Ricardo Carvalho

Talented programmer

[Ricardo Carvalho @crvvdev]

If you're interested about anti-cheat reverse engineering then please checkout my very detailed and rich article about EMACLAB Anti-cheat.
This anti-cheat software is used in Counter-Strike 2 league called GamersClub, pretty popular in South America.

https://t.co/jLmbpAfVSG

[Ricardo Carvalho @crvvdev]

@russ1anbot @HomericWigger @Sosowski They wanna force ordinary PC users to run on locked proprietary firmware my friend, thats not something targeted for datacenters that mostly runs on Linux.

[Ricardo Carvalho @crvvdev]

I have been telling everyone that the real plan of big hardware companies is forcing users away from open source solutions and real control over YOUR hardware.

[HomericWigger @HomericWigger]

@Sosowski I can see the seething in the comments. The issue with ARM platforms is they lack an equivalent of BOIS/UEFI. The real magic of the PC is the BIOS. That allows for a far more open platform than ARM or even RISC-V. If you care about open computing, it's x86 all the way

[Ricardo Carvalho @crvvdev]

@kernullist Same here, cannot use Claude to reverse engineer anything security related right now. Unfortunately I guess that we should move to weaker unrestricted models

[Ricardo Carvalho @crvvdev]

mesmo eu sendo da area de tecnologia e desenvolvimento eu não entendi bulhufas do que está sendo discutido aqui

[Matheus Marc Guichard @mmarccs]

Tô num server de ML no Discord

Decidiram usar MÉTODO DE NEWTON numa rede neural, a justificativa dos caras foi: “Vai convergir em menos épocas”

kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk demorou 7 minutos para a rede treinar usando o dataset WEB10K

[Ricardo Carvalho @crvvdev]

@hopefullyidont1 @SheriefFYI Yea but builds breaks very often when MSVC compiler updates, it is not very consistent and not their fault to be honest

[Ricardo Carvalho @crvvdev]

@Reeshasx Melhor apagar isso dai já que aqui no Brasil aparentemente encontrar falhas em sistema (principalmente do governo) é considero um crime
mais grave que matar alguém!!

[Ricardo Carvalho @crvvdev]

@NeedlessTrust Warbird goes as far as Windows 7, it is not something new only very obscure and just recently discussed.

[Ricardo Carvalho @crvvdev]

Did you literally know that Windows has something called Warbird that literally executes encrypted shellcode on your computer?
And that all of its functionality is not really known, we just know that exists and is actively running in everyones computers?

[Ricardo Carvalho @crvvdev]

@asukiko_f Interesting analysis that I didn't know about, thanks!

[Ricardo Carvalho @crvvdev]

@kthetrat Yea the plan is to turn everyones PCs into Xbox locked hardware.

[Ricardo Carvalho @crvvdev]

@pr0gam3rdude @anaisbetts Why the fuck would you need a syscall to invoke encrypted code? This could very well be done in userland. To "protect licensing code" you would say, but you don't need to patch NASA level code to activate Windows

[Ricardo Carvalho @crvvdev]

@og_ikypw Some people think that their privacy is violated because anti-cheat software runs in kernel level while the OS itself does sketchy stuff

[Ricardo Carvalho @crvvdev]

@samuels1v @anaisbetts Partially documented, there are things that we simply do not know because no one has reverse engineered all of its functionality in detail

[Ricardo Carvalho @crvvdev]

@anaisbetts Yea this is true, Warbird is used for DRM as far as we know, however my point is that you can run encrypted shellcode in the system at kernel level by design which is sketchy.

[Ricardo Carvalho @crvvdev]

Windows cannot be considered safe to begin with, and it surely does not protects your privacy at all.

[Ricardo Carvalho @crvvdev]

Did you also know that this is done using syscalls?
Which means it gets executed at kernel level, in a very very obfuscated/virtualized proprietary driver!?

[Ricardo Carvalho @crvvdev]

@soundvuitex yea I agree kernel mode anti-cheat shouldn't exist they should've used an hypervisor instead since I can easily get away with almost everything that happens in guest memory using a Hyper-V implant in the first place

[Ricardo Carvalho @crvvdev]

@PaulFTW87 so you gotta do this 'specialized work' while playing ranked val game? lmao

[Ricardo Carvalho @crvvdev]

About the recent Vanguard drama all I can say is that FACEIT AC did it first for at least 1 year now and they're far ahead of the competition; they also closed a hole for SMM/HV abuse that vgk didn't realize or isn't capable of dealing with right now.

[clean @whosclean]

@vxunderground Kernel Anti-cheat? NO WAY! The tens of other drivers on my system surely would never be vulnerable and I can trust hardware companies to write competent drivers instead of le spooky anticheat