New Login Mask Shows Virus Behavior. IS Valve programming Malware behavior ?

[Erwin Rommel]

Once you enter your login data and press enter (Remember me disabled)

the mask reopens it self and the previous DISABLED remember me
is back to ACTIVE .



This behavoir manipulates the "loginusers.vdf" and overwrites the "AllowAutoLogin" from "0" to 1 which enables auto login .

Only serious right restrictions to File and folder prevents steam exe from overwriting this configuration to default. enabled.

No matter what is written inside youre loginuser.vdf the mask starts with Remember me Enabled
even if you just uncheckt it at the last login.

VALVe i dont know what you intend to do
but i name this Malicious behavior !

[Satoru]

thats not a 'virus'

[rawWwRrr]

Originalmente postado por Borg Queen:

VALVe i dont know what you intend to do
but i name this Malicious behavior !

How is it malicious for Steam to overwrite its own files?

At worst it's an undesirable UX behavior as it forces the end user to perform an unnecessary task. It's hardly "malware".

But I will agree, the default for the Remember Me option should be off, not on. Hopefully they make the change in a future update.

[Satoru]

Its more a UI issue, if you check "do not sae your credentials" in the Steam->Settings, your login information isn't saved anyway

[Mihai_89]

Originalmente postado por Satoru:

Its more a UI issue, if you check "do not sae your credentials" in the Steam->Settings, your login information isn't saved anyway

If you uncheck the "do not save your credentials" and uncheck the "remember me" every time you login it still won't save them right ?

[Erwin Rommel]

Originalmente postado por Mihai_89:

Originalmente postado por Satoru:

Its more a UI issue, if you check "do not sae your credentials" in the Steam->Settings, your login information isn't saved anyway

If you uncheck the "do not save your credentials" and uncheck the "remember me" every time you login it still won't save them right ?

i did just check that

for that reason i did delete the user credential file

if you login that way you wrote it will creat those credentials and write them into the folder

if you close the steam client they will be deleted so as long your client is running those data are accessable on youre drive .
for that time youre client is running remember me is activated

"AccountName" "Youraccount"
"PersonaName" "Yourname"
"RememberPassword" "0"
"WantsOfflineMode" "0"
"SkipOfflineModeWarning" "0"
"AllowAutoLogin" "1"
"MostRecent" "1"
"Timestamp" "1234567890"

[Mihai_89]

Originalmente postado por Borg Queen:

Originalmente postado por Mihai_89:

If you uncheck the "do not save your credentials" and uncheck the "remember me" every time you login it still won't save them right ?

i did just check that

for that reason i did delete the user credential file

if you login that way you wrote it will creat those credentials and write them into the folder

if you close the steam client they will be deleted so as long your client is running those data are accessable on youre drive . for that time youre client is running remember me is activated

But i only disabled the "do not save your credentials" and now i uncheck "remember me" every time and it works.

I mean i just put the password and that's it.

Also do you still get the security code on email every time you login ?

[Erwin Rommel]

Edit:
i did paste the config it creates once you set do not save to active

[Mihai_89]

Originalmente postado por Borg Queen:

Edit:
i did paste the config it creates once you set do not save to active

No what i meant was : now i have the credentials option disabled in the settings.

And now i just uncheck "remember me" every time i login.

But do you get the email code every time you login ?

[Erwin Rommel]

the saveguard input request is stored elswere
you should get it just 1 time as long it has access
to this configuration part.
so fare it does not affect the saveguard settings if you confirmed it once

[Mihai_89]

Originalmente postado por Borg Queen:

the saveguard input request is stored elswere
you should get it just 1 time as long it has access
to this configuration part.

Get 1 time ?

You mean the email code ?

[Erwin Rommel]

yes this code

[Mihai_89]

Originalmente postado por Borg Queen:

yes this code

So just so i fully understand.

The email code was only sent 1 TIME for you with the "remember me" option checked OFF right ?

[Erwin Rommel]

the main problem is just the autorestart of this login version with credentials you did not authorize and overwriting existing in the steam save folder.

[Erwin Rommel]

yes this email code to verifiy your computer was sent only 1 time its part of the save guard feature

remember me was set to off .

[Mihai_89]

Originalmente postado por Borg Queen:

the main problem is just the autorestart of this login version with credentials you did not authorize and overwriting existing in the steam save folder.

Isn't it easier to just uncheck "remember me" every time you login ?

I mean it only takes 1 second.