Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread GRYZOR
Perhaps discussions regarding the steam-platform could be taken to the
appropriate forum-section next time, hence actually get a community
response and reply from Valve, instead of spamming the poor guys who
try and make the Linux-server work on both sides of the fence?

-TheG

On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com wrote:
 You've got mail.

 Kyle.

 On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
 jmccas...@valvesoftware.com wrote:
 If you have concrete evidence of an exploit please provide us with any 
 information you have.  We would certainly take such an exploit seriously.  
 However, we currently aren't aware of any such exploit and have no evidence 
 that one would be possible.  Sometimes rumors about exploits turn out to be 
 greatly exaggerated.

 Please feel free to email me directly if you have details on any security 
 exploits in Steam.

 John

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle 
 Sanderson
 Sent: Wednesday, October 13, 2010 8:30 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread Kyle Sanderson
I hate to say it, but the Steam Powered User Forums (SPUF) are full of
incompetence (I gave it another shot a couple months back, the same
silly replies ensued). Steam Tickets will also get you no where
quickly. If there was a more reliable way to have a meaningful
discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we
would all use it. However, at this present time, there is not. I would
have done exactly what Tom did, would have I been wrong to? That's for
you to decide (of course it's off topic, and 'unrelated to Server
Administration'). Saying that this belongs on the Steam forums though
is preposterous. One employee mailed me off list, John asked on list
(both work on Steam, well, atleast they're in the Steam group). I've
sent both of them the exploit with instructions on how to use it.
Hopefully there's at least some sort of patch out for it soon (it has
been public knowledge for quite sometime now).

All is not lost in this *thread*, hopefully.
Kyle.

2010/10/14 Björn GRYZOR Rohlén bjorn.roh...@safehex.se:
 Perhaps discussions regarding the steam-platform could be taken to the
 appropriate forum-section next time, hence actually get a community
 response and reply from Valve, instead of spamming the poor guys who
 try and make the Linux-server work on both sides of the fence?

 -TheG

 On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com wrote:
 You've got mail.

 Kyle.

 On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
 jmccas...@valvesoftware.com wrote:
 If you have concrete evidence of an exploit please provide us with any 
 information you have.  We would certainly take such an exploit seriously.  
 However, we currently aren't aware of any such exploit and have no evidence 
 that one would be possible.  Sometimes rumors about exploits turn out to be 
 greatly exaggerated.

 Please feel free to email me directly if you have details on any security 
 exploits in Steam.

 John

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle 
 Sanderson
 Sent: Wednesday, October 13, 2010 8:30 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical 
 side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of 
 steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a 
 link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for 
 sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u 
 guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread tom n
Sorry-
I do not mean to spam this board and I usually keep quiet on most
conversations.


If you have concrete evidence of an exploit please provide us with any
information you have.  We would certainly take such an exploit seriously.
 However, we currently aren't aware of any such exploit and have no evidence
that one would be possible.  Sometimes rumors about exploits turn out to be
greatly exaggerated.

Please feel free to email me directly if you have details on any security
exploits in Steam.

John

John, I will keep your email on record if I see this again. I posted the
address as a reference not as advertising. I am a big boy,I can afford to
buy Steam games on my own.



On Thu, Oct 14, 2010 at 3:45 AM, Kyle Sanderson kyle.l...@gmail.com wrote:

 I hate to say it, but the Steam Powered User Forums (SPUF) are full of
 incompetence (I gave it another shot a couple months back, the same
 silly replies ensued). Steam Tickets will also get you no where
 quickly. If there was a more reliable way to have a meaningful
 discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we
 would all use it. However, at this present time, there is not. I would
 have done exactly what Tom did, would have I been wrong to? That's for
 you to decide (of course it's off topic, and 'unrelated to Server
 Administration'). Saying that this belongs on the Steam forums though
 is preposterous. One employee mailed me off list, John asked on list
 (both work on Steam, well, atleast they're in the Steam group). I've
 sent both of them the exploit with instructions on how to use it.
 Hopefully there's at least some sort of patch out for it soon (it has
 been public knowledge for quite sometime now).

