About the Malware on Steam and their Hackerone program

[TheFury]

Long story somewhat short.

Steam doesn't check the updates for game and one of them had malware.
I had multiple accounts stolen, had to factory reset my PC, lost a ton of data.
Steam credited my account with some funds based on their hackerone program.
They took several months to reply to my support tickets only to insta close them and now instantly close any ticket I make about the situation.

I simply want to know why I was credited wallet funds for an issue that caused me to lose actual data, time and money but they refuse to address it.

Thinking of taking legal action since they are refusing me support now for questioning mistakes they made.

Anyone else had a similar problem?

[❤ Sly Succubus ❤]

Here's the issue OP, your not going to get an awnser because the problem lays with Valve and the Game Developer, while you may have been effected, you are no way part of the investigation and punishment (if there is any) that Valve takes, they never release this information because it simply allows those that would use the information to cause more problems, this is typically why they simply thank you with no further detail as they don't need to give information out on whats going on behind the curtains.

I have a bit of story here. On one forum side a moderator told me that someone reported me and gave me the proof of what they sent in, issue is that violated staff policy and rapidly the guy not only got booted out of the moderation staff, but he was barred from being involved with further server staff related things for the future, and his actions also cancelled the report the person did because it invalidated the part of where staff do not disclose such information unless they need further details.

[❤ Sly Succubus ❤]

Origineel geplaatst door TheFury:

Long story somewhat short.

Steam doesn't check the updates for game and one of them had malware.
I had multiple accounts stolen, had to factory reset my PC, lost a ton of data.
Steam credited my account with some funds based on their hackerone program.
They took several months to reply to my support tickets only to insta close them and now instantly close any ticket I make about the situation.

I simply want to know why I was credited wallet funds for an issue that caused me to lose actual data, time and money but they refuse to address it.

Thinking of taking legal action since they are refusing me support now for questioning mistakes they made.

Anyone else had a similar problem?

So I decided to read up on HackerOne

First of all, it says in the websites FINE PRINT that they will not DISCLOSE anything sent in unless Valve themselves requests the information to be made public. Second of all, you were paid out for finding a bug.

The fact I read the entire page on their website that explicitly explains that they will not reveal what they do with the information you gave them nor if it was worked on is right on the page concerning Valve.

In all simplistic words, you didn't read the fine print and only have yourself to blame.

[Satoru]

Origineel geplaatst door Sly Succubus:

So I decided to read up on HackerOne

First of all, it says in the websites FINE PRINT that they will not DISCLOSE anything sent in unless Valve themselves requests the information to be made public. Second of all, you were paid out for finding a bug.

There is no way steam paid out in steam wallet for the bug bounty

its full of BS and they know it

[❤ Sly Succubus ❤]

Origineel geplaatst door Satoru:

Origineel geplaatst door Sly Succubus:

So I decided to read up on HackerOne

First of all, it says in the websites FINE PRINT that they will not DISCLOSE anything sent in unless Valve themselves requests the information to be made public. Second of all, you were paid out for finding a bug.

There is no way steam paid out in steam wallet for the bug bounty

its full of BS and they know it

Steam does not you are correct, HackerOne does, quite heavily if I might add depending on how critical the flaw is (upwards of 7k USD) BUT ON THE PAGE IT SAYS CLEAR AS DAY, QUOTE

Valve embraces transparency in our security. We will generally disclose the details of vulnerabilities found, upon request. We will generally permit external discussions of them (such as blog posts), with our permission. We reserve the right to make exceptions to this policy at our discretion.
Please note that we will not consent to disclose reports if they have been marked out-of-scope or inapplicable, or where Valve has not taken a specific corrective action / mitigation.

https://hackerone.com/valve?type=team&view_policy=true

OP didn't get the information disclosed, meaning that he skipped over the fine print on Hacker Ones own bloody website

[TheFury]

I've already explained this. Might've been the other thread.

Steam used an equivalent payment to their Hackerone program, not paid through that program.

I am not asking them for private details about the hacker, the dev or the other impacted people. I am asking why the payment was given via giftcard.
As some of you have said, Hackerone would not pay through giftcard and that is exactly part of the reason I am asking why they did that via Steam.

Here are the questions I actually had for them.

Why was the money paid through steam giftcard?
- This just recycles the money back to yourselves
- This does not help me deal with the data and time lost.
Why did it take 3 months to respond to that simple question?
What do you mean by "It's a good way to pay"? That just sounds like "We felt like it".
- That just wraps back around to giftcard money exclusive to steam not helping with the financial impact of losing your data and spending multiple hours on multiple days trying to deal with the situation.

Ultimately, you lot are just so hell bent on defending Steam you don't care what I have to say. The situation is strange to begin with I understand that much. But considering there was someone trying to argue the game wasn't even out yet despite it being on the Steam store for 2 whole years with a demo being uploaded somewhere between then and the release shows how little people here looked into it.

[Komarimaru]

I just don't believe your story is all, that simple. Support doesn't handle such things and never have and never will.

