Password for trades

[r9]

Let the owner set a password specifically for all the trade offers in the inventory settings / privacy settings so this will add to the security layers of account and also stops scammers / hijackers to steal the inventory even if they get into the acount in any way. ( phishing / whatever else ) as this password cannot be phished ( because it is not included in login information ).


some interesting obv not scammer-support people would say " Uh what if people get into your account and set a password for it and use it as ransomeware ? Uh you cannot do anything about scammers let us do our thing and steal your money "
If someone enters your account , try to attepmt to steal your inventory ( without the password ofc ) then after doing it , lock it with his password and get away , then you will contact steam support anyways to report the hijack / scam / inventory theft anyways and you will include this matter in the ticket . " The hijacker also locked my " empty " inventory with a password ". clear enough ?
" Uh what happens to our online non-steam trades we will be broken we will lose our life due to this password we cannot make money by trading from steam "
Hey , you can still confirm your trade offer with your password anyways. don't worry. if valve put this on action , they will figure out.

[Zarineth]

Why do you need yet another password, that someone will give away to scammer?

[r9]

Originally posted by Zarineth:

Why do you need yet another password, that someone will give away to scammer?

who gives away to scammer? why do we need ? i clearly explained in the op. and I know its you again. go ahead do your thing

[Gwarsbane]

Or how about people stop giving away their login info to people and sites that ask for it....

There is already enough security, you can't fix people giving away their information. If this gets put in, it will just be one more thing the phishers ask for and people give them... then there will be someone else asking for more security.... and so on and so on...

Soon we'll have 6000 passwords to do everything even launch games, and then someone will give away all their passwords and wonder why Valve didn't add 6000 and 1 password requirements....


So no, I'm sick of having to put up with more security because people give away their info. Don't give away your info, don't log into 3rd party sites, don't click on links from random people, or even your friends without knowing what it goes to and stuff like that and you won't have a problem.

[Ben Lubar]

The password can be phished because people will always fall for very obvious scams no matter how many roadblocks there are between a legitimate user and doing the thing the legitimate user wants to do.

[Zarineth]

Originally posted by rvn:

Originally posted by Zarineth:

Why do you need yet another password, that someone will give away to scammer?

who gives away to scammer? why do we need ? i clearly explained in the op. and I know its you again. go ahead do your thing

"To lift your trade ban, we need you to provide your trade password". I just broke your security system.

Also I am not sure who are you mistaking me with, but whatever.

[Gwarsbane]

Originally posted by rvn:

Originally posted by Zarineth:

Why do you need yet another password, that someone will give away to scammer?

who gives away to scammer? why do we need ? i clearly explained in the op. and I know its you again. go ahead do your thing

Because people fall for the dumbest things....

"I accidentally reported you on Steam, you need to talk to a Steam admin here on this 100% totally unrelated website."

"I'm a Steam admin, and you have been reported to have fake items in your inventory, I need your login info to log into your account to check to see if they are fake or not."

"I'm a Steam admin, you can tell cause the colors in my chat are different"

"Thank you for signing up to we are totally not scammers wink wink website. Please include all your steam login info so that we can allow you to trade with other users on our site."


And so on and so on.... and because of those people we have to suffer with the security we already have that we shouldn't need.

We don't need more, people just need to stop doing dumb stuff.

[r9]

Originally posted by Ben Lubar:

The password can be phished because people will always fall for very obvious scams no matter how many roadblocks there are between a legitimate user and doing the thing the legitimate user wants to do.

It cannot be phished. this is a security layer for those big amount of people who did not know this item theft is happening to them. unwanted trade offers sent out from their accounts. this will add to the security of our inventory. yes, if they trick you , if you fall to give up your password, sure. but there is no way for this pw to be phished and leaked as you do not need to enter it anywhere else but inside the steam + only when sending the trade offer.

[r9]

Originally posted by Zarineth:

Originally posted by rvn:

who gives away to scammer? why do we need ? i clearly explained in the op. and I know its you again. go ahead do your thing

"To lift your trade ban, we need you to provide your trade password". I just broke your security system.

Also I am not sure who are you mistaking me with, but whatever.

What do you mean ? if you have to comment something be clear about it. if what you mean is people get tricked to give up the pw , well good for the scammers. this pw is just a addition to security so scammers / hijackers will not be able to just get into the account , send the trades out , bypass the steamguard , and enjoy free money. they will need this pw and they cannot have access to it. its only in your hands.

[Ben Lubar]

I see so many threads from people asking "is this a scam" about the exact same very obvious scam they fell for.

[r9]

Originally posted by Ben Lubar:

I see so many threads from people asking "is this a scam" about the exact same very obvious scam they fell for.

Yeah but you don't have to give up your trade pw . you are the only one who can send out the trades from your account because only you know the pw and no one else needs this in any form and way.

[Zarineth]

Originally posted by rvn:

Originally posted by Zarineth:

"To lift your trade ban, we need you to provide your trade password". I just broke your security system.

Also I am not sure who are you mistaking me with, but whatever.

What do you mean ? if you have to comment something be clear about it. if what you mean is people get tricked to give up the pw , well good for the scammers. this pw is just a addition to security so scammers / hijackers will not be able to just get into the account , send the trades out , bypass the steamguard , and enjoy free money. they will need this pw and they cannot have access to it. its only in your hands.

I just told you how to bypass your idea if the scammer is already on account. If you keep your account secure, why do you need another password?

[Ben Lubar]

Originally posted by rvn:

Originally posted by Ben Lubar:

I see so many threads from people asking "is this a scam" about the exact same very obvious scam they fell for.

Yeah but you don't have to give up your trade pw . you are the only one who can send out the trades from your account because only you know the pw and no one else needs this in any form and way.

You also don't have to give out your normal password. And yet people do. And then also provide the third party site with their authenticator code just to make sure that the third party scam site can log into their account.

[r9]

Originally posted by Ben Lubar:

Originally posted by rvn:

Yeah but you don't have to give up your trade pw . you are the only one who can send out the trades from your account because only you know the pw and no one else needs this in any form and way.

You also don't have to give out your normal password. And yet people do. And then also provide the third party site with their authenticator code just to make sure that the third party scam site can log into their account.

hey those infos and logins are achievable okay ? you just fall for it anyways you get phished or whatever. they also bypass the steamguard they have many ways. but this password will add to the security and will make it much much harder for them to just steal the inventory. as this pw is not needed to be put anywhere else but only when sending trades. this cannot be stolen.

[Ben Lubar]

The most common way I've seen to phish account details is with a fake window showing a fake Steam login screen. They could very easily make a fake trading UI that asks for your real password.

[r9]

Originally posted by Ben Lubar:

The most common way I've seen to phish account details is with a fake window showing a fake Steam login screen. They could very easily make a fake trading UI that asks for your real password.

not if u trade inside the steam app . well if ppl fall for this too , this is ovb their responsibility aswell... this helps people who know a bit about how this works better. but its always better to make security tighter