Author Topic: Steam vulnerability fixed, you can come out of your bunkers now (Read 1874 times)

Cybertails1998 · April 08, 2014, 07:50:22 AM

"We recommend NOT using any Steam services until Valve issues a fix for a recently discovered vulnerability. We've contacted them about it."
"This vulnerability is especially dangerous for Steam partners (unless you wants your things leaked)."
"It's a dangerous issue to everyone, it's more dangerous for developers because they deal with more sensitive content."
"We'll inform you when it's fixed, and it's better to not do anything at the moment including logging off sites."

uhh

forget

More info at http://heartbleed.com/ - if you do /anything/ involving Steam (closing and/or opening the Steam client) or logging onto/out of things with Steam, your account is at risk.

https://twitter.com/SteamDB/status/453598542943498240

Ad Bot · Advertisement

Flatflyer · April 08, 2014, 07:51:47 AM

uhh what exactly is happening?
what is this vulnerability thing?

Klocko� · April 08, 2014, 08:03:07 AM

Just googled about this, all steam services have the Heartbleed bug, don't even TOUCH Steam, don't open Steam's desktop client, don't log out, don't log in, don't visit any official steam sites else your account's forgeted.

http://heartbleed.com/ <-- More info about this bug.

Flatflyer · April 08, 2014, 08:04:52 AM

Uh I have steam up in offline mode on my laptop right now
am I safe?
or should I turn it off?

Renousim · April 08, 2014, 08:14:16 AM

oh stufftt

Flatflyer · April 08, 2014, 08:15:40 AM

alright I turned off steam on my computer
It was on offline mode so I think I'm safe.

Renousim · April 08, 2014, 08:16:40 AM

it just said not to do ANYTHING, which includes exiting steam

Flatflyer · April 08, 2014, 08:17:59 AM

Quote from: Renousim on April 08, 2014, 08:16:40 AM

it just said not to do ANYTHING, which includes exiting steam

well stuff
hopefully it doesn't work if its in offline mode.

McJobless · April 08, 2014, 08:35:15 AM

Well, this sucks.

Ipquarx · April 08, 2014, 08:47:50 AM

Welp, stuff. I guess I'll be checking their twitter until the problem is fixed.

Snick0rz · April 08, 2014, 08:53:50 AM

Quote

Snick0rz: Good thing my password of email and Steam are seperate, I have Steam Guard on and I know where my requests come from
Snick0rz: Yep, Steam Guard is engaged and my passwords are knowingly different
Snick0rz: And not just by a bit, but multiple more characters aswell as other stuff
Snick0rz: So yeah, knock thineselves out
Snick0rz: I'm gonna go with >2014
Snick0rz: >not running SteamGuard
Snick0rz: you may not like it, but it is at least as secure as the difference between your Steam and Email password
Snick0rz: If you use the same on both you're a loving idiot regardless

Too lazy to edit out my name but yeah.

The Big Bad Jellyfish · April 08, 2014, 09:07:13 AM

This is like the internet apocalypse, because this also infects some other sites, like email. So be careful where you wonder off to

Zeblote · April 08, 2014, 09:10:54 AM

Quote from: Snick0rz on April 08, 2014, 08:53:50 AM

Too lazy to edit out my name but yeah.

Everything is only as secure as your email password anyways, as that can be used to reset all other passwords.

Nal · April 08, 2014, 09:29:41 AM

I logged in
Lol

Regulith · April 08, 2014, 09:33:26 AM

I've logged in and out of Steam and used some sites that have me logged in using my Steam account today

Should I change my password? Or will that just make things worse?