Payments are through an entirely different method.

[TheFury]

Origineel geplaatst door Komarimaru:

I just don't believe your story is all, that simple. Support doesn't handle such things and never have and never will.

Payments are through an entirely different method.

Except right... They did.
You are ALL asking the same questions I am asking. WHY was it handled this way. Because it DOES seem weird and then them refusing to answer anything is even weirder. You're getting the point but just not actually thinking about my perspective here.

[Komarimaru]

Origineel geplaatst door TheFury:

Origineel geplaatst door Komarimaru:

I just don't believe your story is all, that simple. Support doesn't handle such things and never have and never will.

Payments are through an entirely different method.

Except right... They did.
You are ALL asking the same questions I am asking. WHY was it handled this way. Because it DOES seem weird and then them refusing to answer anything is even weirder. You're getting the point but just not actually thinking about my perspective here.

I'm thinking it's something else entirely, since you can't or won't show the entire help thread from support, it's quite unbelievable.

Those who have been rewarded in the past, was via direct deposit.

[TheFury]

Origineel geplaatst door Komarimaru:

Origineel geplaatst door TheFury:

Except right... They did.
You are ALL asking the same questions I am asking. WHY was it handled this way. Because it DOES seem weird and then them refusing to answer anything is even weirder. You're getting the point but just not actually thinking about my perspective here.

I'm thinking it's something else entirely, since you can't or won't show the entire help thread from support, it's quite unbelievable.

Those who have been rewarded in the past, was via direct deposit.

Because I have no obligation to show you all the specific details of my correspondence with the "Support" team. I am asking for advice based on the information I was given, not to have people "Um actually" about it.

If you have nothing of substance to offer, why are you here? You're just diluting the replies and wasting the time of everyone involved.

[Wolfpig]

Origineel geplaatst door TheFury:

Why did it take 3 months to respond to that simple question?

Reporting something and claim that it distributed malware is something which usually gets investigated in not 5 Minutes. (btw. claiming that this does that is not a question)

And i doubt that Valve will try to reverse engineer Software from others on the platform and so they need the developer to send in the code of the software if they wanted to check if it is "dangerous" (and not something pop up while testing it itself).

[TheFury]

Origineel geplaatst door Wolfpig:

Reporting something and claim that it distributed malware is something which usually gets investigated in not 5 Minutes. (btw. claiming that this does that is not a question)

And i doubt that Valve will try to reverse engineer Software from others on the platform and so they need the developer to send in the code of the software if they wanted to check if it is "dangerous" (and not something pop up while testing it itself).

You're once again showing that you are not reading everything I have posted.

The main issue was resolved about a month after it happened. They took 3 months to answer my follow up questions and concerns. Only to then not actually answer most of it and then just instantly close anything I ask to do with the entire situation.

[Yomishi]

wow

[🦊Λℚ𝓤ΛƑΛᗯҜᔕ🦊]

Origineel geplaatst door TheFury:

Long story somewhat short.

Steam doesn't check the updates for game and one of them had malware.
I had multiple accounts stolen, had to factory reset my PC, lost a ton of data.
Steam credited my account with some funds based on their hackerone program.
They took several months to reply to my support tickets only to insta close them and now instantly close any ticket I make about the situation.

I simply want to know why I was credited wallet funds for an issue that caused me to lose actual data, time and money but they refuse to address it.

Thinking of taking legal action since they are refusing me support now for questioning mistakes they made.

Anyone else had a similar problem?

Steam absolutely does check and virus scan all updates for all games and games distributed on their network for viruses and malware. Steam never has distributed any game update or game with any virus or malware in it so far in the 20'ish years they have been operating. Your situation did not happen. You're probably an Epic Games employee trying to fearmonger and scare people using Steam. Hopefully everyone can find my comment and understand this. There is no risk to installing anything on Steam.

[Satoru]

Origineel geplaatst door TheFury:

Origineel geplaatst door Komarimaru:

I just don't believe your story is all, that simple. Support doesn't handle such things and never have and never will.

Payments are through an entirely different method.

Except right... They did.
You are ALL asking the same questions I am asking. WHY was it handled this way. Because it DOES seem weird and then them refusing to answer anything is even weirder. You're getting the point but just not actually thinking about my perspective here.

It’s amazing you keep perpetuating your lies and provide literally zero proof of anything and contribute to spout provable falsehoods and wonder why no one believes yoy

[TheFury]

Origineel geplaatst door 🦊Λℚ𝓤ΛƑΛᗯҜᔕ🦊:

Steam absolutely does check and virus scan all updates for all games and games distributed on their network for viruses and malware. Steam never has distributed any game update or game with any virus or malware in it so far in the 20'ish years they have been operating. Your situation did not happen. You're just an Epic Games employee trying to fearmonger and scare people using Steam. Hopefully everyone can find my comment and understand this. There is no risk to installing anything on Steam.

Like Lead.

As I have said. Ask the dev if you want proof. He might deny for the reasons I gave.