• Major Steam glitch - Fixed - Nobody in here knows what monopoly means
    1,350 replies, posted
[QUOTE=hexpunK;49393460] This could have happened to any one of them, valve got unlucky and it hit Christmas. Nothing more.[/QUOTE] "Got Unlucky" - Not really, just unprofessional. If it could happen to any one of them, you are doing a bad job. Maybe they should invest in some testing first. You know, like every other professional company.
So TB posted two long Twitter things on it, I suppose it's no big deal to some but understandably he wants Valve to step up their game. You'd be better off reading both not just 1. [url]http://www.twitlonger.com/show/n_1so3l3c[/url] [url]http://www.twitlonger.com/show/n_1so3l6a[/url]
[QUOTE=spekter;49394250]Currently unable to load anything account related or anything on community guess they're still trying to fix something?[/QUOTE] I can't get anything community related either.
[QUOTE=Rossy167;49394322]So TB posted two long Twitter things on it, I suppose it's no big deal to some but understandably he wants Valve to step up their game. You'd be better off reading both not just 1. [url]http://www.twitlonger.com/show/n_1so3l3c[/url] [url]http://www.twitlonger.com/show/n_1so3l6a[/url][/QUOTE] If only Valve did as good a job as Totalbiscuit does, then Totalbiscuit wouldn't have a reason to post those articulate and factual rants.
[QUOTE=Van-man;49394406]If only Valve did as good a job as Totalbiscuit does, then Totalbiscuit wouldn't have a reason to post those articulate and factual rants.[/QUOTE] Honestly they should just give control of steam to Totalbiscuit, he seems to have everything figured out.
[QUOTE=Rossy167;49394322]So TB posted two long Twitter things on it, I suppose it's no big deal to some but understandably he wants Valve to step up their game. You'd be better off reading both not just 1. [url]http://www.twitlonger.com/show/n_1so3l3c[/url] [url]http://www.twitlonger.com/show/n_1so3l6a[/url][/QUOTE] I hadn't even thought about doxxing with this. Nor the fact that given all the other information you can perform identity theft. Holy shit they fucked up.
[QUOTE=RichyZ;49394490]Imagine having been able to see some famous youtuber's address and also be a giant shithead enough to use that to swat them when this all happened.[/QUOTE] I think it would be worse for smaller time people because they don't have a following to look for support.
[QUOTE=NoOneKnowsMe;49394263]"Got Unlucky" - Not really, just unprofessional. If it could happen to any one of them, you are doing a bad job. Maybe they should invest in some testing first. You know, like every other professional company.[/QUOTE] The fact of the matter is we don't know how Steam's infrastructure is setup, we don't know what process Valve goes through to push changes to it; do do not know if, how much, what type, etc... of testing was performed on this (testing isn't this magic thing that just automatically prevents anything bad from happening). We have no details, and we probably never will, and that is a problem of communication that Valve is well known for. But, because of that, you're just making assumptions.
Just remembering that article about the family that's been harassed for the last 5 years to the point they've been ostracized from their community.
There's not much you can with any of the information alone but combine it all together and bam you have what is basically an accidental doxx. Yeah, so Valve doxxed a bunch of people.
[QUOTE=Swilly;49394495]Just remembering that article about the family that's been harassed for the last 5 years to the point they've been ostracized from their community.[/QUOTE] We live in a time when society as a whole, though especially businesses, law enforcement, and international law have not yet caught up with the idea of the internet. Businesses accepting orders and expecting pay upon delivery is a prime example. Here is the fundamental problem in the case I think you're referencing: [quote]Paul has tried repeatedly to get law enforcement agencies, including the FBI, to pursue a case against Kivimaki, but says he was told that since he was a minor in Finland, there was little they could do.[/quote] Though it was potentially more person, but the general point is law enforcement is either unable or unwilling to deal with these issues as they should be able to. Honestly though, if you're relying on your information not being available, you're already fucked (and thus we are all). Security through obscurity is no security at all, though it's sadly the best thing we have until everyone catches up with the times.
