Re: [hlds_linux] hacking steam accounts
Perhaps discussions regarding the steam-platform could be taken to the appropriate forum-section next time, hence actually get a community response and reply from Valve, instead of spamming the poor guys who try and make the Linux-server work on both sides of the fence? -TheG On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com wrote: You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
I hate to say it, but the Steam Powered User Forums (SPUF) are full of incompetence (I gave it another shot a couple months back, the same silly replies ensued). Steam Tickets will also get you no where quickly. If there was a more reliable way to have a meaningful discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we would all use it. However, at this present time, there is not. I would have done exactly what Tom did, would have I been wrong to? That's for you to decide (of course it's off topic, and 'unrelated to Server Administration'). Saying that this belongs on the Steam forums though is preposterous. One employee mailed me off list, John asked on list (both work on Steam, well, atleast they're in the Steam group). I've sent both of them the exploit with instructions on how to use it. Hopefully there's at least some sort of patch out for it soon (it has been public knowledge for quite sometime now). All is not lost in this *thread*, hopefully. Kyle. 2010/10/14 Björn GRYZOR Rohlén bjorn.roh...@safehex.se: Perhaps discussions regarding the steam-platform could be taken to the appropriate forum-section next time, hence actually get a community response and reply from Valve, instead of spamming the poor guys who try and make the Linux-server work on both sides of the fence? -TheG On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com wrote: You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Sorry- I do not mean to spam this board and I usually keep quiet on most conversations. If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John John, I will keep your email on record if I see this again. I posted the address as a reference not as advertising. I am a big boy,I can afford to buy Steam games on my own. On Thu, Oct 14, 2010 at 3:45 AM, Kyle Sanderson kyle.l...@gmail.com wrote: I hate to say it, but the Steam Powered User Forums (SPUF) are full of incompetence (I gave it another shot a couple months back, the same silly replies ensued). Steam Tickets will also get you no where quickly. If there was a more reliable way to have a meaningful discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we would all use it. However, at this present time, there is not. I would have done exactly what Tom did, would have I been wrong to? That's for you to decide (of course it's off topic, and 'unrelated to Server Administration'). Saying that this belongs on the Steam forums though is preposterous. One employee mailed me off list, John asked on list (both work on Steam, well, atleast they're in the Steam group). I've sent both of them the exploit with instructions on how to use it. Hopefully there's at least some sort of patch out for it soon (it has been public knowledge for quite sometime now). All is not lost in this *thread*, hopefully. Kyle. 2010/10/14 Björn GRYZOR Rohlén bjorn.roh...@safehex.se: Perhaps discussions regarding the steam-platform could be taken to the appropriate forum-section next time, hence actually get a community response and reply from Valve, instead of spamming the poor guys who try and make the Linux-server work on both sides of the fence? -TheG On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sanderson kyle.l...@gmail.com wrote: You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto: hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com
Re: [hlds_linux] hacking steam accounts
This we can all agree + Valve people does read this list while they do not always reply. Besides, while we run servers, most of us have also Steam accounts which security we are as concerned as our servers. So this kind of thing is important to most of us too so we can further more give announcements to our fellow gamers through community services and such to watch out for scammers and such. -ics 14.10.2010 11:45, Kyle Sanderson kirjoitti: I hate to say it, but the Steam Powered User Forums (SPUF) are full of incompetence (I gave it another shot a couple months back, the same silly replies ensued). Steam Tickets will also get you no where quickly. If there was a more reliable way to have a meaningful discussion regarding Steam (and hopefully SRCDS). I'm pretty sure we would all use it. However, at this present time, there is not. I would have done exactly what Tom did, would have I been wrong to? That's for you to decide (of course it's off topic, and 'unrelated to Server Administration'). Saying that this belongs on the Steam forums though is preposterous. One employee mailed me off list, John asked on list (both work on Steam, well, atleast they're in the Steam group). I've sent both of them the exploit with instructions on how to use it. Hopefully there's at least some sort of patch out for it soon (it has been public knowledge for quite sometime now). All is not lost in this *thread*, hopefully. Kyle. 2010/10/14 Björn GRYZOR Rohlénbjorn.roh...