this post was submitted on 14 Nov 2025
560 points (97.0% liked)

Linux Gaming

22067 readers
2437 users here now

Discussions and news about gaming on the GNU/Linux family of operating systems (including the Steam Deck). Potentially a $HOME away from home for disgruntled /r/linux_gaming denizens of the redditarian demesne.

This page can be subscribed to via RSS.

Original /r/linux_gaming pengwing by uoou.

No memes/shitposts/low-effort posts, please.

Resources

WWW:

Discord:

IRC:

Matrix:

Telegram:

founded 2 years ago
MODERATORS
 

This is so funny because rust has one of the worst cheating situations and majority of their players are windows users, and theres lots of games that have anticheat that allows linux and have notably less significant cheating problems like marvel rivals. in reality rust doesn't take cheating very seriously because if they did they would have more server side software that detects illegitimate behaviour like tons of other games do successfully...... even most popular Minecraft servers have better functioning anti cheat that is completely server side than rust has while getting kernel access to your pc. its pathetic and lazy development tbh and this entire post from them reads like such extreme cope....

top 50 comments
sorted by: hot top controversial new old
[–] TheMightyCat@ani.social 222 points 1 day ago (13 children)

It's almost like client side anti cheat doesn't work and if proper server side anti cheat is made it wouldn't matter what platform the client is on.

[–] eager_eagle@lemmy.world 169 points 1 day ago (15 children)

"never trust the client" is pretty much a motto of infosec, idk what the hell game devs expect

[–] sp3ctr4l@lemmy.dbzer0.com 53 points 1 day ago* (last edited 1 day ago) (3 children)

See, the wild thing is that I used to run with some actual hackers in GMod... and... I learned from the exploits that they did, how you actually design at least a game mode script that can't be fucked, can't be poked proded or queried directly.

Of course, if the actual exploit is lower level than what I'm writing at, well then I'm still fucked...

I can remember at least one GMod originated, lower level exploit, caused by Garry leaving some direct, unsanitized interface to Steam itself directly exposed via lua... which caused Steam/Valve themselves to step in and rewrite a part of all of Steam, because Garry is s fucking moron, and more or less allowed a virus/malware to propogate through Steam itself, independent of Garry's Mod...

Never did figure out if any of the goobers I knew had any direct ties to that or not.

But anyway, fucking yes, literally never trust the client with anything beyond their own GUI, and barely trust them with that, don't just let them click on anything in their screen space to see if its an item they can put in their inventory, do an actual server side vector ray trace, from the item to the playet, make sure the thing they clicked on is actually near them, put that all into a buffer that locks up if they're calling it at inhuman rates...

It was so easy to item dupe and stat boost and even hijack other players accounts in so many gamemodes I saw.

Fucking one of them had the user set and enter a login password to 'access' their various characters, pick one to spawn as.

Problem?

... That gamemode was actually doing the id check via SteamID, duh.

The username/password thing was a fucking phishing scam, that game mode had a forum, everyone used the same user names, a bunch of people got their hotmails or whatever fucked, by the dev of that gamemode.

... Anyway... yeah, I learned all this infosec type shit first hand, in an earlier 'FacePunch Studios' production.

Fuck Garry, fuck FacePunch, these people are idiot clowns.

Roblox exists now, the GMod roleplay communities independently invented their own ways of monetizing their gamemodes via syncing to their sites and forums with payoal widgets, ya'll missed the boat on that one, no one is going to play S&ndbox in anything close to GMod in its heyday numbers.

[–] AwesomeLowlander@sh.itjust.works 36 points 1 day ago (1 children)

Garry leaving some direct, unsanitized interface to Steam itself directly exposed via lua... which caused Steam/Valve themselves to step in and rewrite a part of all of Steam, because Garry is s fucking moron, and more or less allowed a virus/malware to propogate through Steam itself, independent of Garry's Mod...

That sounds entirely on Steam. The game is the client in this context, and Steam as the server shouldn't be trusting anything from the client.

