31–40 of 91 posts
Wonder how much longer it could have remain undetected if it actually fired up a shovelware game that could run properly, things like crashing probably gave it away way faster than it could've.
Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?
Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?
The native isolation mechanisms like silos are things that require wrangling by professional sysadmins, I didn't even know they existed until I started writing this post. The real question to be asking is why is sandboxing so bad on Windows? Despite some searching, I still have no conclusive answer as to how to go about filesystem isolation in Win32-space, or if it's even possible.
Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?
They also need low-latency access to the GPU, which I suspect is a fertile vector for privilege escape exploits.
What about all the other games with malware, like Denuvo and similar?
"drm is malware" is so 2005.
[1] https://videocardz.com/newz/riot-games-on-valorant-dma-cheat...
What about all the other games with malware, like Denuvo and similar?
"drm is malware" is so 2005.
"Congress is engaged in a witch hunt" is so 1950s.
"Civil rights should be applied to everyone" is so 1960s.
"Fossil Fuels are destroying the plant" is so 1970s.
"Unregulated free trade is dangerous" is so 1980s.
"The police are out of control and unduly target minorities" is so 1990s.
Something being old doesn't make it less relevant or important.
It means we need to say it louder, because for some reason the point hasn't been made clearly enough yet.
Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?
Consider that people pay a $300 premium to get ~10% better performance (buying an RTX 5080 instead of a 5070 Ti).
Personally I know that sometimes closing the web browser in the background makes my game run better - that web browser doesn't even interact with the game! Would a sandbox have a smaller impact?
Earlier quoted context omitted.
Running games on Linux via Proton provides some isolation. It’s not technically a proper sandbox though.
Proton is just emulation, and it will happily expose the underlying host system to the running game software. In particular the filesystem and some peripheral devices. However, Valve is moving towards sandboxing in Steam. You can already run the whole thing with a flatpak sandbox, and valve themselves are using ostree. With srvio is possible to run the whole thing in a throwaway windows vm while the graphics card is…
Games are an almost perfect type of software to be run in a sandbox. The question is, why aren't they already run in a sandbox?
PC games tend to be the reverse: they demand control over the machine, in order to try to detect or prevent being run alongside various forms of cheating software. They also need low-latency access to the GPU, which I suspect is a fertile vector for privilege escape exploits.