Support NeoGAF

Syf · Dec 25, 2015

mothball said:
who needs media for damage control when you have posters like the ones in here

There really is a defense force for everything on here.

Atlas157 · Dec 25, 2015

I'm really nervous about this. I don't see any new Steam related emails in my inbox, am I good?

rje · Dec 25, 2015

Meanwhile at valve...

foxbeldin · Dec 25, 2015

iNvid02 said:
i dunno about you guys but i can only think of 1 thing that could adequately compensate me for this gross violation of privacy, it begins with a h and ends with a 3. i think you know what im talking about dont you.

Halo 3 PC port confirmed!

Grief.exe · Dec 25, 2015

HK-47 said:
If you dont save purchasing details, what would they be able to see?

Account name, email, phone number, purchases.

Arizato said:
Yup! Same thing happened to me! I haven't bought anything today.

This is in Swedish Krona and this sum is about 5 euros. So I haven't been as screwed as this poor fellow.

Financial institutions are sometimes delayed with posting transactions, especially with the holidays.

Did you buy anything previously?

misses bull · Dec 25, 2015

I can't access the account details page

Did valve shut this stuff down?

Mr. Luchador · Dec 25, 2015

I can't wait to see how big the fine is from the EU for the breach in Data Protection.

Dryk said:
Turn on mobile authentication for Steam and/or email so that any prospective hacker has to physically track you down to get into your account

AHA! This makes sense.

October - Steam Client keeps asking you to add your mobile. No one does.
November - Steam Client makes adding your mobile part of a Community Badge. No one does.
December - Steam Client HACKS ITSELF SO YOU'LL FINALLY ADD YOUR MOBILE NUMBER!

Shuggananas · Dec 25, 2015

Stumpokapow said:

WOAH VALVE IS FINISHED

TheLostBigBoss · Dec 25, 2015

#pray4valve

GuardianE · Dec 25, 2015

Smash88 said:
Other GAF users were reporting that they were getting steam wallet charged. It's not an unrealistic scenario.

The scenario is irrelevant. If you're going to post that, you should post a source with a link.

Relaxed Muscle · Dec 25, 2015

Arizato said:
Yup! Same thing happened to me! I haven't bought anything today.

This is in Swedish Krona and this sum is about 5 euros. So I haven't been as screwed as this poor fellow.

Are you sure, you didn't edited the page with chrome dev tools!!?

/s

ClearData · Dec 25, 2015

Juan29.zapata said:
I thought that no purchases could be done.

Don't discount the possibility this is fake and created to make people panic. Misinformation is a weapon nefarious individuals will use.

Monitor your credit card and stay frosty.

MohitParty · Dec 25, 2015

So no official statement from Valve yet? Not even "we know there are issues and we're looking into it" ?

Big-ass Ramp · Dec 25, 2015

Stumpokapow said:

wow I would debate that asap

fluffydelusions · Dec 25, 2015

Tenebrous said:
We'll be getting compensation, I've no doubt about that. Whether it's a CLA or a voluntary offering from Valve remains to be seen.

Free CS:GO for everyone!

Haunted · Dec 25, 2015

Stumpokapow said:

see the groupees purchase is the more worrying one here

MageBoySA · Dec 25, 2015

cw_sasuke said:
Some stupid posts on the last 2 pages - some people just wanna see the world burn.

How can you unlink Steam from your PP account via the PP Site ? Cant see that option.

I did it on my phone, go to settings- preauthorized purchased then click on Valve

Hektor · Dec 25, 2015

iNvid02 said:
i dunno about you guys but i can only think of 1 thing that could adequately compensate me for this gross violation of privacy, it begins with a h and ends with a 3. i think you know what im talking about dont you.

Hotline Miami 3?

Par Score · Dec 25, 2015

Valve's total lack of communication about anything ever is cute, right up until some shit like this goes down.

Striek · Dec 25, 2015

Grief.exe said:
...and people were posting account names in this thread.

Pretty rational to go "hey I'm in XYZs account not mine WTF" its not the users responsibility in this scenario.

Makes more sense to me than posting bullet points you don't even know are true over and over.

fhqwhgads · Dec 25, 2015

Valve really needs to say something about this, anything really. Just something that stops the scaremongering and people trusting literally any source that crops up.

Red Arremer · Dec 25, 2015

Xyber said:
I saw this in the purchase history of one guy.

Was he German by any chance?

BasilZero · Dec 25, 2015

Soyongdori said:

I know we're in a scary/serious situation but this just made me laugh out loud.

I hope everything gets fixed soon - this is really terrifying ;x

HalfBakedProphet · Dec 25, 2015

YianGaruga said:
wow guys

oh my god, they've breached all of our webs.

Haunted · Dec 25, 2015

Is this Frog Fractions 2?

NEO0MJ · Dec 25, 2015

So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

AJ_Wings · Dec 25, 2015

MohitParty said:
So no official statement from Valve yet? Not even "we know there are issues and we're looking into it" ?

Halfway decent communication from Valve?! Surely you jest!

Seriously, fucking assholes. The fact that they still haven't said anything.

Kwansu Dudes · Dec 25, 2015

Although this is a shitty situation, it has made my Christmas much more exciting.

LiegeWaffle · Dec 25, 2015

Stumpokapow said:
As one of the accounts affected by this (shout-outs to the nice random people on Steam contacting me to chat because they were in my account and looking at my stuff--all seemed like standup, trustworthy guys), the basic information I want to know:

1) Was this a breach, a staff error, or a configuration error that happened due to some unusual hardware cascade situation?
2) How many users were affected?
3) How many people accessed my information?
4) What information did they access?
5) If my address or cc info was even partially exposed, I expect a year or two of credit monitoring
6) If a breach, was my tax information accessed
7) Will I be permitted to change my login username in light of this?

