Former esports player, Staff Anti-Cheat analyst lll at @RiotVanguard My opinions/tweets are my own.

in your head
Joined August 2011
GamerDoc retweeted
Thank you RIOT
1
2
60
8,296
GamerDoc retweeted
Game: Valorant AC: Vanguard (VGK) Vanguard got updated and added “Digital Signature Verification” to detect and block malicious drivers that access unauthorized memory regions. Users running an RDMA setup with a USB network adapter are now getting blocked when using various drivers.
8
10
2
204
33,286
GamerDoc retweeted
New Map Rotation? Corrode Changes? Check all the new updates with 13.08
103
150
85
3,007
491,862
GamerDoc retweeted
Dec'25: MB preboot DMA vulnerability closed Jun'26: More aggressive DMA protection Jul'26: Anti-smurf / Anti-boost expansion Aug'26: Boosting-ring investigations/action Sep 15: 10K~ player ban/action wave Sep 17: 296,416 rank manipulation accounts actioned HOLY COOKED! 👊
This Post is from an account that no longer exists. Learn more
1
2
28
8,064
GamerDoc retweeted
PSA: Boosting, smurfing, hitchhiking… it’s all cheating. Vanguard’s boosting detection expanded from @LeagueOfLegends to @VALORANT earlier this summer and bans have been rolling out ever since. 296,416 rent-a-rank customers served and counting.
282
220
190
5,407
1,799,530
GamerDoc retweeted
Chad Everdox appreciation post. Nick ‘Everdox’ Peterson (@nickeverdox) is genuinely one of the most underrated reverse engineers and Windows researchers in the industry. A lot of people know Riot Vanguard. Far fewer know the depth of Windows internals, kernel, anti-debugging, hypervisor and reverse engineering work behind one of the engineers who helped build and advance it. His old blog is an absolute gold mine. Some of this research is more than a decade old and still covers concepts people are learning and rediscovering today. Old but gold: Easy anti-trace with SYSCALL: everdox.blogspot.com/2015/05… Debugger detection with GetProcessIoCounters: everdox.blogspot.com/2013/11… BTF + LBR anti-tracing: everdox.blogspot.com/2013/10… Paged virtual memory as an anti-debug / anti-dumping primitive: everdox.blogspot.com/2013/03… Kernel/user shared page kernel-debugger detection: everdox.blogspot.com/2013/07… RTL_USER_PROCESS_PARAMETERS anti-debugging: everdox.blogspot.com/2013/02… Full archive: everdox.blogspot.com/ Then there is InfinityHook, another Everdox contribution that became a reference point for Windows kernel instrumentation: github.com/everdox/InfinityH… And his own article on revers.engineering: PatchGuard: Detection of Hypervisor Based Introspection [P1] revers.engineering/patchguar… If you are interested in reverse engineering, Windows internals, Windows kernel research, anti-debugging, anti-cheat engineering, hypervisor internals or obscure tricks buried deep inside the OS, his work is invaluable. Also bookmark the wider revers.engineering archive: revers.engineering/ That site is multi-author and contains excellent work from @daaximus , @aidankhoury across reverse engineering, kernel internals, virtualization and EPT. People spend a lot of time chasing the newest research. Sometimes the real gold has been sitting online for 10+ years. #ReverseEngineering #WindowsInternals #Infosec
4
54
437
19,064
GamerDoc retweeted
Jensen Huang
@JensenHuangJul 24
For my first post, I’m sharing a letter @NVIDIA signed on why open models matter. AI will transform every industry, power every company, and be built by every country. Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty. The world needs both frontier closed models and frontier open models. images.nvidia.com/pdf/Open-W…
15,982
29,271
10,950
171,473
66,499,440
GamerDoc retweeted
Smurfing. Stream sniping. Queue sniping. Win trading. We're cracking down on all of it.
225
227
126
7,274
766,276
GamerDoc retweeted
Vanguard is the best Anti-Cheat... #VALORANT
44
54
2
1,347
70,448
GamerDoc retweeted
Starting later today, Vanguard will be able to run in on-demand mode for players on Windows 11. You just need to enable some optional security features for your motherboard, and your taskbar can have 256 of its pixels back. Take it away, @deteccphilippe.
