![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://fry.gs/pictrs/image/c6832070-8625-4688-b9e5-5d519541e092.png)
I’ve made a comment before in the past when dealing with game publishing. All of the things Steam provides, including worldwide distribution to a lot of regions EGS, MS store, etc don’t sell in because of a variety of laws, Steam just does better.
You pay less because you get less. I’m selling a product. The last thing I’m going to cheap out in is sales. I’m not going to see great sales from the EGS because A)Nobody uses it and B) the shopping experience is terrible. I don’t have access to the same makers and (hearsay) the actual process of getting your game distributed is a pain. I wouldn’t know, I don’t sell on EGS.
Further, we were having a conversation about a problem that doesn’t exist. You’re more than welcome to use Steam and other storefronts.
Hell, you can handle all of the sales yourself AND put it on steam. Most people will buy it on steam simply because that’s where all of the customers are.
Asking Steam to lower their prices because that’s where you’d make the most money is a mind bender.
It’s like trying to sell your hand made Combs. The gas station on the corner is happy to take only 20% of the profit. They’re all over the place and accessible. But you really want to sell it at the boutique shops because they have more comb-seeking customers. But then when they ask for 30% of sales, you balk and tell them that’s too high and they should lower their cut to that of the gas station.
For everyone who’s posting but didn’t actually read the CVE…
You need Malware with Kernel level access Already. Besides Anti Cheat for modern games, if you have malware with Kernel level access you’re already really fucked.
In addition, this just appears to be a way for that Kernel malware to persist in a device. It’s not impossible to detect. I wouldn’t be surprised if we saw Windows Defender signatures for malware using it within the month.
I haven’t seen the Def Con presentation, but the CVE is a “Maybe”. There is no PoC (Proof of Concept, showing that an exploit works)…yet. keep an eye on that.
The CVE claims this “Could Maybe” allow based on logic, but none of the sources i found showed anyone actually using it. Maybe the Def Con presentation will. But unless I see someone post a repeatable exploit in a real world scenario, it feels superficial.
I want to reiterate that this IS a flaw and it IS a problem. But I would highly doubt you, rando consumer, will be affected.
Mitigations are to not be dumb on the Internet. Keep your browser updated and make sure your sensitive data is backed up and encrypted, basic stuff.
Happy to go in to it more. This is my jam.