Installa Steam
Accedi
|
Lingua
简体中文 (cinese semplificato)
繁體中文 (cinese tradizionale)
日本語 (giapponese)
한국어 (coreano)
ไทย (tailandese)
Български (bulgaro)
Čeština (ceco)
Dansk (danese)
Deutsch (tedesco)
English (inglese)
Español - España (spagnolo - Spagna)
Español - Latinoamérica (spagnolo dell'America Latina)
Ελληνικά (greco)
Français (francese)
Indonesiano
Magyar (ungherese)
Nederlands (olandese)
Norsk (norvegese)
Polski (polacco)
Português (portoghese - Portogallo)
Português - Brasil (portoghese brasiliano)
Română (rumeno)
Русский (russo)
Suomi (finlandese)
Svenska (svedese)
Türkçe (turco)
Tiếng Việt (vietnamita)
Українська (ucraino)
Segnala un problema nella traduzione
Regole e linee guida per le discussioni
Segnala questo messaggio
Imagine you walk into a store, you see brand name Coca cola, and no name brand just call cola, you buy the no name cola, and you hated the taste, whom do you blame made the bad drink you hated? Not a trick question...
Show me where Steam selling, or gambling outside of Steam.... No really show me... They do not sell, or gambling outside of Steam. If you go to a site claiming to work with, or for Steam they're lying because Steam does not do transactions outside of steam.
This is Steam market place, this is where can sell traded items. And for gambling that are Loot boxes you open in-game.... So no idea where you're claiming Steam doing this somewhere else outside of steam.
https://steamcommunity.com/market/
English?
Yes if via Steam, not outside of Steam hence market place....
https://steamcommunity.com/market/
I bet trillion-dollar companies love to hear your idea, I mean not like they haven't thought of this.................... If still haven't dawn on you, they tried, and doesn't work when they keep changing things up over, and over.
If Steam is anything like other services, most of those Support requests are just forgotten lost credentials trying to access an account.
With 21K accounts stolen a day the forums would be way, way on fire.
Simply adding a new friend does nothing. Clicking links which lead to logging into their scam phishing websites using your steam login details does however.
i did understand that... but its not my fault steam dont provide a better break down..
most... could be 80% today 5% tomorrow... there is probably a reason we dont
get a clear amount for stolen versus forgotten...
i dont know why you break stuff the way you do...
i said i dont understand how these sites work....
i was under the impression you could put things
in your inventory up up for swapping/gambling
trading on these sites...
a quick google search.... buy dota 2 skins...
how does that work from a non steam site...
i aint clicking links....
how easy to block and block and block and block.. if only we had super fast computers..
There's always way more people who simply loses their credentials than accounts stolen.
And even if we went for the worse possibility... Let's say all those requests belong to stolen accounts... 21K requests out of 32M daily users means only a 0.06% of the daily logged users would have had an unpleasant encounter.
You probably have way more chances to find a cheater in a match than to loose your account to a thief right now.
all true...
you can maximise and minimise everything... its a daily report....
daily... each day.. every day... 365 days a year....
but does it matter what the figures are considering steam have piled them together....
would it look bad if 2000 each day were being hijacked... or 1000 scammed....
500 phished... i say yes...
i say more can be done... but its not that customer security needs to be harder thats fine
and what about the forgotten...... all that work they are creating.... that needs
a focus group ....whos working on that... do valve have good accountants.... ...
Here are some of the largest sets ever found
https://haveibeenpwned.com/PwnedWebsites
Career criminals are not really interested in gaming they are interested in creditcard information they are interested in having possibilities to deploy there malware bot and phishing sites not in someones counterstrike knife collection. The last verifiable large succesfull attack seen on Steam was November 11 2011
https://thehackernews.com/2011/11/possible-credit-card-theft-in-steam.html
And the last Proof of Concept (POC) of a potential of a large attack was on October 15 2012 https://revuln.com/files/ReVuln_Steam_Browser_Protocol_Insecurity.pdf
That does not mean that there can't be a attack but as of now we have 0 indication of it.
Honestly at this moment your data is safer at Steam than at your insurance company your cloud provider your healthcare provider or even your government. The sad truth is almost no one has not already been hacked indirectly and most will never ever know they are.
well thats great..... and things have and are being done to protect us from
all these security weaknesses in the big world as well... like i mentioned
in a previous post... i dont seem to get any scammer phone calls anymore...
and banks are being more accountable over here in aus.. we have adverts
now that tell us banks are using advanced metrics to stop you losing your stuff...
but my angle is more about protecting the steam customer from themselves...
its the major point that people always bring up in these steam discussions...
the steam customer is the problem... and the steam customer has gone to
a 3rd party site.... and the steam customer has been scammed by a person
saying they are from steam... and... and... and....
can more be done.... i say yes...
This is a paper written to scare people, but there aren't any actual vulnerabilities in there. In order to exploit the first one, you would already need full access to the victim's computer. The second one doesn't work at all because Steam doesn't allow launching a game with custom command line arguments without user confirmation unless the game has explicitly told Steam that it's safe to do that.
The FAQ at the end of their paper points out that the vulnerabilities don't work because shortly after they published the paper the games that would have been affected by it were patched. Which could have been before they published the paper if they had practiced responsible disclosure[en.wikipedia.org].
In fact, Valve pays cash prizes to people who find exploits in Steam or their games and report them responsibly. Many companies do. https://hackerone.com/valve
I have interacted with that system from both sides, finding an XSS exploit in the admin version of the Steam Workshop[hackerone.com] and receiving a patch for my game's version of Source Engine because a bug was reported to Valve[secret.club].
If there's an exploit that allows anyone to steal any Steam account, why haven't they done it? Why do only people who fall for scams get "hacked"? Why not someone with admin privileges?
Proper security would protect you far being fooled. We have known that social engineering is a thing for decades now. That is why modern security is designed to mitigate and counter it, and that is why I say Steam's security is outdated.