Aidan Khoury

[Aidan Khoury @aidankhoury]

Yet another very powerful patchguard and vbs compliant method for hooking system calls globally
https://t.co/F8ImYDU1ki

[Aidan Khoury @aidankhoury]

@UlfFrisk @ItsGamerDoc Yes, 9 years ago. Yes, when half of players were still on pre-Skylake processors. Yes, when Microsoft didn't even properly support the tech on Windows yet.
We've had to be very patient. :)

[Aidan Khoury @aidankhoury]

@Ka11zer @riotgames https://t.co/NDFswDoCAf
"Signatures using elliptical curve cryptography (ECC), such as ECDSA, are not supported in Windows and newer Windows security features. Users utilizing these algorithms and certificates will face various errors and potential security risks."

[Aidan Khoury @aidankhoury]

@Ka11zer @riotgames That is 100% an OBS problem, there is not much Riot can do about that. Microsoft doesn't support ECDSA signed certificates like OBS decided to use, and probably never will. OBS needs to use an RSA certificate to sign their hook DLL like the rest of the industry.

[Aidan Khoury @aidankhoury]

@apekros @FeribHellscream One of the reasons for disapproval was because I couldn't prove the domain associated with the business entity was over a year old, Namecheap refused to provide sufficient information for me to provide Microsoft with.

[Aidan Khoury @aidankhoury]

@apekros @FeribHellscream Yeah I suppose, about 10 months ago

[Aidan Khoury @aidankhoury]

@brinlystorm @number201724 @HexRaysSA Yeah I can definitely agree that it was not communicated properly

[Aidan Khoury @aidankhoury]

@number201724 @brinlystorm @HexRaysSA If you continue to get support for 8.4, then yes.

[Aidan Khoury @aidankhoury]

@number201724 @brinlystorm @HexRaysSA That makes no sense from a business perspective if they are switching to SaaS model. They have to get everyone off perpetual licenses at some point.

[Aidan Khoury @aidankhoury]

@brinlystorm @HexRaysSA So if I understand correctly, you simply disagree with IDA being SaaS? Not sure how else they can migrate perpetual licenses to SaaS without doing this. If they give you perpetual IDA 9, then it wouldnt be fair to new SaaS licenses. What would you recommend they do?

[Aidan Khoury @aidankhoury]

@zodiacon Sometimes Microsoft is late on releasing symbols for latest builds, but I've never seen PDBs missing types like this. Hopefully they upload new symbols. Windows 11 22H2 10.0.22621.607 still missing ntoskrnl symbols last I checked lol

[Aidan Khoury @aidankhoury]

@UlfFrisk @dwizzzleMSFT @riotgames It's not so simple to just enforce HVCI on millions of gamer's machines, especially 5-6 years ago. But the tech is getting there, more and more PCs ship with virtualization and VBS/HVCI enabled nowadays!

[Aidan Khoury @aidankhoury]

@davepl1968 A quick look in IDA with loaded symbols and they updated to use full paths that use expanded environment vars since then. There are 14 of them defined in a symbol called TmSpecialProcesses::CriticalProcessPaths

[Aidan Khoury @aidankhoury]

@PetrBenes INT 20h, see KiSwInterruptDispatch

[Aidan Khoury @aidankhoury]

@halsgenein @ItsGamerDoc Better uninstall your entire operating system then.

[Phillip Koskinas @deteccphilippe]

vanguard 2 now on league of legends, cheating to be deprecated this patch

https://t.co/kd3szRHDHT

[Aidan Khoury @aidankhoury]

@b1ack0wl @nickeverdox @thezdi This is unrelated.

[Aidan Khoury @aidankhoury]

@Jeditobe The code is all there, it works, but the wine authors were not inclined to accept my test cases which used real blobs I extracted from Adobe's installer

[Aidan Khoury @aidankhoury]

Truly the best in the industry.

[GamerDoc @ItsGamerDoc]

A big shoutout goes to @nickeverdox for creating something to combat DMA cheats. This is an incredibly difficult and challenging task, and an industry first. Without this, there would be no way to prevent or detect these DMA cheats in general thanks to him he has pushed the space to what seemed impossible!

check out the anti-cheat winter article 2023 https://t.co/5jDm9ceQGE

[Ryan K. Rigney @RKRigney]

Helldivers 2 got review-bombed by players complaining about their anti-cheat, so I reached out to anti-cheat leaders from Riot Games, Roblox, and Fortnite to get their take.

Are players over-reacting to kernel-level anti-cheat drivers?

Full story: https://t.co/ddUzvmCWcL