 All is not lost in this *thread*, hopefully.
 Kyle.

 2010/10/14 Björn GRYZOR Rohlén bjorn.roh...@safehex.se:
  Perhaps discussions regarding the steam-platform could be taken to the
  appropriate forum-section next time, hence actually get a community
  response and reply from Valve, instead of spamming the poor guys who
  try and make the Linux-server work on both sides of the fence?
 
  -TheG
 
  On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com
 wrote:
  You've got mail.
 
  Kyle.
 
  On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
  jmccas...@valvesoftware.com wrote:
  If you have concrete evidence of an exploit please provide us with any
 information you have.  We would certainly take such an exploit seriously.
  However, we currently aren't aware of any such exploit and have no evidence
 that one would be possible.  Sometimes rumors about exploits turn out to be
 greatly exaggerated.
 
  Please feel free to email me directly if you have details on any
 security exploits in Steam.
 
  John
 
  -Original Message-
  From: hlds_linux-boun...@list.valvesoftware.com [mailto:
 hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
  Sent: Wednesday, October 13, 2010 8:30 PM
  To: Half-Life dedicated Linux server mailing list
  Subject: Re: [hlds_linux] hacking steam accounts
 
  There are tools out there that can unverify a persons Steam account
 email.
 
  It's rather shocking how Valve doesn't take Security that seriously.
  Kyle.
 
  On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
  Thanks,already did that. I guess my question was more on the technical
 side.
  I had verified my steam email along time ago.Cant remember the whole
 ip
  address but the link sent to me was along the lines of
 steam(company).com.cc
  On checking this I realize that .cc is a topdomain in Australia I
 guess..
 
  hmm
 
 
  On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
  mar...@cybergamesbrasil.com wrote:
 
  If you still can log in, go change your password and secret.
  Don't waste time trying to figure how that happened.
 
 
  -Mensagem original-
  De: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
  Enviada em: quarta-feira, 13 de outubro de 2010 22:49
  Para: Half-Life dedicated Linux server mailing list
  Assunto: [hlds_linux] hacking steam accounts
 
  Hi all,not the forum but I had a question to ask.
 
  Any of ya had your steam acct hacked or knew of someone who has? Got
 a link
  sent to me today for a medal of honor beta. When i logged on tonite I
 had
  realized for some reason that a cpl of friends had been blocked on
 my
  steam friends list..
 
  Also I had joined a cpl of steam groups that I know I hadnt joined
 for sho.
 
  Any ideas?
 
  (Like I said,not the right forum but just bored and wanted to ask u
 guys.:)
  ___
  To unsubscribe, edit your list preferences, or view the list
 archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list
 archives,
  please visit:
  http://list.valvesoftware.com

Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread ics
 This we can all agree + Valve people does read this list while they do 
not always reply. Besides, while we run servers, most of us have also 
Steam accounts which security we are as concerned as our servers. So 
this kind of thing is important to most of us too so we can further more 
give announcements to our fellow gamers through community services and 
such to watch out for scammers and such.


-ics

14.10.2010 11:45, Kyle Sanderson kirjoitti:

I hate to say it, but the Steam Powered User Forums (SPUF) are full of
incompetence (I gave it another shot a couple months back, the same
silly replies ensued). Steam Tickets will also get you no where
quickly. If there was a more reliable way to have a meaningful
discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we
would all use it. However, at this present time, there is not. I would
have done exactly what Tom did, would have I been wrong to? That's for
you to decide (of course it's off topic, and 'unrelated to Server
Administration'). Saying that this belongs on the Steam forums though
is preposterous. One employee mailed me off list, John asked on list
(both work on Steam, well, atleast they're in the Steam group). I've
sent both of them the exploit with instructions on how to use it.
Hopefully there's at least some sort of patch out for it soon (it has
been public knowledge for quite sometime now).

All is not lost in this *thread*, hopefully.
Kyle.

2010/10/14 Björn GRYZOR Rohlénbjorn.roh...@safehex.se:

Perhaps discussions regarding the steam-platform could be taken to the
appropriate forum-section next time, hence actually get a community
response and reply from Valve, instead of spamming the poor guys who
try and make the Linux-server work on both sides of the fence?

