Hackers Hit Steam Forums

[Nalgas D. Lemur]

I dunno, that seems like a pretty obvious lack of security, I'd hope more than 99% aren't that naive.

Damn-near everyone uses one password for everything. Plus, is it really much of a stretch for people to use their Steam name/password for the Steam forums?

Maybe instead of one password for everything they should use 1Password [https://agilebits.com/onepassword]. Or KeePass [http://keepass.info/] if they're like me and don't need everything synced with their phone but do need it to be free/non-expensive. Doesn't really matter to me if they get the password to my Steam forum account, because not only is it different from all the passwords I use for everything else, it's a random string of letters and numbers that not even I know. It gets them access to nothing, and having to change it is no big deal to me. Heh.

 

[shado_temple]

It's things like this that make me glad for things like Steam Guard that would require a hacker to obtain my email credentials as well to mess with anything; I had my forum password being the same as my Steam password (though I don't now), which may have been a problem otherwise.

 

[McMullen]

snip

You know, at no point during any of that did you note that the forum uses a different account than the Steam service. That's a big piece of information to omit. If the commenters, rather than you, are providing one of the most important bits of information concerning a news story, I think that means you're doing it wrong.

OT: Hm. I'm trying to log into steam to change my password just in case (I don't even know if I used the forums, and the steam service has my old card info anyway), but it says it's having trouble connecting. Anyone else?

 

[ASnogarD]

I wonder if it wasnt a gamer who was pi...eerr annoyed due to hackers in thier game and wanted to make Valve notice the world of hacking a bit more.
Seems a rather tame piece of hacking but does show Valve is not immune to attacks ( ironically Valve should be more aware than most, recall the source of Source getting to the wild ? ), plus if things work out Valve would be rather irritated with a certain site that provides the pathetic and lame means to pretend for a few seconds they are good at something.

Hope Valve takes a more aggressive stance towards the products those sites purvey.

 

[TheScottishFella]

If it ain't the actual Steam service I don't care.

 

[zehydra]

a brilliant hack. I have feeling that Fkn0wned didn't actually hack them.

Think about it, if you're a hacker, and you were pissed off by hackers screwing up the game, who better to pin a hacking of the steam network on than a distributor of hacks?

Maybe I'm just looking to far into this.

lol.

 

[ckam]

Not really worried, forums getting hacked is one thing, accounts getting hacked completely another.

I found this pretty funny. Thanks for the comic.

 

[Norks]

Don't care, Steam is bad for gaming anyway.

 

[idarkphoenixi]

We should be safe since potential hackers still need to access our email accounts before logging in. Still, it's never a bad idea to change passwords

 

[SteewpidZombie]

(My response to the whole incident)

And thus a tear will be shed on the Steam forums...for NIGH! HAS THERE BEEN A DAY OF GREATER MOURNING...brothers...we shall find the light in this darkness...the path in this dense forest...THE ROAD TO SAL...Oh...my game is finished updating, Cya later...

 

[Baresark]

Well, to fix everyone's perception of this. It wasn't the SPUF itself that was hacked, it was the vBulletin system, which is completely separate from the Steam system. It's a basic system that is really open to attacks rather easily.

On a side not, I had just posted on SPUF about how the strange ad on the top of the page was for a game hacking system, just before they took it down. It was pretty ridiculous.

 

[Blunderboy]

I've never ventured onto the Steam forums so my reaction is 'meh'.

If you ever want to see true Steam hate, there's the place.

Occasionally useful, but always full of bile.

So it's the Gallbladder of the internet?

 

[TheYellowCellPhone]

Never used it, so I don't fear for the safety of my account.

Why wouldn't they take credit for this?
*notices the angry mob of pitchfork welding Steam users*
Oh, right.

Holy shit, a welder and a pitchfork? Give me something to sign, I want one!

 

[kebab4you]

Even if I use same pw for my steam forum id as for my steam I'm not going to change, I have enough faith in steam guard to stop scriptie kids from entering it.

 

[Lord_Ascendant]

Hmm...

I feel like any moment now VALVe is going to figure who it really was and unleash some sort of terrible monster hidden in the company basement that they feed problem gamers to..

 

[NLS]

Hacking for the sake of advertising is one of those things I hate the most probably. Oh sure, fkn0wned didn't do it. And spam email trying to sell you viagra is just guys trying to help you, not in any way affiliated with the companies...
Those idiots are probably laughing their asses off for how much publicity they get for this now.

 

[PH3NOmenon]

It should be noted that unless you're a complete dolt, your Steam account and your Steam forum account is not the same thing.

I think you're not even allowed to use your steam account name as a forum account name...

Either way, Steam is still safe as ever. /shrug

 

[teh_gunslinger]

I didn't join the forums so it seems I would be safe... right?

Yes, actually. The forum account is completely separate from the main Steam account. I learned this the hard way when I had a tech support question to ask, and I had to make an account and then wait for them to approve it because my e-mail address was from Yahoo.

And actually, support is yet a third account. Your Steam account is separate from you forum account is separate from your support account.

 

[Dendio]

I cant currently change my steam password. anyone else experiencing this?

 

[Owyn_Merrilin]

I didn't join the forums so it seems I would be safe... right?

Yes, actually. The forum account is completely separate from the main Steam account. I learned this the hard way when I had a tech support question to ask, and I had to make an account and then wait for them to approve it because my e-mail address was from Yahoo.

And actually, support is yet a third account. Your Steam account is separate from you forum account is separate from your support account.

Huh, didn't know that. Unfortunately, the account I made really is a forum account; the problem kind of resolved itself before I got a chance to ask anyway, so there was no need to go through with a support ticket, and I guess I wouldn't have been able to without making another account.