I released 3 updates to my users regarding Ricochet via our Telegram & Discord today.
The TLDR:
1. I am positive that the leak of the Ricochet driver is real, not a diversion, not a trick, wasn't intended, and is near the current version.
- Activision looks bad as a result of this leak. It was meant for private testers and it leaked to the public. That's still a leak.
- They would gain nothing if this was a "trick" other than them wasting time making a fake anti-cheat driver. We are still going to analyze the driver upon implementation & expect it to be a little bit different, but if it was a lot different, that's no problem.
- There is no point for them to test a non-current version. Would you test version 1.0 of your anti-cheat that was on version 6.0? No, you wouldn't. If they are testing a version, it's about as current as it gets, especially with a private test.
2. The anti-cheat targets spoofers a little bit harsher & obviously has entered kernel, but nothing else notable has happened. It's a near copy of Splitegate's AC driver, has many imports, has poor security, & overall accomplishes what I would rate as 2/10 effectiveness in terms of a kernel anti-cheat. UC pasters will bypass with kdmapper pastes & because the driver isn't active until game is launched, the pasters will be able to map & unload before it's show time. Phantom Overlay will obviously only bring you custom in-house work, so we will be doing no such pasting, and we hope the anti-cheat improves so that UC pasting providers die.
3. The anti-cheat can improve, yes, but these things take time. I would say in it's current state, this is about a weeks worth of work we are looking at with about half a day's worth of security. That's how long it would have taken a competent kernel programmer to make this driver & "secure" it. This was not a year in the making as Activision has claimed. This will not scale to some impressive Vanguard (Valorant anti-cheat) level anti-cheat by the implementation deadline. That isn't possible because kernel programming is very finicky & dangerous if not properly done & tested in a controlled way. If they rush faster than major improvements before January 2022, it will be BSOD city. I am sure they will rush it though once they realize empty PR promises don't keep pre-orders happy.
Quote:
Originally Posted by s113434248
I have used it for 2 months. I bought it for a month and tried it out for a while, and the consequences would be cut off for a lifetime. PO is trustworthy
|
Thanks for the kind words. Welcome to PO & soon PO Vanguard. :)