3 ms·
If the remote code execution thing in CS:GO is true I wonder if it could lead to virtual item theft. We're talking about potential loss of items worth of tens
by VectorLock 6y ago
If the remote code execution thing in CS:GO is true I wonder if it could lead to virtual item theft. We're talking about potential loss of items worth of tens of thousands of dollars. I'm sure Valve could eventually recover them but that could be some serious anxiety and opportunity loss for item holders that are affected.
- adam_fallon_ 6y agoSo far what i've send of the RCE i've seen so far has been a way of triggering pop-ups on the start screen - not to say its not more dangerous than that, but just thought i'd give some context. Most RCE's aren't carte blanche to run arbitrary code on a users computer, but are some way of triggering a particular code path on a remote computer.
- dmurray 6y agoRCE by definition involves being able to run arbitrary code, for some reasonable definition of arbitrary. "Triggering a particular code path" doesn't get you anything: if you have a webpage you can trivially make your visitors' computers execute plenty of predictable code paths, like the one to render text to the screen or to send audio to the speakers.
- floatingatoll 6y agoValve can unwind any item transaction that occurs within their marketplaces under fraudulent circumstances.
- VectorLock 6y agoThats why I said "I'm sure Valve could eventually recover them but that could be some serious anxiety and opportunity loss for item holders that are affected."
- deleted 6y ago[deleted]