Nebula security risk

[Prof.Jackie]

So apparently there was a security risk with Nebula that could lead to externals connections accessing player data.
But since Starbreeze communication is... you know what... you'll only find out about this if you dig through the depths of reddit or stumble upon it by accident.
So I thought I might help SBZ with their communication and share it here bnecause it could be interesting for someone.

I'd like to clarify what has actually been discussed here, as this version of the story does not match our conversation at all.

There was a security risk flagged by an internal security audit that led to us needing to block all external connections to our Nebula authentication, as anyone accessing it would be able to also access player information. We don't want to freely share player information like this, and we also can't legally do this, so this is something we were forced to restrict. And it applies to all external connections, not just pd3.gg. I'm sad to see that a useful tool has been affected by this, but we're looking into ways to safely be able to offer these connections again without risk to our players

soure

[Dark Fox]

Ruh Roh

[Nino_Chaosdrache]

"WhY dO yOu CoMpLaIn AbOuT mAkInG aN aCcOuNt?"

[Sunday Driver]

Good grief this whole trash fire seems to get worse and worse. What's next? Somehow they crash the global stock market? Start WW3?

I've rarely seen so much incompetence and fumbles across such a wide spectrum.

[BitsOfSkin]

There is no Facepalm emoticon large enough in the known universe to fully convey my feelings of Vicarious embarrassment at this ever growing string of issues...

[Sunday Driver]

Originally posted by BitsOfSkin:

There is no Facepalm emoticon large enough in the known universe to fully convey my feelings of Vicarious embarrassment at this ever growing string of issues...

It's reaching the level I am wondering if some kind of monkey paw curse is on them. Did they build an office on a burial ground? Rob gold from an ancient haunted tomb? I did hear some criticism over this new system and concerns about security of it (wise considering the track record) but to see almost every bad possibility and concern turn out to be true and in such a short time is something I can't even remember seeing before. It's one thing after another.

[PlebNC (UK)]

All I heard you say is they audit their security with an independent contractor, they found a security risk, have plugged the leak immediately while they fix it and communicated that to the community.
What part of this is controversial? I get the fault existing at all is a problem but at least they're actively auditing themselves to find ways to improve and are minimising harm while also fixing it instead of doing a Rockstar games by ignoring it (for context GTA Online hackers can use your connection to GTA Online to dox you and Rockstar isn't doing anything to fix it despite being aware of it).

[Undefined]

The wonders of needlessly mining your customer's data

[36]

Originally posted by Sunday Driver:

Originally posted by BitsOfSkin:

There is no Facepalm emoticon large enough in the known universe to fully convey my feelings of Vicarious embarrassment at this ever growing string of issues...

It's reaching the level I am wondering if some kind of monkey paw curse is on them. Did they build an office on a burial ground? Rob gold from an ancient haunted tomb? I did hear some criticism over this new system and concerns about security of it (wise considering the track record) but to see almost every bad possibility and concern turn out to be true and in such a short time is something I can't even remember seeing before. It's one thing after another.

when gods fastforward to catch up but forget to stop it for starbreeze