|
|
|
|
|
I'm totally psyched this has happened, that's right I said it. Anyone who thinks Valve is a stand-up company has had their head in the sand for years.
|
So the forums get hacked, a few FORUM accounts get compromised, and now everyone throws a hissy fit that somehow, even though Gabe has explicitly stated otherwise, that all of our Account Information for our actual accounts (which are separate than our forum ones) and our Credit Card Information (which is encrypted heavy -- unlike what Sony does) is now stolen.
What the shit.
Did I miss a follow up announcement that CC Info was taken, or am I correct in saying you guys are crying over spilled milk?
|
On November 11 2011 21:19 Candadar wrote: So the forums get hacked, a few FORUM accounts get compromised, and now everyone throws a hissy fit that somehow, even though Gabe has explicitly stated otherwise, that all of our Account Information for our actual accounts (which are separate than our forum ones) and our Credit Card Information (which is encrypted heavy -- unlike what Sony does) is now stolen.
What the shit.
Did I miss a follow up announcement that CC Info was taken, or am I correct in saying you guys are crying over spilled milk?
read the kotaku article.
valve:
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
sony:
Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. ... While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. ... Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.
they sound pretty much the same. "your CC info could have been taken, it may have not, we don't know yet."
|
On November 11 2011 19:03 KaosCow wrote: I'm totally psyched this has happened, that's right I said it. Anyone who thinks Valve is a stand-up company has had their head in the sand for years.
Yeah. The bastards over at Valve had it coming! How dare they sell us cheap games in a smart and convenient way? And to rub salt into the wound, they keep making these awesome games that are considered some of the best games ever created!
*sarcasm mode off*
No really, I'm quite interested to hear what you have to say about the only gaming company that always goes out of its way to please the fans.
|
Is nothing sacred anymore? ._.
|
On November 11 2011 21:27 zeehar wrote: read the kotaku article.
valve:
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
sony:
Although we are still investigating the details of this incident, we believe that an unauthorized person has obtained the following information that you provided: name, address (city, state, zip), country, email address, birthdate, PlayStation Network/Qriocity password and login, and handle/PSN online ID. ... While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. For your security, we encourage you to be especially aware of email, telephone, and postal mail scams that ask for personal or sensitive information. ... Additionally, if you use your PlayStation Network or Qriocity user name or password for other unrelated services or accounts, we strongly recommend that you change them, as well.
they sound pretty much the same. "your CC info could have been taken, it may have not, we don't know yet."
Are you serious? That sounds completely different. "Your credit card is probably fine, but watch out anyway" against "Your credit card is probably screwed" sounds the same to you?
I actually thought the same thing as the guy you quoted, either we're reading completely different statements, or everything is probably fine.
All it says is that the hacker gained access to the database, that doesn't mean he went straight for the credit card info. And even if he did, that doesn't mean he can do anything with them because they are encrypted.
That's already 2 mention worthy ifs, yet are completely ignored by the entire article.
|
Good thin I don't save my payment information and always go through paypal, where possible. It's good to know that they encrypt and salt the passwords.
|
On November 11 2011 21:40 Linkirvana wrote: Are you serious? That sounds completely different. "Your credit card is probably fine, but watch out anyway" against "Your credit card is probably screwed" sounds the same to you?
valve: "This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don't have evidence of credit card misuse at this time."
>> how is this "your credit card is probably fine"?
sony: "While there is no evidence at this time that credit card data was taken, we cannot rule out the possibility. "
>> and how is this "your credit card is probably screwed"?
i'm sorry, i don't see how these two statements differ in the way that you described.
|
heh, this happened just after I've purchased my first video game through steam (FM2012)
|
"We do not have evidence that encrypted credit card numbers or personally identifying information were taken"
That is an absolutely stupid way to put it. That's like saying "We know the spies were in the room where the secret documents were lying on a table for everyone to read, but there is no evidence that the spies had their heads turned toward the table or that they had their eyes open"
I'm not interested in evidence that the hackers got sensitive information, I'm interested in evidence saying they did NOT get the information. Who puts a statement like that out in public?
|
Hmm, If you have been using Paypal to pay for your games you don't realy have much to worry about right? I mean Steam doesn't store your Paypal password.
|
hmm, just got an email from IGN saying that an account had been created for me "eldawg3". I definitely didn't create it. Any other steam users get any suspicious emails? Or is this some new legit thing? Says the account was created about 30 minutes ago.
|
Good thing I don't have enough money to buy any games haha. Oh well, I hope they are gonna update their security. I agree that I could have something to do with Dota 2 beta keys, as they are being sent out everyday.
|
On November 12 2011 01:19 straycat wrote: "We do not have evidence that encrypted credit card numbers or personally identifying information were taken"
That is an absolutely stupid way to put it. That's like saying "We know the spies were in the room where the secret documents were lying on a table for everyone to read, but there is no evidence that the spies had their heads turned toward the table or that they had their eyes open"
I'm not interested in evidence that the hackers got sensitive information, I'm interested in evidence saying they did NOT get the information. Who puts a statement like that out in public? It doesn't matter if they got the CC numbers or not, because the numbers are 256 bit AES encrypted. Even if they got the numbers, they can't do anything with them, thanks to the encryption.
256 bit AES encryption would take billions of years, even for a supercomputer to crack.
To use your analogy, "We know the spies were in the room where the secret documents were lying on a table for everyone to read, but the documents were written in a long-lost ancient language which no one has ever deciphered, so it doesn't matter if they saw them."
|
Well this is unfortunate to say the least, but it's never a good idea anyway to allow an online company to save your credit card information for further use. Still a huge Valve fan though, and I have a ridiculous amount of games in my Steam library, so this isn't going to prevent me from using it or anything.
Hopefully they get everything sorted out.
|
Glad this happened, I've got to may friends who go around acting like steam's shit smells like roses. Maybe this will be the straw that breaks the camels back and forces people to abandon this horrible "gaming platform".
|
On November 12 2011 08:32 gosuMalicE wrote: Glad this happened, I've got to may friends who go around acting like steam's shit smells like roses. Maybe this will be the straw that breaks the camels back and forces people to abandon this horrible "gaming platform".
I'm assuming this is a troll.
|
What's the reason for a lot of people disliking steam?
|
|
|
|
|
|