Valve accused of ignoring existing RCE vulnerability in Source games for 2 years

Re:Valve accused of ignoring existing RCE vulnerability in S... by philistine on Saturday April 10, 2021 @02:38PM (#26763832)

Hopefully, Microsoft is going to follow in Apple's footsteps and close the access to the kernel for any and all programs. Yes, we will lose a lot, since Apple right now cannot cover all use cases of kernel access through new APIs, but we will gain so much in security and reliability.

I'm of the opinion that easy kernel access for all apps and games is ultimately not putting me in control of my computer.

[ Parent | on HN ]

Re:Valve accused of ignoring existing RCE vulnerability in S... by rstat1 on Saturday April 10, 2021 @03:03PM (#26764076)

Access to kernel mode on Windows is already pretty restricted as it is. As far as I understand, you either have to run your whole machine in a special "Test Mode" or have a specific kind of (expensive) code signing certificate.

But beyond that, I don't see how "more restriction" == "more control for the user"

[ Parent | on HN ]

Re:Valve accused of ignoring existing RCE vulnerability in S... by ladyanita22 on Saturday April 10, 2021 @05:20PM (#26765230)

Are you talking about driver signing?

[ Parent | on HN ]

Re:Valve accused of ignoring existing RCE vulnerability in S... by pjmlp on Saturday April 10, 2021 @02:56PM (#26764016)

They already kind of did, I only install PC games via the Windows store.

[ Parent | on HN ]