[–] sp3ctr4l@lemmy.dbzer0.com 18 points 1 day ago* (last edited 1 day ago) (1 children)

This was like, over a decade back, I don't remember it in accurate detail, and also, Garry deleted all the old Facepunch forums, which I do remember having a lot of discussion about this...

But, best I can recall, it was something like a buffer overflow/memory space exploit, because Garry exposed a core Steam function, that normally is only called by other Steam functions, in c++...

Well, Garry decided to give basically a lua api / reference method of accessing it directly, allowing doing arbitrary code injection into it, from anyone running a GMod server or networked client.

So I mean yeah, you can say Valve should not have trusted Garry with low level access to Source and Steam, that that's their bad, they should have expected he would create a serious security exploit out of naivette/hubris, like the proverbial junior sql db admin who just does 'DROP ALL' on prod, as an 'experiment'.

Uh yep, I would agree with that.

... I think this may have had something to do with Steam's, fairly new at the time, achievements system roll out, but I'm not sure if that's correct.

EDIT:

For those that don't know, the vast, vast majority of what GMod is, is basically just opening up core Steam/Source calls done in C++, opening those up to Lua, by mapping them with reference methods, and then allowing Lua scripting via those methods.

Then on top of that, you draw like, the item spawning menu, tool menus, make a standardized template for making a new tool or weapon (SWEPs) or entities, or players or NPCs, etc.

So uh, yeah, if you're not careful with that, if you don't know what you're doing at the lowest level, that can be very dangerous and easily lead to uh, unforseen consequences.

load more comments (1 replies)
load more comments (2 replies)
load more comments (14 replies)
load more comments (12 replies)
[–] andyburke@fedia.io 189 points 1 day ago (2 children)

Get your anticheat code off my fucking cpu and onto your servers where it belongs.

Garbage games do this, simple as.

[–] mycodesucks@lemmy.world 19 points 1 day ago (5 children)

Absolutely. You know where all the players are and what they have. Just check if something that the client is reporting is IMPOSSIBLE and kick the player who threw the request. If you have a player who is performing at over a certain level of realistic performance, have someone manually check them to verify they're legitimately that skilled and if so, flag the account as "actually just that good". It's the only reliable solution.

[–] schnurrito@discuss.tchncs.de 23 points 1 day ago (9 children)

I'm not a gaming dev, but a full-stack web dev; is it not common sense that data needs to be validated on the server side, not client? I don't really get why client-side "anti-cheat" is a thing, but may be missing something.

load more comments (9 replies)
load more comments (4 replies)
load more comments (1 replies)
[–] oyzmo@lemmy.world 83 points 1 day ago (3 children)

So many games that work flawlessly on Linux, so I just skip those that don't:]

[–] krimson@lemmy.world 29 points 1 day ago (1 children)

This is the way.

And let people run their own dedicated servers again.

load more comments (1 replies)
load more comments (2 replies)
[–] arthur@lemmy.zip 74 points 1 day ago

Server side anti-cheat should be the focus of every game company with an MMO game in their catalog. Relying on kernel access is madness.

[–] snooggums@piefed.world 73 points 1 day ago (1 children)

I would bet that the claim of more than half of Linux players cheating is false positives due to shitty anti cheat. Like the anti cheat relying on some windows process or trying to initiate some process and linux is structured differently so it fails.

load more comments (1 replies)
[–] TheDemonBuer@lemmy.world 68 points 1 day ago (3 children)

If Valve's expanding hardware lineup helps increase SteamOS adoption, they'll change their tune.

[–] msokiovt@lemmy.today 22 points 1 day ago

I doubt that they will, given the fact that Linux is misrepresented a lot. They use Linux servers, so why not support Linux already?

load more comments (2 replies)
[–] Nibodhika@lemmy.world 64 points 17 hours ago (1 children)

Let's do some math here, they said:

More cheaters using Linux than legit users (...) .01% of all players base

Let's do a quick math. The maximum peak users for Rust was 259,646 concurrent users according to https://steamcharts.com/app/252490 . Let's assume 60% (more than half) of all the .01% users were cheaters, congratulations, you got rid of all those 16 cheaters... I haven't played much Rust, but I'm fairly confident that there's a bit more than 16 cheaters there.

