Gabe Newell's vision for Steam: More choice, more democracy, less Greenlight

[greggman]

Without a sandbox you're still at the mercy of every game you install. Even on Linux every game you install could upload the contents of your .ssh folder, your .mail folder, or ~/Pictures or whatever's in your user folders.

And, even if it doesn't do itself if the game does any networking then if there's any bugs in the networking code someone can use that as a way into your system.

Here's hoping Steam can build a sandbox.

Note: This is also the problem with systems like the old PC/Mac/Linux Boxee. How do I know the apps I'm one click installing can't read my whole HD? I don't :-(

Apple's App Store, Windows 8's app store, iOS's app store, Android's App store, and Chrome's App store all try to solve this problem. AFAICT Steam does not.

[slurgfest]

I'm not sure why this is especially more dangerous than ordinary Linux packages provided by distros, let alone games installed by means other than Steam. A game is an executable, running any executable with your privileges provides access to your home directory. That is ordinary design for a Linux program. What is the home directory for, anyway? Again, it is absolutely normal for ordinary programs including multiplayer games to use the network.

Connect your PCs to the internet through a firewall and don't install Steam on production servers.

[jiggy2011]

This is the fundamental tradeoff between security and usability.

It would be more secure to basically give every application you install it's own home folder and keep it restricted to that.

OTOH an image editing program should be able to see images used by other image editors, a file transfer program should be able to use my SSH keys to log me into various servers etc.

The only way around this would be to have some complicated fine grained permissions system that requires apps to know about other apps that might want to access it's data.

[cobrausn]

Part of the allure of Steam is that everything on that service has been vetted before I ever see it, if not for fun then at least for being a game and not malware.

Not sure how I feel about this. Sure, the users will catch the problem eventually and get it pulled, but in the meantime you would be really leery about downloading something new.

[hayksaakian]

This is largely an illusion. Take the war z. They were able to release a dishonest incomplete game, and it took community outrage to bring it to valve's attention.

[nextparadigms]

In a recent speech by Gabe, I think he said they'd still check for malware. But he didn't give any details, so I'm not sure if he actually has a plan to open the market, but in the same time has a system for checking malware, or he was just saying that.

[dwerthen]

That is why the user created stores would be great. You'd still get curated content, just not from steam. So it might be even better than today, in the sense of "properly" curated content!

[ollysb]

Seems like they could offer both. If they watch the traffic they could approve the most popular games but still allow people to use games immediately if they want to.

[jiggy2011]

Yep, Steam to me has been a place where I know there is a certain quality standard.

If I wanted to just download random files I'd go to pirate bay or mega upload.

[prezjordan]

I still want to see a complete redesign of their UI. It's slow, unresponsive, and I don't even think it's native code. They have the resources to do it.

[lcampbell]

If you're talking about the in-client store UI, I believe it's PHP-generated markup rendered in an embedded WebKit browser. Given that the overlay browser uses the same tooling and also renders pages slowly, I'm inclined to believe they're doing something inefficiently, but don't necessarily need to resort to native code to fix.

Native code may be runtime faster, but there's huge advantages to leveraging HTML. You'd have to either -

* Define your own serialization/markup for describing a UI, then specify a network transport for it.

* OR, just bake the whole UI in native code and fill it in with data pulled down from an API. Update the binary when you want to make UI changes.

Neither solution comes with the ease-of-development and flexibility that HTML/HTTP provide.

[Zikes]

This might explain the odd scroll behavior I've experienced on my laptop. Mouse scroll wheel works fine, but touchpad scroll gestures never do.

[SkyMarshal]

>I would buy everything from Old Man Murray. - Gabe

This brings back memories. One of the funniest OMM game reviews I recall reading was of American McGee's Alice:

http://www.oldmanmurray.com/longreviews/56.html

[james4k]

Interesting...while reading this, I started picturing Steam becoming something a bit more like Etsy, but for digital goods. Anyone else sort of get that vibe?

[rndmize]

Yep. There's a lot of potential for some games to almost go beyond being games and become platforms - Skyrim, Minecraft - if the community was allowed to sell material they created for it.

[jiggy2011]

Wow, what? They're opening their servers up as a way for anyone to host anything? How will that scale?

I assume they're going to have to do something to prevent people just uploading cracked versions of games that are otherwise available for money.

[TillE]

The best thing for them to do would be simply to adopt the app store model, whether it's Apple's or Google's. Open to all comers who can pay the fee, but with a brief approval process.

Greenlight was a failed experiment, and it's extremely encouraging to see them acknowledging that. Valve could be, if they want to, the platform for all indie games, not just broadly popular ones. So far they've resisted that, and I can't imagine it's been a particularly good business decision.

I know people want "curation", but have you seen some of the crap that's already on Steam? Probably not, because it rarely features on their storefront, which can always be curated regardless of how many other games they accept and sell, which might only be found through a search or a direct link. That's the best of both worlds.

[cjh_]

I too am very interested in the logistics of this, I imagined some kind of 'pull' system where the higher the demand the more it is replicated.

The piracy issue will be interesting, although I guess this could be dealt with by using a team of mods and/or scanning their servers for possible infringing files.

Interesting times ahead.

[iron_ball]

Nice to see an Old Man Murray shoutout. Last I heard, one of the writers of that site and other web classics was working at Valve, so maybe some of the wit and wisdom can live on.

[jholman]

Both of the OMM writers work for Valve these days. And you can tell, when you play Portal or Portal 2. (Or Psychonauts, which Erik co-wrote.)

All of which games you should play, JUST FOR THE WRITING.

[jiggy2011]

Thinking about this a little more, sounds like they are basically creating a cross platform package manager.

Being able to pull down a game , a movie and a web framework all from one place and be mirrored on all of my computers could be interesting.

[Shorel]

One of the things I would like for Steam is to add the original publication date of all games (not just the date they added the game to Steam) and let me sort my collection by that date.

[shmerl]

Let him make it DRM free first.

[Semaphor]

The publisher can decide if he wants DRM or not. Steam offers both.

[Shorel]

You already have Desura for that.