[QUOTE=HumanAbyss;49388569]No, it's really not fine. I'm browsing the store right now, and I'm constantly getting logged into other peoples accounts, seeing their friends lists, cart contents, and etc. I can't seem to do anything, nor do I want to, but just clicking on a different game title sends me into a different persons account on the store page. Idk what the fuck is going on.[/QUOTE] What the fuck are you making a sick joke? (Rhetorical question; this [I]can[/I] be a very bad thing.) [editline]26th December 2015[/editline] Were people able to do any changes to accounts they didn't own?
[QUOTE=Jericho_Rus;49389887]yeah lets give 20$ to everyone who uses steam considering that noone can even do anything with your account or see your payment info can people seriously stop being like "man i wonder how much i get out of valve's fuckup!!"[/QUOTE] steam wallet isn't real money though
[QUOTE=Bat-shit;49394827]What the fuck are you making a sick joke? [editline]26th December 2015[/editline] Were people able to do any changes to accounts they didn't own?[/QUOTE] No. You could likely see personal info if they had some saved, but that's the extend of it.
[QUOTE=Bat-shit;49394827]What the fuck are you making a sick joke? [editline]26th December 2015[/editline] Were people able to do any changes to accounts they didn't own?[/QUOTE] Man the clock cannon! Garry plz give us our clocks back :(
[QUOTE=butre;49394838]steam wallet isn't real money though[/QUOTE] its as unfeasible as asking amazon to give every amazon customer $25 giftcards
[QUOTE=soulharvester;49394850]Man the clock cannon! Garry plz give us our clocks back :([/QUOTE] I just found out, sorry. It's pretty crazy though, makes you think. Like, it doesn't take an All-out nuclear war to collapse a society, no no. It can also happen in the form of a massive information leak. This was probably just a glitch on Valve's part though, that may or may not affect [I]some[/I] number of Steam users people..
[QUOTE=NoOneKnowsMe;49394263]"Got Unlucky" - Not really, just unprofessional. If it could happen to any one of them, you are doing a bad job. Maybe they should invest in some testing first. You know, like every other professional company.[/QUOTE] You can test things again and again and again, but that isn't going to help if something goes wrong when actually implementing the change or if the provider of the service you're using shits the bed. Don't get me wrong, Valve should have been more on top of this, but these kinds of mistakes are somewhat hard to predict the occurrence of. They [I]should[/I] have a mitigation process for it, and really, really should have responded faster as it was a security risk.
So basically what im getting from this is this is Valves fault even though they say its not their fault and the people who got shit ripped off from them they are basically fucked and Valve is just giving the finger to their entire community. Eat my ass Valve not buying shit from steam again, this is the last straw or whatever. You used to be a chill private studio / fledgling company. Now you are run by a bunch of cozy shitmeisters who don't do shit apparently. This is what happens when you give your office a really nice food court full of junk food and shit, you make everyone a lazy POS.
How can I know if somebody saw my info or got logged in as me? EDIT: Glad that nothing could happen to me due to my mastermind scheme of "false" emails for everything.
[QUOTE=BenJammin';49394941]So basically what im getting from this is this is Valves fault even though they say its not their fault and the people who got shit ripped off from them they are basically fucked and Valve is just giving the finger to their entire community. Eat my ass Valve not buying shit from steam again, this is the last straw or whatever. You used to be a chill private studio / fledgling company. Now you are run by a bunch of cozy shitmeisters who don't do shit apparently. This is what happens when you give your office a really nice food court full of junk food and shit, you make everyone a lazy POS.[/QUOTE] Valve is actually one of the most productive tech companies if you look at their employee count. They do games, VR, steam and a bunch of other things. The problem is that they have a system where you can mostly choose your own projects. This is great for games and to some extent VR. That is why there is no PR or proper steam support staff in Valve itself, recently they said they would train their own support staffs at tech support companies. You can say alot about valve but them being lazy pieces of shit is objectively wrong. The solution that I'd think is great is that Gabe should really just make Steam a separate company so they can keep the Valve style but have a good storefront.
