September 16th, 2024

Microsoft plans to kill kernel-level anti-cheat

Microsoft plans to enhance security by moving functionalities out of the Windows kernel, improving Linux gaming compatibility, particularly on the Steam Deck, while addressing anti-cheat software challenges.

Read original articleLink Icon
Microsoft plans to kill kernel-level anti-cheat

Microsoft has announced plans to enhance security measures by moving certain functionalities out of the Windows kernel, a decision influenced by the recent Crowdstrike incident. This shift is expected to significantly impact gaming on Linux platforms, particularly for devices like the Steam Deck. By eliminating kernel-level anti-cheat software, which has hindered the compatibility of many games with Linux, Microsoft aims to facilitate easier emulation through user-accessible solutions like WINE and Valve's Proton. This change could potentially allow popular games that currently rely on kernel-level anti-cheat, such as Fortnite and Paladins, to run on Linux systems. While Microsoft acknowledges the Crowdstrike vulnerability in its communications, it stops short of directly attributing the new security approach to that incident. The company is focusing on creating a new security platform that emphasizes resilience and tamper-proofing, responding to demands from customers and partners for enhanced security capabilities outside of kernel mode. However, it remains to be seen how anti-cheat vendors will adapt to these changes and whether they will continue to restrict Linux gamers.

- Microsoft plans to move security measures out of the Windows kernel.

- This change could improve Linux gaming compatibility, especially on devices like the Steam Deck.

- Kernel-level anti-cheat software has been a barrier for many games on Linux.

- The new security platform aims for resilience and tamper-proofing.

- Future adaptations by anti-cheat vendors may still affect Linux gaming access.

Link Icon 5 comments
By @marcin1509 - 6 months
If it's true, I'll be very happy with that. I hope that failure with crowdstrike taught MS to better choosing of things having a kernel level access. Anticheats shouldn't have it.
By @ThrowawayR2 - 7 months
Says who? The author makes a leap from endpoint security features for enterprise being moved out of kernel space to kernel level anti-cheat no longer being possible. The MS blog post doesn't even mention gaming. For all we know, this change may apply to Windows Server and Windows 11 Enterprise only or not apply to gaming anti-cheat at all.
By @not_your_vase - 7 months
Asking as a non-Windows user: isn't it good actually? E.g. this would make Sony-style rootkits also impossible (which makes some people twitch to this very day).

---

  > Nope, we’ve got to fight for the freedoms we have today, where we have them today.
This quote is just simply disingenuous. Forcing people to install all kind of magic kernel-level driver-imitations to be able to play the game du jour is the opposite of freedom.