Steam COMPLACENT with crimes on the platform!

[Ariev]

Dear community members, I appreciate the discussions we had on my two forums yesterday before they were banned because I "defamed" a user...
I return here today, very cautiously not to identify the people involved, not only to discuss what happened on my account but also to address this very serious problem to which we are all subject and victims. My main intention is to talk about possible improvements to the Steam security system.

Please follow my reasoning.

We all agree that Valve is one of the biggest gaming companies in the WORLD, with a market value estimated at 16 billion dollars (greater than the GDP of many countries on the planet). And what do we users expect from such a platform? All the support and assistance possible, preferably humanized and accessible in different languages, after all, this value could support a country, let alone a user support service.
Given this, it is expected that the platform anticipates and meets security measures, focused on its users in an absolutely careful and meticulous way.

With this scenario in mind, where we imagine that any user, for any reason, makes a wrong trade to an unwanted person, due to an error or inattention, this could already be the subject of analysis, and the error could be corrected by the company.

However, when the situation becomes even more complex, when the user claims and demonstrates that they made the trade with the correct person and yet it went to another person, in this case, what is expected is a thorough investigation of the case. After all, it would be a security issue with the platform itself.
Let's say the company sees this happening every day with any type of user from different countries, wouldn't it be time to think about some way to prevent this from happening? To prevent the user, even giving their data to any site, from being protected?
That's what I imagine from a company of this size.
The "intelligence" service must have already studied and diagnosed various ways of theft and scams that happen, but what does it do about it? It sends a standardized message without even reading what was reported. Treats all cases with equal disinterest and negligence, almost saying "it's your fault, and I have nothing to do with it." But the company does, if it identifies that this has been happening for YEARS, wouldn't it be the case to help and protect so that other people wouldn't fall victim to the same scam?

These questions lead me to the following conclusion:
Couldn't Steam have developed a new way to protect its precious customers? Such as:

Blocking sending to non-friends
Setting a 10-minute control period between transactions
Requiring Steamguard confirmation in all trades, even if made to the same ID
Programming and preventing consecutive trade proposals with different IPs
Blocking connection to third-party sites for linking to Steam
Setting a high transaction period for high-value items

I'm not a scientist in the field, and maybe you can say better than I, but these measures don't seem very difficult to implement.

Now, if anyone is still reading, I'll report the absurdity that happened to me.

First, Steam support treats me with contempt, as it gives me two standard responses and closes my topic without me being able to express myself.

Second, what I'm trying to bring to them as relevant information is that transactions are taking place without SteamGuard confirmation. Yes, I know that you, a robot or company employee, or defender of the company in any case, will say that I sent it to a "fake" profile thinking it was the right person, I already understood. But you simply can't understand that this didn't happen because the right person RECEIVED my gift proposal since I confirmed the CORRECT trade through SteamGuard, subsequently another user (who should have access to my account through the API or something similar) canceled my trade and made the transaction to another account as a gift WITHOUT SteamGuard confirmation. I know, it's easier for you to say that I'm lying, that it's another classic case of a scam, that I'm stupid, and it's my fault.
In this case, I ask Steam to send me proof of my confirmation in Steamguard for the second trade and end this suffering. Otherwise, I am considering some way to contact some control agency to obtain this information.

If you have read this far, thank you if you can strengthen the topic and the discussion, let's improve our security, let's demand a minimum of support from the platform, let's ask for better service, and avoid new people losing their valuable items, sentimental, monetary, etc.

If the company continues to deny the possibility of any possible own fault or possibility of improvement, there is evidence of complacency with crimes that have been happening within the platform. And worse, if we users accept this willingly, there will never be an improvement. I count on you.

Sincerely,
Raul

[Crazy Tiger]

Nguyên văn bởi Abigail From Sneaky Shrimp Dept.:

Nguyên văn bởi Raul:

The Kage Goomba is 100% an AI, first of all, the way of writing is very strange. Second, he decided to write a little story (typical of AI) and third, he can't interpret more complex languages.

Something I've noticed, when people are running out of arguments and don't like that the other person is not agreeing with them is to just call them a bot/ai.

Phew, could have lost my argument there.

Standard practise. Either it's bot/ai or Steam employee.

People are incapable of playing the ball, so they play the man. And then complain they get send of.

