Yellow name... Mod help

[HellCow (DannyDOA)]

So i see few..alot.. people with yellow names and weird thing is THEY ARENT MODS becouse mods have orange name !

Here is one of videos: https://www.youtube.com/watch?v=acPqNhXtLzc (pretty good music :D)

Question: is this leggit? Becouse it says you need to downloand this file github.com/DrakeWitt/steam-yellow its not virus but DO NOT DOWNLOAND IF YOU DONT TRUST i downloanded it but while watching the tutorial it says you need to enter your name and your password and... Your steam guard code... And they said you wont get banned and that mods allowed all of this. This sounds so fishy but it works becouse i see some people with yellow name. Only worry is i think the program now collects the names and passwords and logins trough mobile and after it has alot of accounts collected it will change everything so they cant get back account.

Proof:
steamcommunity.com/profiles/76561198194383589 ( Go To comments second page) and you will see Anakin with yellow name

steamcommunity.com/profiles/76561198194383589 but when you go to his profile its not yellow uhm okay?

Yellow name... is real... But account can get stolen? Not sure? Help?

[Spawn of Totoro]

No, it is not legit. It is an exploit. One that Valve will fix.

The only danger is that the infromation is stored in text format and is not encrypted.

[HellCow (DannyDOA)]

@Spawn Of Totoro is there any way to know if the information is stored somewhere?

[Yhwach]

Originally posted by HellCow ON:

@Spawn Of Totoro is there any way to know if the information is stored somewhere?

This is the entire source code:

/*
* IMPORTS: Libraries that steam-yellow uses.
*/
const SteamUser = require('steam-user');
const readline = require('readline');
const client = new SteamUser();

// NodeJS Readline
const rl = readline.createInterface({
input: process.stdin,
output: process.stdout
});

// Overwrite the SteamUser library's persona flags to make it yellow
SteamUser.prototype.setPersona = function (state, name) {
this._send(SteamUser.EMsg.ClientChangeStatus, {
"persona_state": state,
"persona_state_flags": 3847, // This makes it yellow
"player_name": name
});
};
// Verbosing info to user
console.log("Welcome to yellow-steam!");
console.log("Join our discord and steam group!");
console.log("WEBSITE: https://drakewitt.github.io/steam-yellow/");

// Prompt for username
rl.question('Username? ', (answer) => {

let username = answer;
rl.question('Password? ', (answer) => {
let password = answer;
const logOnOptions = {
accountName: username,
password: password
};

client.logOn(logOnOptions);

rl.close();
});
});

client.on('loggedOn', () => {
client.setPersona(SteamUser.Steam.EPersonaState.Online);
console.log("Logged In! Press CTRL and C to stop.");
});

There is absolutely no login storage, nothing is saved except tbe program having permission as a device to login to your account, and if you don't feel safe about it you can just de-auth all devices.

So let's have a quick rundown so nobody gets falsified information:

What happens here, is that the program itself sends a flag of 3847 to your online status, which in turn, will enable you use of the holiday background and border which enabled users that won the contest to have it in the first place, which can be seen here:

"persona_state": state,
"persona_state_flags": 3847, // This makes it yellow
"player_name": name

Other than that, it keeps your account logged in and does nothing beyond that, the other source material is only for compiling
If any mods choose to remove my post for whatever reason, and i don't see why, at least address the problem correctly; valve is very much aware of this exploit but it's best to keep the steam community members informed.

Beyond this, this is only TEMPORARY as it's telling your game client to send a status of 3847 rather than 1 - 4.


However, I'd like to address this too:
You have a VERY high chance of screwing up your account if they ever include a fix for the update, the most they'd do is probably remove the status from being set and you can't do it anymore, but the conciciences, depending on what valve does, can be worse if you decide to leave it open while an update goes on.
I highly advise NOT using this.

[3006150]

Valve removing or blocking access to the gold "persona_state" setting should be as easy as them putting it there in the first place. Certainly they left it easy enough for someone to create a script for Nodejs to enable a Steam session with it on temporarily.

I mean really to me, its not that much diffrent than idling programs that create sessions to say that you are playing a game when you are not. Play time hours change, cards drop and no one says a word, for that because its free advertising, and money in the market for cards.

Or idling a fake non Steam game with a nasty message as the title.

There are lots of Steam people already doing gold, many old and new Steam User Groups made for the occasion of sporting the gold.

Just watch and see what happens. So far nothing. We will know when we see "I was banned for gold "or "how do I contact support to fix my broken profile that was using gold."

The gold name seems rather harmless to me.

/popcorn

[Trygger]

I never got a holiday background for using it. Only the gold border. And I agree with the post above. I don't think we deserve bans for it. Ban people who are abusing it to try and phish people, though. Either way, I think it should be patched but hey, welcome to the "Golden Age" of steam.

[HellCow (DannyDOA)]

Im willing to try it BUT not on my main account :D

[Lukaz]

I've tried it recently, and I honestly don't see anything wrong with being able to do it.

I actually think being able to change the colour ( To an extent ) would be a cool feature, it kind of makes each profile seem a bit more different from the last.


I don't really mind what Valve does as long as it doesn't damage anything.

[HellCow (DannyDOA)]

yeah i aggre

[Ogami]

Originally posted by Big Grey Bat™:

I've tried it recently, and I honestly don't see anything wrong with being able to do it.

I actually think being able to change the colour ( To an extent ) would be a cool feature, it kind of makes each profile seem a bit more different from the last.


I don't really mind what Valve does as long as it doesn't damage anything.

The problem is that colored names and borders are used to mark mods, devs and publishers on the steam forums. And you can be sure that there are users who would try to scam other users by pretending to be something they are not.

[HellCow (DannyDOA)]

But jsut becosue of some ****** up scammers everyone is gona pay and not get cool feautures
this is so not fair against loyal members :(

[HellCow (DannyDOA)]

If anything happens im ready to write support ticket

[Narcoleptic Marshmallow]

It's not "cool features", it's an exploit. And people have been punished for things like this before.

You knew full well what could happen if something does actually happen. Are you going to write to support to thank them for doing a good job?

[HellCow (DannyDOA)]

Uhm no i woudnt write for that i woud write if my account woud been stealed. Also mod said only danger is that your account can get stolen. Also in code there isnt any way that the person is storing the information.

[Narcoleptic Marshmallow]

If your account get stolen, support will tell you it's your responsibility.

If your account gets punished in some way, support will tell you it's your responsibility.

Several mods have advised against using this "cool feature", and even they admit they don't know yet what kind of punishment people who have used/are using it should expect.

Next time, try reading the SSA you agreed to when you registered the account, instead of reading how to execute shady .exe files on your computer.

[HellCow (DannyDOA)]

:/