Part 1/5:
The Future of Gaming on Windows and Linux: Microsoft's Plan to Eliminate Kernel-Level Anti-Cheat
In a recent blog post about the Windows Endpoint Security Ecosystem Summit, Microsoft revealed its commitment to providing more security capabilities to solution providers outside of Kernel mode. This move has significant implications for the future of gaming on both Windows and Linux platforms.
The catalyst for this change was the massive outage caused by a faulty update from the security company Crowdstrike. When Crowdstrike's Falcon software, which runs in Kernel mode, shipped a problematic update, it brought the global economy to a standstill for nearly eight hours. This incident has prompted Microsoft to rethink its approach to security in the Windows ecosystem.
[...]
Part 2/5:
The debate around anti-cheat solutions in the gaming industry has been a contentious one. Developers have primarily relied on two options: server-side anti-cheat and client-side anti-cheat. Client-side anti-cheat, which requires privileged access to the user's computer, has become increasingly controversial due to the security risks associated with Kernel-level code.
As a Kernel-level developer with over a decade of experience, one Reddit user eloquently explained the dangers of Kernel-level code. They noted that Kernel-level code has "free access to the internal data structures of the kernel" and can "do basically whatever [it] wants to [the] system." This level of control poses a significant security risk, as a vulnerability in Kernel-level anti-cheat software could have catastrophic consequences.
[...]
Part 3/5:
Microsoft's plan to move security features out of the Kernel has several implications for the future of gaming. Firstly, it would make anti-cheat software much less intrusive, as it would have to be implemented with user-level access. This, in turn, would make it easier to emulate with translation layers like Wine or Valve's Proton, potentially paving the way for improved Linux gaming support.
Additionally, Microsoft is exploring the idea of providing standardized security sensors within the Windows Kernel, which game developers could leverage instead of creating their own custom Kernel-level anti-cheat solutions. This approach would help reduce the overall amount of Kernel-level code and the associated security risks.
[...]
Part 4/5:
While this move by Microsoft may address some of the concerns around Kernel-level anti-cheat, there are still potential challenges to overcome. For example, if Microsoft's security sensors do not meet the needs of game developers, they may still seek alternative solutions that could potentially undermine the security benefits of this new approach.
Nonetheless, the trend towards moving security features out of the Kernel is a positive step for the gaming industry. It not only addresses the security risks associated with Kernel-level code but also has the potential to improve the viability of gaming on Linux platforms, which have traditionally been viewed as less secure or less suitable for gaming.
[...]
Part 5/5:
As the gaming industry continues to evolve, it will be crucial for developers and platform providers to prioritize security and user trust. Microsoft's plan to eliminate Kernel-level anti-cheat solutions is a significant step in that direction, and it will be interesting to see how the industry responds and adapts to this changing landscape.