4 ms·
The trouble is gamers are susceptible to it. They're running running all kinds of untrusted code (javascript, custom game levels created by other users) as well
by zrm 7y ago
The trouble is gamers are susceptible to it. They're running running all kinds of untrusted code (javascript, custom game levels created by other users) as well as receiving untrusted game data from other users in multiplayer games which commonly then goes through a data parser optimized for performance over security.
- brianwawok 7y agoWhile perhaps true in theory, has there ever been a known case where game DATA from a multiplayer game was able to exploit a remote system and say obtain root access? Stuff like rowhammer is very different vs something like a SQL injection on a website.
- girvo 7y agoIt seems so! https://revuln.com/files/Ferrante_Auriemma_0wning_Multiplayer_Online_Games.pdf https://revuln.com/files/Ferrante_Auriemma_0wning_Multiplaye...
- BoorishBears 7y agoPlenty of gamers download mods that straight up execute code on their machines. They also download game tools that are just code. They also run games that are just not secure. I know one that was storing user credentials in plain text in the registry (where no special permissions are needed to access it)
- radicalbyte 7y agoThey also download pirate games from sketchy Russian sites.