-TheG

On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sandersonkyle.l...@gmail.com  wrote:

You've got mail.

Kyle.

On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
jmccas...@valvesoftware.com  wrote:

If you have concrete evidence of an exploit please provide us with any 
information you have.  We would certainly take such an exploit seriously.  
However, we currently aren't aware of any such exploit and have no evidence 
that one would be possible.  Sometimes rumors about exploits turn out to be 
greatly exaggerated.

Please feel free to email me directly if you have details on any security 
exploits in Steam.

John

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com 
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
Sent: Wednesday, October 13, 2010 8:30 PM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] hacking steam accounts

There are tools out there that can unverify a persons Steam account email.

It's rather shocking how Valve doesn't take Security that seriously.
Kyle.

On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com  wrote:

Thanks,already did that. I guess my question was more on the technical side.
I had verified my steam email along time ago.Cant remember the whole ip
address but the link sent to me was along the lines of steam(company).com.cc
On checking this I realize that .cc is a topdomain in Australia I guess..

hmm


On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
mar...@cybergamesbrasil.com  wrote:


If you still can log in, go change your password and secret.
Don't waste time trying to figure how that happened.


-Mensagem original-
De: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
Enviada em: quarta-feira, 13 de outubro de 2010 22:49
Para: Half-Life dedicated Linux server mailing list
Assunto: [hlds_linux] hacking steam accounts

Hi all,not the forum but I had a question to ask.

Any of ya had your steam acct hacked or knew of someone who has? Got a link
sent to me today for a medal of honor beta. When i logged on tonite I had
realized for some reason that a cpl of friends had been blocked on my
steam friends list..

Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

Any ideas?

(Like I said,not the right forum but just bored and wanted to ask u guys.:)
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread John McCaskey
Thanks again Kyle. 

FYI for everyone else, there did turn out to be a security hole allowing 
bypassing of email verification if you had a properly hacked client.  We pushed 
out a server side fix for this and the exploit should be fixed as of this 
afternoon.

If anyone has any details on Steam security exploits in the future please 
continue to email me directly and we'll check them out.

John

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com 
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
Sent: Wednesday, October 13, 2010 10:51 PM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] hacking steam accounts

You've got mail.

Kyle.

On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
jmccas...@valvesoftware.com wrote:
 If you have concrete evidence of an exploit please provide us with any 
 information you have.  We would certainly take such an exploit seriously.  
 However, we currently aren't aware of any such exploit and have no evidence 
 that one would be possible.  Sometimes rumors about exploits turn out to be 
 greatly exaggerated.

 Please feel free to email me directly if you have details on any security 
 exploits in Steam.

 John

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
 Sent: Wednesday, October 13, 2010 8:30 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-14 Thread Jake Eisenman
Thanks for taking this seriously and alerting the coding team so
quickly. Glad to see it was resolved.

We appreciate it.

TehZomB
W: www.tehzomb.us
P: 1 (443) 805-6313
E: tehz...@hushmail.com

On 10/14/2010 7:36 PM, John McCaskey wrote:
 Thanks again Kyle. 
 
 FYI for everyone else, there did turn out to be a security hole allowing 
 bypassing of email verification if you had a properly hacked client.  We 
 pushed out a server side fix for this and the exploit should be fixed as of 
 this afternoon.
 
 If anyone has any details on Steam security exploits in the future please 
 continue to email me directly and we'll check them out.
 
 John
 
 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
 Sent: Wednesday, October 13, 2010 10:51 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts
 
 You've got mail.
 
 Kyle.
 
 On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
 jmccas...@valvesoftware.com wrote:
 If you have concrete evidence of an exploit please provide us with any 
 information you have.  We would certainly take such an exploit seriously.  
 However, we currently aren't aware of any such exploit and have no evidence 
 that one would be possible.  Sometimes rumors about exploits turn out to be 
 greatly exaggerated.

 Please feel free to email me directly if you have details on any security 
 exploits in Steam.