359
400
207
8,268
3,191,984
GamerDoc retweeted
Find the beauty within the battlefield on Summit.
308
2,534
698
19,034
1,811,284
Up until just recently, some metrics of Microsoft Azure Attestation were completely vulnerable to spoofing in some circumstances, and would accept attacker controlled measurements. SecureBoot in this case, spoofed as ON from a malicious bootkit. see CVE-2026-45642
19
33
10
280
231,766
me and bro on the game
51
3,880
113
38,764
571,822
GamerDoc retweeted
Does Vanguard physically damage hardware? No. Does this impact hardware or software in any ways unrelated to Riot’s games? No. The IOMMU security protection does not impact hardware, and would only impact the ability of players using DMA cheat devices to play our games. Are normal players affected? Players not using DMA cheat hardware are unaffected. Why target DMA cheats? DMA-based cheats are among the most sophisticated forms of cheating because they attempt to bypass traditional software detection by accessing memory directly through external hardware. I’m affected by this. How do I fix it? To continue cheating in other titles with this device, you may simply disable IOMMU in BIOS in the same place that you enabled it. Of course, you still won’t be able to play our games with these cheat devices enabled. Why did Riot joke about “bricking” PCs? We didn’t. The “paperweight” comment was about VALORANT cheat devices that no longer work in VALORANT. No hardware is being damaged and no other functionalities are impacted.
413
278
235
8,556
3,445,356
GamerDoc retweeted
Well, that escalated quickly. There’s been a wave of claims by cheaters about Vanguard “bricking” their PCs, so let’s clear that up: Vanguard does not damage hardware or disable your devices. The photo we posted is a picture of cheat hardware devices that are sold explicitly for cheating in VALORANT (not normal PCs or PC components). Through our latest updates, Vanguard now makes those devices worthless for VAL, but does not in any way brick PCs or PC components or PC software. Our latest update enforces standard platform security features, like the Input-Output Memory Management Unit (IOMMU), on accounts identified as using Direct Memory Access (DMA) cheating devices. These protections are already part of modern systems and when enabled, they block DMA cheat devices (such as those shown in the photo) from accessing memory in downstream applications, like our games. If a cheat setup continues attempting to cheat after those protections are enabled, the system may generate hardware faults or instability. This is expected behavior under IOMMU when attempts are made to read protected memory. Disabling IOMMU allows the cheat device to function again, but IOMMU will still be required to play our games. This means the cheat device won’t work with our games, but your PC isn’t “bricked.” We would not, and cannot, impact your PC’s functionality in any other fashion. This functionality only applies to systems attempting to use DMA cheat devices, and players who are not using DMA-based cheat setups are not affected. We’ll keep investing in anti-cheat to protect competitive integrity, and we’ll keep being as transparent as possible about how those systems work.
congrats to the owners of a brand new $6k paperweight
1,543
1,513
942
30,279
11,602,147
GamerDoc retweeted
A story in 3 pics: lvl 1 account gets blasted in and outside the game 🤣🤣 @ItsGamerDoc @deteccphilippe
2
80
20,547
GamerDoc retweeted
congrats to the owners of a brand new $6k paperweight
Game: Valorant AC: Vanguard (VGK) Today’s Vanguard anti-cheat update blocked the majority of DMA firmwares using SATA/NVMe. VGK suddenly triggered an IOMMU restart warning in-game, after which the DMA firmware becomes completely unusable, even without the game running or after uninstalling Vanguard. Only fix is a full OS reinstall. It’s using IOMMU to create read blocks, which permanently breaks the majority of almost all SATA/NVMe firmwares once triggered. Even the advanced H2-board got affected. Confirmed Firmware Block wave by @ItsGamerDoc
2,075
1,518
2,471
34,915
26,403,298
GamerDoc retweeted
GOD IS REAL THANK YOU @ItsGamerDoc I LOVE YOU
2
1
89
20,535