[FIXED!!] Possibly huge exploit on steam being used to steal account credentials

[Gytyyhgfffff]

Stoo trying to make me use the mobile auth valve  >:(

at first you hate it but then you realize that its pretty forgetin good because nobody is going to steal your phone for your steam account and your phone is basically surgically attached to you already

[Ad Bot]

[man1912]

The day right after I just got my first TF2 unusual too :(

[MoltenKitten]

at first you hate it but then you realize that its pretty forgetin good because nobody is going to steal your phone for your steam account and your phone is basically surgically attached to you already

Oh no, they're trying to get you to protect potentially hundreds of dollars of your own games

How could they???

I should really stop trying to make jokes, i'm not very good

[Insert Name Here²]

I like how it's an obvious joke yet you guys still pick on him for the sole reason of having an excuse to be an ass

Nice job

[King of the Bill]

To be fair it can be hard to tell when molten is joking vs serious. Anyway word is that the exploit has been partially patched but they haven't fixed all the affected profiles yet, iirc, so still stay on your toes.

[MoltenKitten]

I like how it's an obvious joke yet you guys still pick on him for the sole reason of having an excuse to be an ass

Nice job

I don't think they were trying to be asses, it wasn't a good joke. Beside if their goal was to be an ass they did an even worse job than I did at making the joke.

[Satan From Wreck-It-Ralph]

to offline mode I go

I like how it's an obvious joke yet you guys still pick on him for the sole reason of having an excuse to be an ass

Nice job

I could compile every instance of you running to some poor bullied child's aid and it'd be too big to post.

[Rockinboy2000]

can you guys just take it to a drama? I'd much rather make sure my steam account is intact rather than see people get angry at eachother and stuff up an already pretty important thread

[Charles Barkley]

can you guys just take it to a drama? I'd much rather make sure my steam account is intact rather than see people get angry at eachother and stuff up an already pretty important thread

He has a point, this isn't really a good place to have a drama right now

[Gytyyhgfffff]

i would recommend just staying off of the steam community entirely including user profiles, community forums, guides, workshops, etc. until all this blows over and valve says they fixed everything. when you shift tab in a game and see guides and forums and workshop items n stuff on the right or left or wherever the forgeters at valve put that stuff, that should be fine. just don't open any of those in a browser, even the build-in steam browser.

and get the steam mobile authenticator forgeters

[EcstaticEggplant]

was is it a loving xss attack cause the description mentions javascript
holy mother loving god valve

kinda.

[Gytyyhgfffff]

kinda.

[LaughingBudda]

Not sure if this is the same issue, however when I exited out of my game last night ( had the steam browser open while playing ) , i got a prompt asking me if I would like to disable JavaScript - right on my desktop. Pressed Disable , some audio file started playing from an unknown source (supposedly from Steam as that was the only window open at the time). I panicked and shut down my system... possibly relevant?

[Frequency]

zoinks

good thing i have that mobile authentication thing already

i actually just set it up a month ago or so

we tight boyzzz

[MoltenKitten]

apparently activity feed is still exploitable