Brawlhalla to get Easy Anti-Cheat, dev puts up Beta with EAC working on Linux with Proton

so the first EAC proton game isnt one from epic? hmmmm

Brawlhalla looks like a game made for the steamdeck. makes sense to support it

I'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

QuoteHow difficult is it then for developers to upgrade to a newer version of Easy Anti-Cheat to get the Proton support working for Linux players? Epic originally said it was "just a few clicks" but the reality is a little different.

I disagree. Epic said that turning Linux support will be few clicks, not that upgrading EAC will. I fully expect that upgrading and testing EAC is not a easy task. Hopefuly most publishers will upgrade it for other benefits besides Linux support, so it will really be one flip of a switch at some point.

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

Same, I'm also wondering how effective EAC on Linux is, if it's not running on Kernel level as it does on Windows. I guess only time will tell. But this would also mean that more people will have to switch over to Linux (which is kinda good), if it would be easier to bypass EAC there than on Windows (which would be very bad though).
And I recently heard that even with EAC enabled there are still people successfully cheating in Fall Guys?

On the other hand, it's an evolving progress. So first we'd like to have devs enable EAC with the Linux module, then probably Epic and devs will be able to improve EAC including Linux to make it safe(r) for everybody.

And in the end, I hope those settings will become default, and not something devs have to do explicitly. I'd even prefer to have it the other way: devs would have to actively de-activate EAC in the backend for Linux (or Windows :D )

Quoting: Corben

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

Same, I'm also wondering how effective EAC on Linux is, if it's not running on Kernel level as it does on Windows. I guess only time will tell. But this would also mean that more people will have to switch over to Linux (which is kinda good), if it would be easier to bypass EAC there than on Windows (which would be very bad though).
And I recently heard that even with EAC enabled there are still people successfully cheating in Fall Guys?

On the other hand, it's an evolving progress. So first we'd like to have devs enable EAC with the Linux module, then probably Epic and devs will be able to improve EAC including Linux to make it safe(r) for everybody.

And in the end, I hope those settings will become default, and not something devs have to do explicitly. I'd even prefer to have it the other way: devs would have to actively de-activate EAC in the backend for Linux (or Windows :D )

According to developers of Robocraft it is worse. At some point they disabled EAC for anything other then Ubuntu family (on Linux Native), arguing that there were too many cheaters.

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise?

Quoting: CorbenSame, I'm also wondering how effective EAC on Linux is, if it's not running on Kernel level as it does on Windows.

il third that concern.


for me it's creating a situation where by i have to consider running a dedicated Linux gaming machine
((as afaik some implementations have been known to be looking through browser data, indexing file names, ip logging, sniffing packets, hardware ID data-basing etc.. and having complete machine control while the game runs)).

And then i have to potentially use another machine for even casual consumption or when im dealing with sensitive files / productivity, where as now it's all on one machine. Of course the steam deck satisfies this requirement.. that would be if it was actually more powerful than a dedicated midrange GPU from 2015.
This is paradoxical, because with terrible privacy why don't i fork out for or get a promo code for Windows and run it isolated and have 100% compatibility. Or even just get a console ? And although subscription fees maybe an argument, how much is my data privacy worth to me that could be gleaned from my anti-cheat DRM laden wine games running on my 'private' Linux machine.. on Steam + origin.
you get the picture.

Still, i understand everything is a compromise but having some knowledge as to how it works and how secure/private it is VS the windows implementation would be nice. In the end it's obvious that my next Monitor choice has to include a KVM in order to quickly switch between a DRM free Linux machine and the 'practically windows at this point' Linux gaming console.

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

You are already running a closed source binary (the game itself and Steam for that matter) on your system that can already do whatever they like with your system, I don't think EAC brings anything more evil to this table since it does not run in the kernel and does not require root(?).

Quoting: F.UltraYou are already running a closed source binary (the game itself and Steam for that matter) on your system that can already do whatever they like with your system, I don't think EAC brings anything more evil to this table since it does not run in the kernel and does not require root(?).

True, but at the same time it is an anticheat's specific job to spy on what one is doing right? It might not have root/kernel access but it can also do alot of snooping around without it.

Quoting: Corben

Quoting: RaabenI'm curious though I doubt we can ever fully know, how bad is this Proton/WINE implementation of EAC security/privacy-wise? Yeah I know it'd be better to be safe and sandbox or still never play those games at all if concerned, but I'm just wondering if there's insight how it operates.

Same, I'm also wondering how effective EAC on Linux is, if it's not running on Kernel level as it does on Windows. I guess only time will tell. But this would also mean that more people will have to switch over to Linux (which is kinda good), if it would be easier to bypass EAC there than on Windows (which would be very bad though).
And I recently heard that even with EAC enabled there are still people successfully cheating in Fall Guys?

I used to provide servers for several popular games years ago. I've tried to keep cheaters at bay (which is a real pita when you only partially control the server), that's how I've acquired most of my knowledge on the topic.

Client-side anti-cheats are fundamentally flawed. They try to render the client trustful by wrapping it in some thin protection, whilst running in an untrusted environment. That's the same as putting a padlock on a cardboard and leaving it without surveillance in a park overnight, expecting it to be fine and unaltered next morning. It might happen, but it won't be because of the padlock.

The truth is that any somewhat popular game will have cheats available for it. Though almost all cheats that are reliably updated to bypass anti-cheats are paid for.

Quoting: GryxxAccording to developers of Robocraft it is worse. At some point they disabled EAC for anything other then Ubuntu family (on Linux Native), arguing that there were too many cheaters.

I've played robocraft. Whilst the game was fun and enjoyable to play, they're a prime example of trying to make up for jokingly bad cheat-proofing by using third party tools. Their servers trust everything the clients send: that weapon with a fixed unalterable 10 seconds reload is ready to fire again after 0.1s you say? Sure, go ahead! That speed you can't reach with your current setup is what you're cruising at? Seems alright!

They had cheaters before using EAC, they have cheaters after adding EAC, they will have cheaters from every OS until they implement server-side counter-measures (or the game loses enough players to no longer warrant cheat creators to bother any more).


Last edited by hell0 on 15 October 2021 at 10:15 pm UTC

Quoting: hell0I've played robocraft. Whilst the game was fun and enjoyable to play, they're a prime example of trying to make up for jokingly bad cheat-proofing by using third party tools. Their servers trust everything the clients send: that weapon with a fixed unalterable 10 seconds reload is ready to fire again after 0.1s you say? Sure, go ahead! That speed you can't reach with your current setup is what you're cruising at? Seems alright!

I've been saying this allot lately too. EAC/BE as a AC measure and nothing else is called 100% lazy development! Server side rule breaking checks need to be done. I think Mortal Online 2 has server side AC going on since they discovered early on that client side only was completely pointless!