The Vanguard Incident

Ryscu
14 May 202408:10

TLDRThe video discusses the introduction of Riot's kernel-level anti-cheat system, Vanguard, into League of Legends. It addresses concerns about Vanguard's impact on PC performance and user privacy. The video provides a comparison of FPS before and after Vanguard's release, showing no significant impact. It also explains the prerequisites for Vanguard and how to disable it. Using Wireshark, the video demonstrates that Vanguard does not send data until the League of Legends client is open. While acknowledging the controversy and potential issues with kernel-level anti-cheat systems, the video concludes that Vanguard is not as invasive as feared, especially since it does not transmit data until the game starts. However, it does mention the challenges faced by Linux users and those with Windows 11 systems regarding Vanguard's compatibility and security requirements.

Takeaways

  • 🚀 Vanguard, Riot's new anti-cheat system, has been introduced to League of Legends, raising concerns about its level of access to users' PCs.
  • 🔍 A performance comparison shows that Vanguard does not significantly impact FPS (frames per second) during gameplay.
  • 💻 Vanguard has certain prerequisites that must be met for it to run properly; otherwise, users won't be able to play the game.
  • 🛡️ The system can be disabled via command prompt or by booting the PC in safe mode, which disables third-party drivers.
  • 📈 Vanguard's kernel-level access is a point of concern, but it does not transmit any data until the League of Legends client is open.
  • 🔗 Using Wireshark, a network analyzer, it was found that Vanguard does not have network access until the game client is launched.
  • ❌ Vanguard could potentially disrupt community-created game modifications, such as custom skins, although Riot has confirmed their continued functionality.
  • 🐧 Linux users are affected by Vanguard, as it's not supported, and they may need to dual boot to Mac or use a virtual machine to play.
  • 💾 Windows 11 users with TPM 2.0 may face additional setup hassles due to compatibility issues with Vanguard.
  • 🚫 There have been no reports of bans related to the use of custom skins since Vanguard's release, suggesting a more lenient approach by Riot.
  • 🛡️ While kernel-level anti-cheat systems like Vanguard are invasive, they are necessary to combat increasingly sophisticated hacking techniques.

Q & A

  • What is Vanguard and why was it introduced to League of Legends?

    -Vanguard is an advanced anti-cheat system developed by Riot Games for League of Legends. It was introduced to combat cheating in the game by running at a kernel level, which allows it to detect and prevent tampering with the game's processes more effectively.

  • How can the Vanguard prerequisites screen be bypassed?

    -The prerequisites screen can be bypassed by using the League client's web browser functionality. Similar to how one might use 'inspect element' to remove elements from a web page, the error message can be manipulated to allow full functionality without Vanguard running.

  • What is the impact of Vanguard on the game's performance in terms of FPS?

    -In the isolated test mentioned in the transcript, Vanguard does not seem to impact the frames per second (FPS) to any noticeable extent. The FPS remained around 1,000 both before and after Vanguard was implemented.

  • How can users disable Vanguard if they encounter issues?

    -Users can disable Vanguard by opening the command prompt and typing a specific command to disable the kernel driver. Alternatively, rebooting the PC in safe mode will disable any third-party drivers and allow Windows to run in a barebone state.

  • What is the extent of data access and transmission by Vanguard?

    -Vanguard does not appear to have any network access until the League of Legends client is opened. It contacts the driver to confirm a valid anti-cheat session before enabling features to watch for tampering with the game process.

  • How does Vanguard affect custom skins in League of Legends?

    -Initially, there were concerns that Vanguard would categorize custom skins as third-party programs and flag them as unsafe. However, Riot Games has confirmed that custom skins are working fine on the Philippines server with a new DLL patching option, and there have been no reports of bans due to using custom skins.

  • What are the implications of Vanguard for Linux users?

    -Linux users have been significantly affected by the introduction of Vanguard, as it has effectively made it impossible to play League of Legends on that operating system. The only workaround suggested is to dual boot to a Mac or run a virtual machine, as the Mac version of the game does not require Vanguard.

  • How does Windows 11's TPM 2.0 feature interact with Vanguard?

