That’s how they got in. That says nothing about the damage:
Riot Games did not release additional details about the hackers’ working methods or the impact of the attack,
@Joao suggests (without substantiation) that the damage is large enough that it may affect the security of kernel drivers used by anti-cheat solutions.
In earlier times (late 90s, early 2000s) we also had anti-cheat solutions that only lived in user space. The rest of the anti-cheat was crowdsourced (through community servers and bans). So you had a cheater now and then, but you got rid of that in no time. You also occasionally had a server admin who abused his power, but then you simply looked for another server. It required more maturity from players, but in my opinion (as a player and, at the time, an amateur server administrator) gave a more satisfying result.
Nowadays, game developers/publishers are mainly relied upon as service providers to provide the most ‘clean’ experience possible. After all, community servers no longer exist for most* games (among other things to support planned obsolescence). For that ‘clean’ experience, the most powerful weapon is used, which is anti-cheating at the kernel level. That that’s potentially unsafe for players and potentially sidelining non-cheating players is collateral damage the company doesn’t feel on its financial statements.
* Most = mainly AAA productions. Smaller developers and therefore smaller multiplayer games rely more often on community servers. This obviously concerns fewer players, and is therefore less known.
[Reactie gewijzigd door The Zep Man op 22 januari 2023 11:59]