Install Steam
login
|
language
简体中文 (Simplified Chinese)
繁體中文 (Traditional Chinese)
日本語 (Japanese)
한국어 (Korean)
ไทย (Thai)
Български (Bulgarian)
Čeština (Czech)
Dansk (Danish)
Deutsch (German)
Español - España (Spanish - Spain)
Español - Latinoamérica (Spanish - Latin America)
Ελληνικά (Greek)
Français (French)
Italiano (Italian)
Bahasa Indonesia (Indonesian)
Magyar (Hungarian)
Nederlands (Dutch)
Norsk (Norwegian)
Polski (Polish)
Português (Portuguese - Portugal)
Português - Brasil (Portuguese - Brazil)
Română (Romanian)
Русский (Russian)
Suomi (Finnish)
Svenska (Swedish)
Türkçe (Turkish)
Tiếng Việt (Vietnamese)
Українська (Ukrainian)
Report a translation problem
Thank you for the warning, lets hope Valve get it fixed very soon.
2. If so, has it been fixed yet?
1. It's a "proof of concept", i.e. there's no indication it's actually being done, rather it's an illustration/proof that it *can* be done, which should be enough cause for concern.
2. That's difficult to answer. Even if Valve is on top of it, or has already "fixed" the situation, they wouldn't necessarily broadcast that fact to the public. Rather they might intentionally stay quiet about it in the hopes of trying to catch someone attempting to pull it off.
"I found 2 ways of spoofing the steamid, 1 way of spoofing the friendsid, 1 way of forcing the server to spoof players, 2 ways of bypassing command restrictions and 2 ways oft writing files in EVERY client.
This means, when joining ANY source engine server your Computer could be compromised. I do think this all is quite severe, considering the amount of people playing source engine games - They could all be turned into a huge botnet. And also because this means everybody could impersonate and get you banned from servers, or abuse your e.g. admin priviledges. In combination, one could make a botnet relatively quickly."
And as of 6 days ago the author says he's still heard nothing whatsoever back from his emails.
Hypothetical proof isn't proof. It's hypothetical.
How do you know what they have or haven't done? Do you work at Valve? And if so, could you please tell us when HL3 is being released?
I've not seen anyone claim as of yet that this is anything *other* than a proof-of-concept. From what I've seen on that reddit thread, or here on Steam's Discussion pages, or on any of the other forums or blogs discussing it, the main concern seems to be that the person who reported this has (according to him) received *no word whatsoever* in reply from Valve. Whether that's true or not isn't something any of us can confirm.
Not hearing back from Valve doesn't mean this hypothetical issue hasn't been hypothetically addressed.