• 0 Posts
  • 142 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • Have you had anyone with experience with security look at this thing? There’s a lot of really questionable practices in your schedule shell scripts. I especially find how you’re handling VPN secrets kinda worrying. And the backup_challenge_clients.sh script isn’t robust at all. Your nginx config has a few bad choices like lack of try_files, the regex \.php$. It’s definitely not hardened so I hope people don’t put this Internet facing.

    I’ve spent like 5min in the GitHub to get a feel for the project maturity. Personally, I don’t think this is suitable for actual use yet.

    If you’ve not done any security assessments on your project yet, you might not want to (a) call it “Safe”box and (b) might not want to start charging money for it until you do.

    I worry you’re setting yourself up for a hard-to-shake-off embarrassment should a nasty vuln be found. Maybe a name like “selfbox” etc that drops the connotation of security would be safer.

    Edit: Kudos on the project website though! Looks fricking gorgeous.







  • What’s that got to do with MS’s decision to kick them out? What’s the Venn diagram of mission critical systems and systems running Valorant/League?

    I’m not disagreeing that these bullshitty kernel drivers running from boot exist, I’m stating that MS aren’t going to do shit about it if even more risky kernel drivers aren’t planned to be removed from the OS and there’s plenty of other popular anti cheat drivers that are only loaded at runtime.


  • Yes but many don’t. And the risk impact of BSODing gaming computers vs business systems is dramatically different.

    We won’t see MS do anything about kernel drivers until the majority of security industry has moved to whatever new userspace APIs MS release.

    Even then, do gaming anti cheat developers really care?

    IMO simply vote with your wallet and don’t buy games that need kernel drivers and still fail to address cheaters who always find a way around.



  • There’s little reason to force them out given games run temporarily. We’re more likely to see security products move out of the kernel first since they run full time and from boot (meaning there’s stronger implications if they fail in kernel space e.g. Crowdstrike). And even then, they’re not forcing them out, just offering APIs in user space to negate the need to be running in the kernel for those use cases.

    I’d love to see games denied the ability to run drivers in kernel space on Windows but I don’t think we’ll see that any time soon.