    -TPM 2.0 is a security feature of Windows 11 that allows it to run programs with a higher level of trust. However, it can cause issues with Vanguard, requiring users to change settings in their BIOS, which can be a hassle for those less tech-savvy.

  • What is the general stance on kernel-level anti-cheat systems?

    -Kernel-level anti-cheat systems, like Vanguard, are necessary because they can detect and prevent memory injections, which are a common method for using hacks in games. However, they are controversial due to their invasive nature and potential for misuse.

  • What is the potential risk if an attacker gains access to Riot's systems again?

    -If an attacker gains access to Riot's systems again, there is the potential for a significant security breach with more at stake than before. This is due to the escalating 'arms race' between cheats and anti-cheat systems, where each new cheat requires a more invasive countermeasure.

  • What is the current status of Vanguard's impact on the community?

    -As of the time the transcript was recorded, Vanguard has been out for about a week, and there have been no reported cases of players being banned due to Vanguard. This suggests that the initial concerns about its impact on the community have not materialized to a significant extent.

  • What are the potential issues for users who are not tech-savvy when dealing with Vanguard?

    -Non-tech-savvy users may face difficulties in dealing with Vanguard, such as understanding the prerequisites, disabling the system when needed, or resolving issues that may arise from BIOS settings. The complexity of these tasks can be a barrier for users who just want to play the game without technical complications.

Outlines

00:00

🤔 Introduction to Vanguard and Its Impact on PC Gaming

The video begins with the introduction of Riot's anti-cheat system, Vanguard, into League of Legends. The narrator expresses concerns about the controversy surrounding Vanguard, particularly its extensive access to users' PCs. The video aims to explore the potential risks for the average user and whether it negatively impacts game performance. A comparison of FPS before and after Vanguard's implementation suggests no significant impact on performance. The narrator also discusses the prerequisites for Vanguard and how to disable it, using command prompt or safe mode reboot. The video touches on the social media panic about Vanguard potentially causing PC issues and selling user information, but no concrete evidence is presented. The use of Wireshark, a network analyzer, reveals that Vanguard does not send data until the League client is open, indicating minimal data transmission.

05:00

🚫 Vanguard's Impact on Custom Skins and Compatibility Issues

The second paragraph delves into the impact of Vanguard on custom skins, a community-created feature in League of Legends. Initially, there was concern that Vanguard would flag these as third-party programs and make them unsafe. However, it appears that custom skins have been cleared for use with Vanguard, and no bans have been reported. The video also addresses compatibility issues faced by Linux users, who are unable to use Vanguard and must resort to workarounds. Windows 11 users with TPM 2.0 have also experienced issues, requiring changes to BIOS settings. The narrator acknowledges that while Vanguard as an anti-cheat system is not inherently bad, its invasive nature due to running on startup is a point of contention. The video concludes by discussing the necessity of kernel-level anti-cheat systems to counteract increasingly sophisticated hacks and the ongoing 'arms race' between cheat developers and anti-cheat systems.

Mindmap

Keywords

💡Vanguard

Vanguard is a kernel-level anti-cheat system introduced to League of Legends by Riot Games. It is controversial due to its high level of access to a user's PC and the potential risks it poses. In the video, it is discussed how Vanguard operates, its impact on game performance, and the concerns surrounding its implementation. The term is central to the video's theme as it explores the implications of using such a system in a popular online game.

💡FPS (Frames Per Second)

FPS refers to the number of frames a game can render per second, which is a key measure of performance. A higher FPS generally means smoother gameplay. In the context of the video, the script compares the FPS before and after the introduction of Vanguard to assess its impact on game performance. The finding that there is no noticeable difference in FPS with Vanguard enabled is significant in addressing concerns about the system's potential to degrade the gaming experience.

💡Kernel-level access

Kernel-level access refers to the highest level of access a program can have on a computer, where it interacts directly with the system's hardware. Vanguard requires this level of access to function effectively as an anti-cheat system. The video discusses the implications of such access, including potential privacy concerns and the ability to monitor and prevent cheating in League of Legends. The concept is central to understanding the controversy around Vanguard, as it raises questions about the balance between security and user privacy.