And that's without getting into the whole client side anti-cheat doesn't work.

[–] Jumpropegazing@lemmy.zip 46 points 16 hours ago (4 children)

You dont understand linux users have black magic hacks that ruined the game for every player on every server, their power cant be understated... Theyre a whole bunch of dangerous hardened criminals

load more comments (4 replies)
[–] rbos@lemmy.ca 57 points 1 day ago (1 children)

So Linux users were 0.01% - one in 10,000 players - and also the main cheating problem?

Some odd math there.

[–] stephen01king@piefed.zip 18 points 1 day ago (1 children)

No, he said he saw more cheat users using Linux than legitimate users using Linux. He also said Linux is another vector to cheats, not that its the main one.

[–] Ghoelian@piefed.social 23 points 1 day ago (1 children)

He said he saw more cheaters than legitimate players on Linux after they stopped support. I mean, no shit?

load more comments (1 replies)
[–] 30p87@feddit.org 57 points 1 day ago* (last edited 1 day ago) (10 children)

Minecraft is actually a good example.

Server owners pay very little to nothing for anticheat, and cheaters have dozens of extremely elaborate clients to choose from, all interfacing with the very open and moddable game. And still, servers that do give a fuck have basically zero rage cheating. ESP? Sure, but that can be solved as well. But beyond that, everything can and is detected. And that in a game as sandboxy and freedomy as MC. It was designed to have a lot of slack in movement and actions, yet ACs are extremely good.

load more comments (10 replies)
[–] brax@sh.itjust.works 56 points 1 day ago (2 children)

Developer of game 'Rust' talks about ~~anticheat~~ rootkits on Linux

This whole anticheat thing is so stupid. Remember when Sony got sued bigtime for including rootkits on their audio CDs? Why are game developers getting away with it no problem? Society is regressing and it's frustrating to watch.

load more comments (2 replies)
[–] yoevli@lemmy.world 42 points 1 day ago (8 children)

That .01% number is out of line with the overall share of Steam users in 2018 by literally an order of magnitude. I can understand some deviation within a particular game, but that figure is so far off that I kind of suspect he just made it up on the spot.

load more comments (8 replies)
[–] GaryGhost@lemmy.world 40 points 23 hours ago (1 children)

They dropped Linux before proton was invented. Go on any cheat website and the requirements will always say to have windows. Maybe proton is exploited by some cheaters, news to me. You should just ban windows, no more cheaters.

[–] Qwel@sopuli.xyz 18 points 23 hours ago (2 children)

It's not proton that is exploited. It's the kernel itself that cannot be monitored by anti-cheats, meaning cheaters could install a modified kernel to mess with the anti-cheat

[–] reksas@sopuli.xyz 20 points 22 hours ago (9 children)

as if the cheaters can't already evade anti-cheats even on windows.

load more comments (9 replies)
load more comments (1 replies)
[–] ashughes@feddit.uk 36 points 1 day ago (1 children)

I’d imagine people on Linux who want to play Rust would be more than happy to shell out $15 and go through the little effort it is to download DLC so they can play on a Premium server when the other option is to shell out $140 for a Windows 11 license and go through the effort of installing that spyware trash to their PC.

On the other hand, Alistair clearly doesn’t want your money so maybe stop trying to give it to him.

load more comments (1 replies)
[–] nialv7@lemmy.world 35 points 1 day ago* (last edited 1 day ago)

I mean, Linux player base is only .01%, even if they are all cheaters, they will literally have no impact... You can't say "Linux user base is too small", and "if you support Linux you want cheaters" at the same time if you want to make sense.

[–] ech@lemmy.ca 34 points 1 day ago (3 children)

When we stopped support for Linux, we saw more cheat users exploiting Linux, than actual legitimate users.

