Steam Hacked?

LazyLion

LazyLion

King of de Jungle
Joined
Mar 17, 2005
Messages
107,423
Reaction score
9,943
Location
District 9
We've got random people's account info showing up on our Steam accounts here at home.
If it is not hacked, then the system is very screwed up.
We can see other people's info, games, banking details, etc, through our account link.
I mean, myself and my two sons.
All of us can see it.
 
Damn, was about to start this. Yeah, seems bad but I see the account screen now doesn't show, just says login.
 
If you use your Paypal account with Steam, you should change that password as well!
 
From my understanding its a caching problem. So instead of seeing your CC detail you see the person that check his just before you.

Solution: Dont want your data out, don't visit pages that display sensitive info right now.
 
Amusing how everyone seems to be confusing a glitch with a security breach. :D

[video=youtube;MeJzHSxRq40]https://www.youtube.com/watch?v=MeJzHSxRq40[/video]
 
A few things:

1) It's not a security breach, or hacktivism attack.
2) Valve was aware of this from the start
3) Payments couldn't be made whilst seemingly being logged into another persons account
4) CVC information is also required for purchases, which is not stored on Steam
5) CC details are not displayed in full
6) CC details are likely kept in a separated database, hashed and salted entirely differently to the store and it's transactions
7) The logged in profile changes every time you refresh the page or navigate to another section. So purchasing on a specific persons account would be highly unlikely.
7) Editing/changing CC details or unlinking PayPal puts you at more of a risk if it were a security breach.

Anyway, it all seems to be fine now.
 
Last edited:
Update 4 (Final): Valve has responded to our request for comment, sounding the all-clear and assuaging concern over account compromise. The company says that all systems have been restored, and a caching issue caused users to see account details that weren't their own. No further action is required from users, according to a Valve representative.

"Steam is back up and running without any known issues," we were told via email. "As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users."

http://www.gameinformer.com/b/news/...ng-security-issues-extent-as-yet-unclear.aspx
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X