@safehex.se: Perhaps discussions regarding the steam-platform could be taken to the appropriate forum-section next time, hence actually get a community response and reply from Valve, instead of spamming the poor guys who try and make the Linux-server work on both sides of the fence? -TheG On Thu, Oct 14, 2010 at 7:50 AM, Kyle Sandersonkyle.l...@gmail.com wrote: You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Thanks again Kyle. FYI for everyone else, there did turn out to be a security hole allowing bypassing of email verification if you had a properly hacked client. We pushed out a server side fix for this and the exploit should be fixed as of this afternoon. If anyone has any details on Steam security exploits in the future please continue to email me directly and we'll check them out. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 10:51 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Thanks for taking this seriously and alerting the coding team so quickly. Glad to see it was resolved. We appreciate it. TehZomB W: www.tehzomb.us P: 1 (443) 805-6313 E: tehz...@hushmail.com On 10/14/2010 7:36 PM, John McCaskey wrote: Thanks again Kyle. FYI for everyone else, there did turn out to be a security hole allowing bypassing of email verification if you had a properly hacked client. We pushed out a server side fix for this and the exploit should be fixed as of this afternoon. If anyone has any details on Steam security exploits in the future please continue to email me directly and we'll check them out. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 10:51 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.auwrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
and they are a platform provider. Shootjust imagine the hoopla that would exist if *pple's itunes or App Store had security holes like this G. On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote: They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au wrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Well it requires people like us to tell them about the exploit in detail not just hey I heard from my mothers brothers sister hairdress that Valve can be hacked, that doesnt help fix the issues If you are aware of a real exploit send it to valve and give them time to fix it before posting it here other than maybe a generic hey I found this, too many people trolling looking for things to use ingame here. On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote: and they are a platform provider. Shootjust imagine the hoopla that would exist if *pple's itunes or App Store had security holes like this G. On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote: They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au wrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
Last time I did that, Steam locked my account. Go figure. On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote: Well it requires people like us to tell them about the exploit in detail not just hey I heard from my mothers brothers sister hairdress that Valve can be hacked, that doesnt help fix the issues If you are aware of a real exploit send it to valve and give them time to fix it before posting it here other than maybe a generic hey I found this, too many people trolling looking for things to use ingame here. On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote: and they are a platform provider. Shootjust imagine the hoopla that would exist if *pple's itunes or App Store had security holes like this G. On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote: They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au wrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit:
Re: [hlds_linux] hacking steam accounts
If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
It may have been the manner in which you did it also. Posting in the forums hey steam there is a hack at this website www.aaa.com yea I wouldnt doubt that as you are then advertising for a hack. If you use the bug reporter, maybe not On Wed, Oct 13, 2010 at 11:35 PM, Gene H geneharde...@gmail.com wrote: Last time I did that, Steam locked my account. Go figure. On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote: Well it requires people like us to tell them about the exploit in detail not just hey I heard from my mothers brothers sister hairdress that Valve can be hacked, that doesnt help fix the issues If you are aware of a real exploit send it to valve and give them time to fix it before posting it here other than maybe a generic hey I found this, too many people trolling looking for things to use ingame here. On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote: and they are a platform provider. Shootjust imagine the hoopla that would exist if *pple's itunes or App Store had security holes like this G. On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote: They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au wrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your
