Support NeoGAF

[ClearData]

What's the best way to neuter my account? I'm trying to remove as much information as possible. I don't think I stored my credit card, but my email is there.

Fuck. This is terrible.

 

[Smash88]

Jesus christ I can easily buy a game using someones saved paypal credentials. Thankfully I never do that. This is beyond fucked up.

I AM SO HAPPY I NEVER EVER SAVE CREDENTIALS RIGHT NOW. Thank you god.

 

[malfcn]

By the way, this is not a security breach. This is page caching gone rogue. Most likely not respecting Cache-Control headers.

 

[Leonsito]

I don't know which is worse, hackers or absolute incompetence.

 

[SRTtoZ]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

I can see this on my galaxy s6ame without being logged into Steam or anything. Holy shit this is fucked.

 

[jmga]

Being able to buy games and gift under another's account is a security breach because everyone can do it. Its a breach caused by cache headers.

AFAIK, no one has confirmed you can buy anything from another's user account. You just can see their profile data.

 

[NahaNago]

well i'm getting Error Code: -302 now

 

[Enter the Dragon Punch]

Do you actually think this?

((i have no idea what's going on, just that my steam is in japanese, i just built my new pc))

 

[StoopKid]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

Ok this is crazy.

 

[The Elite]

https://twitter.com/SteamDB/status/680492664610000896

So, this is the technological singularity?

Is AI come?

 

[Deleted member 125677]

Holy fuck, this is insane. I was browsing some french guys account, then a danish one

Pull the plug valve, ye greedy cunts. Surely they must be aware of this issue by now?

 

[Gemüsepizza]

This has been going on for over 30 minutes. Pathetic reaction time from Valve.

 

[YianGaruga]

I'd trust these guys, so if you're having fun looking up random profiles, maybe don't

 

[TheSpoiler]

I would assume the moment information that's not public becomes public is grounds for a "security breach".

 

[CoG]

https://twitter.com/SteamDB/status/680492664610000896

Not buying it. Cache-control headers would not give you the authorization to go to other pages in the account. Once you get someone's account page you can go anywhere and (I suppose) change anything. That's not caching and even if it is, it's a colossal security fuck up.

 

[RyanW]

How does something like this happen and why has it taken so long to simply shut down certain features?

 

[Syf]

Shit happens, everyone fucks up.
It's annoying, it's utter shit even.

But shit happens.

This isn't a "shit happens" sort of thing. They have a responsibility to make SURE this doesn't happen, ever.

 

[THE:MILKMAN]

Maaaan.

I don't even have Steam at all and can view them details linked....

How can "caching issues" cause this?

 

[fluffydelusions]

Jesus christ I can easily buy a game using someones saved paypal credentials. Thankfully I never do that. This is beyond fucked up.

I AM SO HAPPY I NEVER EVER SAVE CREDENTIALS RIGHT NOW. Thank you god.

Wait huh...doesn't it redirect you to the paypal site and you have to input password and such?

 

[maquiladora]

Jesus fucking christ Valve.

 

[hupla]

if anyone would like to make the case for a digital online always online future and that we should replace physical media i offer now as the time

 

[Relaxed Muscle]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

If this is not red button worthy, Valve's incompetence may have reached another level.

 

[Clydefrog]

wow...

 

[TheLostBigBoss]

This is fucking embarrassing.

You know the store is fucked, you know the reason it's fucked, yet you are KEEPING IT ONLINE WHILE ANYONE CAN ACCESS IT?

WTF is wrong with Valve? Why hasn't anyone pulled the plug?

 

[Buburibon]

Logged back into my account and my wallet has only $2.42 CAD left. Last time I used it I had over 300 loonies in it. Haven't received any "thank you for your purchase emails" yet. Weird!

 

[strafer]

So can I edit my CC info and stuff now or will that edit that persons info?

 

[Alo81]

fyi: If you use paypal like I do for steam payments, you can go into your paypal account settings, then click preapproved payments, and find the one for Valve, and then cancel it.

Thanks, this should be the only funding source I have attached.

 

[R10Neymarfan]

This has been going on for over 30 minutes. Pathetic reaction time from Valve.

Surely some lawsuits might happen because of this?

 

[Obliterator]

I cant even take my cards off. When I click to edit account it just cycles users and gives me their e-mails, paypal's, credit card info, etc.


WHAT THE FUCK VALVE

 

[dity]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

I'm not logged in via the browser either, and it shows me some person's random account too.

 

[Sniffynose]

Holy crap this is bad! Omg.... how are they letting this continue!? I went to log in and the fucking main site was in french with euro currency, god knows what's being bought or sold or deleted on my account right now

 

[furfoots]

I can see last digits of CC and the FULL address and phone number registered on the card.

 

[Magwik]

uhhh how can I even remove my CC from Steam at the moment?

 

[Stop It]

I just logged into my Steam to delete my card details and got someone totally random instead. If anyone gets mine, please delete my details? Thanks

 

[idonteven]

this is a bigger fuckup than the psn hack years ago no ?

 

[MrTroubleMaker]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

:O damn!

 

[Eusis]

Entirely different guys in my client and on my phone.

Man, what the hell?

 

[The Elite]

So it wasn't a security breach but this is Dec 25. It's too much of a coincidence.

Yeah, if it's not a security breach it's a damn timely fuck up.

 

[KraytarJ]

So this is about as bad as you can fuck up right?

 

[Alcool313]

Yeah, I got someone with Mobile Steam Guard.

Well, so much for that.

I guess it's time to make the switch to UPlay. It's not like I have many Steam games.

Spoiler

Only 667 currently ;__; Please be ok

 

[rdytoroll]

Of course this is a security breach. Come the fuck on...

 

[Conkerkid11]

I can view accounts here - https://store.steampowered.com/account

And im not logged into steam at all

Oh my god.

I can't believe nobody's flipped the switch yet.

 

[Trevelyon]

Well, took care of the PAYPAL preapproval. I think I still have ancient card attached, but whatever.

Man, this is nightmarish.

 

[Mr. Nice_Guy]

Of course the last place other than amazon where I have card info stored. I'll be removing it once this is sorted out. Hope nothing unfortunate happens to anyones accounts.

 

[psynergylover]

Any gaffer get another gaffer's account? At least that one would be in good hands

 

[fantomena]

https://store.steampowered.com/account


Wtf. I got a Norwegian persons account there.

 

[Konosuke]

Ummm, thanks Valve?

 

[RadioactiveLobster]

I doubt it's as simple as pressing the giant "SHUT DOWN EVERYTHING" button but someone needs to be pressing important buttons somewhere to get stuff turned off ASAP.

 

[Green Mamba]

Apparently I live in Portugal and never knew it. Thanks Steam for expanding my boundaries.

 

[Grief.exe]

((i have no idea what's going on, just that my steam is in japanese, i just built my new pc))

You temporally accessed someone else's page cache. You were viewing the store as they can.

It's been advised to stop using Steam in general.