Sold items on Community Market without mobile auth confirmation?

[Agent Puncake]

Hey, so I just sold a case and a sticker for CS:GO ont he community market, but there were no confirmations listed on my phone app. Instead, the listing was created and sold instantly. Is this a bug, or something's wrong, or whatever? Thanks!

[JPMcMillen]

That shouldn't have been possible, unless someone has access to the authenticator that is linked to that account. Has anything else unusual happened with the account recently?

[ruuzvan]

That's not possible...

[999999999]

New...

Relaxed Confirmation Requirements
OCTOBER 3 - DRUNKEN F00L

We shipped a change earlier today to reduce the number of cases confirmation is required to list an item on the market. Items that typically sell for under $1.00 USD will no longer require confirmation when the list price is reasonably within the median price, but confirmation will still be required once many of those cheaper items are listed. Confirmation will still be required on all rare and valuable items.

We'll be watching for any problems with this change, and make adjustments if needed.

https://steamcommunity.com/groups/community_market#announcements/detail/1705067494681435160

[zZzooey.exe]

Its new update on steam.

[Annihilator]

Thx i dont know it :) but idk if is good thing honestly.If one guy have so many items but valuable under 1 euro is a disaster i think.What do you think about it?

[zZzooey.exe]

Why is it a disaster to sell your items faster?

[JPMcMillen]

If you read the announcement, apparently after listing too many items in a certain amount of time will trigger the Authenticator for additional postings to the market.

Personally, if there's a way to opt-out and require the Authenticator for all market postings, regardless of the items value, I'm doing it. I don't sell that often anymore so it's not that big a deal for me.

[Agent Puncake]

Thanks for the replies, guys! Didn't see the patch notes. Was this listed somewhere, and how can I find it?

[J4MESOX4D]

Originally posted by Agent Puncake:

Thanks for the replies, guys! Didn't see the patch notes. Was this listed somewhere, and how can I find it?

Only seems to be listed here https://steamcommunity.com/discussions/forum/1/1732089092438155159/#c1732089092438424435 in a group where the previous annoucement to that was back in 2014. Valve haven't even notified users via their new announcement button in the Steam client. Their communication continues to be absolutely abysmal and it's always up to the community to discover the changes themseleves.

I'm expecting to see hundreds of threads materialise about this in the next few days.

[Agent Puncake]

Yeah, same. Thank you!

[Arko]

someone got into my account and sold my items (around 200$ worthy) and transferred the revenue to another bot account . I did not get any CONFIRMATION message or mail at all . why would we pay steam ? or why would we install STEAM GUARD. If there is no warning no confirmation message? if we have 100 cases (around 0.90$) that means we can lose easily 90$ in 100 selling actions, without any confirmation ? what does it mean ? why steam support does not protect us ?

[cSg|mc-Hotsauce]

Originally posted by Arko:

someone got into my account and sold my items (around 200$ worthy) and transferred the revenue to another bot account . I did not get any CONFIRMATION message or mail at all . why would we pay steam ? or why would we install STEAM GUARD. If there is no warning no confirmation message? if we have 100 cases (around 0.90$) that means we can lose easily 90$ in 100 selling actions, without any confirmation ? what does it mean ? why steam support does not protect us ?

Giving away all your account credentials is the reason why. No amount of security can stop hijackings if you do that.

[J4MESOX4D]

Originally posted by Arko:

someone got into my account and sold my items (around 200$ worthy) and transferred the revenue to another bot account . I did not get any CONFIRMATION message or mail at all . why would we pay steam ? or why would we install STEAM GUARD. If there is no warning no confirmation message? if we have 100 cases (around 0.90$) that means we can lose easily 90$ in 100 selling actions, without any confirmation ? what does it mean ? why steam support does not protect us ?

That's like giving away your house keys to a thief and then crying at the lock company that someone got in and burgled you. If you fail to secure your account against phishing or capture-based malware then bad things will happen. Steam Guard is just an extra security layer like any other 2FA - it does not magically secure your account against being compromised.

[Arko]

Originally posted by cSg|mc-Hotsauce:

Originally posted by Arko:

someone got into my account and sold my items (around 200$ worthy) and transferred the revenue to another bot account . I did not get any CONFIRMATION message or mail at all . why would we pay steam ? or why would we install STEAM GUARD. If there is no warning no confirmation message? if we have 100 cases (around 0.90$) that means we can lose easily 90$ in 100 selling actions, without any confirmation ? what does it mean ? why steam support does not protect us ?

Giving away all your account credentials is the reason why. No amount of security can stop hijackings if you do that.

:qr:

Who said I gave my info to any hacker ?? pls dont be stupid like this. IP adress shows that that thief logged in from China. and traded my items without my knowledge. STEAM GUARD did not ask me anything to confirm the trade

[J4MESOX4D]

Originally posted by Arko:

Originally posted by cSg|mc-Hotsauce:

Giving away all your account credentials is the reason why. No amount of security can stop hijackings if you do that.

:qr:

Who said I gave my info to any hacker ?? pls dont be stupid like this. IP adress shows that that thief logged in from China. and traded my items without my knowledge. STEAM GUARD did not ask me anything to confirm the trade

There are no hackers Either you allowed your credentials to be captured OR someone was able to guess them (lol) including a live auth code. Steam Guard also doesn't require confirmation for items less than $1 median.

If you carry on thinking 'hackers' did this then you'll forever remain compromised and oblivious. Try and work out where you went wrong.