Good, they get way too much leniency and it's ridiculous that a multinational corporation making hundreds of millions yearly is still held to the same standards as a small startup company.
Steam security issue revealed personal info to other users on XMas Day (fixed)
- Thread starter Quirah
- Start date
Good, they get way too much leniency and it's ridiculous that a multinational corporation making hundreds of millions yearly is still held to the same standards as a small startup company.
I am pretty sure the Steam backend does not only use caching at the CDN level.
Same here.
Don't forget the big one as well! STORE LIBRARY COMMUNITY "USERNAME"
Real addresses, phone numbers, physical addresses and last digits of credit cards were displayed.
That's enough to merit a serious identity theft risk.
Again, anyone downplaying the risk is invited to post this info publicly right here, just to test the waters on how minimal such a breach feels.
Do refunds work that easily for gifts?
Peoples full phone numbers, names, addresses, emails and last few digits of their credit card numbers were publicly available.
Plus prominent people such as IGN staff have reported that their account was compromised and a purchase happened.
GHG
Member
Thanks guys.
Feel pretty unsettled about this at the moment. I have invested so much into steam I think I'd be on my knees if something happened to my account.
This is why I should maybe spread my purchases across different clients like GOG and Origin
(shudder)
VisceralBowl
Member
That's the display name right there. Username is different unless you have set the same username and display name of course.
Microsoft deal with a lot more than just games. So as far as security goes, from a technical standpoint, MS are way better.
Relaxed Muscle
Member
Potentially your private info: Adress, phone number, email, full name, etc... has been exposed to annonymous individuals, or worse, is now on the wild.
At best it was exposed to some rational individual who will do nothing with it, ar worst you are exposed to identity theft.
| Praxis |
Banned
I still can't connect to the Steam network.
i'm one of the silly people who managed to get onto my steam account settings temporarily during all the confusion and cancelled my paypal from there just before all the tweets telling you to do exactly not that were posted
so now i'm just checking my emails, paypal account and bank account like a hawk in the hope that my account details weren't seen by someone else
so now i'm just checking my emails, paypal account and bank account like a hawk in the hope that my account details weren't seen by someone else
petran79
Banned
the loli games....
Disaster Nebraska
Banned
This is not how caching works. At best, Steam idiotically stores non-encrypted customer info at their CDN. However, I can't think of any rational company that does this. CDNs are meant to speed up page load, and storing database info (such as customer info) at a remote CDN has negligible effects on speed.
It's far more likely that it's a hack and/or database problems.
Pyramidbread
Neo Member
Definately, this really should not have happened, full stop.
toddhunter
Member
They are also a bigger target and consequently have had way bigger fuck ups over the years.
I'd like to know this too, I also checked my profile and it says it's private, is that a measure they have taken to stop the leak?
I'll log off and keep an eye on my emails
All digital future they said, it'll be fine, they said
GHG
Member
Yeh I don't think there has ever been a major widespread breach on Xbox Live has there?
Mr. Luchador
Member
Possible 'ID Theft' in the future, maybe. The pain of having to contact the bank in a few days to instigate fraudulent charges (and the knock on those charges might have had on your account). It's not 'end of the world' stuff, but it's still shit that shouldn't have happened.
Many people are pissing their pants in this thread.
I'm looking at what we know at the time and telling people exactly that.
Luckily Grief has a single informative post up right now.
Just keep being useful to everyone by calling people corp. apologist.
Your help will truly be remembered in everyone's time of need.
Leafhopper
Banned
The account caching issue seems to be fixed as well.
However the log in servers seem to be down.
However the log in servers seem to be down.
Enter the Dragon Punch
Banned
store is back up, but login servers aren't. still can't start my steam client.
Rebel Leader
THE POWER OF BUTTERSCOTCH BOTTOMS
Because that a community manager. wot someone from valve.
Ya I caught that one as I was editing, not my original image or post.
http://www.neogaf.com/forum/showpost.php?p=190425008&postcount=1021
And they could also see their account username which is usually common between accounts. Which means that if you call a place and give them the email address and they use your real address as verification they can gain access to your account. So let's say your Steam name is reebot and your blizzard account is reebot and you call up blizzard and they ask for an address as confirmation now that is potentially exposed.
AHA-Lambda
Member
Store is back up for me, can't log in though
Ricerocket
Member
I just connected, seems back to normal? More importantly I am able to log into Path of Exile.
There will probably be a class action suit and you'll get like maybe a couple cents since every other of the 125+ million steam users will be eligible as well.
TheSpoiler
Member
You COULD refund, but that fully depends on Steam and how they deal with refunds. Regardless of whether or not you get your money back in the end, either by calling your back or waiting for Steam to get around to doing so, that's money out of your account until then and it shouldn't happen in the first place.
Relaxed Muscle
Member
I'm not getting back into steam until Steam comes out and clears out this mess.
What kind of shitty business has people data exposed out, pushed the red button and after awhile restart is services without a single line or comment about it?
I mean, it's safe now? was the problem resolved? what was the extent of the information exposed? etc...
What kind of shitty business has people data exposed out, pushed the red button and after awhile restart is services without a single line or comment about it?
I mean, it's safe now? was the problem resolved? what was the extent of the information exposed? etc...
ebullientprism
Member
Rebel Leader
THE POWER OF BUTTERSCOTCH BOTTOMS
I logged on
went to acct deatials
GOT ON MY ACCOUNT!!! YAY
went to acct deatials
GOT ON MY ACCOUNT!!! YAY
The Dear Leader
Banned
Our accounts with thousands upon thousands of dollars of games and our personal information and payment information could have been compromised. Gee, I don't know why...
AnathemicOne
Banned
Wait what, we aren't supposed to be viewing them? I've been trying to but it fails to connect to the servers so I can't.
JSoup
Banned
Link, please.
XiaNaphryz
LATIN, MATRIPEDICABUS, DO YOU SPEAK IT
What some are speculating is that due to some misconfiguration, pages that shouldn't be cached are ending up being cached anyway. I don't think anyone's saying that's how it should work, just trying to figure out what makes sense given what we're seeing.
finalflame
Banned
Not in the US and Canada they're not. Everyone on Steam agreed to binding arbitration and a class-action waiver. They ain't getting sued by shit. Read your subscriber agreement.
Ok, posted a few pages back, but maybe someone can settle my stomach. I'm seeing a pending transaction on my bank account for Target.com. It's for the amount that I paid to pre-order Dishonored 2. I'm not sure if this pending transaction is for that pre-order that won't come out for months, or if it's someone that stole my card info. Supposedly no one is able to get all the credit card info from this fuck-up right? I'll probably be calling the bank to be sure.
Disaster Nebraska
Banned
You don't understand how caching works, do you? I used to install various caching options (including Akamai CDN which is external as well as Varnish which is a software caching service installed on the server) all the time.
The behavior seen today is not something that happens because of caching.
Similar threads
- Poll