![]() |
![]() |
|
August 05, 2005To All Game Authors: QUIT BEING MORONS!!!!Alright people... I wish to vent. Feel free to direct this to /dev/null and move along if you don't care to listen. If you are a game developer for Windows, STOP using tools like PunkBuster... or at the very least boycott their idiocy. I am SICK AND TIRED of being kicked from servers on the RARE chance I actually go online and play, simply because I run with least privilege and will NOT, as their FAQ suggests run as admin. Here is a snippet from their site: I keep getting kicked by PunkBuster for "Blocked O/S Privileges"? You are insane if you think I am going to allow a remote download of maps and executable content as administrator on custom servers. You are nuts. And there is NO REASON IN HELL to NEED it. Quit being lazy, and write the games properly. Thank you for your cooperation. P.S> I fully understand the need to balance the playing field and make games fair. I don't mind the idea of Punk Buster... just the fact you want me to sacrifice security for no good reason. About a year ago I blogged about how "Least Privileges + Games = Microsoft Achilles Heel?". You can read more about my thoughts on the whole thing there. Posted by SilverStr at August 5, 2005 08:29 PM | TrackBackComments
Punk Buster definately is super lame. I understand their reasoning for only 1 small edge case: What if your aimhax0r bawt is running as administrator but your game is running as you? Since PB running as a LUA will only find stuff your LUA has access to, you absolutely NEED it to check for the admin level stuff. Then again I think, but Admin is a completely different context and it's damn near impossible for even an Administrator's executable to inject code into a LUA (or any other account for that matter). I believe SP2 has something against that very idea. So yea, I don't trust PB much at all. Anyone who says they absolutely NEED admin priveledges is usually lying or on the ignorant side. Until PB can give a more reasonable answer I'll think they suck. They were fine without it just a year or so ago and unless there's some concrete evidence proving it's needed (like an actual example of this happening) I'd say they might be bluffing. The sad part is because game companies are so focused on just making the game, they'll probably accept just about anything regardless of what it does to our computers. As long as it doesn't interrupt our game and increase costs for the company they could probably care less. Posted by: Jeremy Brayton at August 5, 2005 11:07 PMTell us how you really feel. ;-) It will be interesting to see how Vista will force these vendors to think about running as non-admin. Good post. Keep fighting the good fight. Posted by: Some Dude from Canada at August 6, 2005 08:37 AMGood greif! People actually put up with a system that requires them to grant admin privs to a remote server? I'm glad I don't play computer games. I had no idea this was par for the course in that universe. Posted by: Bryan at August 6, 2005 12:23 PMI didn't understand till yet what do you mean by remote server. Posted by: Harry at August 9, 2005 09:24 PMI didn't understand till yet what do you mean by remote server. Harry Posted by: Harry at August 9, 2005 09:25 PMI don't have much more intrest in games.But i enjoyed reading you're article.You write such a nice article. |
![]() ![]()
My 5 Favorite Books
Writing Secure Code
Secure Programming Cookbook Security Engineering Secure Coding Principles & Practice Inside the Security Mind ![]()
My 5 Favorite Papers
Smashing the Stack
Penetration Studies Covert Channel Analysis of Trusted Systems DoD Trusted Computer System Evaluation Criteria NSA Security Recommendation Guides ![]()
Archives
April 2007
March 2007 February 2007 January 2007 December 2006 November 2006 October 2006 September 2006 August 2006 July 2006 June 2006 May 2006 April 2006 March 2006 February 2006 January 2006 December 2005 November 2005 October 2005 September 2005 August 2005 July 2005 June 2005 May 2005 April 2005 March 2005 February 2005 January 2005 December 2004 November 2004 October 2004 September 2004 August 2004 July 2004 June 2004 May 2004 April 2004 March 2004 February 2004 January 2004 December 2003 November 2003 October 2003 September 2003 August 2003 July 2003 June 2003 May 2003 April 2003 March 2003 February 2003 January 2003 December 2002 November 2002 October 2002 September 2002 August 2002 July 2002 ![]() |
|