[Kage Goomba]

Nguyên văn bởi ragefifty50:

Nguyên văn bởi Start_Running:

So basically if I travel to another country for a bit whioops I've got a hold....and then when I go back,.. whoops another hold.. Yeah that's a perfect example of something basically adding inconvenience to the people who aren't daft enough to give out their account details.

Abnd it wouldn't actually stop anything since you know. VPN's exist.

At some point. You gotta let those who will learn take their lumps. Because apparently nothing else is capable of teaching them.

I still say the moment you report your account being hijacked, or scammed that your inventory goes into permanent lockdown. You don't get what you lost back and no further items can be added to or removed from your account. Not, point shop swag, not trading cards, not dcoupons, nothing.

its really not that much of a inconvenience compared to what you already have to do...
and what you have to do if you are hijacked...

same as reading up on scams and stuff...

and i thought steam know about vpn usage already....

still... you should be able to lock your transaction points as a additional security option..

there is no reason why we cant have more options..

we are all being sold onto win 10/11 for more security

more options... we have the technology... we can help the not so skilled people..

You missed the point.
The point here is its irrelevant what security method you use - OS - VPN - whatever - waste of time.

If you give your account information out - your doomed from the beginning.
The rest is just floof.

If anything using VPN's in this context tells Steam you have something to hide...but that's a different subject and best discussed elsewhere.

[H4CK3R MAN]

Nguyên văn bởi Crazy Tiger:

Nguyên văn bởi Abigail From Sneaky Shrimp Dept.:

Something I've noticed, when people are running out of arguments and don't like that the other person is not agreeing with them is to just call them a bot/ai.

Phew, could have lost my argument there.

Standard practise. Either it's bot/ai or Steam employee.

People are incapable of playing the ball, so they play the man. And then complain they get send of.

Of all the things i have been called in my time on Steam. ai/bot and Steam employee isn't a first timer....

[Kage Goomba]

Nguyên văn bởi H4CK3R MAN:

Nguyên văn bởi Crazy Tiger:

Standard practise. Either it's bot/ai or Steam employee.

People are incapable of playing the ball, so they play the man. And then complain they get send of.

Of all the things i have been called in my time on Steam. ai/bot and Steam employee isn't a first timer....

Better start charging for your replies ;)

[( ( < < <🤖> > > ) )]

Nguyên văn bởi Kage Goomba:

Nguyên văn bởi ragefifty50:

its really not that much of a inconvenience compared to what you already have to do...
and what you have to do if you are hijacked...

same as reading up on scams and stuff...

and i thought steam know about vpn usage already....

still... you should be able to lock your transaction points as a additional security option..

there is no reason why we cant have more options..

we are all being sold onto win 10/11 for more security

more options... we have the technology... we can help the not so skilled people..

You missed the point.
The point here is its irrelevant what security method you use - OS - VPN - whatever - waste of time.

If you give your account information out - your doomed from the beginning.
The rest is just floof.

If anything using VPN's in this context tells Steam you have something to hide...but that's a different subject and best discussed elsewhere.

your missing the point.... i am talking about security barriers
after details have been unwittingly given away... customers dont do this
deliberately.... they are tricked or mislead...

no reason why we cant help the customer protect them from themselves as well.. as well..

[Kage Goomba]

Nguyên văn bởi ragefifty50:

Nguyên văn bởi Kage Goomba:

You missed the point.
The point here is its irrelevant what security method you use - OS - VPN - whatever - waste of time.

If you give your account information out - your doomed from the beginning.
The rest is just floof.

If anything using VPN's in this context tells Steam you have something to hide...but that's a different subject and best discussed elsewhere.

your missing the point.... i am talking about security barriers
after details have been unwittingly given away... customers dont do this
deliberately.... they are tricked or mislead...

no reason why we can help the customer protect them from themselves as well.. as well..

He defeated his own 2FA (Steam Guard) - by giving out his account information.
No amount of software or hardware will change this.

What he needs is to be educated.

As for deliberation on the part of the OP?

Can you really say that?
He knowingly went to a 3rd party site (obvious based on his posts)
He knowingly gave out his account information

In a time and age where people scream/rant/rave about ransomware/security risks/likely been told countless times to never give out account informaiton....

Can you really say he didn't deliberately do this to himself?