[QUOTE=BenJammin';49394941]So basically what im getting from this is this is Valves fault even though they say its not their fault and the people who got shit ripped off from them they are basically fucked and Valve is just giving the finger to their entire community. Eat my ass Valve not buying shit from steam again, this is the last straw or whatever. You used to be a chill private studio / fledgling company. Now you are run by a bunch of cozy shitmeisters who don't do shit apparently. This is what happens when you give your office a really nice food court full of junk food and shit, you make everyone a lazy POS.[/QUOTE]They didn't say its not their fault, they specifically said that it resulted from them updating the configuration for their caching system. Nobody lost anything and anyone telling you otherwise is lying, or you're making it up yourself. Basically all anyone could do is look at a page like it was a screenshot. Credit card numbers and phone numbers were hidden as required by law, the only information was email addresses and and stuff like address. While there is some potential for harm there, very little can be done with it overall. [editline]26th December 2015[/editline] [QUOTE=Cutthecrap;49394983]How can I know if somebody saw my info or got logged in as me? EDIT: Glad that nothing could happen to me due to my mastermind scheme of "false" emails for everything.[/QUOTE]Nobody was logged in as you. You can't know if anyone saw your information, and the only way someone could have is if you tried to access a steam store page during the 45 minutes or so the cache system was acting up. In which case its possible could have seen the page you were supposed to see.
this was very scary to see, as nobody knew what the fuck was happening, but after the fact, as far as customer information leaks go this wasn't as bad as most
Are people in this thread really whiteknighting this? Why are people okay with people's real names, addresses, email addresses, card type and the last couple of digits being leaked? That's enough for someone malicious to social engineer there way into a lot of shit.
Just double checking but is everything alright now? Am I safe? Can I continue doing what I normally do? I have a feeling its over but i just want to be sure.
[QUOTE=Morgen;49395827]That's enough for someone malicious to social engineer there way into a lot of shit.[/QUOTE] no it isn't
[QUOTE=NixNax123;49395831]no it isn't[/QUOTE] Sure i'll blindly believe you. Why is it acceptable though?
[QUOTE=Morgen;49395845]Sure i'll blindly believe you. Why is it acceptable though?[/QUOTE] because this leak is akin to typing in a random email, and two random digits, and saying "dude i can totally social engineer this guy now"
[QUOTE=hexpunK;49394922]You can test things again and again and again, but that isn't going to help if something goes wrong when actually implementing the change or if the provider of the service you're using shits the bed. Don't get me wrong, Valve should have been more on top of this, but these kinds of mistakes are somewhat hard to predict the occurrence of. They [I]should[/I] have a mitigation process for it, and really, really should have responded faster as it was a security risk.[/QUOTE] This is the sort of issue that should have been easily caught given any amount of real testing, even on a small private test version of the network. It was probably something as simple as someone overlooking even testing different accounts but that doesn't really excuse it. They're rolling these changes out to a network of millions of people so they need to do some pretty thorough testing before rolling it out. [QUOTE=Morgen;49395827]Are people in this thread really whiteknighting this? Why are people okay with people's real names, addresses, email addresses, card type and the last couple of digits being leaked? That's enough for someone malicious to social engineer there way into a lot of shit.[/QUOTE] Because Valve is perfect in every way and can never do anything wrong. Zedacon at least blindly defends Valve wherever they go.
[QUOTE=NixNax123;49395859]because this leak is akin to typing in a random email, and two random digits, and saying "dude i can totally social engineer this guy now"[/QUOTE] No it's not? If you really think it's a none issue then go ahead. Send a bunch of random people your full name, full address, email address, last two digits of your phone number, credit card type and the last two digits.
Sorry, you need to Log In to post a reply to this thread.