Steam's gay 15 days trade mobile authenticator bullstuff

[The Resonte!]

don't say brother

niqqa

Mobile Authentication is the way of the future, so get used to it.

Hell, don't be surprised if we see a future without passwords, where everything is instead handled directly by your mobile phone and some apps.

sounds obnoxious

[Ad Bot]

[Lord Tony®]

If your phone gets stolen and you can't remember the recovery password you'll never get your account back.

You can't simply log into the computer and be like "oh I want to switch from phone to computer"

It's not going to work. It's tied to your physical phone.

[McJob]

So your phone gets stolen, then what?

Every mobile authenticator comes with a number of Recovery codes that can be used to login and unlink the device. If you didn't write the codes down when they're clearly printed out for you, it's your own damn fault.

Besides, losing a password is MUCH easier than losing a phone, particularly if you're trying to remember a really long password using random characters.

This is why I have an encrypted password manager that stores my passwords and recovery codes (as well as some other vital info) with a key file stored separately to the database and I also have physical backups of the data in a safe, hidden place, and then I have mobile authentication enabled wherever possible.

[Siren]

What's even worse is with the authenticator bullstuff, you still have to use the godawful steam app and confirm every single thing you want to do, which because the app is so terrible takes loving ages

[McJob]

the app is so terrible takes loving ages

I've had literally no issues running the app on my Xperia Z1 Compact or my sister's iPhone 5. Are you sure that it's not your phone being a piece of stuff?

[Siren]

I've had literally no issues running the app on my Xperia Z1 Compact or my sister's iPhone 5. Are you sure that it's not your phone being a piece of stuff?

Im using a 3 year old iPhone 5, the app works but I have to constantly refresh it until it updates to get onto the conformation page. Sometimes it just works instantly but mostly not, and then actually confirming each individual item means I have to press confirm about 4 times, wait another 20 for it to figure out what its doing, and then it tells me theres an error with confirming (this happens every single time), even though it worked.

[e-maxx]

I know, this stuff is bullstuff.

The steam sale lasts only about 11 days and we have to wait 15 days for trades to go through.

How the forget can we sell stuff or trade so we can buy games?

easy

it's called getting a job

[The Resonte!]

Besides, losing a password is MUCH easier than losing a phone, particularly if you're trying to remember a really long password using random characters.

it's MUCH easier to make an account when you don't need to use mobile auth

[JoeysWorldTourLIFE]

then use mobile authentication.  problem solved

[Bisjac]

i dont know what the problem is. i buy stuff left and right off the store without any kind of bullstuff stopping me.
i even traded a guy some csgo items this morning and it took a split second.

edit: i dont use my phone for anything. i never wait for a thing.
i think i had to do some kinda email verification at most.

[KickFlow]

So your phone gets stolen, then what?

Then you have bigger problems. They'll have access to your empty bank account and those incest photos.

If your phone gets stolen and you can't remember the recovery password you'll never get your account back.

Perhaps do what the app says & WRITE IT DOWN & DO NOT LOSE THIS CODE.

What if you forget your PIN number for your credit card?
What if you forget your password to your account, and the password to the e-mail account you used to make the account.

You can't simply log into the computer and be like "oh I want to switch from phone to computer"

Yes you can.


Honestly I was totally against using the stuffty mobile app but because I wanted to trade and stuff I just got it anyway. It has worked flawlessly & I have no complaints.

 If you think having to get your phone while trying to log in to steam is more of a hassle than waiting 15 days for a trade than you should re-evaluate your time.

[EcstaticEggplant]

without mobile auth: "omg steam security is terrible my account got hijacked and all my inventory is gone"

only handicaps who kept falling for obvious scams had that mentality. steam catered for a minority of idiots, annoying the rest of people who knew that entering in your details on a obvious phishing site would result in the loss of your precious items.

[Regulith]

If you're dumb enough to add some random dude and then click his link to steamcommomity.com you deserve to get your crap stolen, hell even I'm smart enough to catch a phising attempt

The authenticator is dumb

only handicaps who kept falling for obvious scams had that mentality. steam catered for a minority of idiots, annoying the rest of people who knew that entering in your details on a obvious phishing site would result in the loss of your precious items.

this is why I told people to read that article

First, enough money now moves around the system that stealing virtual Steam goods has become a real business for skilled hackers. Second, practically every active Steam account is now involved in the economy, via items or trading cards, with enough value to be worth a hacker's time. Essentially all Steam accounts are now targets.

The "I got hacked" story is told so frequently it's become commonplace. And that makes it easy to forget its significance; compromised security of email accounts and PCs, Steam account violation, and theft. We used to hold the opinion that if you were smart about account security, you'd be protected--it's easy to assume that users whose accounts were stolen were new or technically naïve users who must be sharing their passwords or clicking on suspicious links. That's simply not the case.

What used to be a handful of hackers is now a highly effective, organized network, in the business of stealing and selling items. It would be easier for them to go after the users who don't understand how to stay secure online, but the prevalence of items make it worthwhile to target everyone. We see around 77,000 accounts hijacked and pillaged each month. These are not new or naïve users; these are professional CS:GO players, reddit contributors, item traders, etc. Users can be targeted randomly as part of a larger group or even individually. Hackers can wait months for a payoff, all the while relentlessly attempting to gain access. It's a losing battle to protect your items against someone who steals them for a living.

(http://store.steampowered.com/news/19618/)

the ideas that obvious phishing sites are the only ways people can get hijacked and only "idiots" who fall for that type of thing can get their accounts stolen are just plain wrong, but people want to believe that there's no possible way it could happen to them because they're too smart; I consider myself a rather tech- and internet-savvy person who avoids anything even remotely suspicious, yet I get people from all over the world (or cycling VPNs) attempting to log in to my account at least once a month regardless of how many security measures I take, almost certainly because I have a high-value account and somebody or somebodies really want to steal it

just in case you skipped reading the article (again), the summary is that valve really just doesn't have a choice in the matter, it's either go all-out like this or allow people with malicious intent to continue wreaking havoc on their userbase, because (at the risk of sounding like a fear-monger) anyone could be the next person randomly targeted for hijacking, not just the guy who enters his password on free steam games dot com

[The Murderous Cop]

https://github.com/Jessecar96/SteamDesktopAuthenticator

if you don't have a phone just use this

[Lord Tony®]

easy

it's called getting a job

So why bother having trading, market and gifting options on steam then?