Sandboxing is quite easy (user-wise), once you install the sandbox system. By default it allows only a single sandbox, and with small `.wsb` file you can drive what's visible from the host, whether the GPU should be active, etc. - https://learn.microsoft.com/en-us/windows/security/applicati...

It's great for testing, and Sandbox is just the tip of the iceberg of what Windows Containers support

- e.g. maybe someone can come up with "launcher" that goes through it (somehow).

It certainly could.

Buying a better GPU improves your graphics performance and that's basically unrelated to the area where a sandbox impacts performance.

Killing your web browser is probably just lowering memory pressure?

Sandboxes add overhead to syscalls. It's kind of similar to running under Wine, which also adds significant syscalls overhead. Wine also has a much more impactful DirectX translation layer, so your sandbox performance would be probably be much better than the Wine performance.

Only a relatively small (but popular) subset of games use anticheat. Most games -- including the one in this article -- could theoretically run in a sandbox.

Proton is just emulation, and it will happily expose the underlying host system to the running game software. In particular the filesystem and some peripheral devices. However, Valve is moving towards sandboxing in Steam. You can already run the whole thing with a flatpak sandbox, and valve themselves are using ostree. With srvio is possible to run the whole thing in a throwaway windows vm while the graphics card is passed through

You can just use Linux syscalls from an .exe executed by Wine. There is no sandboxing.

https://gist.github.com/q3k/e5952111283ea59ee78a7699919a055b

Anything that wants to traverse your filesystem could do so trivially from a wineprefix, but stuff like sniffing your browser extensions might be harder depending on the technique.

I agree, although I've made exceptions for a very small number of games with Denuvo (actually, just Hogwarts Legacy, which in hindsight I'm glad I did even though it still hurts my soul a bit) and they can run on Linux (I have nothing else but Linux). It's mostly kernel-level anti-cheat that won't run from what I've read.

"We have to stop the nazis" is so 1940s.

"Congress is engaged in a witch hunt" is so 1950s.

"Civil rights should be applied to everyone" is so 1960s.

"Fossil Fuels are destroying the plant" is so 1970s.

"Unregulated free trade is dangerous" is so 1980s.

"The police are out of control and unduly target minorities" is so 1990s.

Something being old doesn't make it less relevant or important.

It means we need to say it louder, because for some reason the point hasn't been made clearly enough yet.

Every day there are new people coming online and/or of age who weren't aware or even alive in 2005. They too need to know that DRM is malware.

"rootkits are malware" is in fact eternal.

Well, Riot Games just today (!) admitted to hard-bricking cheating hardware [1]. This kind of stuff definitely is malware, and your comment aged like milk.

[1] https://videocardz.com/newz/riot-games-on-valorant-dma-cheat...

A saying being old doesn’t make it invalid anyway. What’s your point?

i assume they are referring to denuvo.

and, while denuvo and other drm for games is indeed awful, i find it silly to equate it with cryptocurrency stealing malware.

Not for nothing but have we all forgotten the sony rootkit? Actually, that would be a perfect front. Start a game company backed by a nation state, put in rootkit anti-cheat, profit.