I feel like it's necessary to post this since dbd uses eac
Apparently there's a rce exploit going on and people aren't sure if it's just in apex or eac in general
Apparently there's a rce exploit going on and people aren't sure if it's just in apex or eac in general
Read THIS post.
Tldr: This is an archived version of the DBD forum, it has all posts, comments and media. The archived data will be published at the end of October. This site is not in any way affiliated with or endorsed by Behaviour Interactive.
Comments
Bro the BP event is about to just start and this makes me really nervous. Can anyone from devs comment on this please?
Like I want to play new event but not at cost of my PC...
I am playing singleplayer game for now.
Please inform us if it's safe to play DBD!
That's why I felt like it was necessary to comment as it's currently unknown if dbd is vulnerable to the exploit as well
Educate me please. As a lowly consoler I'm unfamiliar with terms like RCE and EAC and the like. What's going on? What do I need to do or look for?
I don't think console players are effected. EAC is Easy Anti Cheat that uses many games including DbD and there is atm maybe exploit that bypass or uses EAC to instal malware and bad stuff on your PC or something like that. That twitter post explains it much better.
Eac stands for easy anti cheat which is a software dbd and a lot of games use
And rce stands for remote code execution and having an exploit that allows it is extremely bad as it could lead to someone who knows the exploit to run malicious code on your device and get full control of it which is really bad
Better explaination made my OP, yes.
Also I hope we get answer ASAP because the event starts in like 2 hours.
so Easy Anti-Cheat is used in a lot of games, created and developed by Epic Games, same people behind Fortnight and Unreal Engine (which DBD also uses). It basically runs by validating files when the game is booted at a kernal-level (which is one-step beyond what a System-Administrator is able to do), similar to a lot of other anti-cheats.
RCE stands for Remote Code Execution, and is a type of malicious attack when a third party is able to gain access to your computer, and then run code on it at whatever level they have access to, essentially hijacking it. It can be anything from moving a mouse to collecting all personal information stored on (and anything inputted essentially ever in the future lol) to locking down your entire computer and confiscating the files in what's known as a ransomware attack (and they make you pay them to unlock your files and leave you be, until they get bored at which point they can re-lock your files if you don't do a thorough wipe to get rid of said malicious code).
So, in this scenario as the fault is with EAC, which runs at a kernal-level, anyone exploiting the fault with EAC is able to enter your system at a level higher than ordinary users can actually see, and run code that you would be wholly unaware of because you cannot access that level yourself, to steal information and hijack your system for whatever purposes they want. That's my understanding of it, anyway.
I'm sure it could affect consoles, but I'm not sure why you would. They're often locked down pretty tight at all levels, and anything that can be done on a console could be done on a PC with substantially less effort. You're more likely to get your account and console banned for tampering than you would be to have your personal information relinquished from them, so while I wouldn't advise it you're probably safer there than you are on PC.
Again, this is all from my own understanding, and if I've gotten something wrong please do let me know.
Do we even know if the game/AC is the source of the exploit or if the tournament player's systems were targetted beforehand?
No, we don't, but I'd rather assume worst case scenario than not.
I wouldn't advise playing any game that has crossplay and easy anti cheat just to be extra safe because we haven't seen an rce exploit on a crossplay game before and it's unknown if could hurt consoles as well if you get matched with an rce exploiter that's playing on pc
We don't that's why we seen people like mutahar advising people to avoid easy anti cheat games along with apex until we get more information and a announcement
It's highly unlikely to affect anyone on console or even Steam Deck/Linux. If it's written to exploit a Windows system, it's not going to execute against a totally different OS.
Correct me if I'm wrong but doesn't xbox use a modified version of windows
Especially, if that part REC is true. Better to not play for a while than risking your pc and maybe even getting banned by EAC in the process. Until we have further information at least.
Thanks for the heads up, @Majin151. I would have missed this otherwise.
If this is an EAC issue and not just Apex then I'm hoping for the Blood Moon event to be extended. This is rough
Whelp eac tweeted after 5 years of inactivity saying it's not caused by eac
https://twitter.com/TeddyEAC/status/1769725032047972566?t=NhjQoY05z6ha3jc7pZnlhw&s=19Now we wait for ea's response to see if they back up eac's tweet or not
This is most likely s Source engine specific issue, RCE and Source have had a long history together.
Yeah, I would be extremely surprised if this wasn't a Source issue.
We will just have to wait and see as they didn't outright say there's no rce exploit just that at this time they are confident there isn't one
The one EAC employee remembering the Twitter password to say not me y'all and leave again
Ty to you all I appreciate the insight! 🙂
Its reasons like this why kernel-level anti cheat is bad. You don't need kernel level to do anti cheat.