3 ms·
Maybe it is also time to switch from the prehistoric model of "hey let's download a .exe on the web, execute it without any sandbox, and let that .exe install o
by batatati 7y ago
Maybe it is also time to switch from the prehistoric model of "hey let's download a .exe on the web, execute it without any sandbox, and let that .exe install other .exe from thousands of other unknown sources around the world and run them without any sandbox either."
Steam or any other app should always run sandboxed with no root access, no file access, no camera access, no access to other process, etc. For most users, steam only needs a sandboxed local storage to put its game into it and a internet access (and maybe mic access), that's it.
I really hope Flatpak and something similar for Window becomes the norm, the current situation is a security and privacy disaster.
There can still be exploits of course but now you have the find a weakness both in the app + in the OS sandbox which is a whole lot harder
- umvi 7y agoWon't sandboxes impact performance of video games? I don't know much about sandboxes except that VMs are often used as sandboxes, and I definitely don't want video games running inside of VMs
- codedokode 7y agoGames typically need only access to video adapter, sound card and maybe network. They do not need access to your browser's cookies or history, or documents folder, for example. This probably doesn't require using VM.
- umvi 7y ago> They do not need access to your browser's cookies or history, or documents folder, for example Well, some do... like Doki Doki Literature Club
- extrapickles 7y agoI would think it would work in practice closer to mobile apps, where their access requirements are explicitly stated upfront (eg: needs access to documents folder).
- jbverschoor 7y agoYes please. Still most apps don’t need access to the documents directory or the camera. They want to “open a file” which’s means file open dialog Or: upload your profile picture, which’s means a one time upload of a file. Right now you give access to the camera and it can be used for anything
- tus88 7y ago> prehistoric model of "hey let's download a .exe on the web, execute it without any sandbox, and let that .exe install other .exe from thousands of other unknown sources around the world and run them without any sandbox either." What year is it? To me prehistoric means buying a nice big box with a CDROM or some floppies and installing with no internet required at all. Shell exes that want to download crap is the current nightmare we are living in I thought.
- andrewprock 7y agoSee also: https://brew.sh/ https://brew.sh/