DontTrustTitles: Browser tab titles can trigger game anti-cheat detections

DontTrustTitles is less of a 'product' and more of a pointed technical demonstration. It targets the lazy implementation of some game anti-cheat systems—specifically those that rely on simple window title enumeration. By programmatically cycling the `document.title` through a list of known debugger names like x64dbg or Cheat Engine, the tool tricks the system into believing a forbidden application is running, even though it's just a Chrome or Firefox tab in the background. From a technical standpoint, the project is trivial: a basic JavaScript loop manipulating the DOM. However, the insight is valuable. It highlights a significant gap in heuristic-based detection. If a game like Fortnite can be tripped by a browser tab, it suggests that the anti-cheat is prioritizing speed and broad string matching over precise process verification (such as checking PID, memory signatures, or digital certificates). This makes the system prone to false positives and trivial to trigger. For the average user, this is a curiosity. For a security researcher or a game developer, it is a cautionary tale. The strength of the project lies in its simplicity and the empirical evidence it provides regarding how 'security' is often implemented as a series of fragile keyword checks. The weakness is that it doesn't offer a way to bypass these checks, only to trigger them. Anyone auditing anti-cheat behavior or developing game security should care about this. It serves as a reminder that window titles are public, mutable metadata and should never be used as a reliable indicator of a system's security state.