Poll: Are You Cancelling Your Credit Card over the Steam Hack?
- Thread starter Tigger1992
- Start date
Gabe gave out his password and associated steam account email address when they released steam guard.
So even with your password (which they don't actually have cause its the forum passwords not the steam account passwords), unless they can get on your computer they aren't doing anything with your account.
So even with your password (which they don't actually have cause its the forum passwords not the steam account passwords), unless they can get on your computer they aren't doing anything with your account.
Steam tells me that there's no credit card information associated with my account, so I see no need to.
This sounds kinda stupid for hackers.
They manage to be ballsy (and smart) enough to hack into all of steam's credit card info, yet the encryption key prevents the information from being usable (useless), so all they got were a bunch of passwords (which i'm sure everyone has changed by now) (again,useless).
Steam=1, Hackers=0
But what if they were not trying to get the information? They just wanted to make steam appear insecure and unreliable for game purchases. I can think of a new online distributor who would like that to happen, and might help in making that a reality.
/conspiracytheory
Sorry about that; it's late, i need sleep, and i've been playing too much AC:2
They manage to be ballsy (and smart) enough to hack into all of steam's credit card info, yet the encryption key prevents the information from being usable (useless), so all they got were a bunch of passwords (which i'm sure everyone has changed by now) (again,useless).
Steam=1, Hackers=0
But what if they were not trying to get the information? They just wanted to make steam appear insecure and unreliable for game purchases. I can think of a new online distributor who would like that to happen, and might help in making that a reality.
/conspiracytheory
Sorry about that; it's late, i need sleep, and i've been playing too much AC:2
Fortunately, even if they somehow manage to break the encryption, I'm safe, because the only card tied to the account is one I cancelled close to a year ago. I'm really not too worried about this hack; unlike Sony, Valve seems to understand the importance of encrypting sensitive data. I think what we're going to see here is a lot of spam being sent to e-mail accounts tied to the Steam forums, a few passwords that are susceptible to dictionary attacks getting cracked, and not much else. If you've got a decent spam filter and your password was something better than "password1," you're probably safe.
Edit: Case in point, I'm pretty sure all of the penis pill ads in my spam filter are a result of this. I had literally never received one before these came over. Note that while the dates seem a bit early, the one at the bottom is dated "January 1, 1990." It is literally impossible for an e-mail that old to be in my spamfolder for several reasons. For one thing, the folder clears itself every couple of months. For another, my account was created somewhere around 2004. For another, Yahoo didn't have an e-mail service in 1990, and probably didn't exist at all, for that matter. Point being,the dates in October are just as suspect as that one, and since it's a new form of Spam that I hadn't noticed prior to the Steam hack...
Some of you are probably noticing that there are e-mails from GoG in there. They are legit, but Yahoo's spam filter catches a lot of mass e-mails by default, which, coupled with the fact that it deletes stuff after a couple of months, is why I check it periodically.
Edit: Case in point, I'm pretty sure all of the penis pill ads in my spam filter are a result of this. I had literally never received one before these came over. Note that while the dates seem a bit early, the one at the bottom is dated "January 1, 1990." It is literally impossible for an e-mail that old to be in my spamfolder for several reasons. For one thing, the folder clears itself every couple of months. For another, my account was created somewhere around 2004. For another, Yahoo didn't have an e-mail service in 1990, and probably didn't exist at all, for that matter. Point being,the dates in October are just as suspect as that one, and since it's a new form of Spam that I hadn't noticed prior to the Steam hack...
Some of you are probably noticing that there are e-mails from GoG in there. They are legit, but Yahoo's spam filter catches a lot of mass e-mails by default, which, coupled with the fact that it deletes stuff after a couple of months, is why I check it periodically.
Dude, even the passwords were encrypted. I'm glad Valve is letting us know, but this isn't anywhere near as bad as the PSN hack was. What getting the hashed passwords really does is let them do dictionary and brute force attacks on the account without having to worry about automatically getting locked out after a few tries. If your password isn't susceptible to dictionary attacks and has a reasonably high cryptographic entropy, you probably don't even need to worry about changing it. The spam filters of the world's PC gamers are going to be working overtime from now on, though...El Zorro said:This sounds kinda stupid for hackers.
They manage to be ballsy (and smart) enough to hack into all of steam's credit card info, yet the encryption key prevents the information from being usable (useless), so all they got were a bunch of passwords (which i'm sure everyone has changed by now) (again,useless).
Steam=1, Hackers=0
But what if they were not trying to get the information? They just wanted to make steam appear insecure and unreliable for game purchases. I can think of a new online distributor who would like that to happen, and might help in making that a reality.
/conspiracytheory
Sorry about that; it's late, i need sleep, and i've been playing too much AC:2
Could someone here clarify something for me.
As long as I didn't save any of my info (like credit card numbers), that information should be safe, right?
As long as I didn't save any of my info (like credit card numbers), that information should be safe, right?
I tried making a poll when I made the thread but it did not show up. I also tried editing the post to add a poll but the option to was not there...Kysafen said:
Really, Paypal always tells me if I'm short on cash, it actually won't let me make a purchase without either transferring money in or having the amount in there already.Dudeio said:
I'm not saying you're wrong, just that it's not been my experience, although I'm sure you're right. There tends to be work arounds.
I might have to contact them and see if there's a way to disable the ability to have "credit" for purchases with my account.
This should pretty much be /thread right here.Matthew94 said:1. They don't know it has been takenTigger1992 said:
2. It's encrypted in AES256, they won't be getting into those files.
For me, I don't save my credit card details anyway, I input them with each purchase. But the above post still outlines why it's not necessary for anyone to be jumping the gun just yet.
Can someone answer this question for me, if i have never used the steam forums am i safe? i did change my password