steam guard and its safety

[The KilleR]

Hello , i would like to point out how to improve steam guard. When u remove mobile authenticator from your mobile u cant trade for 15 days, but if u switch that mobile authenticator on a different mobile u can trade immediately. So my point is , it would be better to also block trade for 15 days when u changing mobile. Thats how i got robbed of my stuff so this improve could be helpful for someone else in the future.

Andrey

[Tito Shivan]

Αναρτήθηκε αρχικά από The Killer:

Hello , i would like to point out how to improve steam guard. When u remove mobile authenticator from your mobile u cant trade for 15 days, but if u switch that mobile authenticator on a different mobile u can trade immediately. So my point is , it would be better to also block trade for 15 days when u changing mobile. Thats how i got robbed of my stuff so this improve could be helpful for someone else in the future.

Andrey

To change your authenticator from one device to another you're required to insert a SMS confirmation code sent to the linked phone number in the new device.

[The KilleR]

yes, that's how I ran out of sms, it disconnected me from steam when I signed up, so I had to enter the sms code here and that's how I confirmed it to them

[Judgmental Amaterasu]

Αναρτήθηκε αρχικά από The Killer:

yes, that's how I ran out of sms, it disconnected me from steam when I signed up, so I had to enter the sms code here and that's how I confirmed it to them

So in other words you fell for one of the more common phishing sites but it's Valve's fault.

[Zekiran]

Αναρτήθηκε αρχικά από The Killer:

thank you for your understanding i think so too .. but both vite and valve won't help you :D :D

If you fell for a scam, that's 100% on you.

Steam's security features WORK. The only time that they are not 'good enough' is when the USER does something foolish.

[nullable]

Αναρτήθηκε αρχικά από The Killer:

thank you for your understanding i think so too .. but both vite and valve won't help you :D :D

I think you misunderstood the tone of his comment.

The existing security is sufficient. Valve can't be expected to insulate you from every bonehead decision a user makes. There's always going to be some compromise between utility/functionality and strict security. At some point you just have to be more careful.

[76561198407601200]

Αναρτήθηκε αρχικά από The Killer:

it would be better to also block trade for 15 days when u changing mobile. Thats how i got robbed of my stuff

How did that happen in the first place? Even without steamguard, unless you've logged into shady sites or given out your credentials, changing modes shouldn't allow someone to access your account.

[The KilleR]

it was my fault I know .. I don't know why the valve didn't do anything to catch the perpetrator..I sent them a profile and sent items from the inventory they had 7 days to send it but they didn't do anything

[Zekiran]

You will not be told what happens after you report a profile.

Remember something very important about scams:

Scammers STEAL accounts - like they were trying to do with yours most likely - and use them to continue to scam others into giving up information and goods.

The person's profile that "got you" with a scam or pointed you to a bad site, was probably stolen from a regular user.

They want their account back, if that's the case.

So report, block/ignore if you feel they're going to be a problem for you, and MOVE ON. Valve does take action against scammers - but their priority is to make sure that LEGITIMATE USERS have control over their own accounts.

What would YOU do, if your account had been stolen and then used to scam someone else? You'd want it back - not ruined like it would be, if Steam permanently disabled every account that got reported for a scam.

[The KilleR]

valve must know who got to my account and from which country and can permanently block IP addresses.valve can't duplicate your items but still make money on sales right?

[endrsgm]

Αναρτήθηκε αρχικά από Zekiran:

Steam's security features WORK. The only time that they are not 'good enough' is when the USER does something foolish.

https://www.bbc.com/news/technology-15690187
oh. so what user did something foolish that allowed hackers to craxk into the steam. database?

https://www.google.com/amp/s/www.vice.com/amp/en_us/article/9k8qv5/steam-exploit-left-users-vulnerable-for-10-years
and this exploit was clearly steams security issue that left users vulnerable. does that mean steam did something foolish?

[Zekiran]

Quoting a 2 year old article with nothing to do with this guy's issue doesn't mean you've got the right answer here.

[endrsgm]

Αναρτήθηκε αρχικά από Zekiran:

Steam's security features WORK. The only time that they are not 'good enough' is when the USER does something foolish.

2 facts cited proving that steams security features don't always work.

Αναρτήθηκε αρχικά από Zekiran:

Quoting a 2 year old article with nothing to do with this guy's issue doesn't mean you've got the right answer here.

you made a claim. you said their security features WORK and the only time they don't is because of the user.
i gave two famous big examples where their security features didn't work, cited reputable sources, and in both of those big cases the user did nothing wrong but steam had poor security. that refutes both of your central arguments which were that steam security works and it's user errors that is the issue when it doesn't work. your post noted steam security works not thst steam security in this area works. your post opened the door wider.

your claim could have been considered just wrong but when confronted by facts proving its wrong and yet you stand by it then it becomes a lie.

[Tito Shivan]

Αναρτήθηκε αρχικά από endrsgm:

Αναρτήθηκε αρχικά από Zekiran:

Steam's security features WORK. The only time that they are not 'good enough' is when the USER does something foolish.

2 facts cited proving that steams security features don't always work.

Αναρτήθηκε αρχικά από Zekiran:

Quoting a 2 year old article with nothing to do with this guy's issue doesn't mean you've got the right answer here.

you made a claim. you said their security features WORK and the only time they don't is because of the user.

Yet those are still the exceptions, not the rule.
Basically the whole volume of account data theft in Steam -Aside of a very minor fraction originated in a couple isolated incidents- still happens due to old and classic phishing. As this thread shows.

The assertion is as valid as asserting you're not going to die due to a meteor impact.

Αναρτήθηκε αρχικά από Zekiran:

Steam's security features WORK. The only time that they are not 'good enough' is when the USER does something foolish.

Exceptions always apply. But the rule is valid.

Also, following your train of though no system is secure since every one has been compromised at one time or another.

[endrsgm]

its one hell of an exception when its MILLIONS of people who had their data stolen.
its one hell of an exception when the hole existed for 10 years.

in fact we dont even know how EXACTLY many millions had their data stolen in either occasion because valve started off lying and then refused to discuss it. but yeah ... valves security features work .. til they dont.

Αναρτήθηκε αρχικά από Tito Shivan:

The assertion is as valid as asserting you're not going to die due to a meteor impact.

which is unmitigated minimizing for damage contorl.
lets try a true or false.
did valve leave massive security holes in its system for 10 years? why yes it did.
did valve get hacked and lose the data of millions? why yes it did
did valve ever tell how many or what precisely was stolen? why no it didnt
does valve try to blame account theft on the users? why yes it does.
could the market be closed so there would be no reason for organized crime to target accounts? why yes it could.
does valve make users accounts valuable so it can make a few cents off of each trade and squeeze as much profit as possible from everything? why yes it does.


but go on blaming the average person out there for most of the data theft. no kidding. there is one steam and millions of users. the difference is when valve screws up it screws up in a spectacularly large way.

[nullable]

Steam being culpable in a large scale breach years ago doesn't negate users being culpable for compromising their own accounts at other points in time. It also doesn't lend weight to every claim a user makes blaming Steam because they imagine Steam Guard makes them scam proof.

I think you're looking at some of these issues from a very specific perspective and ignoring how users benefit and like features you're critical of trying to paint Valve as the villain for having them. It's not as compelling as you think.