.

[integer]

.

[The Impractical Engineer]

Yet when I told the community about the bot hosting YouTubers, everyone called me a conspiracy theorist. Now, here we are, YouTubers stealing items…

[nirvana]

okay? while i do think this campaign is nothingburger, do you have any proof of this to back up what you said here?

[Emily (She/Her)]

thanks for the warning

[Jesus]

Who would have guessed that FixTF2ers would do bad things.

[least drunk donkey kong]

Even the one in the description of weezys video

[Shhh!...]

Originally posted by integer:

So if you use 1 password for everything, like most people, then you are in big trouble.

Thanks for teaching Internet security 101, professor bunchanumbers

[man]

make ya profile public

[Teek]

Lol this is fake. Just trying to scare non-developers / not-technical people with words like API keys 🤣 When you login with Steam, the token that's shared with them allows only to get the read-only info we make public (profile, inventory, etc.)

They can't clear inventory. Even if the inventory's visibility is public, someone can only initiate a trade request. That is all.

Plus entering email address (just that, not even password) doesn't even share any API Key or token. How stupid 🤦🏻

[DuneToa]

Unless this guy has any documented accounts of the FixTF2 website stealing people’s info, he’s blatantly lying. I’ve checked the tf2 subreddit and other sources, and there are no reports of any of this happening. Instead, there’s lots of accounts of people accidentally crashing the site by all trying to sign petitions at the same time (as the site wasn’t expecting much traffic). The email is used to send a link to the petition so that people can fill it out (similar to Signup Genius and Google Forms). Due to the influx of signees, many people are still waiting to receive the link to the petition. Still, no one has reported their items being stolen.

[Plan Z]

Wow how incredibly stupid you sound.

Let's break it down to my knowledge and rip this ♥♥♥♥♥♥♥♥ claim apart.

"They can gain access to your account and steal your items"

1. Though it may be true that if you used the same email for your steam account and you don't have some form of 2 factor authentication someone could gain access to your account.
2. If you had any items worth stealing you would at least have an email as your 2 factor authentication to require you to sign into the account. Though most people usually have the mobile authentication.

Though honestly if you're are this stupid, you deserve to have your items stolen.

"They can use the email to steal your API key.

1. No they can't. You would have to willing give your API key and again if they somehow got into your steam account to get your API key, you are really stupid and deserve to have your account stolen.

Problem is solved with 2 factor authentication and basic common sense.

Lastly.

You have yet to provide any evidence for this baseless claim.

Originally posted by Jerry Donaldson:

Who would have guessed that FixTF2ers would do bad things.

Level 1 account

Originally posted by integer:

Originally posted by faint:

okay? while i do think this campaign is nothingburger, do you have any proof of this to back up what you said here?

https://steamcommunity.com/dev/apikey revoke all API keys here.

proofs for breached emails - search internet with "breached emails" "leaked database" "data breach" and smiliar

the most suspicious in this campaign, is that they setup their website instead of going to something more trustfull as changeorg, even that website had leaks before, so it is advised to not use your primary email for those things, better setup throwaway hotmail if you want to participate and be safe

edit: links fix

Level 1 account

Internet breaches happen all the time and again, you have provided zero evidence or proof aside from. "Search the internet"!

Don't you think a lot of people would be complaining about this if it was an issue yet there has been zero claims of this aside from you and other trolls.

[Kevin Crabcakes]

Thank you, mr. Integer. I’m glad you exposed this information to myself, Kevin Crabcakes, before I clicked on one of these harmful phishing links

[tasmanian_cave_spider]

another reason why fixtf2 is ♥♥♥♥

[CV70]

what can you expect from the tf2 community. It's not like they know what social engineering is

[rocketgreentea]

I’m going to play devils advocate and say that this isn’t likely going to happen. BUT the possibility still exists as putting your email on ANY random site can be a dangerous thing. We don’t know how secure this fixTF2 site is, you never know what could happen.

[Marteun]

Thanks for the warning.
how well is this a old scam