Sorry - you can put lipstick on a pig - still a pig.

Steam obviously thought so.

Advising him to add VPN or whatever - won't change a thing.

[Thermal Lance]

Adding a million locks won't achieve anything but annoy everyone else. if the user is blinded by greed and starts handing out the keys to the castle.

[( ( < < <🤖> > > ) )]

Nguyên văn bởi Kage Goomba:

Nguyên văn bởi ragefifty50:

your missing the point.... i am talking about security barriers
after details have been unwittingly given away... customers dont do this
deliberately.... they are tricked or mislead...

no reason why we can help the customer protect them from themselves as well.. as well..

He defeated his own 2FA (Steam Guard) - by giving out his account information.
No amount of software or hardware will change this.

What he needs is to be educated.

As for deliberation on the part of the OP?

Can you really say that?
He knowingly went to a 3rd party site (obvious based on his posts)
He knowingly gave out his account information

In a time and age where people scream/rant/rave about ransomware/security risks/likely been told countless times to never give out account informaiton....

Can you really say he didn't deliberately do this to himself?

Sorry - you can put lipstick on a pig - still a pig.

Steam obviously thought so.

Advising him to add VPN or whatever - won't change a thing.

your missing the point again.... the customer didnt give all their info thinking they
would get their account hijacked.... they were misled into doing that...


but still... if steam/valve had the option only accept sales from this IP/
address only option then that would be one less open door/window
on a hijacked account... can it be done.. yes... we have the technology...

dont you think this one extra addition would be worthwhile solution.. seriously..


your confused about vpn as well..
the only thing i said about vpn is that dont steam
already know who is using vpn... relating to if a scammer
was using one not a customer..

[Abigail From Sneaky Squid Dept.]

Nguyên văn bởi ragefifty50:

your missing the point again.... the customer didnt give all their info thinking they
would get their account hijacked.... they were misled into doing that...


but still... if steam/valve had the option only accept sales from this IP/
address only option then that would be one less open door/window
on a hijacked account... can it be done.. yes... we have the technology...

dont you think this one extra addition would be worthwhile solution.. seriously..


your confused about vpn as well..
the only thing i said about vpn is that dont steam
already know who is using vpn... relating to if a scammer
was using one not a customer..

Again, your IP address can change with out warning. Sometimes multiple times a day.

[( ( < < <🤖> > > ) )]

Nguyên văn bởi Abigail From Sneaky Shrimp Dept.:

Nguyên văn bởi ragefifty50:

your missing the point again.... the customer didnt give all their info thinking they
would get their account hijacked.... they were misled into doing that...


but still... if steam/valve had the option only accept sales from this IP/
address only option then that would be one less open door/window
on a hijacked account... can it be done.. yes... we have the technology...

dont you think this one extra addition would be worthwhile solution.. seriously..


your confused about vpn as well..
the only thing i said about vpn is that dont steam
already know who is using vpn... relating to if a scammer
was using one not a customer..

Again, your IP address can change with out warning. Sometimes multiple times a day.

TPM2 security then...
i have had emails saying that i am using a different computer...

i am not asking for the impossible..

[Kage Goomba]

Nguyên văn bởi ragefifty50:

Nguyên văn bởi Kage Goomba:

He defeated his own 2FA (Steam Guard) - by giving out his account information.
No amount of software or hardware will change this.

What he needs is to be educated.

As for deliberation on the part of the OP?

Can you really say that?
He knowingly went to a 3rd party site (obvious based on his posts)
He knowingly gave out his account information

In a time and age where people scream/rant/rave about ransomware/security risks/likely been told countless times to never give out account informaiton....

Can you really say he didn't deliberately do this to himself?

Sorry - you can put lipstick on a pig - still a pig.

Steam obviously thought so.

Advising him to add VPN or whatever - won't change a thing.

your missing the point again.... the customer didnt give all their info thinking they
would get their account hijacked.... they were misled into doing that...


but still... if steam/valve had the option only accept sales from this IP/
address only option then that would be one less open door/window
on a hijacked account... can it be done.. yes... we have the technology...

dont you think this one extra addition would be worthwhile solution.. seriously..


your confused about vpn as well..
the only thing i said about vpn is that dont steam
already know who is using vpn... relating to if a scammer
was using one not a customer..