 John

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle 
 Sanderson
 Sent: Wednesday, October 13, 2010 8:30 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Marlon Almeida | CGBR
If you still can log in, go change your password and secret.
Don't waste time trying to figure how that happened.


-Mensagem original-
De: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
Enviada em: quarta-feira, 13 de outubro de 2010 22:49
Para: Half-Life dedicated Linux server mailing list
Assunto: [hlds_linux] hacking steam accounts

Hi all,not the forum but I had a question to ask.

Any of ya had your steam acct hacked or knew of someone who has? Got a link
sent to me today for a medal of honor beta. When i logged on tonite I had
realized for some reason that a cpl of friends had been blocked on my
steam friends list..

Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

Any ideas?

(Like I said,not the right forum but just bored and wanted to ask u guys.:)
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread tom n
Thanks,already did that. I guess my question was more on the technical side.
I had verified my steam email along time ago.Cant remember the whole ip
address but the link sent to me was along the lines of steam(company).com.cc
On checking this I realize that .cc is a topdomain in Australia I guess..

hmm


On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Kyle Sanderson
There are tools out there that can unverify a persons Steam account email.

It's rather shocking how Valve doesn't take Security that seriously.
Kyle.

On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Shane Arnold
 I think you guys need to keep in mind they are primarily a game 
developer. Their interest is in developing games, not necessarily 
concentrating on the myriad of security aspects there are. They aren't 
Microsoft.


However I agree, to implement a verification function which can be 
undone using a tool is worrying.


I'm sure they are aware of the issue and are working on a fix.

On 14/10/2010 11:29 AM, Kyle Sanderson wrote:

There are tools out there that can unverify a persons Steam account email.

It's rather shocking how Valve doesn't take Security that seriously.
Kyle.

On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com  wrote:

Thanks,already did that. I guess my question was more on the technical side.
I had verified my steam email along time ago.Cant remember the whole ip
address but the link sent to me was along the lines of steam(company).com.cc
On checking this I realize that .cc is a topdomain in Australia I guess..

hmm


On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
mar...@cybergamesbrasil.com  wrote:


If you still can log in, go change your password and secret.
Don't waste time trying to figure how that happened.


-Mensagem original-
De: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
Enviada em: quarta-feira, 13 de outubro de 2010 22:49
Para: Half-Life dedicated Linux server mailing list
Assunto: [hlds_linux] hacking steam accounts

Hi all,not the forum but I had a question to ask.

Any of ya had your steam acct hacked or knew of someone who has? Got a link
sent to me today for a medal of honor beta. When i logged on tonite I had
realized for some reason that a cpl of friends had been blocked on my
steam friends list..

Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

Any ideas?

(Like I said,not the right forum but just bored and wanted to ask u guys.:)
___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread 1nsane
They are also a publisher of games, security should be a priority.

On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.auwrote:

  I think you guys need to keep in mind they are primarily a game developer.
 Their interest is in developing games, not necessarily concentrating on the
 myriad of security aspects there are. They aren't Microsoft.

 However I agree, to implement a verification function which can be undone
 using a tool is worrying.

 I'm sure they are aware of the issue and are working on a fix.


 On 14/10/2010 11:29 AM, Kyle Sanderson wrote:

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com  wrote:

 Thanks,already did that. I guess my question was more on the technical
 side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of
 steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
 mar...@cybergamesbrasil.com  wrote:

  If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a
 link
 sent to me today for a medal of honor beta. When i logged on tonite I
 had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for
 sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u
 guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

  ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

  ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Gene H
and they are a platform provider.
Shootjust imagine the hoopla that would exist if *pple's itunes or App
Store had security holes like this

G.

On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote:

 They are also a publisher of games, security should be a priority.

 On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au
 wrote:

   I think you guys need to keep in mind they are primarily a game
 developer.
  Their interest is in developing games, not necessarily concentrating on
 the
  myriad of security aspects there are. They aren't Microsoft.
 
  However I agree, to implement a verification function which can be undone
  using a tool is worrying.
 
  I'm sure they are aware of the issue and are working on a fix.
 
