Live data from Hacker News

Valve removes free game from Steam after players discover it contains malware

pcguide.com

21–30 of 91 posts

Re: Valve removes free game from Steam after players discover it contains malware

#22
post #13

Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?

I've formally studied gamedev, but haven't done anything in over a decade, but even before you get to the thorny issue of anti-cheat sustems, games rely on running at a(n often very) low level and doing unconventional things. I imagine they're one of the hardest things there are to sandbox without causing massive levels of breakage. But someone more knowledgeable about either side of the equation (sandboxing and/or game development) might be able to shed more light.

Re: Valve removes free game from Steam after players discover it contains malware

#25
post #13

Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?

Running games on Linux via Proton provides some isolation. It’s not technically a proper sandbox though.

Anything that wants to traverse your filesystem could do so trivially from a wineprefix, but stuff like sniffing your browser extensions might be harder depending on the technique.

Re: Valve removes free game from Steam after players discover it contains malware

#28
post #13

Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?

Running games on Linux via Proton provides some isolation. It’s not technically a proper sandbox though.

Proton is just emulation, and it will happily expose the underlying host system to the running game software. In particular the filesystem and some peripheral devices. However, Valve is moving towards sandboxing in Steam. You can already run the whole thing with a flatpak sandbox, and valve themselves are using ostree. With srvio is possible to run the whole thing in a throwaway windows vm while the graphics card is passed through

Re: Valve removes free game from Steam after players discover it contains malware

#29
post #13

Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?

Running games on Linux via Proton provides some isolation. It’s not technically a proper sandbox though.

You can just use Linux syscalls from an .exe executed by Wine. There is no sandboxing.

https://gist.github.com/q3k/e5952111283ea59ee78a7699919a055b

Post reply on HN