Viray Apr 15, 2020 @ 10:04pm
Security changes to make hacker attacks useless
I think Steam could, with a little more effort, drastically increase the security of it. Hacker and hijack attacks would be useless. I had a hacker attack a few days ago and can tell you where the lack of security is.

The person was able to access my account even though I had set up the Steam Guard Mobile Authenticator. My account was secure and from Steam "maximum protected", but this was not the case. My email and password were changed and Steam Guard was dipped into another number. In short, where my account was supposedly maximum protected, I had lost within minutes.

The problem here is that after you make such changes to your account, the community market is still open and you can trade with other people as normal. My account was hacked, all my dates had changed within minutes and the attacker stole items worth more than 2000 Euros from me.

You have the possibility to contact the Steam Support and request a Steam Account Recovery. But until the support clears up this case and returns the account to the owner, the attacker already has everything he needs.

Steam should automatically distribute a 7 day community/trade ban to anyone who makes any major security changes to their account to make hacker attacks largely useless. That you can write to support and get your data back without losing any valuable items.
< >
Showing 1-7 of 7 comments
It generally helps if you avoid logging yourself into phishing sites too (like the three in your user name history), since you are giving the hijackers your username, your password, and your steam guard codes too.
Snapjak Apr 15, 2020 @ 10:14pm 
OP's spamming
Frank ツ Apr 15, 2020 @ 10:21pm 
How can steam avoid that people litterly give away there login details????

Also its not hacking, hacking a steam account with the 2fa is “impossible”
mimizukari Apr 15, 2020 @ 10:28pm 
steam already sets a 7 day market 'ban' when new browser detected.
The auth app was meant to protect items.

OP tells how that is not the case. One of its inconsistencies. They can be sold in market.


Gabe gave away his password and username to show how effective the auth is. Giving people false sense of security. The cases were you give away all but the codes are minimal.
But people learnt, they could give away login details. Especially as "login with steam" is a thing.

The recovery code is a number from 00000 to 99999. Wonder what the try limits are per day.
Zekiran Apr 15, 2020 @ 10:29pm 
How many of these are censored?


tradeit.gg loot.farm

Please

76561198197527793

viray-iwnl-

viray-iwnl- {LINK REMOVED}

viray -iwnl-

{LINK REMOVED} Viray

#FIXCSGO Viray

Viray Skin.Trade


THOSE are why security measures by Steam will *never be enough* to keep people from giving away their security login info.

Be more careful where you put your login details. That's really ALL that needs to EVER happen.
Better say, dont actually login with "login with steam".
< >
Showing 1-7 of 7 comments
Per page: 1530 50

Date Posted: Apr 15, 2020 @ 10:04pm
Posts: 6