Am I reading this wrong? Or is this guy really trying to say the very predictable rise in exploit users on the platform after they stopped patching the exploits is proof that the platform is full of cheaters?

[–] worhui@lemmy.world 26 points 1 day ago

Yes. It sounds like they removed anti cheat from linux for a spell and watched an uptick in cheater switching platforms. So they weren't willing to support the anticheat, removed it from the game and watched cheaters flock to the platform. I don't think they are saying linux users are cheaters, just that cheater will use linux if vulnerable.

load more comments (2 replies)
[–] Paddle0681@lemmy.world 33 points 1 day ago (3 children)

I gave up Rust when I moved to Linux.

They are changing the game from building a cozy PvP Minecraft, to a clan based wargame.

Cozy players, don't cheat, clans do (Not all, of course).

load more comments (3 replies)
[–] BlameTheAntifa@lemmy.world 32 points 1 day ago

Who could have imagined that the people who create toxic PvP games are as toxic as the people who play them?

[–] rozodru@pie.andmc.ca 30 points 1 day ago (1 children)

mentioning EA games like Apex Legends removing support is laughable. Sure Alistair, ALL those EA games ALL decided around fall of 2024 to ditch support for Linux/Proton. All at the Same time. Not because EA has a deal with Microsoft/Game Pass and NOT because a few months later Microsoft announced their own Handheld with Asus. Just like Riot.

So Alistair how long until Rust is announced for Gamepass with all DLC included?

load more comments (1 replies)
[–] mavu@discuss.tchncs.de 30 points 1 day ago

Fair point. Means I'm not going to play the game, but that's fine too.

Curious to see though if the Valve Frame/Gabe Cube changes things.

[–] dhhyfddehhfyy4673@fedia.io 28 points 1 day ago (14 children)

Glad I never gave this cunt any money.

load more comments (14 replies)
[–] Blackmist@feddit.uk 27 points 4 hours ago

If your cheat detection runs on the client side only, you don't have cheat protection.

[–] termaxima@slrpnk.net 27 points 21 hours ago (4 children)

This is actually one of the absolute worst trade-offs they could have made, if you think about it for like 2 minutes :

They said 0.1% of players were on Linux.

Even if they were ALL cheaters, that's still a tiny amount of cheaters you just "banned"

Almost 100% of whom will just cheat on Windows instead ; whereas all the legitimate Linux players will loudly complain forever.

They decided to sacrifice all the free PR from one of the most vocal groups of players out there, in order to get a ~ 0% reduction in the number of cheaters.

In more simple terms, they just shot themselves in the foot for no benefit whatsoever (though I do grant it's a relatively small "gun")

load more comments (4 replies)
[–] zaki_ft@lemmings.world 23 points 6 hours ago

Skill issue.

[–] Damage@feddit.it 22 points 1 day ago

Fair. There are other games I can play on Linux,.

[–] muusemuuse@sh.itjust.works 21 points 18 hours ago (14 children)

Explain something to me. It’s a multiplayer game anything that affects all players should be handled on the server side, not the client. So if I make a cheat it can only be installed client side, not server side.

So if my hypothetical cheat looks at object placement and any time I sees a small object approaching at a high velocity it can say “I’m going to assume that’s a bullet based on what the server told me about it.” Then my cheat would say “your character moves from here to here until the bullet passes by, then moves back. I will tell the server you moved to the left 20 inches in the blink of an eye then moved back”

This works because the server just trusts what it’s told in this example.

So there are two options here to resolve this. Either the server sets thresholds and denies any placement changes look like the Flash is playing rust, or the server evaluates suspicious placement changes later when the cpu load it’s under is lower. The first approach stops much of this instantly but is computationally expensive and could not scale well for lots of players. The second would work well enough. You need to catch cheaters but it’s doesn’t have to be within the same exact cpu cycle.

In either case, these work because the server is taught to look for something that shouldn’t be possible. The enforcement happens server side. The client doesn’t fucking matter.