 
  On 14/10/2010 11:29 AM, Kyle Sanderson wrote:
 
  There are tools out there that can unverify a persons Steam account
 email.
 
  It's rather shocking how Valve doesn't take Security that seriously.
  Kyle.
 
  On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com  wrote:
 
  Thanks,already did that. I guess my question was more on the technical
  side.
  I had verified my steam email along time ago.Cant remember the whole ip
  address but the link sent to me was along the lines of
  steam(company).com.cc
  On checking this I realize that .cc is a topdomain in Australia I
 guess..
 
  hmm
 
 
  On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
  mar...@cybergamesbrasil.com  wrote:
 
   If you still can log in, go change your password and secret.
  Don't waste time trying to figure how that happened.
 
 
  -Mensagem original-
  De: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
  Enviada em: quarta-feira, 13 de outubro de 2010 22:49
  Para: Half-Life dedicated Linux server mailing list
  Assunto: [hlds_linux] hacking steam accounts
 
  Hi all,not the forum but I had a question to ask.
 
  Any of ya had your steam acct hacked or knew of someone who has? Got a
  link
  sent to me today for a medal of honor beta. When i logged on tonite I
  had
  realized for some reason that a cpl of friends had been blocked on
 my
  steam friends list..
 
  Also I had joined a cpl of steam groups that I know I hadnt joined for
  sho.
 
  Any ideas?
 
  (Like I said,not the right forum but just bored and wanted to ask u
  guys.:)
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
   ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
   ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Don P
Well it requires people like us to tell them about the exploit in detail not
just hey I heard from my mothers brothers sister hairdress that Valve can be
hacked, that doesnt help fix the issues
If you are aware of a real exploit send it to valve and give them time to
fix it before posting it here other than maybe a generic hey I found this,
too many people trolling looking for things to use ingame here.

On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote:

 and they are a platform provider.
 Shootjust imagine the hoopla that would exist if *pple's itunes or App
 Store had security holes like this

 G.

 On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote:

  They are also a publisher of games, security should be a priority.
 
  On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au
  wrote:
 
I think you guys need to keep in mind they are primarily a game
  developer.
   Their interest is in developing games, not necessarily concentrating on
  the
   myriad of security aspects there are. They aren't Microsoft.
  
   However I agree, to implement a verification function which can be
 undone
   using a tool is worrying.
  
   I'm sure they are aware of the issue and are working on a fix.
  
  
   On 14/10/2010 11:29 AM, Kyle Sanderson wrote:
  
   There are tools out there that can unverify a persons Steam account
  email.
  
   It's rather shocking how Valve doesn't take Security that seriously.
   Kyle.
  
   On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com  wrote:
  
   Thanks,already did that. I guess my question was more on the
 technical
   side.
   I had verified my steam email along time ago.Cant remember the whole
 ip
   address but the link sent to me was along the lines of
   steam(company).com.cc
   On checking this I realize that .cc is a topdomain in Australia I
  guess..
  
   hmm
  
  
   On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
   mar...@cybergamesbrasil.com  wrote:
  
If you still can log in, go change your password and secret.
   Don't waste time trying to figure how that happened.
  
  
   -Mensagem original-
   De: hlds_linux-boun...@list.valvesoftware.com
   [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
   Enviada em: quarta-feira, 13 de outubro de 2010 22:49
   Para: Half-Life dedicated Linux server mailing list
   Assunto: [hlds_linux] hacking steam accounts
  
   Hi all,not the forum but I had a question to ask.
  
   Any of ya had your steam acct hacked or knew of someone who has? Got
 a
   link
   sent to me today for a medal of honor beta. When i logged on tonite
 I
   had
   realized for some reason that a cpl of friends had been blocked on
  my
   steam friends list..
  
   Also I had joined a cpl of steam groups that I know I hadnt joined
 for
   sho.
  
   Any ideas?
  
   (Like I said,not the right forum but just bored and wanted to ask u
   guys.:)
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  
   ___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
___
   To unsubscribe, edit your list preferences, or view the list
 archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Gene H
Last time I did that, Steam locked my account.
Go figure.

