Lock the Cheats Out: Trusted Launch Read-Only Mode


Lock the Cheats Out: Trusted Launch Read-Only Mode
The Issue
Introduce a modern, semi-mandatory security standard for PC gaming that:
- Cripples kernel-level and DMA-based cheat loaders
- Restores trust in competitive matchmaking
- Boosts performance by cutting background Anti-Cheat tasks
- Builds a transparent trust system linked to OS-level integrity
Background
Cheating in PC games has evolved far beyond basic aimbots. Modern DMA-wrapped loaders and kernel-level cheats slip past existing systems like VAC, EAC, and BattleEye with ease. VAC, in particular, has lagged behind, unable to detect cheats that operate beneath the surface using spoofed drivers and memory redirection.
Meanwhile, Valve's SteamOS is quietly leading with immutable file systems and sandboxed environments that make persistent cheats nearly impossible. It's time to bring that power to everyone.
Core Proposal: Trusted Launch Mode
A secure boot gaming mode for SteamOS that:
- Enforces read-only system partitions with signed boot chain integrity (e.g., dm-verity)
- Blocks unsigned drivers, DLLs, and kernel modules during play
- Required for entry into competitive and ranked modes
Anti-Spoofing & Tamper Prevention
- Hardware attestation verifies system state at boot
- Secure TPM-backed reporting prevents spoofing of Trusted Launch
- BIOS-level protections lock read-only mode from being disabled mid-session
- Verified session logs to catch trust mode togglers and dual-boot abusers
Trust-Tiered Matchmaking
- Players grouped by verified trust level:
- VAC-only users can only play with each other
- SteamOS users can play with both, similar to how Prime players can play with unranked players
- Isolates players running non-secure configurations from those in verified environments
Performance Boost
- Trusted Launch disables junk services and background scans
- Cuts 1-frame dips and improves CPU/GPU consistency
- Better thermal performance and longer session stability
Why DMA Cheats Work and Why This Fixes It
DMA-style loaders piggyback off whitelisted processes or abuse flawed system permissions. Trusted Launch locks the OS into a known-good state, killing off their playground. With no writable partitions, unsigned driver access, or spoofable kernel hooks, the DMA trickery dies at boot.
Benefits for Players
- No more shady deaths and rage-uninstalls
- Smoother gameplay, better FPS, less hitching
- Clear matchmaking transparency, trust score, and queue access
Benefits for Developers
- Less cheat-related refund abuse and support tickets
- Smaller attack surface, fewer exploit reports
- Easier focus on actual game balance
Benefits for Other Games
- Other games can benefit from the trusted launch by adopting similar security measures, creating a more secure and fair gaming environment across the board.
Benefits For Valve
- Pioneering security leadership in the open PC space
- Console-level security without locking down the ecosystem
Implementation Roadmap
1. Develop Trusted Launch kernel profile for SteamOS with enforced read-only OS mode
2. Harden SteamOS's existing features with added attestation and TPM trust
3. Sync with anticheat vendors to whitelist secure boot environments
4. Integrate trust scores into Steam and Windows matchmaking APIs
5. Build user-friendly boot manager for switching between standard and secure modes
Final Word: Enough is Enough
PC gaming shouldn't be the wild west anymore. If we want fair play, better performance, and community trust, we need to lock the front door.
Valve, and other Anti-Cheat developers, it's time to shut down the cheat economy. Let's build a PC gaming future where skill beats spoofing and performance isn't sacrificed for security.
8
The Issue
Introduce a modern, semi-mandatory security standard for PC gaming that:
- Cripples kernel-level and DMA-based cheat loaders
- Restores trust in competitive matchmaking
- Boosts performance by cutting background Anti-Cheat tasks
- Builds a transparent trust system linked to OS-level integrity
Background
Cheating in PC games has evolved far beyond basic aimbots. Modern DMA-wrapped loaders and kernel-level cheats slip past existing systems like VAC, EAC, and BattleEye with ease. VAC, in particular, has lagged behind, unable to detect cheats that operate beneath the surface using spoofed drivers and memory redirection.
Meanwhile, Valve's SteamOS is quietly leading with immutable file systems and sandboxed environments that make persistent cheats nearly impossible. It's time to bring that power to everyone.
Core Proposal: Trusted Launch Mode
A secure boot gaming mode for SteamOS that:
- Enforces read-only system partitions with signed boot chain integrity (e.g., dm-verity)
- Blocks unsigned drivers, DLLs, and kernel modules during play
- Required for entry into competitive and ranked modes
Anti-Spoofing & Tamper Prevention
- Hardware attestation verifies system state at boot
- Secure TPM-backed reporting prevents spoofing of Trusted Launch
- BIOS-level protections lock read-only mode from being disabled mid-session
- Verified session logs to catch trust mode togglers and dual-boot abusers
Trust-Tiered Matchmaking
- Players grouped by verified trust level:
- VAC-only users can only play with each other
- SteamOS users can play with both, similar to how Prime players can play with unranked players
- Isolates players running non-secure configurations from those in verified environments
Performance Boost
- Trusted Launch disables junk services and background scans
- Cuts 1-frame dips and improves CPU/GPU consistency
- Better thermal performance and longer session stability
Why DMA Cheats Work and Why This Fixes It
DMA-style loaders piggyback off whitelisted processes or abuse flawed system permissions. Trusted Launch locks the OS into a known-good state, killing off their playground. With no writable partitions, unsigned driver access, or spoofable kernel hooks, the DMA trickery dies at boot.
Benefits for Players
- No more shady deaths and rage-uninstalls
- Smoother gameplay, better FPS, less hitching
- Clear matchmaking transparency, trust score, and queue access
Benefits for Developers
- Less cheat-related refund abuse and support tickets
- Smaller attack surface, fewer exploit reports
- Easier focus on actual game balance
Benefits for Other Games
- Other games can benefit from the trusted launch by adopting similar security measures, creating a more secure and fair gaming environment across the board.
Benefits For Valve
- Pioneering security leadership in the open PC space
- Console-level security without locking down the ecosystem
Implementation Roadmap
1. Develop Trusted Launch kernel profile for SteamOS with enforced read-only OS mode
2. Harden SteamOS's existing features with added attestation and TPM trust
3. Sync with anticheat vendors to whitelist secure boot environments
4. Integrate trust scores into Steam and Windows matchmaking APIs
5. Build user-friendly boot manager for switching between standard and secure modes
Final Word: Enough is Enough
PC gaming shouldn't be the wild west anymore. If we want fair play, better performance, and community trust, we need to lock the front door.
Valve, and other Anti-Cheat developers, it's time to shut down the cheat economy. Let's build a PC gaming future where skill beats spoofing and performance isn't sacrificed for security.
8
The Decision Makers
Supporter Voices
Petition created on June 22, 2025