Eldin 2019 年 7 月 7 日 上午 7:36
What are these bots for?
Someone sent me a friend request.
As soon as I accepted, they sent me an invite to play Call of Duty: Black Ops II - Zombies
I said that I don't have that game
Immediately after sending that message they invite me again.
Whatever message I send, i get invite to play that game as response.

Is that a bot or something?
And if it is a bot, what is its purpose?
最後修改者:Eldin; 2019 年 7 月 7 日 上午 7:37
< >
目前顯示第 1-14 則留言,共 14
Wolf Knight 2019 年 7 月 7 日 上午 7:45 
if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.
PocketYoda 2019 年 7 月 7 日 上午 7:45 
Remove them.
Eldin 2019 年 7 月 7 日 上午 7:58 
引用自 Wolf Knight
if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.
I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.
999999999 2019 年 7 月 7 日 上午 8:04 
引用自 Eldin
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.

No. There is no way to get hijacked that way.
最後修改者:999999999; 2019 年 7 月 7 日 上午 8:05
Wolf Knight 2019 年 7 月 7 日 上午 8:08 
引用自 Eldin
引用自 Wolf Knight
if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.
I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.
they havent sent anything "yet". the end result is what matters, and getting that result has many different paths they can take. Download mod X, visit site Y, log into server Z, etc. somewhere along the line they get your guard down so you do something stupid before you realize it.
Tesityr 2019 年 7 月 7 日 上午 8:14 
引用自 Eldin
引用自 Wolf Knight
if they are spamming you with invites, report the account thru its profile, block it, move on
possibly being used to try and get you to use a fake server to steal your account.
I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.
If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

They can also just try to hack your computer remotely and install some Keyloggers, which would give them your Steam Login information (eventually.. they would have to wait and watch until you logged into Steam at some point), there are a bunch of things they could do with your system - but all of these things are very low chance of it happening, don't worry - not only is it difficult, Windows alone and your Modem and Internet Provider and also Steam, all have some good protections against these types of things occurring these days. I suggest getting the Steam Guard set up if you are really worried, but it is rare to have someone hack/acquire your account just from some game information.

引用自 Wolf Knight
引用自 Eldin
I unfriended them.
But if it's possible to get account stolen just by joining to a game, then it's a serious issue.
They invited me directly through Steam. They haven't sent any external links or anything.
they havent sent anything "yet". the end result is what matters, and getting that result has many different paths they can take. Download mod X, visit site Y, log into server Z, etc. somewhere along the line they get your guard down so you do something stupid before you realize it.
Also this ^ it's good that you didn't Chat with them much and/or follow any Links. It's a slippery slope to opening yourself up, just as he states...

HTH
最後修改者:Tesityr; 2019 年 7 月 7 日 上午 8:15
999999999 2019 年 7 月 7 日 上午 8:15 
引用自 Tesityr
If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

What?
Tesityr 2019 年 7 月 7 日 上午 8:17 
引用自 999999999
引用自 Tesityr
If I may, you can't really get 'your account hijacked' just from the act of starting a game - but in some games, your information is viewable to them (IP address, which gives your location/country/etc and some other things) and they can use some of this information to try Phish your Account from there (they can 'fake' they are you to the Steam Servers, in attempts to try to Login, for example).

What?
Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today, I'll try explain more later if you're Subscribed
also I have you ignored for some reason LOL
最後修改者:Tesityr; 2019 年 7 月 7 日 上午 8:19
999999999 2019 年 7 月 7 日 上午 8:21 
引用自 Tesityr
引用自 999999999

What?
Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today
also I have you ignored for some reason LOL

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.
Tesityr 2019 年 7 月 7 日 上午 8:29 
引用自 999999999
引用自 Tesityr
Not sure what part you don't understand... Can you be more clear?

Many multiplayer games reveal your IP to the other players (they might have to sniff the packets to get them, but many just have it on display) - they can use the IP information to spoof talking to the Steam Servers and knock away at an Account (if they wanted). It wouldn't be fast or easy, but it is possible.

Does that help?

Edit:
I gtg soon so I'm sorry if I don't reply today
also I have you ignored for some reason LOL

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.
Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
(I tell people at work and that ask, to use LONG passphrases, NOT complex ones, as the length is what really stumps hackers (for BF anyway))
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

Edit:
Why do I have you Blocked? lol
Are you mean to people?
最後修改者:Tesityr; 2019 年 7 月 7 日 上午 8:35
999999999 2019 年 7 月 7 日 上午 8:33 
引用自 Tesityr
引用自 999999999

Without any actual account credentials to gain access to the account, no. Brute forcing into an account would be nearly impossible, also subjected to the many cooldowns for failed attempts and you have to remember about Guard.
Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.
Tesityr 2019 年 7 月 7 日 上午 8:36 
引用自 999999999
引用自 Tesityr
Exactly. I'm a bit tired, but I was thinking Keyloggers would get the Login (easier to hack a home system than to hack into Steamu - remember the IP was acquired via the game), or if they knew what they were doing, they could sniff the Credentials as well.
Brute forcing is actually successful still these days, once you automate it, even with Cooldowns - remember all of these things don't stop hackers, only slow them down.
Yes I suggested Steam Guard because authenticators work pretty well too - although a logger/sniffer on their network (IP gained from the game) bypasses some of that, all you need is a remote of the display then you see the timed keycode as well - this is all on the user system/LAN, not Steam Servers of course.

I still say "don't worry about it too much" and "Steam Guard if worried" though, don't get me wrong - the amount of effort needed to do all this (esp. with SG) would probably be directed more at businesses/brokers than a home user for some Steam games/Accounts.

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.
I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Edit:
Remember, it is always a non-zero probability of getting hacked or messed with, just from having that plug/wifi connected to your system. Don't lose sleep over it, but it is there, always. Backup data you treasure, regularly.
最後修改者:Tesityr; 2019 年 7 月 7 日 上午 8:40
999999999 2019 年 7 月 7 日 上午 8:40 
引用自 Tesityr
引用自 999999999

So, the answer to what I originally quoted is no. Got it.

No downloading, clicking on anything = nothing going to happen.
I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Not really, no.

This PC plays on Steam and Steam alone.

I take it you think everyone is just a fool and you are the high and mighty that knows everything, correct?

引用自 Tesityr
Edit:
Remember, it is always a non-zero probability of getting hacked or messed with, just from having that plug/wifi connected to your system. Don't lose sleep over it, but it is there, always. Backup data you treasure, regularly.

Non issue.
最後修改者:999999999; 2019 年 7 月 7 日 上午 8:41
Tesityr 2019 年 7 月 7 日 上午 8:42 
引用自 999999999
引用自 Tesityr
I would be careful with that attitude... You can be hacked right now, just being connected to da interwebz, without you clicking on anything or downloading anything. You could even have a dormant Troj waiting on something on your system right now and you would never even know it. I take it you don't work in IT?

Not really, no.

This PC plays on Steam and Steam alone.

I take it you think everyone is just a fool and you are the high and mighty that knows everything, correct?
Ah, I see why you are Ignored now.... I was trying to help with some cautious thinking and that is "high and mighty" to you, eh? Got it.

I won't be clicking on "Show" to see what you say anymore, just so you know.
最後修改者:Tesityr; 2019 年 7 月 7 日 上午 8:42
< >
目前顯示第 1-14 則留言,共 14
每頁顯示: 1530 50

張貼日期: 2019 年 7 月 7 日 上午 7:36
回覆: 14