Valve explains methodology behind controversial trade holds/escrow system on Steam, reveals ~75K acc
93 replies, posted
[url]http://store.steampowered.com/news/19618/[/url]
[quote=Valve]Recently we've seen the community have a good discussion about the pros and cons of trade holds. We thought we'd walk through how we decided to implement them, in the hopes that it helps you understand why they're absolutely necessary.[/quote]
Now that games can be removed permanently from someone's library I feel that item theft in comparison is a lesser concern depending on the circumstances.
[QUOTE=Dr. Kyuros;49282890]Now that games can be removed permanently from someone's library I feel that item theft in comparison is a lesser concern depending on the circumstances.[/QUOTE]
If there was one thing Valve should force mobile 2FA for, it would be that.
The same idea applied to trading is okay in practice, but execution is shite. For trading, it should be "have SteamGuard enabled at all", meaning have at least emails to authenticate.
Still waiting for the ability to use Google Authenticator instead of Valve's own crappy app.
I don't mind 2FA, I mind being forced to use crappy apps when solutions exist already.
In order to secure your digital items we made you to download an emulator so you can emulate our app and get one useless extra step in order to be safe.
What's really dumb about removing games is that should actually be a "hide" feature so that it hides the stats publicly, hides them from your game library and hides if you are playing it, but still retains the stats (like how you can hide your game inventory)
There, no scares from assholes removing your games, you get to never acknowledge a game's existence ever again and you can play games in private without being offline. To make it so that it's obvious that a person owns a game (but has it hidden), they would still appear in the friends-that-own-this-game list on the Steam store so you don't end up gifting games to people that already own them.
[QUOTE=elixwhitetail;49283130]Still waiting for the ability to use Google Authenticator instead of Valve's own crappy app.
I don't mind 2FA, I mind being forced to use crappy apps when solutions exist already.[/QUOTE]
Don't count on it.
[QUOTE=Valve]We needed to create our own two-factor authenticator because we need to show users the contents of the trade on a separate device and have them confirm it there. Requiring users to take a code from a generic authenticator and enter it into a hijacked PC to confirm a trade meant that hackers could trick them into trading away items they didn't intend to. This basically made it impossible to use a generic third party authenticator, such as Google Authenticator, to confirm trades.[/QUOTE]
[QUOTE=elixwhitetail;49283130]Still waiting for the ability to use Google Authenticator instead of Valve's own crappy app.
I don't mind 2FA, I mind being forced to use crappy apps when solutions exist already.[/QUOTE]
Because reading the article is hard.
[quote=The article]We needed to create our own two-factor authenticator because we need to show users the contents of the trade on a separate device and have them confirm it there. Requiring users to take a code from a generic authenticator and enter it into a hijacked PC to confirm a trade meant that hackers could trick them into trading away items they didn't intend to. This basically made it impossible to use a generic third party authenticator, such as Google Authenticator, to confirm trades.[/quote]
[QUOTE=Eonart;49283404]Holy shit.
But can they make the link guard not so shit though? A third of the time when I click on a link someone sends me Steam just freezes while trying to inspect it, it's getting inconvenient to restart Steam when it happens and copying links is slow.[/QUOTE]
What kind of links are you clicking on?
Steam doesn't freeze or crash when I click on links my friends send me.
I clicked on this thread hoping Valve would explain meth
I bought my account from a hacker who stole it for $60.
[t]http://i.imgur.com/gERuyB8.png[/t]
[highlight](User was permabanned for this post ("Alt of SexyBeast69" - Craptasket))[/highlight]
[QUOTE=SexyBeast70;49283618]I bought my account from a hacker who stole it for $60.
[t]http://i.imgur.com/gERuyB8.png[/t][/QUOTE]
And you thought it would be a good idea to post about acquiring a stolen account....why?
[QUOTE=SexyBeast70;49283618]I bought my account from a hacker who stole it for $60.
[t]http://i.imgur.com/gERuyB8.png[/t][/QUOTE]
Did you mean to say that your account was stolen and you bought it back from the hacker, or that your account is actually someone else's which you bought from a hacker?
[QUOTE=KOS-MOS;49283532]What kind of links are you clicking on?
Steam doesn't freeze or crash when I click on links my friends send me.[/QUOTE]
I've frequently had Steam freeze by clicking on generic safe Youtube or Imgur links from my nearest friends. Maybe 5 times by now.
[QUOTE=elixwhitetail;49283130]Still waiting for the ability to use Google Authenticator instead of Valve's own crappy app.
I don't mind 2FA, I mind being forced to use crappy apps when solutions exist already.[/QUOTE]
Just anothe garbage app with a bunch of convenient features I can use in conjunction with my desktop machine that also works as an authenticator!!! fuck you valve, it doesn't fit my personal interests!!!!!
[QUOTE=Karmah;49283753]Did you mean to say that your account was stolen and you bought it back from the hacker, or that your account is actually someone else's which you bought from a hacker?[/QUOTE]
I think he explained it clear enough, the hacker stole and sold it.
[QUOTE=Eonart;49284090]Just any generic link like Grandzeit said, even things I linked can freeze Steam when I click on them.[/QUOTE]
I've noticed this in the past, but the fact I've seen it occur on and off with the same machine makes me think it's something more with my computer than steam itself. An option to disable that entirely would be preferential, but you can get Chrome plugins to sort of hide it.
[QUOTE=SexyBeast70;49283618]I bought my account from a hacker who stole it for $60.
[t]http://i.imgur.com/gERuyB8.png[/t][/QUOTE]
Way to enable jackasses.
[QUOTE=SexyBeast70;49283618]I bought my account from a hacker who stole it for $60.
[t]http://i.imgur.com/gERuyB8.png[/t][/QUOTE]
Buying a stolen account in itself is repulsive but bragging about it like you swiped up a steam sale deal is just fucking insulting to everyone here at facepunch, and the entire steam community. Just the thought of some poor bastard sinking 12 years into their steam account with god knows how many games on it just to have it stolen and sold for just 60$ to some kid makes my blood boil.
People like you are the reason that steam account hacking is so common to the point that valve needs to create a fucking phone based encryption key that changes every minute. Because you create demand for stolen accounts for some reason.
Kindly fuck off.
I like the mobile app. :pudge:
[QUOTE]One option proposed was to simply remove trading.[/QUOTE]
I suppose it could've been worse.
[QUOTE] It's important that you can give a friend a TF2 weapon when he comes to try out the game, or give a friend the last trading card she needs to craft a game badge. [/QUOTE]
But this is the kind of shit a lot of people are unable to do now without waiting a ludicrous amount of time.
[QUOTE=Agoat;49284123]I like the mobile app. :pudge:[/QUOTE]
I use it every day, personally
but I still can't stand the idea of people needing smartphones or knowledge about emulators just to get their items without waiting for 3 days. That's just absurd.
I can't even open the mobile app
I just wish the mobile app was more reliable.
I don't even have the steam app installed on my phone
how do so many people get hacked anyway,.É
Not having steam guard enabled and such.
Remember when steam account info was leaked with all true client info card information
[QUOTE=Valve]Users who haven't enabled it, [B]or can't[/B], can still trade, but they'll have to wait up to 3 days for the trade to go through.[/QUOTE]
Valve, to Windows Phone users: ¯\_(ツ)_/¯
[QUOTE=theevilldeadII;49284649]how do so many people get hacked anyway,.É[/QUOTE]
Stupidity, mostly. Stuff even all the authenticators in the world couldn't fix.
Sorry, you need to Log In to post a reply to this thread.