Is it possible to get hacked just by adding someone to your friends list?

[Squeegee Cornball]

I heard that it's possible for people to get your IP and do a number of things to your account or even get personal information just by adding them to your friends list. Is this possible? I just want to be put at ease on this subject because it seems I have been getting alot of different answers. Thank you

[eram]

It's Impossible to get your account hacked just by adding someone to your friends list.

[Kargor]

Of course, if you have your profile set to "friends only", then adding someone will reveal information that you might consider "personal".

[Squeegee Cornball]

Are you sure eram? I've seen a number of videos on Youtube showing step by step on how to obtain someones IP. Honestly, I'm a bit fuzzy on the idea of what you can do with someones IP, so maybe it's not even a big deal. No, no Kargor, by personal, I mean like getting your account to Steam and even other accounts to other websites. I don't know, I think I'm just paranoid because of what my friends have told me, but I just want to be sure.

[Quazimortal]

Sounds like a load of rubbish your friends have told you.

[eram]

Your ip is displayed in so many games already that adding someone to your friends list is only as risky as playing TF2, CS GO and 2000 other mp games on steam.

Just because someone can find an ip address has nothing to do with automatically getting your steam account hacked. There is no automatic steam account hack from adding someone to your friends list.

[30]

thanx for the great tip

[💢𝓐ℓ ¢нємιѕт💢]

Just don't accept any files or such and don't click on unknown sites links. Or if you do, use Firefox with 'noscript' addon and you will be safe from 99% of stuff out there.

The only way for your account to be hacked while your steam guard is enabled is if your system or email has been compromised. It has nothing to do with Steam.

Heck, I lost some of my old accounts because Yahoo recycled the emails associated with them and now I can't access them cuz of steam guard feature. (it sends the code to email that no longer exists)

As for privacy, never put your real name, address etc in anything online except where absolutely necessary (like credit card info). And also don't save your credit card info anywhere including Steam.

Also keep screen shots of every purchase you make. Or at least any valuable purchase.

These little things can save you from a lot of headache later if something goes wrong.

[💢𝓐ℓ ¢нємιѕт💢]

Originally posted by ~Ren~:

Originally posted by Al Chemist:

Just don't accept any files or such and don't click on unknown sites links.

This is good advice, even now I'll refuse to click some links from my friends if they look suspect and I'll tell them exactly why, I could have known them for 20 years and I'd still refuse :P

Use Firefox with noscript and you can click on anything you want. Block all scripts by default in noscript settings. Then as you visit sites, allow the ones you trust permanently while others temporarily.

Even in a single page you can allow the base website but block advertising etc within that site. Everything is under your control.

And make Firefox your default browser so it won't open Chrome/Opera or other browser when you click on links outside browsers (like on steam chat window).

I use Chrome for sites I totally trust and that aren't full of ads, but for anything else I use Firefox for its powerful addons that Chrome still lacks.

[Quazimortal]

Originally posted by ~Ren~:

Originally posted by Al Chemist:

Use Firefox with noscript and you can click on anything you want. Block all scripts by default in noscript settings. Then as you visit sites, allow the ones you trust permanently while others temporarily.

I do use Firefox and I also use noscript, even links from friends can be from a hijacker, I take no chances if I suspect the site looks dodgy, I trust nobody where my steam account is concerned .

It doesn't matter if you click on a bad link if you have the noscript addon installed and configured properly. There is literally no risk unless you allow the scripts.

[Kargath]

Originally posted by Sanic Guile:

Honestly, I'm a bit fuzzy on the idea of what you can do with someones IP,

Zero.

[Kargath]

Originally posted by Al Chemist:

Or if you do, use Firefox with 'noscript' addon and you will be safe from 99% of stuff out there.

Originally posted by Quazimortal:

It doesn't matter if you click on a bad link if you have the noscript addon installed and configured properly. There is literally no risk unless you allow the scripts.

NoScript is useless snake oil. JavaScript security issues are rare, and even then the "vulnerabilities" require a gullible user to do something stupid.

[Quazimortal]

Originally posted by ambvrbu:

Originally posted by Al Chemist:

Or if you do, use Firefox with 'noscript' addon and you will be safe from 99% of stuff out there.

NoScript is useless snake oil. JavaScript security issues are rare, and even then the "vulnerabilities" require a gullible user to do something stupid.

I wouldn't call it useless snake oil, but I'll agree you don't need it to keep your computer secure. For people who have a reason to navigate 'dangerous' sites then noscript is invaluable, but if you are careful then like you said it requires a gullible user to do something stupid.

[Legendary old man]

If you have a firewall someone with your ip is no threat for the most part. Your public ip address is not hidden and many websites or servers and programs will display it. Your internal ip address is hidden by your router if it uses NAT. Someone hacking you because they added you as a friend is bs. I am certain that Valve logs everyones ip address that uses the forum btw. Every forum I have moderated did.

[Squeegee Cornball]

Hmm, I see, then it seems if I use common sense, then I have nothing to worry about. Thank you to everyone that replied!

[Quazimortal]

Maybe they put is instead of isn't? :P