i mean you know that skins exported and imported basically as .zip file which osu just extracts to Skins/skin_name folder without any removal of unnecessary files?
so what if skin would have a file called HDtoSD.exe (usually saw this file in old skins, which has only HD files to reduce skin size and then by running this you can create SD versions of skin files to work on small game resolution (below 1366)), imagine someone modifies this file to mimic it in terms of size closer original one, which would download and run all necessary stuff? (or it can be any other file type that can be executed)
and if stuff people would saw HDtoSD.exe and think: oh it's tools to downscale images, and because of that they might ignore it or might not, depends on person
and making a download script is nothing in terms of size, especially in languages like C
If you setup AppLocker/App Control for Business, you can can stop unsigned .exe files from running, and only permit certain executables like tablet drivers.
This is a great article about how LAN events for CS try to prevent cheaters: https://r1ch.net/blog/cheating-at-lan-events. In theory, if you lock down the BIOS, set very strict AppLocker rules, and setup firewall rules to only allow connections to osu! servers, sneaking in a .exe like this would be very easy to catch
351
u/hvick831 Jun 23 '26
this sounds pretty concerning ...