💡Custom skins

Custom skins are user-created modifications that change the appearance of champions in League of Legends. The video mentions that Vanguard initially raised concerns about detecting these as third-party programs and potentially categorizing them as unsafe. However, it is later clarified that custom skins seem to be working fine post-Vanguard's implementation, indicating that Riot Games has provided a solution to maintain the community-created content without compromising the anti-cheat system.

💡Linux users

Linux users are mentioned in the video as being affected by Vanguard's implementation, as the anti-cheat system does not support the Linux operating system. This has led to the community of Linux users having to find workarounds, such as dual-booting to Mac or using virtual machines, to continue playing League of Legends. The mention of Linux users highlights the inclusivity challenges that can arise when introducing new technologies to a diverse player base.

💡Windows 11

Windows 11 is referenced in the context of Vanguard's system requirements, particularly regarding the TPM 2.0 security feature. The video discusses how Vanguard interacts with this feature and the potential issues it can cause for users who have not enabled TPM 2.0 or have bypassed it during Windows 11 installation. This part of the video addresses the technical challenges some users may face due to the specific security features of the operating system.

💡Outplay

Outplay is a service mentioned in the video that automatically saves a player's best moments in games, such as kills, deaths, assists, and ultimates. It is highlighted as a tool that can help gamers easily record and share their gameplay clips across various platforms. The mention of Outplay serves as a commercial break within the video content, providing viewers with a useful tool for their gaming experiences.

💡Wireshark

Wireshark is an open-source network protocol analyzer that is used in the video to investigate the network activity of Vanguard. It allows the user to see what data, if any, is being sent or received by the system. The video uses Wireshark to demonstrate that Vanguard does not appear to have any network access until the League of Legends client is open, which is a key point in addressing privacy concerns.

💡Kernel driver

A kernel driver is a type of software that allows the operating system to communicate with hardware devices at a low level. In the context of Vanguard, the kernel driver is a component that enables the anti-cheat system to monitor and protect the game process from tampering. The video explains how users can disable the Vanguard kernel driver and the implications of doing so, which is crucial for understanding the level of control users have over the system.

💡TPM 2.0

TPM 2.0, or Trusted Platform Module 2.0, is a security feature that is part of the hardware found in modern computers and is a requirement for Windows 11. It is mentioned in the video as a point of contention with Vanguard, as some users may need to adjust their BIOS settings to accommodate both TPM 2.0 and Vanguard. The discussion around TPM 2.0 highlights the technical complexities that can arise from the interaction between different security systems.

💡Anti-che arms race

The term 'anti-che arms race' is used in the video to describe the ongoing battle between developers of anti-cheat systems and those who create cheats for games. As cheats become more sophisticated, anti-cheat systems must become more invasive to detect and prevent them. This concept is essential to understanding the necessity for Vanguard's kernel-level access and the trade-offs between security and user freedom.

Highlights

Vanguard, Riot's kernel-level anti-cheat system, has been introduced into League of Legends.

Vanguard has raised concerns due to its extensive access to users' PCs.

Performance impact tests show no noticeable FPS reduction with Vanguard enabled.

Vanguard requires certain prerequisites to run properly; failing to meet them prevents gameplay.

The Vanguard error message is bypassable due to the League client's web-based nature.

Kernel-level access by Vanguard is a point of concern, but it doesn't transmit data until the League client is open.

Wireshark analysis reveals Vanguard has no network access until the League client is launched.

Vanguard can be disabled manually through the command prompt or by rebooting in safe mode.

Custom skins, initially a concern, appear to be safe to use with Vanguard, according to Riot's confirmation.

Linux users are significantly affected by Vanguard, with no current workaround available.

Windows 11 users with TPM 2.0 may face issues with Vanguard and need to adjust BIOS settings.

Vanguard's invasive nature is due to the need to detect and prevent memory injection hacks.

The arms race between hacks and anti-cheat systems has led to increasingly invasive anti-cheat measures.

Riot's recent security breach highlights the potential risks of not having robust anti-cheat systems in place.

The Vanguard driver can be compromised, as seen in a case where it was used for malicious activity.

Disabling Vanguard requires a full PC restart, which may deter some users from toggling it off frequently.

There have been no reports of bans due to using custom skins since Vanguard's release.

Vanguard's impact on the community includes the potential disruption of certain game modifications and third-party tools.