There is zero reason to put anti cheat on the client side when it’s not a P2P instance. Target a few servers, not thousands of players.

load more comments (14 replies)
[–] Mikina@programming.dev 20 points 1 day ago* (last edited 1 day ago) (2 children)

one that would be poorly maintained by both us and EAC due to the low user base.

I'm sure I've been playing a lot of games with EAC, because it's actually one of the few ones that support Linux.

If I'm not mistaken (judging entirely by the RAC popup/loading), from the games I'm playing, Hell Let Loose, Fellowship, Helldivers 2, I think even The Finals used it.

Hell Let Loose wasn't working at first, because you have to check a checkbox and enable Linux support when building, which did take them a while.

So, unless I'm misremembering/confusing it with another anticheat, this is bullshit.

Also "unless you have an in-house anti-cheat team"

You made millions out of your player base. You can afford it. You're just lazy.

load more comments (2 replies)
[–] mlg@lemmy.world 20 points 21 hours ago* (last edited 21 hours ago)

This is the same BS CrowdStrike uses to sell their rootkit EDR. I mean, by all means it is a very solid EDR, but it's being used exclusively to cover gaping holes in discrete security as a cop out for not properly composing enterprise infrastructure.

A kernel space agent should only really be running in an environment where every process must be heavily scrutinized and the design of the kernel module is tightly controlled and itself under constant review, like in a proper data center with thousands of critical nodes. Not your laptop or the shitty windows box used to display ads in the screens at the airport.

Crowdstrike keeps spamming new features and techniques without serious consideration to keep their enterprise customers happy, similar to crappy solutions like Vanguard.

Covering obvious blatant logic flaws should be included in your server software, it's the same as sanity checking your inputs because there is always the possibility in may not match what you expect.

From that experience, I'm very comfortable saying that if a game supports Proton or Linux, they're not serious about anti-cheat

This statement is especially insulting to the massive library of games that successfully added Linux support without so much as a hint of issue relating to cheating. Even crappy outsourced dev War Thunder doesn't need to do anything after enabling EAC/BattilEye because they actually spend the .000001% extra cash from their whale revenue to run a service moderation team.

Hell even Valve's VAC system is mostly just about automating moderation tasks so that hackers can be taken down ASAP instead of a lengthy review process.

Or you know, the thousands of games that have better game logic than Rust's anticheat.

[–] Jaysyn@lemmy.world 20 points 1 day ago (2 children)

TBF, you'd have to pay me to play most of these "anti-cheat" games anyhow.

load more comments (2 replies)
[–] Prove_your_argument@piefed.social 19 points 1 day ago (3 children)

This guy is from the UK and former military. I think there must be some kind of weird haywire thing where the military experience made him irrationally upset about people who do not follow rigid rules and structure or something.

No doubt he spends most nights stalking cheater forums and dreaming about the day he finally wins his war lol

load more comments (3 replies)
[–] Wispy2891@lemmy.world 19 points 8 hours ago (1 children)

On Windows the cheating program it's a simple exe that will get kernel access with a simple uac request.

Everyone, especially 12 years olds, are able to run it. (And maybe get malware/ransomware disguised as a cheating program)

None of the losers that need a cheating program to feel validated in online multiplayer games will have the skills to recompile the kernel in Linux to add support for that

load more comments (1 replies)
[–] tabular@lemmy.world 19 points 1 day ago* (last edited 1 day ago) (2 children)

If Linux gamers are not worth his time as we are so few then maybe this singular person's comments are not worth our time over and over.

I hope for more than merely support for a freer OS. I want the whole video games industry to move away from a proprietary model to software freedom - where demand for support is not dependant on the original dev.

load more comments (2 replies)
[–] Lumisal@lemmy.world 19 points 21 hours ago

It's not even real Rust unless it's coded in the real Rust language of Rustlandia.

Otherwise it's just sparkling oxidation

load more comments
view more: next ›