It goes without saying that if purchasing was exposed they should do a full rollback, but I'm not worried about that because that's obvious. More worried about the personal info.

I just want an honest post-mortem, but the sad thing is, given Valve's previous history of dealing with those issues (remember the part where devs could or still can inject JS into Steam Store pages?) I highly doubt it.

Mr. Enigma · Dec 25, 2015

BHK3 said:
Do it. I'm timing you. tick tock, Engima.

Orayn said:
I can click "View Source" in a browser and do it in 10 seconds.

RadioActiveLobster said:
You could make this in 10 seconds with InspectElement in any modern browser.

Listen, freaks: I used to do my Internet browsing over a 2400 bps modem. I'm set in my slow, precise ways.

Pancake Mix · Dec 25, 2015

Arizato said:
Yup! Same thing happened to me! I haven't bought anything today.

This is in Swedish Krona and this sum is about 5 euros. So I haven't been as screwed as this poor fellow.

....What a colossal mess. Stay safe SteamGAF.

Smash88 · Dec 25, 2015

GuardianE said:
The scenario is irrelevant. If you're going to post that, you should post a source with a link.

Alright here is another one:

https://www.reddit.com/r/Steam/comments/3y7uq1/my_paypal_got_emptied/

Happy? IT'S A REAL SCENARIO! JESUS FUCK!

There is a time to be cautious, and there is a time to be realistic about the situation at hand. It's not that far fetched.

Sleeping Lesson · Dec 25, 2015

OH NOOOOO

Grief.exe · Dec 25, 2015

NEO0MJ said:
So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

I haven't tried, but it is unlikely you are able to at this point.

Last we heard they shut down Steam Community.

Rebel Leader · Dec 25, 2015

NEO0MJ said:
So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

if you logged in, it would put your account in the rotation. More likely for it to be shown to someone else

Wait untill steam comes back online

CrazyHal · Dec 25, 2015

If you have a credit card number registered with steam call your credit card company ASAP and tell them what's going on.

Chesskid1 · Dec 25, 2015

Benedict said:
So will all these pages be cached by Google and searchable at google.com?

Other search engines?

i just looked at someone's account using google's cache..

sigh..

NewDust · Dec 25, 2015

YianGaruga said:
wow guys

Is that Canadian? If so, thats fuck all...

benny_a · Dec 25, 2015

NEO0MJ said:
So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

The current understanding is that this is/was a caching problem, so all account related activities make you more vulnerable than not doing anything, so you never create any cache entries that can be exposed.

If you have the ability to block Steam from Paypal for example then do it that way.

Syder · Dec 25, 2015

Changed my PayPal password. Pretty sure that's the only method of payment I've ever used.

I mean, surely Valve has to fix this and not leave any customers out of pocket or games. People have been moving away from Steam a little bit lately and this could really hurt them long term if they don't fix this rapidly.

Volimar · Dec 25, 2015

Snore Crime · Dec 25, 2015

Sleeping Lesson said:
OH NOOOOO

:O

PLASTICA-MAN · Dec 25, 2015

Tenebrous said:
We'll be getting compensation, I've no doubt about that. Whether it's a CLAor a voluntary offering from Valve remains to be seen.

CLA? What is that ?

Head.spawn · Dec 25, 2015

Stumpokapow said:

Okay, well this is funny and all, but IGN's Lets Play producer is on twitter saying he has purchases on his account.

That seems to be as confirmed as we need, right?

https://twitter.com/BenJanca

Cleve · Dec 25, 2015

NEO0MJ said:
So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

Simply attempting to load up your page would put it in the cache that others were viewing. It was poorly phrased. The intent was "don't load any steam pages at all, even if it is to remove details" but it all looks like it's shut down now anyway.

MrDaravon · Dec 25, 2015

NEO0MJ said:
So if I understand this right I'm not supposed to change to change the info from my steam account? Why?

If I'm understanding what people are saying correctly, making changes on steam could potentially float your account to the top of the cached list which is what people are/were able to see. Seems to be why people are recommending to disconnect Steam through the Paypal side of things.

Dunkley · Dec 25, 2015

Stumpokapow said:

Well this poses an interesting question

If you had Mom's Spaghetti, would you capture it, or just let it slip?

GrizzleBoy · Dec 25, 2015

Just arrived. What in the world is happening?

Vilam · Dec 25, 2015

daxgame said:

Wow, I didn't even see his avatar since I'm posting from mobile. How fucking embarrassing coupled with that blatantly inaccurate post.

AxeMan · Dec 25, 2015

Jus woke up to this news. Couldn't get the store to show on Steam and saw this thread.

IS the problem fixed yet? I was able to get into my account, I couldn't see anyone else, just the store wouldn't load.

Also, this is more vindication of my belief to never let 3rd parties store your CC details if you can avoid it. It's a two second job to pump the details in as needed

Support NeoGAF

Steam security issue revealed personal info to other users on XMas Day (fixed)

Banned

Member

Member

Member

Member

Banned

Member

Banned

Banned

Santa May Claus

Member

Member

Member

hella bullets that's true

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Member

Copied someone else's pancake recipe

Banned

Member

Member

THE POWER OF BUTTERSCOTCH BOTTOMS

Member

Banned

Member

extra source of jiggaflops

Member

Member

Neo Member

Member

Junior Member

Member

Member

Member

Banned

Maxis Redwood

Member

Similar threads