Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
wrong, i have ran win 10 and 11 on systems (old laptops so far) with as little as 1GB ram, as for lower im almost sure it will run, likely slow but thats doesnt change the fact that it works.
all you do is bypass (registry) all hardware requirements on either OS (10/11) and it installs and runs just fine.
also, people can run whatever OS they want on the internet, despite your opinion on the matter, i ran win 7 on the internet for the whole 3 years after microsoft dropped support and i had zero issues, lets not forget ESU brings win 7 only about year behind (currently 9 months) on "security" updates as well.
i wont even mention all the users who likely turned off windows updates and had been running out of date for years or a decade, yet had no issues (very common thing casual and higher experienced users would do back in the days, more experienced would pick and choose, then set to ignore others, others just disable windows update).
but anywho, i have ran all the older OS's on the internet long after support, people arent going just magically have security risks and most doing anything like this likely know exactly what they are doing and likely not doing it on their main pc anyway.
that all being said, why are you telling people they are trolling, when not only people have told you what can be done, while also having info, vids/ect.. across the internet and knowing you can easily test it out yourself very easily by download both the iso's from microsoft, using rufus to make it bootable on a usb flash drive and installing it on various pc's/laptops of varying hardware, while bypassing the hardware requirements).
Then it was 2018, I didn't remember the year correctly. But it was March, not May. May is just when MS officially acknowledged the issue and stated that they won't fix it.
Are you considering steam browser safe to use in this case ?
Also: I'm not even sure what you're talking about. I trust that since steam allows money transactions inside of the steam client that whatever version it uses is safe enough to use for anything, regardless of whatever "version" it appears to run.
I was talking about steam web browser , the browser you can use while you are playing a game trought overlay not in the future, but right now.
Is this something safe to use ?
Let me answer that for you, will you ?
The correct answer is no, it's not safe at all to use an outdated cef 85 without any controll on javascript executed on you computer to browse the net , you can be hacked at anytime using it to surf the web ...And not talking about fishing or other way of nuisances ( webp , etc ...).
And i wonder how https://store.steampowered.com/subscriber_agreement/ can apply if you get hacked and your computer locked , lost data using the steam client
check point 7 B
just run any game and call the overlay and there you can see what i am talking about.
https://developer.chrome.com/blog/new-in-chrome-85/
as you can see , cef 85 is from August 25, 2020 .
Now what will you told me if i were using ,let say firefox v77 from the same date
https://www.mozilla.org/en-US/firefox/77.0/releasenotes/
to surf the net ?
Don't you think that even using firefox in this case, can be safer to surf the web just because firefox have additionnal layer of protection that the steam browser does not have and it's a "real browser" made for that and not just the barebone chromium ( security, privacy ) ..
True when you 're saying
But surelly not for for other activities like surfing the web.
I think that even if the Steam client says it's using CEF version 85, that it doesn't actually mean it's using a 3 year old version of CEF in the steam client. That just wouldn't even make any logical sense. They wouldn't let something like that on the internet. Surely they must be modifying the internals of the CEF code and updating it to allow us to use it today.
CEF or older Chrome versions also got security updates from time to time.
for example. yes, Windows 7's last Chrome version officially is 109 but that 109 branch kept on getting a couple of security updates due to Server 2012 R2 being widely used in domain controllers.
You'd be surprised...
feel free to analyse it
https://developer.valvesoftware.com/wiki/Chromium_Embedded_Framework
May be true because i just discovered this nonsens feature just few time ago myself but anyway steam is not a web browser and shouldn't be use this way that why this feature MUST be remove from the overlay
Ok , i can't move to my post using the new steam under my sandbox anyway i made a screenshot to illustrate what i told you,showing you the last steam release and i did update of steam but nothing new to update and as i couldn't post directly from this release ....
https://i.postimg.cc/T2z18tKD/a1-Capture.jpg
The alert about the webp is from the 13 september, most browser builder update the day it appear , even chromium but guess what, not steam. - this is just an exemple.
In conclusion for my initial question :
Are you considering steam browser safe to use in this case ?
the good and correct answer is no unfortunately because this feature, if it seems nice on paper, directly been able to surf the web using steam, is not safe at all, not more than using an old version of firefox published the same date.
Even if steam does not want to remove this feature ( button ) from the overlay, let it launch our own browser for that but i seriously doubt if will happen, because, well harvesting data ( 3.4 ) ...
And those requirements would be?
The fun thing is: Valve literally doesn't publish formal system requirements for the Steam client.
Go ahead and try to find them. You won't. The only requirements they publish are for using the Steam Index hardware.
That's not entirely true. The modern protocols Windows makes available for burning data on CD-R; DVD+/-R; or BD-R discs are indeed no differen between internal and external drives. However, internal drives also support older API models that offer much lower level access than the high-level modern disc-burning APIs that were purposely limited to make them more plug-n-play ready. Said low-level access is often needed if you need to make exact clones of discs that are ... purposely non-conforming to spec.
You'd be guessing wrong.
If you publish an application that uses CEF then the license requires that you either centrally
publish all the changes you made to the source code (incl. the source of any of its in-the-box non-precompiled dependencies, like Chromium) or provide the altered source on-request.
Valve didn't wait for someone to request that, and instead opted for centrally publishing the changes they made to CEF for integrating it with the Steam client.
Those changes do not contain any back-ported security fixes.
What you see is what you get.
If you boot up Steam with the CLI flag that enables the Chromium dev tools and you dump the Chromium version number, then that's the exact true-and-blue version of Chromium it's running; warts and all.
TL;DR Steam is a security swiss-cheese.
And with the recent WEBP vulnerabilties revealed:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863
https://www.cve.org/CVERecord?id=CVE-2023-5129
-- literally no-one should be doing anything with the client that goes beyond right-clicking covers in their library to hit 'play'. Because even opening a game detail page will load parts of social feeds that may include trivially infected WEBP images that might be leveraged to perform a remote code execution attack.
Disable the Steam overlay.
Sign out of chat.
And if you must communicate with others, consider other apps like Discord.
Discord was already updated to a version of Electron that's built on top of a patched Chromium. It's no longer vulnerable. (Took them a day since the CVE was disclosed according to NIST, afaict. Taking notes here, I hope, Valve?)
Steam currently is a liability. For everyone.
Yeah, I remember looking at the patch notes one month during a Windows 10 update ... over 100 security bugs fixed. I expect Windows 11 to be no different.