this post was submitted on 02 Oct 2026
231 points (97.5% liked)

Technology

88390 readers
3838 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] UnLocoPoco@lemmy.world 14 points 10 hours ago (1 children)

This is why kernel level anti cheat and every variant of it include the tpm ones should be discouraged. Performance Hits are huge too in case of denuvo

[–] frongt@lemmy.zip 1 points 1 hour ago* (last edited 1 hour ago)

Those things are completely unrelated to this.

[–] W3dd1e@lemmy.zip 9 points 9 hours ago

The article says because he installed the chip and launched Valorant, his other PC components such as his motherboard are not also blocked.

He can’t play a Riot game unless he buys an entirely new computer.

[–] carrylex@lemmy.world 41 points 22 hours ago

Ah classic Riot games, investing all the money in anti-cheat while their launcher lacks basic functions like "download throttling".

No idea how Steam keeps winning...

[–] ianhclark510@lemmy.blahaj.zone 149 points 1 day ago (1 children)

Send it to me, I consider a processor incapable of playing Valorant to be a free upgrade

[–] Smoogs@lemmy.world 7 points 12 hours ago* (last edited 12 hours ago)

valorant is the facebook of games. only boomers blithly ok with human right violations linked to the socials they use would think it is a good idea to stick with it

[–] mavu@discuss.tchncs.de 59 points 1 day ago

This is so dumb. as if there was no reasonable way to detect cheating without these super invasive anti-cheat monstrocities.

[–] palordrolap@fedia.io 90 points 1 day ago (5 children)

I would be very interested to know how they are able to identify a specific CPU. The article speculates but does not answer this question.

The fact that this is even possible is a security nightmare.


OK, I've done a bit more digging and pieced it together. Acknowledgement to @dual_sport_dork@lemmy.world for prompting me to try (again) to find a command that might do it among other things.

IMO, this sort of information shouldn't be in processors in the first place, but apparently it is there and needs admin/root access to, well, access it.

... and the game in question requires kernel-level anti-cheat, so of course, it has the necessary access.

The command for Linux is sudo dmidecode -t processor, which dumps a lot of info including an ID field, which is supposedly the CPU's specific identifier. It can be grepped for or otherwise filtered out.

My own Ryzen gives 8 hexadecimal pairs, so it's a 64-bit value.

I would not know that that was unique to my specific individual processor if I had not been told, but I'll assume that at least part of it is not unique between Ryzens of the same calibre. (I won't be posting any of it for comparison, for obvious reasons.)

So the upshot is, if you don't want to be identified right down to your CPU, don't run programs as root if there's any chance of them phoning home.

[–] nyan@lemmy.cafe 2 points 9 hours ago (2 children)

Question is, what happens if you don't have dmidecode installed? Even more interesting, what happens if you've replaced it with a fake that spews back values of your choosing? If they're bundling it, given that it appears to be GPL2, they're opening themselves to a lawsuit unless they provide source upon request.

(Somehow, I don't think they're actually using dmidecode.)

dmidecode is a tool for reading loads of platform registers, it is obviously not the only way to do it, or even the intended way really. Riot has almost certainly implemented the functionality from scratch in their anticheat, it’s a relatively trivial thing to do.

[–] palordrolap@fedia.io 1 points 5 hours ago (1 children)

What I've read just now is what I'd deliberately not gone looking for up to this point in case I found this out.

Linux and Windows happen to require that the executables that access that information be run with root privileges, but it looks like that's merely an affectation.

It seems that any old piece of software, without root or other privileges, can independently run the CPUID instruction that obtains a processor's serial number.

I do not like this one bit.

[–] frongt@lemmy.zip 1 points 1 hour ago (1 children)

Why not? Is that information considered sensitive? Personally I tend to avoid running untrustworthy programs outside of a sandbox or VM.

[–] palordrolap@fedia.io 1 points 1 hour ago

Are you a believer in the idea "They who have nothing to hide have nothing to fear"? Hint: You shouldn't be.

And do you know for certain that your sandboxes and VMs don't simply pass through the CPUID instruction? And if they don't, do they rotate their fake CPUIDs? And how often does that happen?