On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote:

 Well it requires people like us to tell them about the exploit in detail
 not
 just hey I heard from my mothers brothers sister hairdress that Valve can
 be
 hacked, that doesnt help fix the issues
 If you are aware of a real exploit send it to valve and give them time to
 fix it before posting it here other than maybe a generic hey I found this,
 too many people trolling looking for things to use ingame here.

 On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote:

  and they are a platform provider.
  Shootjust imagine the hoopla that would exist if *pple's itunes or
 App
  Store had security holes like this
 
  G.
 
  On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote:
 
   They are also a publisher of games, security should be a priority.
  
   On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold 
 clontar...@iinet.net.au
   wrote:
  
 I think you guys need to keep in mind they are primarily a game
   developer.
Their interest is in developing games, not necessarily concentrating
 on
   the
myriad of security aspects there are. They aren't Microsoft.
   
However I agree, to implement a verification function which can be
  undone
using a tool is worrying.
   
I'm sure they are aware of the issue and are working on a fix.
   
   
On 14/10/2010 11:29 AM, Kyle Sanderson wrote:
   
There are tools out there that can unverify a persons Steam account
   email.
   
It's rather shocking how Valve doesn't take Security that seriously.
Kyle.
   
On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com
  wrote:
   
Thanks,already did that. I guess my question was more on the
  technical
side.
I had verified my steam email along time ago.Cant remember the
 whole
  ip
address but the link sent to me was along the lines of
steam(company).com.cc
On checking this I realize that .cc is a topdomain in Australia I
   guess..
   
hmm
   
   
On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
mar...@cybergamesbrasil.com  wrote:
   
 If you still can log in, go change your password and secret.
Don't waste time trying to figure how that happened.
   
   
-Mensagem original-
De: hlds_linux-boun...@list.valvesoftware.com
[mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom
 n
Enviada em: quarta-feira, 13 de outubro de 2010 22:49
Para: Half-Life dedicated Linux server mailing list
Assunto: [hlds_linux] hacking steam accounts
   
Hi all,not the forum but I had a question to ask.
   
Any of ya had your steam acct hacked or knew of someone who has?
 Got
  a
link
sent to me today for a medal of honor beta. When i logged on
 tonite
  I
had
realized for some reason that a cpl of friends had been blocked
 on
   my
steam friends list..
   
Also I had joined a cpl of steam groups that I know I hadnt joined
  for
sho.
   
Any ideas?
   
(Like I said,not the right forum but just bored and wanted to ask
 u
guys.:)
___
To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   
___
To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
 ___
To unsubscribe, edit your list preferences, or view the list
  archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
 ___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   
___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your list preferences, or view the list archives,
   please visit:
   http://list.valvesoftware.com/mailman/listinfo/hlds_linux
  
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:

Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread John McCaskey
If you have concrete evidence of an exploit please provide us with any 
information you have.  We would certainly take such an exploit seriously.  
However, we currently aren't aware of any such exploit and have no evidence 
that one would be possible.  Sometimes rumors about exploits turn out to be 
greatly exaggerated.
 
Please feel free to email me directly if you have details on any security 
exploits in Steam.  

John

-Original Message-
From: hlds_linux-boun...@list.valvesoftware.com 
[mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
Sent: Wednesday, October 13, 2010 8:30 PM
To: Half-Life dedicated Linux server mailing list
Subject: Re: [hlds_linux] hacking steam accounts

There are tools out there that can unverify a persons Steam account email.

It's rather shocking how Valve doesn't take Security that seriously.
Kyle.

On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Don P
It may have been the manner in which you did it also. Posting in the forums
hey steam there is a hack at this website www.aaa.com yea I wouldnt doubt
that as you are then advertising for a hack.
If you use the bug reporter, maybe not

On Wed, Oct 13, 2010 at 11:35 PM, Gene H geneharde...@gmail.com wrote:

 Last time I did that, Steam locked my account.
 Go figure.

