Any danger in linking my Steam account to a website?

[DmAnd]

Should i even be concerned?

[potato]

should be but it also depends on the site, steamdb, ggdeals, etc, are safe

[DmAnd]

It is called racecraft online. It is a sort of online championship system for automobalista 2 steam game.

[C²C^Guyver |NZB|]

Originally posted by DmAnd:

It is called racecraft online. It is a sort of online championship system for automobalista 2 steam game.

Explain linking? As in logging with your Steam log-in info?

[Boblin the Goblin]

Originally posted by C²C^Guyver |NZB|:

Originally posted by DmAnd:

It is called racecraft online. It is a sort of online championship system for automobalista 2 steam game.

Explain linking? As in logging with your Steam log-in info?

I think it's just literally allowing the site to read your profile through the API that Steam offers.

[DmAnd]

Originally posted by SlowMango:

Originally posted by C²C^Guyver |NZB|:

Explain linking? As in logging with your Steam log-in info?

I think it's just literally allowing the site to read your profile through the API that Steam offers.

Yes that is it i think. So that is all it wants is profile information? I'm fine with that. The site needs to know i am playing the game and i am pretty sure it reads telemetry from the game

[Orion Invictus]

Are you sure it's an official site? Some people set up fake websites like that (I've only ever seen them related to CS:GO) to steal your account.

[BJWyler]

Originally posted by DmAnd:

Should i even be concerned?

There is always a danger to linking your Steam account to a website that is not run by Valve or a major, vetted source.

Ad Orion said, there are a ton of scam sites put there for CS:GO that have gotten very good at convincing gullible people that they are legit sites.

Personally speaking, I would not my account to any game site that the devs themselves do not control or approve of.

[DmAnd]

Originally posted by Orion Invictus:

Are you sure it's an official site? Some people set up fake websites like that (I've only ever seen them related to CS:GO) to steal your account.

Yes quite sure, i am not all that technical savy with this internet stuff, but it is HTTPS with added security, but i don't know if that matters. It seems legit, streamers for AMS2 are using it.

That is pretty much what i was worried about, getting my account stolen so that is why i wanted to ask the community here if their is something i need to look out for.

[ShelLuser]

Originally posted by DmAnd:

Should i even be concerned?

Yes. Because if this involves an API key then they can do a lot more than just checking your profile information. Quite frankly, I wouldn't trust this one bit because of the API implications.

You don't need an active personal API key for a website to check your account data.

If you hop onto SteamDB.info then you can log on using your Steam account; they will inform you that they're using the Steam API (global API) to check your account details, but they do not require a personal API key to be active.

• Make sure you're logged into Steam.
  
• Open a new browser tab & go to the SteamDB website: https://steamdb.info
  
• Log into SteamDB using your Steam account.
  
• Now check this URL: https://steamcommunity.com/dev/apikey

Notice that SteamDB doesn't use an API key? Yet they are still perfectly capable to check out your Steam account in full detail.

Providing a 3rd party with personal API access through an API key can be extremely dangerous. It's for a good reason why the first thing any scam website does is to install an API key, go figure!

So yah, I'd be really worried.

[PokPok]

i've had all my items scammed from challengermode.com registration.. hopefully i get them back, but ya dont link your steam to anything.. just a headsup so you dont end up like me

[DmAnd]

Originally posted by Pokela:

i've had all my items scammed from challengermode.com registration.. hopefully i get them back, but ya dont link your steam to anything.. just a headsup so you dont end up like me

Sorry for your loss. That really sucks.

[DmAnd]

Originally posted by ShelLuser:

Originally posted by DmAnd:

Should i even be concerned?

Yes. Because if this involves an API key then they can do a lot more than just checking your profile information. Quite frankly, I wouldn't trust this one bit because of the API implications.

You don't need an active personal API key for a website to check your account data.

If you hop onto SteamDB.info then you can log on using your Steam account; they will inform you that they're using the Steam API (global API) to check your account details, but they do not require a personal API key to be active.

• Make sure you're logged into Steam.
  
• Open a new browser tab & go to the SteamDB website: https://steamdb.info
  
• Log into SteamDB using your Steam account.
  
• Now check this URL: https://steamcommunity.com/dev/apikey

Notice that SteamDB doesn't use an API key? Yet they are still perfectly capable to check out your Steam account in full detail.

Providing a 3rd party with personal API access through an API key can be extremely dangerous. It's for a good reason why the first thing any scam website does is to install an API key, go figure!

So yah, I'd be really worried.