Don't use the in-game overlay web browser! YOU'RE GOING TO GET VIRUSES

[FullOfLife]

Normally, I use Firefox with the NoScript add-on so that I'm safe while surfing the web, but just a little while ago I was playing Fallout New Vegas and, just for convenience sake, I decided to Shift+Tab and use Steam's overlay browser to look up some New Vegas information off of New Vegas Wikia page. I went back into the game and a few minutes later I started hearing audio on my computer about a security error and that I should call a phone number (an obvious scam). I closed out of New Vegas ASAP and saw this pop-up and X'd it out, but the audio was still going.

http://www.pasteall.org/pic/show.php?id=93415

I quit out of Steam and the audio went away, it was coming from the Steam webbrowser. I'm never using Steam's overlay web-browser ever again. It's unsafe. I've ran full system scans of Windows Defender and Malwarebytes and my system seems clean, I think it was just a pop-up, but I haven't seen anything like this in probably ten years. It also befuddles me because I thought Wikia was a reputable website, but I guess I'm wrong and it is a malicious website when you aren't running NoScript protection.

TL;DR: Do not use the overlay browser in Steam and do not use the internet without being on Firefox with the NoScript add-on.

To add as well, I'm super safe about how I use my computer. I don't pirate anything, I don't download any weird software, and I certainly don't go to weird websites.

[Lil C]-[ew C]-[ew is ☂д☂]

Първоначално публикувано от Power of Seven:

Is there a way to improve the Steam in-game web browser? For example, make it have a web history or ability to save links, and install ad block/no-script software onto it?

Go to your Steam client > Settings > Web browser > Delete all browser cookies.

[Terminal Cancer]

Първоначално публикувано от cinedine:

And it makes you a total jerk towards sites you frequent and that rely on add revenue. Very few people are actually using a whitelist for them.

Maybe I'm behind, but aren't whitelists only recently REALLY becoming a thing? IF so, give it time - and promote their use, instead of looking at the current trend and calling it a wash.

Either way, if a site relies on unobtrusive ads, I support whitelisting, but if they rely on the annoying, in your face ads that can also be vectors for malware, why should I feel sorry for them? What makes those relying on those specific types of ads so special that their need for revenue should come above my computer's security?

[FullOfLife]

A banner ad is one thing, but the kinda ad that I got that obnoxiously disguised itself as a virus and played looping audio telling me that I had a virus on my computer, as I described in my original post, was completely over the line.

I didn't mention in the original post either, but I run Adblock Plus on top of NoScript. However, I have a favorite website that I visit on a daily basis that I disable Adblock on (which they only show small banner ads. No pop-ups, no sound, no video.)

BACK ON TOPIC. Because Steam's overlay browser doesn't protect you against those abusive ads and won't protect you from malicious websites, I really do not recommend using it. Even if you think a website is safe, which I thought Wikia was reputable and proven wrong, even websites that are popular and seem safe can scare and abuse you.

[Breadinator]

Първоначално публикувано от iddqd:

There is, indeed, a way to protect yourself.
It's called common sense.

Or a antivirus.

[Dreakon13]

So in other words, don't use the Steam overlay because it doesn't have script blocking extensions like Firefox. Got it.

I've never gotten a virus from it despite extensive use. I'm also not an idiot. So yeah.

[Linerax]

Just don't go to non Steam websites by Steam client then(overlay included). Copy/paste the link on to an actual Internet browser with ad block. No need to have a crusade against using the Steam overlay.

[Lil C]-[ew C]-[ew is ☂д☂]

Първоначално публикувано от Rusty:

Първоначално публикувано от iddqd:

There is, indeed, a way to protect yourself.
It's called common sense.

Or a antivirus.

No antvirus protect 99,9%,some do 99,8% and others do 99,7%.Keep that in mind.I've used premium and free and basically were all crap.Came back to Micrsofot Security Ender Point,since I had enough paying for crap taxes from AVG internet security 2014.
Not mentioning I've used long time,Norton antvirus,Panda,Avira but I can't remember anything else that have 10 years old.

[Star-X]

This right here is why I only look at pages on Steam itself using the in-game browser. Kinda hard to get malware from a site that literally doesn't have ads (aside from suggested items, but let's face it, those are infinitely better than the malware ridden crap like Wikia).

If I MUST view an outside page, I'll use Firefox with Adblock Plus and Noscript. Any browser without Noscript and Adblock Plus is just ASKING for malware, unless you're using a device with a closed or semi closed ecosystem (i.e. iOS/Android).

As much as I disdain the sexual metaphors for this kind of thing, they are 100% accurate. Go browsing sites on the net without protection, get burned by malware. Use protection, 99% of the time you're fine (the 1% being reserved for crap that somehow bypasses Noscript and Adblock Plus; to my knowledge that requires downloading a sketchy EXE and running it, as I don't believe malware writers have figured out how to get past Adblock Plus and Noscript through webpages alone).

[spudi]

Nonetheless, if people want to selectively unblock their favourite sites, sure, they can do that at their own risk.

[PsydeFX]

I use the steam browser almost always when gaming, but then agian, I'm selective about sites I visit on my gaming PC anyway. Typically, it's Youtube, twitch, official game sites, and on some cases wikipedia. My malware and AV run nightly on a schedule, and I can't tell you the last time I got a detection (other than a few false positives or cautions).

I do get what you're saying though, even when using FF with ABP and NS, I'm super sketchy about letting someone else use my PC (at all, much less) to browse the net. 99% of the time, I'm hovering over their shoulder like "wait, what's the WOT rating? scan the link first, view a screenshot of the page, you been there before? Your PC is slow? get off, go home, you dunnit!"

[prepaidcomp]

Still Don't get it How Do i Get Viruses.

[FullOfLife]

Първоначално публикувано от Rektatlife:

Still Don't get it How Do i Get Viruses. :pope:

It's vulnerable to browser and javascript vulnerabilities since it doesn't block either. If you aren't running Adblock or NoScript equivalents in your main web browser, consider this a wake up call.

[🍋 Lemonfed 🍋]

steam web browser is mostly to look at steam forum's rather then surfing the web in general , prefer having a tablet , cellphone or laptop nearby for those moment's when I want to see a webpage without closing a game If I can't run it in a window to open chrome or Firefox.

[Wickedfizzy]

Just had this happen as well I think its an ad and hasnt infected my actual system but im gunna scan with antivirus everything right now.

[FullOfLife]

Първоначално публикувано от Wickedfizzy:

Just had this happen as well I think its an ad and hasnt infected my actual system but im gunna scan with antivirus everything right now.

You're safe, bro, but it is scary to hear.