Start an OPNSense Based IPSEC enabled VAC Client

[LordNIKON]

I have recently built and setup an OPNSense firewall with IP blocking and intrusion detection. The performance benefits have been amazing. I propose that Valve increase its security stance to enable fully encrypted and private game network connectivity by providing a downloadable Virtual appliance that can act as a security interface for the steam network and to provide extremely low latency connections between nodes. This could also enable better control of bad actors to perform attacks on the network.

For those willing to take the step even further, make a distribution available like SteamOS, for installation on custom hardware to run as a firewall replacement. It could even be called "SteamSense"

Game Safe!

[Supafly]

Originally posted by Xunzul:

Originally posted by Crazy Tiger:

As I said, you make a choice regarding the information you're willing to share and when/how you do it. That is nothing different from me not wanting to share my ID with a commercial company that cannot verify it and cannot be trusted with such information to begin with.

Nobody can say that you're not an alt account either. So what?

You ask so what ? We're all plausible criminals as plausible innocents, only facts count and the ability to discover the "hidden facts". The system as it's now, help more the distrust than the trust; for my personal opinion all of this enhance the criminality. Anonimity is more near to "criminals" than "innocents". If scammers use real information about us they must persecuted and arrested and not tell to all population to hide from them, that's not the way to fix the problems.... but hey, im not in command, it's not mine responsability.

A scammer is much more likely to use a public profile as they can use it to convince others of their trustworthiness.

A private profile does none of that. Thus Public = higher chance of being a scammer vs a private profile

[Crazy Tiger]

Originally posted by Xunzul:

Originally posted by Crazy Tiger:

As I said, you make a choice regarding the information you're willing to share and when/how you do it. That is nothing different from me not wanting to share my ID with a commercial company that cannot verify it and cannot be trusted with such information to begin with.

Nobody can say that you're not an alt account either. So what?

You ask so what ? We're all plausible criminals as plausible innocents, only facts count and the ability to discover the "hidden facts". The system as it's now, help more the distrust than the trust; for my personal opinion all of this enhance the criminality. Anonimity is more near to "criminals" than "innocents". If scammers use real information about us they must persecuted and arrested and not tell to all population to hide from them, that's not the way to fix the problems.... but hey, im not in command, it's not mine responsability.

Wanting to catch scammers and the like doesn't and certainly shouldn't mean that everybody has to hand over sensitive and personal information. Especially when it's information not everybody actually has (as said, not everybody using Steam has an ID or CC as not everywhere it's mandatory or common to carry/use) or is easily faked (phone numbers).

I get your intent, but it's not the way to go in my opinion.

Plus, South-Korea shows that even with IDs people still cheat, scam and the like.

[❤ Sly Succubus ❤]

I hate to tell the OP this but most good hackers already customize their OS and BIOS to prevent even the most hardest to kill viruses and spyware that exist, basically known as Hardware Rootkit, unlike normal Rootkits, these things sit in your hardware files and on the hardware itself, OS keyloggers bypass OS things with ease, intelligent hackers can bypass sandboxing of the PC, normally they are the ones who sandbox from the getgo and is how one CSGO Esports player got attacked, his PC was so well sandboxed that the hacker waited till he was asleep, disabled the sandbox, entered his Steam profile which he left open on his 'home PC' (it was sandboxed by a program allowing interactions over WiFi) and jumped on CSGO and got his profile banned, then jacked all of his items.

The hacker got in just by using a Pass-The-Cookie method none the less but unlike other scammers and hackers, this dude was paid off with a large sum to do a targeted cyberattack and at that point nothing will prevent hackers from reaching in and getting the job done.

Not even Valve themselves was able to prevent the 2015 Christmas cyberattack that saw Lizard squad, a known hackivist group, strike Steam and leak 35,000 creditcard numbers as a way to warn the company to improve their cyber security which, they still were doing prior to the attack (Lizard squad is the same group that attacks Sony as a warning to improve their cyber security to)

You will never, and i do mean basically never, be able to fully stop cyber criminals from getting in, we can stop lower intelligence scammers and backdoor jackers (or perishers) but its when you get to the point that a hacker has access to your PC, or the OS or worse systems, that Steam basically is out of the ball game as at that point your faced with someone who is either intelligent and good at being a black hat, or its a paided cyber attack.

[Tito Shivan]

Originally posted by Xunzul:

Anonimity is more near to "criminals" than "innocents". If scammers use real information about us they must persecuted and arrested and not tell to all population to hide from them, that's not the way to fix the problems.... but hey, im not in command, it's not mine responsability.

You're mixing here anonimity with privacy, which are two very different subjects.
Case in point: I'm not anonymous here but parts of my Steam identity remain private.

[Xunzul]

Originally posted by Tito Shivan:

Originally posted by Xunzul:

Anonimity is more near to "criminals" than "innocents". If scammers use real information about us they must persecuted and arrested and not tell to all population to hide from them, that's not the way to fix the problems.... but hey, im not in command, it's not mine responsability.

You're mixing here anonimity with privacy, which are two very different subjects.
Case in point: I'm not anonymous here but parts of my Steam identity remain private.

Yes, crazy tiger start by mixing it, i was only try to explain to him the difference.

@Supafly: A good scammer can bypass even the anonimity at the same level can falsificate real IDs, but in the anonimity even the worst scammer can try the scam. It's all relative.