this post was submitted on 29 Jun 2025
448 points (99.1% liked)

Steam Deck

18079 readers
70 users here now

A place to discuss and support all things Steam Deck.

Replacement for r/steamdeck_linux.

As Lemmy doesn't have flairs yet, you can use these prefixes to indicate what type of post you have made, eg:
[Flair] My post title

The following is a list of suggested flairs:
[Discussion] - General discussion.
[Help] - A request for help or support.
[News] - News about the deck.
[PSA] - Sharing important information.
[Game] - News / info about a game on the deck.
[Update] - An update to a previous post.
[Meta] - Discussion about this community.

Some more Steam Deck specific flairs:
[Boot Screen] - Custom boot screens/videos.
[Selling] - If you are selling your deck.

These are not enforced, but they are encouraged.

Rules:

Link to our Matrix Space

founded 4 years ago
MODERATORS
 

Microsoft has long wanted to get vendors out of the kernel. It's a huge privacy/security/stability risk, and causes major issues like the Crowdstrike outage.

Most of those issues also apply to kernel anti-cheat as well, and it's likely that Microsoft will also attempt to move anti-cheat vendors out of kernel space. The biggest gaming issues with steamOS/Linux are kernel anti-cheat not working, so this could be huge for having full compatibility of multiplayer games on Linux.

you are viewing a single comment's thread
view the rest of the comments
[–] kadup@lemmy.world 19 points 5 days ago* (last edited 5 days ago) (5 children)

This is what, the fourth time a Linux community gets excited about this? But that's actually not good for us at all. Much like Android's safety net, or the nightmare that is the Mac equivalent, the entire point will be creating an untouchable chain from the firmware to the final OS being booted, and only allowing some apps to use a specific API to attest this isn't compromised.

This is horrendous for people trying to modify the OS or, in a more relevant tone, run programs meant for that OS on an entirely different environment. Microsoft has slowly been moving towards making this work on PCs, mostly due to pressure from DRM providers like Netflix or banking apps, but unlike Apple they can't simply lock everything down at once and say "deal with it" because Windows lives by backwards compatibility. Either way, this is just another step towards this upcoming future.

If your favorite games now start asking Windows if the chain of trust is not tampered with... say goodbye to compatibility with Proton.

[–] WalnutLum@lemmy.ml 5 points 5 days ago (2 children)

I don't think chain of trust and security through kernel-level access are fighting the same problem.

Usually chain of trust is to prevent app tampering, and kernel-level access is to prevent memory tampering.

I assume Windows is creating a new API for applications to monitor certain regions of memory for tampering without needing kernel access.

[–] DarkMetatron@feddit.org 3 points 5 days ago

There already is a API for this with ebpf for Windows and it is the same API that can be used on Linux (because it originates from Linux).

https://microsoft.github.io/ebpf-for-windows/

EBPF still runs in Kernel space but in a much more limited and confined way.

[–] Wooki@lemmy.world 1 points 5 days ago* (last edited 5 days ago)

Kernel level access is to stop access plain and simple. That includes user access rights absolutely.

load more comments (2 replies)