Re: [hlds_linux] hacking steam accounts
I submitted a support ticket. On Wed, Oct 13, 2010 at 9:42 PM, Don P buzza...@gmail.com wrote: It may have been the manner in which you did it also. Posting in the forums hey steam there is a hack at this website www.aaa.com yea I wouldnt doubt that as you are then advertising for a hack. If you use the bug reporter, maybe not On Wed, Oct 13, 2010 at 11:35 PM, Gene H geneharde...@gmail.com wrote: Last time I did that, Steam locked my account. Go figure. On Wed, Oct 13, 2010 at 9:25 PM, Don P buzza...@gmail.com wrote: Well it requires people like us to tell them about the exploit in detail not just hey I heard from my mothers brothers sister hairdress that Valve can be hacked, that doesnt help fix the issues If you are aware of a real exploit send it to valve and give them time to fix it before posting it here other than maybe a generic hey I found this, too many people trolling looking for things to use ingame here. On Wed, Oct 13, 2010 at 11:19 PM, Gene H geneharde...@gmail.com wrote: and they are a platform provider. Shootjust imagine the hoopla that would exist if *pple's itunes or App Store had security holes like this G. On Wed, Oct 13, 2010 at 9:10 PM, 1nsane 1nsane...@gmail.com wrote: They are also a publisher of games, security should be a priority. On Wed, Oct 13, 2010 at 11:39 PM, Shane Arnold clontar...@iinet.net.au wrote: I think you guys need to keep in mind they are primarily a game developer. Their interest is in developing games, not necessarily concentrating on the myriad of security aspects there are. They aren't Microsoft. However I agree, to implement a verification function which can be undone using a tool is worrying. I'm sure they are aware of the issue and are working on a fix. On 14/10/2010 11:29 AM, Kyle Sanderson wrote: There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom nscrewtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts FYI
On Wed, Oct 13, 2010 at 09:25:06PM -0500, tom n wrote: *deleted* is the address received in the message Please stop announcing this stuff here. Everyone here is smart enough to not fall for a phishing attempt. If there is some bug that allowed an attacker to get our Steam logins, please email a Valve Employee (offlist) or open a Support Ticket. If you and your friends have fallen for a phish attempt, please direct them to https://support.steampowered.com/kb_article.php?ref=1266-OAFV-8478 - phishing is (in my opinion) one of the easiest-to-prevent problems. ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
Re: [hlds_linux] hacking steam accounts
You've got mail. Kyle. On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey jmccas...@valvesoftware.com wrote: If you have concrete evidence of an exploit please provide us with any information you have. We would certainly take such an exploit seriously. However, we currently aren't aware of any such exploit and have no evidence that one would be possible. Sometimes rumors about exploits turn out to be greatly exaggerated. Please feel free to email me directly if you have details on any security exploits in Steam. John -Original Message- From: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson Sent: Wednesday, October 13, 2010 8:30 PM To: Half-Life dedicated Linux server mailing list Subject: Re: [hlds_linux] hacking steam accounts There are tools out there that can unverify a persons Steam account email. It's rather shocking how Valve doesn't take Security that seriously. Kyle. On Wed, Oct 13, 2010 at 7:17 PM, tom n screwtop...@gmail.com wrote: Thanks,already did that. I guess my question was more on the technical side. I had verified my steam email along time ago.Cant remember the whole ip address but the link sent to me was along the lines of steam(company).com.cc On checking this I realize that .cc is a topdomain in Australia I guess.. hmm On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR mar...@cybergamesbrasil.com wrote: If you still can log in, go change your password and secret. Don't waste time trying to figure how that happened. -Mensagem original- De: hlds_linux-boun...@list.valvesoftware.com [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n Enviada em: quarta-feira, 13 de outubro de 2010 22:49 Para: Half-Life dedicated Linux server mailing list Assunto: [hlds_linux] hacking steam accounts Hi all,not the forum but I had a question to ask. Any of ya had your steam acct hacked or knew of someone who has? Got a link sent to me today for a medal of honor beta. When i logged on tonite I had realized for some reason that a cpl of friends had been blocked on my steam friends list.. Also I had joined a cpl of steam groups that I know I hadnt joined for sho. Any ideas? (Like I said,not the right forum but just bored and wanted to ask u guys.:) ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux ___ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux