Valve offers a longer statement about Christmas Day caching issues that allowed users to view some, - Polidicks

[url]http://store.steampowered.com/news/19852/[/url] [quote=Valve]We'd like to follow up with more information regarding Steam's troubled Christmas. [B]What happened[/B] On December 25th, a configuration error resulted in some users seeing Steam Store pages generated for other users. Between 11:50 PST and 13:20 PST store page requests for about 34k users, which contained sensitive personal information, may have been returned and seen by other users. The content of these requests varied by page, but some pages included a Steam user’s billing address, the last four digits of their Steam Guard phone number, their purchase history, the last two digits of their credit card number, and/or their email address. These cached requests did not include full credit card numbers, user passwords, or enough data to allow logging in as or completing a transaction as another user. If you did not browse a Steam Store page with your personal information (such as your account page or a checkout page) in this time frame, that information could not have been shown to another user. Valve is currently working with our web caching partner to identify users whose information was served to other users, and will be contacting those affected once they have been identified. As no unauthorized actions were allowed on accounts beyond the viewing of cached page information, no additional action is required by users.[/quote]

I see they finally got back from vacation in time to say what we've already figured out. Good timing guys.

Better late then never, I suppose.

Would've been nicer for them to release a statement closer to the incident, but better late than never either way

The press statement that was handed out was fine for how long afterwards it happened, that's usually a precursor to a longer one posted a few days later.

So there were just a bunch of assholes here trying to make the incident bigger than it actually was. I swear, everyone who photoshopped a bank transaction during that thing should be banned. Or at least given a stern talking to.

[QUOTE]If you did not browse a Steam Store page with your personal information (such as your account page or a checkout page) in this time frame, that information could not have been shown to another user.[/QUOTE] At least I wasnt effected then. I was scared my email was going to be signed up for gay porn or some shit

uh good job valve I mean it's not like it happened like 3 days ago and you're only now releasing a statement edit: an indepth statement mind you

This is exactly why they need PR people.

"valve has such bad pr, they probably will just slip this under the rug and pretend like it never happened. they will never apologize for this because all they care about is money / they have no pr department" "this apology is way too late. who cares about them actually fixing the issue in a matter of hours and releasing a short press statement regarding their awareness of the issue also in that time" i swear, you guys can never be pleased.

[QUOTE=Scorpo;49420460]uh good job valve I mean it's not like it happened like 3 days ago and you're only now releasing a statement edit: an indepth statement mind you[/QUOTE] They can never do any good can they :/

[I]Damn you Valve web employees for also being humans with families, getting a couple days off to spend time with on Christmas!!![/I] :hairpull:

[QUOTE=Scorpo;49420460]uh good job valve I mean it's not like it happened like 3 days ago and you're only now releasing a statement edit: an indepth statement mind you[/QUOTE] This happened during holidays, on Christmas especially. Yeah it may have been longer than you'd expect, but they still got the press release out. You have to remember this happened on a day where they had employees out for the holidays. They have to figure shit out before they address something like this as well, they can't just talk out their ass. Especially since they mentioned they have to talk with their caching partner to resolve further issues with those affected. It's like Valve can't do any good with people anymore.

[QUOTE=VaSTinY;49420506][I]Damn you Valve web employees for also being humans with families, getting a couple days off to spend time with on Christmas!!![/I] :hairpull:[/QUOTE] we all know that no matter the time of year, people should be working on [B]OUR[/B] hobbies at all times, never ceasing for anything. I swear to fuck the amount of hate thrown Valves way over this is nothing short of childish. Grow up. Go complain about how the voter registry info was leaked. Much worse. But no, gotta just shit all over valve in an entirely unreasonable manner.

[QUOTE=VaSTinY;49420506][I]Damn you Valve web employees for also being humans with families, getting a couple days off to spend time with on Christmas!!![/I] :hairpull:[/QUOTE] We require Robo-Gabe.

[QUOTE=NixNax123;49420492]"valve has such bad pr, they probably will just slip this under the rug and pretend like it never happened. they will never apologize for this because all they care about is money / they have no pr department" "this apology is way too late. who cares about them actually fixing the issue in a matter of hours and releasing a short press statement regarding their awareness of the issue also in that time" i swear, you guys can never be pleased.[/QUOTE] It is an error to always view criticism as "never being pleased", just as it is an error to view criticism as always being a way to build people up to be better. Some people are being assholes, but what it ultimately boils down to is wanting a business to be better. This situation was stupid from the start and Valve's only got themselves and their partners to blame, so within the context of this situation, I'm not really bothered by people being angry. I'd be surprised if people switched right into being content, because even though Valve is on the right track to fixing things, it points to a myriad of problems that they should take a gander at and fix. It's never time to stop improving. I'll totally side with you on saying some people are ready to bring out their pitchforks and cannot see any good in Valve, but I'm not ready to start blaket-labeling criticism as being butthurt or a sign of never being able to be pleased. I'd personally take it as caring.

[QUOTE=RenegadeCop;49420608]If this happened on any other giant retailer's website, I would bet they wouldn't of been so slow.[/QUOTE] Retailers who are slow to this kind of thing usually get roasted by the media and public. Valve really should have released a statement sooner.

The best apology valve can give us is to get an actual PR department

Just imagine the horror when Valve's employee first saw support email "Uh I think I just got into random account but I was loggined to mine" from random Steam user.

[QUOTE=woolio1;49420440]So there were just a bunch of assholes here trying to make the incident bigger than it actually was. I swear, everyone who photoshopped a bank transaction during that thing should be banned. Or at least given a stern talking to.[/QUOTE] [url]https://facepunch.com/showthread.php?t=1498926[/url] "Legitimately not trolling guys"

[QUOTE=Take_Opal;49420503]They can never do any good can they :/[/QUOTE] I think Valve has done enough wrong for people to not be instantly pleased the moment they manage to do [I]one[/I] thing right.

[QUOTE=RenegadeCop;49420608]If this happened on any other giant retailer's website, I would bet they wouldn't of been so slow.[/QUOTE] Sure but it's Christmas and they're not an internationally located company. They have one location. Do you really think that place was swarming with people on Christmas day of all fucking days? Do Valve employees just not get Christmas because "Muh video games"? I mean be real. Yes companies do usually respond faster, but they also usually have legit security leaks where things have actually been leaked. Think Sony. Yet somehow, this is the big issue? I just don't get it. Like yeah, they royally fucked up. But they didn't cause banking info or truly sensitive info to leak out. We had an entire thread of massive exagerations and that's what many people are basing this off of. Valve really can't do anything right if you shoot them for fucking up, shoot them for saying something, shoot them for existing. Yeah, they fucked up but be reasonable.

Customers don't know shit, tbh.

[QUOTE=RenegadeCop;49420760]How is it not a big issue? It's quite significant if a large portion of their customers are unsatisfied. They make so much god damn money, why should we treat them as if they're some small jerk-off company?[/QUOTE] 34k people were actually tossed into the cacheing fuckbarrel. Yes, they SHOULD do better. But you, and this thread, is wholly ridiculous in it's approach to this.

[QUOTE=Valve]The content of these requests varied by page, but some pages included a Steam user’s billing address, the last four digits of their Steam Guard phone number, their purchase history, the last two digits of their credit card number, and/or their email address. These cached requests did not include full credit card numbers, user passwords, or enough data to allow logging in as or completing a transaction as another user. [/QUOTE] This is enough information to trick customer support in various other companies that you're you. You don't need full anything. I would complain to high hell if anyone knew any amount of sensitive information about any of my accounts.

[QUOTE=HumanAbyss;49420783]Yes, they SHOULD do better. But you, and this thread, is wholly ridiculous in it's approach to this.[/QUOTE] how what is ridiculous about someone saying 'they make so much money why should we treat them like an indie company'. do you want the response to this massive fuck up to just be a couple passive shrugs? thats fucking asinine

[QUOTE=amcwatters;49420799]This is enough information to trick customer support in various other companies that you're you. You don't need full anything.[/QUOTE] People don't care and will continue to defend valve because they're valve and nothing is going to change as a result.. examples are all over this thread.

[QUOTE=da space core;49420656]The best apology valve can give us is to get an actual PR department[/QUOTE] Especially one that doesn't work in [URL="https://developer.valvesoftware.com/wiki/Valve_Time"]valve-time[/URL] Seriously, with their size and thus influence and importance, fast and precise responses no matter the date & time is the name of the PR & support game.

they don't even make games anymore they literally have one job steam how do you fuck this up 330 employees can't all be working on dota 2

[QUOTE=RenegadeCop;49420608]If this happened on any other giant retailer's website, I would bet they wouldn't of been so slow.[/QUOTE] I bet they wouldn't. I bet they would do the same exact thing: Fix the issue within about an hour; release a short preliminary statement within the day; and then release a proper statement along with a proper apology after, and only after, they did their homework, knew exactly what went wrong, and could be assured it would never happen again within a week. They handled everything professionally and properly. People just don't know how fucking businesses work and assume that Valve not sucking our dicks makes them unethical. Valve has done everything right and fulfilled every obligation they have to us as consumers. [editline]30th December 2015[/editline] [QUOTE=amcwatters;49420819]they don't even make games anymore they literally have one job steam how do you fuck this up 330 employees can't all be working on dota 2[/QUOTE] easy, the third party company they contracted dropped the ball it explains that in the article