Humble Bundle issues.

[Gallifrey - CSSC Gaming Founder]

For the second time I've seen a Humble Bundle offer where they'll give you a free game ... if you link to your Steam account. But this makes me really uncomfortable since I have to log onto a third party site using my Steam log in details - and currently the only people on the planet who know my Steam log in details are me and the Steam server. Wouldn't I be breaching TOS if I did this ?

Also wouldn't they get to know my account when I activated the key ?

S.x.

[Wolfpig]

The only ones whol will know your login credentials still will be only you & steam.
The open id system only logs into steam and the sites have only access to the the infos everyone can see either way if you have your profile public.

It is just a convenient way for the sites to directly link the account without you giving the link to your profile yourself (and so they can get sure that you dont link the profile of someone else).


Some scam sites may have an altered login which is not from steam to get your logindata....but sites like humble are safe in that matter.

[J4MESOX4D]

It's perfectly safe. All you are doing is loggin into Steam through Humble Bundle - they don't have any sensitive information other than the API data which is only used to merge your Humble account with Steam. This is in place so they don't have bots farming free keys to sell down the line later on.

This wouldn't be recommended on the likes of scam sites as these use fake client logins to capture login names and passwords but for sites like Humble; you have no concerns at all.

[Gallifrey - CSSC Gaming Founder]

Thanks guys.

S.x.

[Tito Shivan]

1. You don't have to link anything to get the Humble free game. You just buy it for $0 on the Humble store and you'll get a key.

2. You don't have to link anything to activate the humble key of F1 2015. You either activate the key Humble gives you through Steam or follow the link to the steam page to activate a key through the browser.

3. Logging in through the steam API on a site using it shares nothing. to the third site. As already has been explained.

[feytharn]

Автор сообщения: Tito Shivan

1. You don't have to link anything to get the Humble free game. You just buy it for $0 on the Humble store and you'll get a key.

I couldn't buy it until I linked my account though...

[Muppet among Puppets]

Only log in on the original site FIRST.
Steam.
Then if you want to connect any other site, you should NOT need to actually type your details again if its LEGIT.
Fake sites would still ask for the details because they never are connected to steam, just phishing your details.

[Satoru]

Ok lets go over this yet again *sigh*

When you use the OpenID protocol the 3rd party site gets access to:

* Your 64bit SteamID

And thats LITERALLY it. That's all they get access to. NOTHING ELSE. The only thing you have done is tell Humble "Oh yes you do own the account with the SteamID of 76561198058442015, thank you" Note that your SteamID is public which is why anyone, like myself can pull that information anyway. It just lets the site tie yoru SteamID with their login ID on their end.

Right now your profile is public, that means everyone else on steam knows more about you than Humble currently does, and its literally the same as what humble will know afterwards.

In fact many sites, like Humble and Paradox and GOG, need your profile to be public to take advantage of certain things, like them knowing if you own a game so they can track it. Humble for their "you already own this game dont activeate it on your account" feature, Paradox for "here are your forum badges" and GOG for "Here is the free game from GOG Connect". But ALL of these sites require your profile to be public to do this. Because they can only see what you let them see. If your profile is private, the site sees NOTHING.

[Tito Shivan]

Автор сообщения: feytharn

I couldn't buy it until I linked my account though...

You're right on that one.I had my account linked already hence why it didn't ask for it.