3 ms·

How could they get to the [salted|hashed|whatever] payment data from hacking the forum? Why is the payment data even remotely linked to the forum software? Ok,

by Hrundi 15y ago

How could they get to the [salted|hashed|whatever] payment data from hacking the forum? Why is the payment data even remotely linked to the forum software? Ok, the forum may need data from the account for validation, display name or else. You can still implement it securely. This is a big human oversight over what seems to be an insecure implementation. I just can't believe this. I would have guessed they learned the lesson from when Gabe was hacked through an Outlook vulnerability (with the HL2 code leak afterwards). It should have made a paranoid out of him. I think having chosen Paypal as a payment method was perhaps helpful for me. PS: I do own a lot of games and I very much like the platform. I definitely don't have anything against them. They presented a good notice, their high level of responsibility over this incident is irrefutable. Also, props for them for having an encryption for their preloaded games that wasn't broken so far. edit: formatting

zerovox 15y ago
This seems to be the first fair response. Sure, they handled it quite well, the letter is well written, but they still seem to have handled the data very poorly. Just because one is a huge fan of the brilliant service(which I certainly am), doesn't mean their poor security should be overlooked. Given the huge problem Sony has had recently, I would have thought other games companies would have been re-evaluating their data's security.
daxelrod 15y ago
Forum accounts are not linked to Steam accounts at all. The fact that the first sign of the intrusion was in the forum software doesn't necessarily mean it originated there. It's certainly possible that their entry point was the forum software, but simply compromising a forum account wouldn't be enough to compromise a Steam account.
Torn 15y ago
I don't think they are related. To me, it sounds like Steam was hacked on a number of vectors by people going after it specifically, the same way Sony was gone after.

by Hrundi 15y ago

zerovox 15y ago

This seems to be the first fair response. Sure, they handled it quite well, the letter is well written, but they still seem to have handled the data very poorly. Just because one is a huge fan of the brilliant service(which I certainly am), doesn't mean their poor security should be overlooked. Given the huge problem Sony has had recently, I would have thought other games companies would have been re-evaluating their data's security.

daxelrod 15y ago

Forum accounts are not linked to Steam accounts at all. The fact that the first sign of the intrusion was in the forum software doesn't necessarily mean it originated there. It's certainly possible that their entry point was the forum software, but simply compromising a forum account wouldn't be enough to compromise a Steam account.

Torn 15y ago

I don't think they are related. To me, it sounds like Steam was hacked on a number of vectors by people going after it specifically, the same way Sony was gone after.