And you are missing my point - not that your entirely wrong - but your context is off.

1: The Customer would never "give out their information" if they knew what was going to happen. That's a fact.
2: He went to a 3rd party site - not sanctioned or trusted by Steam or whomever presides
3: He did this for a quick buck or some gain
4: He did so ignoring common sense and any obvious advise given frequently all over the place.

Steam has zero involvement in this case.
They are a facilitator. No more no less.
All they see is 2 users making a transaction.

Now if one user was compromised - Raul in this case - then they are going to ask some very key questions.

1: Did he have steam guard on?
Yes - will obviously he gave out his information because that's just how 2 Factor Works - otherwise they have a bigger problem and we'd all hear about it.
No - he's a fool and should have had it turned on
2: Did he go to a 3rd Party site?

Do I need to go any further?

The problem he has here is lack of education - not tech.

Anyone with a modest amount of knowledge would know better than to do what he did.


Now as for steam's tracking abilities? The Terms of Service are clear.
They-don't-care.

They will not return - they won't refund unless justified - they don't need to track or nothing.
Logging does nothing in this aspect.
International Law causes headaches in terms of enforcement - all they'd be able to do is file a report and I gaurentee you raul would still scream murder.

Like it or not - this is reality - this is where we live and there's no changing it.

Enforcement against actions like this are a nightmare - never simple like we want it let alone wish it to be.

Minimum I'd expect them to lock the account down and move on - because the scammer/hacker has already left and went somewhere else.

Accounts are disposable to them - don't matter.

But do we really know the facts? Do we really know the truth?
How do we know even 90% of what he's said is fact?
Even 10%?

It's obvious he's covered up a lot of facts - and frankly - anything is possible.


At the end of the day - its a waste of time to debate VPN's/Security Software.


What people need to understand is 3 simple facts
1: Don't use 3rd party sites
2: Use Steam Guard
3: Never give out your information.

Just following these 3 simple things would remove the problem entirely.
Why bother working harder when you can work smarter.

Frankly Steam is better off killing the trade system all together - but then it would sprout up somewhere else and Raul would be right back here yelling at steam for something they don't even have.

If anything - Raul is the one instigating the crime - by being a willing participant - not steam.

[H4CK3R MAN]

Nguyên văn bởi Kage Goomba:

Nguyên văn bởi ragefifty50:

BIG SNIP

I would abandon the topic i were you. OP has already shown that he's a lost cause and arguing endlessly is tiresome

[Kage Goomba]

Nguyên văn bởi H4CK3R MAN:

I would abandon the topic i were you. OP has already shown that he's a lost cause and arguing endlessly is tiresome

Fair point - just making sure people understand that "VPN/Etc" won't solve this.

Social Engineering is the singular most effective strategy in hackers arsenal in history.
Education is the only solution - software/hardware is nice - but so long as a human is involved - people have to understand that security starts and ends with the user.

Majority of the fight is won when people wise up to this.
Threats from compromised systems are rare and usually are a result of Social Engineering these days. Very rare they are a literal "hack" (Backdoor/etc) - and is it really a backdoor when you willing open said door? :)

[( ( < < <🤖> > > ) )]

your missing the point again....

one more point.... how did they find out about 3rd party sites....

i know about 3rd party sites from all the advertising on steam... and only on steam... hmmm

its on steam friends promoting this stuff.... i might go have a look....
other companies have 3rd party stuff giving away keys and stuff that
seemed ok... i'll just try another one.. hmmm..
oh gee... my account has been hijacked from the other side of the world.....

for some reason i think steam/valve can do a little bit more
for this very old and consistent problem... is there a benefit to keep things the way they are...

[H4CK3R MAN]

Nguyên văn bởi ragefifty50:

your missing the point again....

one more point.... how did they find out about 3rd party sites....

i know about 3rd party sites from all the advertising on steam... and only on steam... hmmm

its on steam friends promoting this stuff.... i might go have a look....
other companies have 3rd party stuff giving away keys and stuff that
seemed ok... i'll just try another one.. hmmm..
oh gee... my account has been hijacked from the other side of the world.....

for some reason i think steam/valve can do a little bit more
for this very old and consistent problem... is there a benefit to keep things the way they are...

Like having an extensive link filter? That can and will be updated if you report phishing links to support?

That sounds outrageous nooo?