-side solution.

My question for Stona is that are we going to see anything regarding a server-side anticheat being developed or implemented?

An external loader or a DMA device would be useful for defeating kernel CLIENT-SIDE anticheat, it would be rather pointless for a serverside. As serverside would be checking other things.

2 Likes

Yep. Spoke about that earlier with Ricochet.

You can also have Battleye on the server, but its is not a full-fledged dedicated one, so might not be as good.

Give it time. :/ They will always be coming out with ways to cheat, its a massive industry.

Security through obscurity is not a thing.

Oh hey, the company actually reacted to community concerns and provided details on what occured in a respectful and concise manner.

It also did not do anything beyond check for whether the computer made connections to some specific servers unlike the kind of mess other anti-cheats do.

This however is an issue. The EU should take a stricter measure to Valve about this as it should to all other software companies.

I do want to note the clear stance Valve had taken against the likes of Riot Games’ approach to anti-cheats:

While you MAY sell your game on the Steam store front, you must make it abundantly clear it is a pseudo-malware/spyware with kernel level access.

There’s another option that came to my mind:

  1. Make it blatantly clear when BattleEye is currently running, clearly marking any and all of its processes and network activity. Make it so you don’t need something like WMIC process list to confirm it was properly shut down.

This can help at least ensure that this thing is only doing things when the game is running and online and it can be verified to only be doing things during that time.

This helps make sure it only has access to the appropriate compartmentalized data on the computer.

2 Likes

Uh…it is very much a real thing

you’ll see that ALONE STO isn’t that effective, but combined with everything else, its essential.

How is this any different from what Battleye has on their website? If they have a detection, they grab that data. Valve did the exact same thing? One could argue that grabbing info from your DNS is a massive breach of privacy, but it seems that everyone (vast generalization) is OK when Valve would do it, but not other ACs.

Again, no anti-cheat developer is ever going to show you how their AC works, unless its a wild situation. Once you start letting people know even the smallest bits of how your AC works, they will develop new ways to bypass it. The best way, which most if not all ACs take, is security through obscurity. If no one knows how your AC works, they won’t know how to bypass it.
There’s a massive tradeoff with having high-security and high-trust, and it puts you into a horrible paradox of

Showing how AC works to prove it doesn’t spy.
Cheat Devs now know how you run the AC, and develop ways to bypass.
Endless cycle.

If you don’t show how your AC works, it takes a entirely different skillset to breakdown an AC and then figure out how to bypass there.

@Stona_WT Will it also be available for the Mac version?

I think it’s good that it’s implemented to make the game cleaner.

Salu2

transition includes Mac and Linux :D

1 Like

Why should there be any processes running on my computer I did not authorize and have awareness of?

Obviously, the operating system itself has a lot of built-in, background processes but on systems you compile yourself - you have the ability to control that and either audit it yourself, or let others you trust to do so for you instead.

Permissions and access should be absolutely minimal - in fact, less than minimal - until the user gave their authorization for more and such an authorization should only be considered temporary.

If a software is running, it should make itself blatantly known and it should only run while observed.

  • Fast dynamic and permanent scanning of the player’s system in user- and kernel-mode using innovative, sophisticated specific and heuristic/generic detection and cheat analysis routines for maximum effectivenes

Why can Valve Anti Cheat function without accessing the kernel?

Fortunately it does seem like Warthunder and BattleEye runs on linux and linux disables the kernel aspects with proton compatibility mode.

4 Likes