zlacker

I remember reading that Microsoft is trying to crack down on kernel level anti-cheats. Just like anti-virus, they mess with the operating system on a deep level, redirecting/intercepting API calls, sometimes on undocumented and unstable internal APIs.

Not only does this present a huge security risk, it can break existing software and the OS itself. These anti-cheats tend not to be written by people intimately familiar with Windows kernel development, and they cause regressions in existing software which the users then blame on Windows.

That's why Microsoft did Windows Defender and tried to kill off 3rd party anti-virus.

>>torgin+(OP)
Apple has gone a similar way with effectively killing kernel extensions for the same reasons. In theory all the kernel extensions use cases have been replaced with "System Extensions" but of course not the same.

>>torgin+(OP)
If I remember right, it played a role in the Crowdstrike failures. So yeah wouldn't surprise me MS is hoping to get rid of it.

>>torgin+(OP)
Please provide source if you manage to find it as I'm deeply interested in said article.