All you need is a unique email to get a steam ID.
There are millions of free email services and each hacker probably has a
thousand emails from many of them.


Once you get the steam ID you add your old WON key ... Walla ...


Only way to fix it is to disallow WON CD Keys.
Valve can't do this.


So ... Enjoy ...

Now maybe if Valve required one to go to a web site and enter the CD key and
you get your STEAM ID only once.









-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Whisper
Sent: Wednesday, December 15, 2004 9:54 AM
To: [EMAIL PROTECTED]
Subject: Re: [hlds] When will the "nosteam" hacks be fixed?

Well the thing is, your STEAM_ID is connected to your Login.

Suipposedly you cannot create (RDRR many lols) a STEAM Login without a
valid CD Key

Thats how integrity is supposed to be maintained to allow people to
login on any computer.

As most of you are well aware, this is really stupidly basic stuff in
the world of databases.

Actually Access 2003 is really limited to 2GB size not so much records
or anything like that, if you know what I mean.

http://office.microsoft.com/en-au/assistance/HP051868081033.aspx

Microsoft Access database (.mdb) (Microsoft Access database: A
collection of data and objects (such as tables, queries, or forms)
that is related to a particular topic or purpose. The Microsoft Jet
database engine manages the data.) file size 2 gigabytes minus the
space needed for system objects (system object: Database objects that
are defined by the system, such as the table MSysIndexes, or by the
user. You can create a system object by naming the object with USys as
the first four characters in the object name.).

Table size 2 gigabyte minus the space needed for the system objects

I think the limits for mySQL and MS SQL are more hardware limitations
than anything else or more importantly budgetary :D


On Wed, 15 Dec 2004 14:27:05 +0000, Stephen Moretti (blueyonder)
<[EMAIL PROTECTED]> wrote:
> BoNfiRe wrote:
>
> > Probbably because of the scale involved in doing this.
> > How many ppl have steam accounts hmm too many.
>
> Nah.....  You're only talking about 2.5 million records really.  (2.3
> million unique users per month
> http://www.steampowered.com/status/status.html)
>
> Even a desktop database like Microsoft Access is capable (all be it at
> its utter and total limit) of handling that number of rows in a table.
>
> As Whisper has already said its not that hard an application to build.
>
> With the details that you enter into your Steam registeration, you've
> got at least 3 ways of confirming that a user is a legitimate and at two
> different points of connection.  You can check the users details on
> start up of the client (its possible to intercept this and make the
> steam client believe that its completed a valid login [maybe this is how
> nosteam works?]) and the second connection point is when a user joins a
> server.  The server sends the user details to a valve authentication
> server. This second connection would be much harder to intercept other
> than by installing something on the server itself to prevent it talking
> to the authentication server.
>
> I'm not sure what the authentication servers are doing, but really they
> should be confirming, userid, steam id and possibly checking cd keys of
> users connecting to a server.  I know that a  userid/cd key match is not
> mandatory, because you can log in on any machine where steam/halflife is
> installed, but I'll bet 9/10 legitimate users will have matching a
> userid/steamid/cdkey.  Ok - so a lot of people would be less than
> comfortable with their login details floating around in the open, but
> there is no reason why some kind of one way encrypted hash of their
> details couldn't be passed instead.  The encrypted hash would be useless
> unless matched up with information in the Valve database.  A nice little
> cluster of MS SQL or Oracle or even mySQL servers with some kind of
> webservice on the front could probably manage this nicely.
>
> Sorry... I hate speculating or suggesting solutions when its not my
> place, but the problem of ensuring valid logins to servers is a nice
> little problem that appeals to me.
>
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives,
please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>

_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives,
please visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds

Reply via email to