 On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote:

  Well it requires people like us to tell them about the exploit in detail
  not
  just hey I heard from my mothers brothers sister hairdress that Valve can
  be
  hacked, that doesnt help fix the issues
  If you are aware of a real exploit send it to valve and give them time to
  fix it before posting it here other than maybe a generic hey I found
 this,
  too many people trolling looking for things to use ingame here.
 
  On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote:
 
   and they are a platform provider.
   Shootjust imagine the hoopla that would exist if *pple's itunes or
  App
   Store had security holes like this
  
   G.
  
   On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote:
  
They are also a publisher of games, security should be a priority.
   
On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold 
  clontar...@iinet.net.au
wrote:
   
  I think you guys need to keep in mind they are primarily a game
developer.
 Their interest is in developing games, not necessarily
 concentrating
  on
the
 myriad of security aspects there are. They aren't Microsoft.

 However I agree, to implement a verification function which can be
   undone
 using a tool is worrying.

 I'm sure they are aware of the issue and are working on a fix.


 On 14/10/2010 11:29 AM, Kyle Sanderson wrote:

 There are tools out there that can unverify a persons Steam
 account
email.

 It's rather shocking how Valve doesn't take Security that
 seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com
   wrote:

 Thanks,already did that. I guess my question was more on the
   technical
 side.
 I had verified my steam email along time ago.Cant remember the
  whole
   ip
 address but the link sent to me was along the lines of
 steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I
guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
 mar...@cybergamesbrasil.com  wrote:

  If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de
 tom
  n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has?
  Got
   a
 link
 sent to me today for a medal of honor beta. When i logged on
  tonite
   I
 had
 realized for some reason that a cpl of friends had been
 blocked
  on
my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt
 joined
   for
 sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to
 ask
  u
 guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

  ___
 To unsubscribe, edit your list preferences, or view the list
   archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

  ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list
  archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

___
To unsubscribe, edit your list preferences, or view the list
 archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
   
   ___
   To unsubscribe, edit your 

Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Gene H
I submitted a support ticket.

On Wed, Oct 13, 2010 at 9:42 PM, Don P buzza...@gmail.com wrote:

 It may have been the manner in which you did it also. Posting in the forums
 hey steam there is a hack at this website www.aaa.com yea I wouldnt doubt
 that as you are then advertising for a hack.
 If you use the bug reporter, maybe not

 On Wed, Oct 13, 2010 at 11:35 PM, Gene H geneharde...@gmail.com wrote:

  Last time I did that, Steam locked my account.
  Go figure.
 
  On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote:
 
   Well it requires people like us to tell them about the exploit in
 detail
   not
   just hey I heard from my mothers brothers sister hairdress that Valve
 can
   be
   hacked, that doesnt help fix the issues
   If you are aware of a real exploit send it to valve and give them time
 to
   fix it before posting it here other than maybe a generic hey I found
  this,
   too many people trolling looking for things to use ingame here.
  
   On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com
 wrote:
  
and they are a platform provider.
Shootjust imagine the hoopla that would exist if *pple's itunes
 or
   App
Store had security holes like this
   
G.
   
On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote:
   
 They are also a publisher of games, security should be a priority.

 On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold 
   clontar...@iinet.net.au
 wrote:

   I think you guys need to keep in mind they are primarily a game
 developer.
  Their interest is in developing games, not necessarily
  concentrating
   on
 the
  myriad of security aspects there are. They aren't Microsoft.
 
  However I agree, to implement a verification function which can
 be
undone
  using a tool is worrying.
 
  I'm sure they are aware of the issue and are working on a fix.
 
 
  On 14/10/2010 11:29 AM, Kyle Sanderson wrote:
 
  There are tools out there that can unverify a persons Steam
  account
 email.
 
  It's rather shocking how Valve doesn't take Security that
  seriously.
  Kyle.
 
  On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com
wrote:
 
  Thanks,already did that. I guess my question was more on the
technical
  side.
  I had verified my steam email along time ago.Cant remember the
   whole
ip
  address but the link sent to me was along the lines of
  steam(company).com.cc
  On checking this I realize that .cc is a topdomain in Australia
 I
 guess..
 
  hmm
 
 
  On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR
  mar...@cybergamesbrasil.com  wrote:
 
   If you still can log in, go change your password and secret.
  Don't waste time trying to figure how that happened.
 
 
  -Mensagem original-
  De: hlds_linux-boun...@list.valvesoftware.com
  [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de
  tom
   n
  Enviada em: quarta-feira, 13 de outubro de 2010 22:49
  Para: Half-Life dedicated Linux server mailing list
  Assunto: [hlds_linux] hacking steam accounts
 
  Hi all,not the forum but I had a question to ask.
 
  Any of ya had your steam acct hacked or knew of someone who
 has?
   Got
a
  link
  sent to me today for a medal of honor beta. When i logged on
   tonite
I
  had
  realized for some reason that a cpl of friends had been
  blocked
   on
 my
  steam friends list..
 
  Also I had joined a cpl of steam groups that I know I hadnt
  joined
for
  sho.
 
  Any ideas?
 
  (Like I said,not the right forum but just bored and wanted to
  ask
   u
  guys.:)
  ___
  To unsubscribe, edit your list preferences, or view the list
archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list
archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
   ___
  To unsubscribe, edit your list preferences, or view the list
archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
   ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list
   archives,
  please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds_linux
 
 

Re: [hlds_linux] hacking steam accounts FYI

2010-10-13 Thread Harry Strongburg
On Wed, Oct 13, 2010 at 09:25:06PM -0500, tom n wrote:
 *deleted*
 is the address received in the message

Please stop announcing this stuff here. Everyone here is smart enough to 
not fall for a phishing attempt. If there is some bug that allowed an 
attacker to get our Steam logins, please email a Valve Employee 
(offlist) or open a Support Ticket. If you and your friends have fallen 
for a phish attempt, please direct them to 
https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478 - 
phishing is (in my opinion) one of the easiest-to-prevent problems.

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux


Re: [hlds_linux] hacking steam accounts

2010-10-13 Thread Kyle Sanderson
You've got mail.

Kyle.

On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
jmccas...@valvesoftware.com wrote:
 If you have concrete evidence of an exploit please provide us with any 
 information you have.  We would certainly take such an exploit seriously.  
 However, we currently aren't aware of any such exploit and have no evidence 
 that one would be possible.  Sometimes rumors about exploits turn out to be 
 greatly exaggerated.

 Please feel free to email me directly if you have details on any security 
 exploits in Steam.

 John

 -Original Message-
 From: hlds_linux-boun...@list.valvesoftware.com 
 [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
 Sent: Wednesday, October 13, 2010 8:30 PM
 To: Half-Life dedicated Linux server mailing list
 Subject: Re: [hlds_linux] hacking steam accounts

 There are tools out there that can unverify a persons Steam account email.

 It's rather shocking how Valve doesn't take Security that seriously.
 Kyle.

 On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote:
 Thanks,already did that. I guess my question was more on the technical side.
 I had verified my steam email along time ago.Cant remember the whole ip
 address but the link sent to me was along the lines of steam(company).com.cc
 On checking this I realize that .cc is a topdomain in Australia I guess..

 hmm


 On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR 
 mar...@cybergamesbrasil.com wrote:

 If you still can log in, go change your password and secret.
 Don't waste time trying to figure how that happened.


 -Mensagem original-
 De: hlds_linux-boun...@list.valvesoftware.com
 [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
 Enviada em: quarta-feira, 13 de outubro de 2010 22:49
 Para: Half-Life dedicated Linux server mailing list
 Assunto: [hlds_linux] hacking steam accounts

 Hi all,not the forum but I had a question to ask.

 Any of ya had your steam acct hacked or knew of someone who has? Got a link
 sent to me today for a medal of honor beta. When i logged on tonite I had
 realized for some reason that a cpl of friends had been blocked on my
 steam friends list..

 Also I had joined a cpl of steam groups that I know I hadnt joined for sho.

 Any ideas?

 (Like I said,not the right forum but just bored and wanted to ask u guys.:)
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, 
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux

 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds_linux


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux