yes. pirated software is suprisingly secure most of the time.

im also not running windows. malware not meant for proton is gonna have a bad time working.

I’m running the games in Linux, using Lutris as a launcher with a default configuration that wraps them in a firejail sandbox (for anybody interested, you add firejail as the “command prefix” under Global Options or in the System Options of the game) which amongst other things blocks networking.

In fact I went and figure out how to do all that exactly because I wanted to run pirated games in Linux in a safe way and you can’t just rely on the lower probability of Windows games of having code that tries to determine if it’s being run with Wine and accesses Linux-specific functionality and files if it is.

PS: That firejail stuff also works for Linux native games (it just wraps whatever you’re running to start the game, be it Wine or directly the game Linux binary).

I run such games on Linux now, mostly with wine/proton. There is some risk, sure, but I’d largely say that system is still secure. If something comes by and wipes out the system, I have snapshots of anything important, including root and home. If those are gone, I have versioned backups offsite and maybe offline. I don’t expect to receive any malware targeting my somewhat esoteric software choices from windows games, so I feel okay logging into a secure sevice, for example, but I may have to adjust this in the future.

With regards to smartphones, I think there are so many holes that it’s not much more secure, if any, than a paranoid desktop setup. From time to time I have installed random APKs and had extreme anxiety each time. I am massively more paranoid about my phone as I don’t have real control over what’s running on it. Hoping for more competitive open source solutions in the future.

Generally speaking, opening non-executable files is fine. There are and have been specific exploits which allow arbitrary code execution, but it’s dependent on the application/library loading them. The bigger danger is files disguised as other things. This is especially bad on Windows as it likes to hide that information from users, or just execute random embedded vbscripts, or whatever. Also see the recent whatsapp mimetype bug/exploit. Certain things pose more of a risk than others. PDFs (thanks adobe) can embed arbitrary javascript which is meant to be executed. Same as web pages, of course, but browsers have a lot more attention to sandboxing.

Edit: I don’t really run cracked software anymore, but I have VMs ready to go if need be. Would recommend others do the same.

I’m on Linux, using Bottles to run pirated games. It adds a little bit of sandboxing, compatdata is usually a weird environment for malware to effectively work in (unless the malware is written specifically for it), if the game is really sketchy then I’d just disable network access for bottles flatpak too just to make sure.

All in all, I do sometimes have a little bit of paranoia and look through processes to see if there’s anything running and periodically go through some folders to see if there’s anything weird or unusual there, I’d still consider my machine to be safe.

As for the last question, PDF’s are an attack vector and should be used with caution. As for other file types, it depends on the software you use to run them - if it’s something pretty barebones that just plays it then it’s usually fine, but if its something more complex and reads some custom data embeded into those files, then it can be a vulnerability. Not a security expert though, but it’s the gist I got from looking at some historical vulnerabilities.

Honestly I don’t run pirated software at all anymore. The risk is too high. If it’s a game then I’m happy to pay for it, and open source software covers pretty much everything else for me.

The only exception is switch games but they run through an emulator which is quite safe.

Most media files are safe but I’ve heard that PDFs of all files can be vectors.

Publisher matters. Some random website advertising a disk cleaning utility could be malware while a Fitgirl repack most definitely isn’t. Installing something from an official Ubuntu software repository is also pretty safe, while something from a 3rd party repository or community development library could be malware. I also generally trust PDFs from Anna’s Archive and Libgen or Internet Archive, because of the reputation loss to them if it were. You can minimize your risk to a tolerable level this way.

When engaging in criminal activity, you have no “legal” recourse for malicious behavior, so you work on the web of trust instead.

If you can’t trust the software, nor the publisher, nor the hash verified by however many seeders, then don’t download it in the first place. Me personally, considering I install indie porn games on the regular and never once gotten a virus that I know of, I think it’s worth it to trust others.

Of course you could always go into paranoid zero trust mode but sometimes being a social being means trusting the criminal serving you free shit isn’t ratfucking your data

I run a few games posted by johncena141 on 1337x, so I consider it secure enough :p

I don’t know if the malware that could be in these games work on Linux, but I take my time in picking torrents and pick ones through uploaders I know

the games I pirate are all in my Lutris app which I installed as a flatpak on Linux, so they don’t have the necessary permissions to change important files.

also I install them in the virtual C: drive, and they normally shouldn’t thouch the virtual Z: drive. I don’t think a hack would do that because installing malware on the windows drive should be enough for most people pirating games

No, I try to treat that machine like a quarantine zone, I have a two PC setup and that’s part of the reason for it. So basically I don’t log into online accounts on that one (except relatively unimportant accounts for convenience, like Steam), and I don’t do important stuff on it

I mostly just avoid running pirated software. If I have to, I run the executable bits through stuff like virustotal first. And I keep my system updated.

I personally run all my games in Bottles (flatpak) with sandboxing on. Even if a game is available for Linux I still run the Windows version inside Bottles just so it’s slightly safer.

I’ve never run it because I have had zero evidence to tell me it would be safe. I do run older games in emulators up to PS2. I see no issue with that.

Clean copies of GOG games can be hash-checked. The only pirated games I really fuck with are GOG.

Although I wouldn’t be too worried even if I did because I’m in Linux, and anything I did would be sandboxed and closed off from the rest of the system since it’s running in a compatibility layer.