Based on that output, I agree with the other comment that gamescope is your culprit. Try running this:

sudo cat /sys/module/nvidia_drm/parameters/modeset

It was in the last set, but I left off the sudo prefix on accident. If it outputs “N” or “0”, we’ve got an answer: gamescope needs KMS to run, but you’ve got an older GPU driver version (v550) and DRM (which KMS depends on) isn’t turned on by default until v560 per https://wiki.archlinux.org/title/NVIDIA#DRM_kernel_mode_setting.

So if that is the issue, this should sort you out as a fix and get gamescope running again. Be aware that it’ll reboot your PC in the process:

echo 'options nvidia-drm modeset=1' | sudo tee /etc/modprobe.d/nvidia-drm-modeset.conf
sudo update-initramfs -u
sudo reboot

Good job putting this together! Lots of useful info in your post.

My eye is locking onto this bit in the logs: vkCreateDevice failed (VkResult: -7). Vulkan is failing to initialize, seemingly because of some missing extension.

Try these for us and share your output, if you’d be so kind. Feel free to scrub any parts you don’t wanna share with a [REDACTED]. I’m mostly going off memory so some of them may fail and that’s okay:

sudo dmesg | grep -i err | tail -10
nvidia-smi
inxi -Gxx
which vulkaninfo
which amdvlk
which vulkan-intel
vulkaninfo --summary
gamescope -- vkcube
vkcube
cat /sys/module/nvidia_drm/parameters/modeset

Realistically, you’ll probably want to encode the stream first to keep bandwidth sane, but I suspect you’re looking for something like: ffmpeg -f v4l2 -i [my video card] -f alsa -i [my sound card] -c copy -f nut pipe:1 | ssh username@otherhost 'mpv -'.

Fair enough!

But I can tell you as a cybersecurity expert that you’d have a hard time finding a way to get any sort of remote execution from user-generated content on any major site, much less an exploitable browser sandbox escape.

Okay, wanna give me a link to a PoC example you set up?

I’ll reimage my laptop to an old Ubuntu ISO of your choice, and visit your link. Happy to be proven wrong.

Debian + unattended upgrades + modern package managers for non-system-installed software covers your bases very well.

Debian packages are downstream enough from their sources that the packaging delay keeps you safe (and means the updates have had human eyes on them before they hit you). Unattended upgrades means you don’t have to worry about running the upgrades yourself.

Pip, npm, and the other big package managers now also support dependency cooldowns on their recent releases, but uv and pnpm pioneered that and cover you for older release environments.

You’d still be fine if you’re not exposing public services or visiting actively-malicious websites.

There’s never been an instance of widespread malware built with a dedicated ability to persist on a Linux host through Wine.

It wouldn’t be hard at all for a hacker to manually wire up linux-specific malware on a computer once they had a RAT running in Wine, but there’s no credible risk of windows malware automatically installing “linux viruses” at present.

Using this plot as a statistical argument against the idea of Dunning Kruger is pretty Dunning Kruger.

It’s a scatter plot with hella dense overlap and no density indicator, and a best-fit line that doesn’t match the visual skew. Different ranges and scales on the axes are wonky as hell and make it hard to follow a 1:1 reference line. Try tracing a mental line from (75,75) to (150,150) and it looks much cleaner.

It seems to show subjective vs. evaluated IQ results, which mostly shows people generally think they’re far above average. There’s clearly a statistically significant positive correlation in the trend of modest magnitude.

More importantly though, it’s a bit of a weird thing to tie to Dunning Kruger: The plot tells us something about how well people can guess how “cognitively gifted” they are relative to peers, but that’s not a reasonable proxy for how people might self-evaluate on a skill-based or knowledge-based domain.

E: and I went looking for the source and that’s fake, simulated data you’re presenting as real there lol https://en.wikipedia.org/wiki/Dunning–Kruger_effect#Statistical_and_better-than-average_effect

It’s the latter; the kernel CVE report counts have gone through the roof in the past few years.

No one is porting the whole kernel to rust (as part of the official project, at least).

Serious answer: They’re low priority bullshit rather than practical security concerns.

“This method crashes if you intentionally feed it malformed data!!”- type of stuff.

Microshaft

Linux cannot natively run the .exe binary format (Portable Executable).

WINE handles mapping the bytecode into a structure Linux can use, and it’s fair to call that translation. Translating syscalls is WINE’s biggest functionality but not its only one.

As a recovering Leagueaholic:

Friendly reminder that League worked perfectly on Linux for many years. Riot yanked support for zero reason other than a generic “fuck you” stance.

Come vote with feet when you’re ready :); I can only speak for myself but the grass has been much greener.