4 ms·
patched: https://hackerone.com/reports/470520 https://hackerone.com/reports/470520 https://hackerone.com/reports/1070835 https://hackerone.com/reports/1070835 h
by remnantdiving 2y ago
patched:
https://hackerone.com/reports/470520 https://hackerone.com/reports/470520
https://hackerone.com/reports/1070835 https://hackerone.com/reports/1070835
https://secret.club/2021/04/20/source-engine-rce-invite.html https://secret.club/2021/04/20/source-engine-rce-invite.html
https://secret.club/2020/10/30/alien-swarm-rce.html https://secret.club/2020/10/30/alien-swarm-rce.html
https://threatpost.com/dark-souls-servers-down-rce-bug/177896/ https://threatpost.com/dark-souls-servers-down-rce-bug/17789...
https://blog.thalium.re/posts/achieving-remote-code-execution-in-steam-remote-play https://blog.thalium.re/posts/achieving-remote-code-executio...
https://www.pcgamer.com/garrys-mod-cough-virus-is-cured-but-it-could-have-been-worse/ https://www.pcgamer.com/garrys-mod-cough-virus-is-cured-but-...
you can buy these games in their unpatched state today, and download a poc for them from github too:
https://nvd.nist.gov/vuln/detail/CVE-2018-10718 https://nvd.nist.gov/vuln/detail/CVE-2018-10718
https://nvd.nist.gov/vuln/detail/CVE-2018-20817 https://nvd.nist.gov/vuln/detail/CVE-2018-20817
frankly playing video games on a dedicated device and network is the reasonable response to reading this shit
- keyringlight 2y agoI've been wondering is how long before we get a 'PC-console' dedicated gaming device, there's certain aspects where PC is falling into the gravity well of the console model. Whether that's the technical aspects like how far you can lock down for security (and who's security) or DRM, whether people only want a nice front end, whether everything should be managed by a defacto 'good' platform holder versus allowing companies to do their own thing (clients or commerce). At some point such a thing looks like a more expensive ultra-pro console. Then that has to be balanced against the freedom aspect where people want flexibility to build a workstation how they want and do what they want on it, and expecting it all to work (windows games being supported on non-windows is a more common issue now). PC casts the broadest net and catches a lot of different desires, similar with how high-end and low-end seem to be splitting over the past ~5 years rather than being a continuous spectrum I wonder if there will be distinct types of PC for gaming (eg set models like the old Commodore Amiga) or if trying to resist splits does more harm than good.
- fluoridation 2y agoSpeaking for myself, I would never buy such a thing. The reason I game on PC is because I need a decent PC for work anyway, so building one that can also game is cheaper than buying a console. If I was really concerned about security I'd sooner dual boot into a second OS that had nothing on it, than buy a second box just to game on.
- keyringlight 2y agoYep, a lot of this comes down to "who's security" and what everyone can take as a foundation to build trust upon, or what their thresholds are
- shkkmo 2y agoThat's what "steam deck" is. A dedicated gaming device that is still also a general purpose computer that you have full control over.