Author Topic: Steam vulnerability fixed, you can come out of your bunkers now  (Read 2149 times)

Oh stuff, steam auto logins every time by computer turns on. I'm just gonna not get on the computer.

Oh stuff, steam auto logins every time by computer turns on. I'm just gonna not get on the computer.
Just close the process when it comes up or disconnect Wi-Fi when it turns on

Oh stuff, steam auto logins every time by computer turns on. I'm just gonna not get on the computer.
Start in safe mode, use msconfig to disable the program from running on startup.

I've logged in and out of Steam and used some sites that have me logged in using my Steam account today

Should I change my password? Or will that just make things worse?

Not yet at least. From what I heard, the exploit reveals the temporary memory being used to perform operations in OpenSSL. So just don't perform any actions and you won't be loaded into memory in the chance someone malicious accesses it at that time. But I don't know all the details.

I wouldn't worry about anything. This bug would already be fixed if they got off their asses and did it already. But no let's announce the public mass instead. That will fix everything!

I've logged in and out of Steam and used some sites that have me logged in using my Steam account today

Should I change my password? Or will that just make things worse?
I would suggest changing your password after steam fixes this bug
cause I assume if you change it now they'll see what you changed it to.


Not yet at least. From what I heard, the exploit reveals the temporary memory being used to perform operations in OpenSSL. So just don't perform any actions and you won't be loaded into memory in the chance someone malicious accesses it at that time. But I don't know all the details.

I figured it was something similar to that, I wanted to make sure I wasn't making myself more vulnerable by doing it while the exploit was open

I've got Steam Guard on anyway but better safe than sorry

I told all my friends about this.
hopefully they see it and listen to it.

So, what exactly is it that has everybody scared stuffless?

Valve is resolving it now apparently

An exploit that has existed for at least two years just made tech news publicity today, if anything that publicity has just made the vulnerability more widely known - add this to the fact that working exploit code is now available for viewing as well.

The Heartbleed exploit could have been kept as an internal issue for a while after it was discovered and distributed towards other web services in the form of an email or bug report form, not telling every single person (whose intentions are unknown) on Twitter or other similar services.

If such an exploit was widely known already prior to this publicity, you would have already known about it because your account would have been hacked.

So, gg internet.

If it was really that much of an issue then surely they would've shut down the login servers so nobody was able to log on thus preventing their accounts from being put at risk, or is that just too much common sense for Valve?

Well steam maitnece will be done tonight at least as usual