[–] inari@piefed.zip 30 points 1 day ago

Running proprietary programs as root is my definition of hell, especially when it's something frivolous like a game

[–] dual_sport_dork@lemmy.world 34 points 1 day ago (1 children)

You can extract the chip's serial number in software trivially. In Windows, from a commandline:

wmic cpu get pricessorid

I'm positive you can do the same with some Linux command, and failing that certainly with basically every vaguely modern benchmarking tool. Same deal with hard drives and probably also video cards. My BIOS/UEFI even enumerates all my connected hard drive serial numbers on screen if I interrupt its graphical boot screen.

Given that the anti-cheat schemes these competitive games are literal rootkits, I don't think gathering the user's hardware serial numbers in order to attempt identify them is much of a stretch.

You at least could in the past, I haven't had to do it in a while. Seems like the command would just be "dmidecode", with grep if you're looking to automate it

[–] FireWire400@lemmy.world 3 points 1 day ago (1 children)

I wonder if Riot would provide any info on the ban status of a certain component when given its ID...

[–] frongt@lemmy.zip 5 points 1 day ago (1 children)

They would not.

Anyone doing anti-cheat stuff tries to keep it as secret as possible, so that the cheaters have a more difficult time working around it.

[–] JcbAzPx@lemmy.world 4 points 23 hours ago (1 children)

It sounds like at least one cheater already figured it out. Just swap the chips. Then sell the old one used and pass the problem onto someone else.

[–] AwesomeLowlander@sh.itjust.works 3 points 18 hours ago

From the article, it tracks and blacklists other major system components too, so you would essentially have to replace most of your system. Probably the entire thing, since a single leftover bad component would lead to your entire new system being added to the blacklist.

[–] ripcord@lemmy.world 2 points 1 day ago (1 children)

This has been a thing for decades

[–] palordrolap@fedia.io 6 points 1 day ago

Either I knew and forgot, or misunderstood it as CPU family identification whenever I've come across it. Denial is also a possibility. We'll see if I remember this in a month or two.

[–] db2@lemmy.world 24 points 1 day ago

That's a whole lot of bullshit just to start a game. Pass.

[–] Carmakazi@piefed.social 26 points 1 day ago (1 children)

Happened to a coworker with CoD 2019+ with a Facebook marketplace rig. Was also not being smart, and after he got his account banned and not realizing what was going on, he got his brother to log into his account as a sort of test, and also got that account banned.

Dog shit AI slop games anyway

[–] FireWire400@lemmy.world 9 points 1 day ago* (last edited 1 day ago) (2 children)

Wow, that sucks. I don't even know if you could get your money back for the CPU in that case, as the seller could just claim it wasn't him. Doesn't sound like Riot is being that cooperative in such cases either.

[–] nyan@lemmy.cafe 1 points 9 hours ago

Claim that it isn't fully functional (which it isn't, for the buyer's use case), and therefore not as described?

[–] wesker@lemmy.sdf.org 12 points 1 day ago* (last edited 1 day ago) (1 children)

HWID bans usually involve a much larger fingerprint of the system hardware. Riot would have to be really big assholes not to revert the ban, if they were to snapshot the rest of his system and see that only the CPU was part of the original ban.

[–] JcbAzPx@lemmy.world 14 points 23 hours ago

Riot would have to be really big assholes not to revert the ban,

So, yeah, that's not getting reverted.

[–] lil_baka@ani.social 7 points 1 day ago (2 children)

What's wrong with this website. I don't see the button "reject". I'm not gonna accept whatever that is just to read this.

[–] Slartifartblast@piefed.social 1 points 13 hours ago (1 children)
[–] lil_baka@ani.social 2 points 13 hours ago

I have uBlock origin, it blocked 5 resources on load but it didn't prevent the "With our Pur subscription you can use heise.de without tracking, external banner and video advertising for €4.95 / month" popup.

[–] TrumpetX@programming.dev 4 points 22 hours ago

I finally found it, it's like 300 pages of individual rejections you need to go. Hard pass.

[–] yggstyle@lemmy.world 5 points 1 day ago

Meanwhile I play(ed) on a VM and would frequently have to fight with support over: no, fuck you - unban me. Virtual hardware isn't a valid reason to ban every few months. It worked. It was bothersome - so I quit playing. Ample free time for games that weren't user hostile.

[–] PeteWheeler@lemmy.world 4 points 1 day ago

The odds of this happening are so low, but at the same inevitable.

Funny. Sucks for the buyer.

load more comments
view more: next ›