Steam Desktop Update

#1

Post by Inocez » Thu, Jun 15, 2023, 8:01 AM UTC

Steam Desktop Update
store.steampowered.com

Re: Steam Desktop Update

#2

Post by concinds » Thu, Jun 15, 2023, 8:29 AM UTC

Looks cool. The announcement talk about watching movies in the Overlay's browser. But I tested this new Steam, and according to the Overlay browser's user agent, it's Chrome 85 (actually CEF), almost 3 year old, full of security holes. As of 2016, CEF's sandboxing was disabled[0], and I think that's still the case.

This is shockingly irresponsible of Valve. Especially with the NSA saying Steam is a popular attack vector. That's not even due to Steam's Windows 7 support, since the latest Chrome to support W7 is Chrome 109.

[0]: https://www.ghacks.net/2016/02/08/steam-uses-insecure-out-of...

Re: Steam Desktop Update

#3

Post by richardjam73 » Thu, Jun 15, 2023, 8:41 AM UTC

concinds wrote: post #2

Looks cool. The announcement talk about watching movies in the Overlay's browser. But I tested this new Steam, and according to the Overlay browser's user agent, it's Chrome 85 (actually CEF), almost 3 year old, full of security holes. As of 2016, CEF's sandboxing was disabled[0], and I think that's still the case. This is shockingly irresponsible of Valve. Especially with the NSA saying Steam is a popular attack vec…

The current browser is Chrome 85.0.4183.121 Which appears to be from Sept 2020

Re: Steam Desktop Update

#4

Post by concinds » Thu, Jun 15, 2023, 8:49 AM UTC

richardjam73 wrote: post #3

concinds wrote: post #2

Looks cool. The announcement talk about watching movies in the Overlay's browser. But I tested this new Steam, and according to the Overlay browser's user agent, it's Chrome 85 (actually CEF), almost 3 year old, full of security holes. As of 2016, CEF's sandboxing was disabled[0], and I think that's still the case. This is shockingly irresponsible of Valve. Especially with the NSA saying Steam is a popular attack vec…

The current browser is Chrome 85.0.4183.121 Which appears to be from Sept 2020

Sorry, edited my comment above before seeing your reply. Can confirm, I tested with the new version of Steam (the one being announced here).

Re: Steam Desktop Update

#5

Post by jrepinc » Thu, Jun 15, 2023, 1:29 PM UTC

Yay, they finally added hardware acceleration support for GNU/Linux. Hopefully we see much more love for GNU/Linux in the future.