Instale o Steam
iniciar sessão
|
idioma
简体中文 (Chinês simplificado)
繁體中文 (Chinês tradicional)
日本語 (Japonês)
한국어 (Coreano)
ไทย (Tailandês)
Български (Búlgaro)
Čeština (Tcheco)
Dansk (Dinamarquês)
Deutsch (Alemão)
English (Inglês)
Español-España (Espanhol — Espanha)
Español-Latinoamérica (Espanhol — América Latina)
Ελληνικά (Grego)
Français (Francês)
Italiano (Italiano)
Bahasa Indonesia (Indonésio)
Magyar (Húngaro)
Nederlands (Holandês)
Norsk (Norueguês)
Polski (Polonês)
Português (Portugal)
Română (Romeno)
Русский (Russo)
Suomi (Finlandês)
Svenska (Sueco)
Türkçe (Turco)
Tiếng Việt (Vietnamita)
Українська (Ucraniano)
Relatar um problema com a tradução
Regras e diretrizes para discussões
Denunciar esta mensagem
Create 1,000 dummy accounts using 1,000 dummy emails = bypassed.
Petitions don't work.
Users need to stop giving away ALL their account info to any random site. Stop the gullible first.
The captcha doesn't solve the issue, but it will make it harder for automated systems to perform the request.
You still have not solved the email issue with that.
Captchas don't slow them down at all.
CAPTCHAs are not coming back.
This scam has totally nothing to do with bot accounts or whatever. Please inform yourself by reading the petition page.
When a user logs into a phishing website, the website will automatically login on his Steam account and register a Steam Web API key. With this key, the scammer is able to read and cancel trade offers on behave of the owner of the Steam Web API key he is using.
Since this issue is hard to understand for most people, please sign our petition to make Steam a safer place.
What would those do? Nothing, as the user is logging into a Steam account. None of that will prevent the user from giving away the exact same information being requested, in order for them to get the API key, let alone prevent the site from getting it as well.
Neither of these will prevent anything. Only add another step to create the API key.
Imho, best way to prevent the issue? Removed p2p trading and have everyone go through the market. Less reason for hijacking accounts and far fewer scams as people have to go through the market.
That is the worst reason to ever sign anything.
It is an easy issue to understand, if explained correctly.
All the solutions provided will prevent it from happening.
If a user has to manually verify his Steam Web API key request by clicking a verify button in his mailbox, the amount of people that become victim will become much less.
I read what you said and I quote...
Bots are automated systems. And thats what you claim that this request is to battle, automated systems.
So how about you read your own posts before telling others what it is and isn't about. Because if the CAPTCHAs could not stop bots, they will not stop scammers who will automate stuff on their end to blast paste the CAPTCHAs.
Captcha's can be solved by automated systems, but it will be slightly harder to register a key. There are some captcha frameworks that require the solver of the captcha to have the same IP addresses as the requester of the captcha, but I don't think Steam has that.
Email verification will require the owner of the Steam account to verify his registration by clicking on a specific link, which would be perfect to decrease the amount of people being scammed (since people decline the request because they didn't request one).
If Valve would've shut down gambling sites right away, there wouldn't have been issues with phishing sites (with the intend of scamming skins) whatsoever.
Second of all, the phishing sites that ARE actually around at the moment, look extremely legitimate, especially to new players. 8 out of 10 players joining the CS:GO community is aware of the game's rich history of trading/gambling. Once they wish to try it out themselves, they will probably run into one of those phishing sites.
With the scam Heartz is talking about, users will only have to login ONCE in order for the, mostly Russian, scammers network, to request a Steam Web API key on their behalf and save it. For new players, that don't have skins yet, this would mean that they wouldn't have any issues at first, however, as soon as they start to enjoy the game and familiarize themselves with the market, they might look into buying some skins. And once they actually do, their Steam Web API key will be used to manage their incoming trades, and a scam duplicate of the trade will automatically be sent.
I think it's a huge problem into which Valve should definitely look. I share the opinion with Heartz that an email verification before requesting a Steam Web API key would shut the possibility to bot/fully automate this type of scamming down.
It's a very serious issue and I think Valve has the obligation to step in to stop their users from getting scammed. Thousands of dollars are getting stolen every single day by a Russian scammers network. (I have forum posts, IP addresses and more info on the person that even sells this scamming platform to other Russians. It's serious.) In the end, Valve didn't succeed in successfully shutting down gambling and B2P trading, in my opinion because of a lack of willpower, so it would be good right for Steam users to get the security measures before requesting a Steam Web API key, increased.
As for your claims Valve should shut down the gambling sites you might want to join the rest of us here in reality and realise the simple truth that Valve do not have the ability to do that because they don't control the internet or have any power to make or enforce global laws.
Valve has the legal right to shut gambling and/or trading sites down since it is in fact against their ToS, however they actively choose not to. Once in a while they decide to ban a bot or two, resulting in the operation just being left with the chances to keep on existing. IF Valve had the REAL intend on shutting down automated trading- and gambling websites, they would've already done so.
So, because they don't shut these operations down, they do profit from the advantages gambling sites. I understand Valve can't be held responsible for phishing and scammer sites, however they do get away with the semi-responsibility for shutting these sites down. It would be a great effort from their side if they'd help shutting the scams down, and keeping the legitimate business operational OR shut them all down.
The problem doesn't lie with Valve, it lies with people being stupid and giving their info out. Yet somehow when people act like idiots, it's Valve's fault.
I do understand it's people's own risk to log onto external sites that aren't linked to Valve in any way, however, we're talking about a very specific type of abuse of a system offered and created by Valve. A public Steam Web API key, which can be used to manage incoming-outgoing and live trades.
About shutting down gambling sites; it's extremely easy to do for Valve. With these sites using Valve data and API's, usually even pulling prices off the Steam Community Market, they are violating Valve ToS. If one violates a ToS, with which they automatically agree once using the service, the organisation has the legal right to immediately shut the operation down, without a lawsuit.
In addition to that, finding gambling sites is extremely easy for users, let alone for Valve themselves. That's not an excuse to not shut them down. It's a choice.