Why anti-cheat software utilize kernel drivers; a view from reverse-engineering experts

As an engineer with a background in infosec/reverse engineering: I gilded this post a few times because it is fucking accurate and I am rather tired of seeing incorrect posts with little to no technical facts or accuracy.

Yes and no. Like this statement for instance:

Right, it is also possible that someone hacks Microsoft, or literally any other company that runs code on your computer.

Yes, and this happens. All the time. Windows has had literally thousands of security vulnerabilities over the past few decades, some of them resulting in massive botnet and malware infections. That's an absolutely terrible argument for why we should allow our computers to have an even larger potential attack base. The security risk isn't a hypothetical problem either: it's literally happened before.

This is most likely a bug in Vanguard that scans the usage of serial ports, and is not worth of further discussion.

There's a special kind of special in arguing that Vanguard won't be a security vulnerability and then admitting it already has a bug in it.

/r/pcgaming Thread Parent Link - secret.club