Steam Desktop Update

Steam Desktop Update(store.steampowered.com)

4 points by Inocez 3 years ago | 4 comments

concinds 3 years ago |

Looks cool. The announcement talk about watching movies in the Overlay's browser. But I tested this new Steam, and according to the Overlay browser's user agent, it's Chrome 85 (actually CEF), almost 3 year old, full of security holes. As of 2016, CEF's sandboxing was disabled[0], and I think that's still the case.

This is shockingly irresponsible of Valve. Especially with the NSA saying Steam is a popular attack vector. That's not even due to Steam's Windows 7 support, since the latest Chrome to support W7 is Chrome 109.

[0]: https://www.ghacks.net/2016/02/08/steam-uses-insecure-out-of...

richardjam73 3 years ago | |

The current browser is Chrome 85.0.4183.121 Which appears to be from Sept 2020

concinds 3 years ago | | |

Sorry, edited my comment above before seeing your reply. Can confirm, I tested with the new version of Steam (the one being announced here).

jrepinc 3 years ago |

Yay, they finally added hardware acceleration support for GNU/Linux. Hopefully we see much more love for GNU/Linux in the future.