Don't use the in-game overlay web browser! YOU'RE GOING TO GET VIRUSES

[FullOfLife]

Normally, I use Firefox with the NoScript add-on so that I'm safe while surfing the web, but just a little while ago I was playing Fallout New Vegas and, just for convenience sake, I decided to Shift+Tab and use Steam's overlay browser to look up some New Vegas information off of New Vegas Wikia page. I went back into the game and a few minutes later I started hearing audio on my computer about a security error and that I should call a phone number (an obvious scam). I closed out of New Vegas ASAP and saw this pop-up and X'd it out, but the audio was still going.

http://www.pasteall.org/pic/show.php?id=93415

I quit out of Steam and the audio went away, it was coming from the Steam webbrowser. I'm never using Steam's overlay web-browser ever again. It's unsafe. I've ran full system scans of Windows Defender and Malwarebytes and my system seems clean, I think it was just a pop-up, but I haven't seen anything like this in probably ten years. It also befuddles me because I thought Wikia was a reputable website, but I guess I'm wrong and it is a malicious website when you aren't running NoScript protection.

TL;DR: Do not use the overlay browser in Steam and do not use the internet without being on Firefox with the NoScript add-on.

To add as well, I'm super safe about how I use my computer. I don't pirate anything, I don't download any weird software, and I certainly don't go to weird websites.

[Linerax]

What about the NoScript add-on? It is out of your suspicion list?

[fluxtorrent]

wikia? No it's not reputable, its absolutely horrid with invasive and exploitable adds.

[FullOfLife]

Linerax lähetti viestin:

What about the NoScript add-on? It is out of your suspicion list?

NoScript is the best. I have a good analogy for it. Imagine that going websites is the same as randomly sticking your ♥♥♥♥ into somebody. Sooner or later you're going to catch a bug doing this. However, NoScript is like wearing the world's best condom. You can go to weirdest sketchy websites randomly shoving your ♥♥♥♥ in them and you'll walk out 100% clean.

fluxtorrent lähetti viestin:

wikia? No it's not reputable, its absolutely horrid with invasive and exploitable adds.

That is infuriating. Wikia is such a popular website for them to have malicious pop-ups is the worst. Sites like them are why people should absolutely be running NoScript.

[Satoru]

Your logic is flawed. You're basically saying

Dont use any browser at all

Because really the browser is not protecting you. No Script was. By your logic anyone uing a browser shoudln't be on the internet at all

[FullOfLife]

Satoru lähetti viestin:

Your logic is flawed. You're basically saying

Dont use any browser at all

Because really the browser is not protecting you. No Script was. By your logic anyone uing a browser shoudln't be on the internet at all

Don't use the Steam overlay browser because it doesn't have NoScript. Happy?

[Game Boy Color]

perhaps it was an advertisment? wiki pages do have ads

[FullOfLife]

Scrubs lähetti viestin:

perhaps it was an advertisment? wiki pages do have ads

Are ads that use sound common these days?

[Linerax]

N0Lif3 lähetti viestin:

Scrubs lähetti viestin:

perhaps it was an advertisment? wiki pages do have ads

Are ads that use sound common these days?

Yeah. More ads are acting as small video clips with sound and all. There are many video ads on survey sites like Swagbucks and Prizerebel. The video ads can also pop-up.

[あお]

I've been using the steam browser for years never caught any virus or malware.

[Torim]

Satoru lähetti viestin:

Your logic is flawed. You're basically saying

Dont use any browser at all

Because really the browser is not protecting you. No Script was. By your logic anyone uing a browser shoudln't be on the internet at all

I can't even... what?

He is obviously warning people that there is no way to protect themselves while using steam's browser WHICH does NOT have the option to have extra security.

[zert]

There is, indeed, a way to protect yourself.
It's called common sense.

[Power of Seven]

Is there a way to improve the Steam in-game web browser? For example, make it have a web history or ability to save links, and install ad block/no-script software onto it?

[Harmonica]

It's good to post things like this to remind people that indeed, surfing without an adblocker is asking for malware.

[cinedine]

Schmuck lähetti viestin:

Satoru lähetti viestin:

Your logic is flawed. You're basically saying

Dont use any browser at all

Because really the browser is not protecting you. No Script was. By your logic anyone uing a browser shoudln't be on the internet at all

I can't even... what?

He is obviously warning people that there is no way to protect themselves while using steam's browser WHICH does NOT have the option to have extra security.

Not really:

N0Lif3 lähetti viestin:

TL;DR: Do not use the overlay browser in Steam and do not use the internet without being on Firefox with the NoScript add-on.

Harmonica lähetti viestin:

It's good to post things like this to remind people that indeed, surfing without an adblocker is asking for malware.

And it makes you a total jerk towards sites you frequent and that rely on add revenue. Very few people are actually using a whitelist for them.
Every browser - even IE - has some basic settings you can use. Disable pop-ups and load plug-ins on demand. I'm quite happy surfing the web without getting annoyed by adds (while still seeing the stil picture ones, which I don't mind). Haven't got infected for years.

[Harmonica]

If someone was using the internet in the era where you were sandblasted constantly by irritating browser hijacking ads you've seen enough of them to know that it's not the correct way to support your site. Asking for donations and offering perks to subscribers, however, is a good way of doing things.

Nonetheless, if people want to selectively unblock their favourite sites, sure, they can do that at their own risk. The trouble is that even the very best completely ethical sites don't monitor their ad streams 24/7, and so dodgy ads still get into the mix. And now they just exposed their userbase to those ads.