A login that does not have full access

[shak59]

With the rise of cloud gaming I would like a type of login that still uses two factor like usual but does NOT have access to the full account and can not edit the account, change passwords etc. So just to play my games with cloud saves in the cloud gaming providers.

I am worried if they get and change password or sell inventory or their support gets compromised.

So simple access, just for cloud gaming, with cloud saves active like usual.

It could be a tick box in the 2 factor authorisation on the steam mobile app or “what access would you like to give - full, limited Buttons”

[HikariLight]

Only ONE system can login to a single Steam account at a time.

If you want to share games, set up a family share.

Steam states that ONLY the account owner should have access.
The account owner is the user who created the account.
No one else should have access.

[shak59]

Originally posted by HikariLight:

Only ONE system can login to a single Steam account at a time.

If you want to share games, set up a family share.

Steam states that ONLY the account owner should have access.
The account owner is the user who created the account.
No one else should have access.

None of this is true.

I am talking about cloud gaming, which is 100% supported by steam.

[Tito Shivan]

Has anyone ever had their account compromised because of a login in a cloud service?

[BloodShed]

Originally posted by Tito Shivan:

Has anyone ever had their account compromised because of a login in a cloud service?

Never heard it happened.
And I highly doubt it even possible.

You would have to 'leak' account credentials to scam site through the cloud service.

[shak59]

Originally posted by BloodShed:

Originally posted by Tito Shivan:

Has anyone ever had their account compromised because of a login in a cloud service?

Never heard it happened.
And I highly doubt it even possible.

You would have to 'leak' account credentials to scam site through the cloud service.

To play games on the cloud sites you literally fully login. It's not the API login...The only thing stopping a compromise is trust. And that is not long term stable.

[sandokanski]

That's level of paranoid that almost as bad as "I'm afraid that a Steam employee will steal my account". In that case, just don't use Steam. Or you're going to have nightmares all night long about Steam employees doing bad things.

Anyway, I do believe you want to sell your account temporarily to strangers, and you want that they have limited access. That's much more plausible explanation, The paranoid one is possible, but 99% of the time it will not be it.

[shak59]

Originally posted by sandokanski:

That's level of paranoid that almost as bad as "I'm afraid that a Steam employee will steal my account". In that case, just don't use Steam. Or you're going to have nightmares all night long about Steam employees doing bad things.

Anyway, I do believe you want to sell your account temporarily to strangers, and you want that they have limited access. That's much more plausible explanation, The paranoid one is possible, but 99% of the time it will not be it.

Not a steam employee, THE CLOUD EMPLOYEE.

They can disconnect the connection, quick sell or tradde out your inventory and be done before you realise because you think you closed the window.

Then change you password to twist it further.

There is currently no protection against this and 6% of steam users use cloud services.

[sandokanski]

Originally posted by shak59:

Not a steam employee, THE CLOUD EMPLOYEE.

They can disconnect the connection, quick sell or tradde out your inventory and be done before you realise because you think you closed the window.

Then change you password to twist it further.

There is currently no protection against this and 6% of steam users use cloud services.

There is no protection against rogue Steam employees either. They can leak the whole user database to the dark web, so your account is already compromised. Just the hacker that goes through the data isn't working fast enough, but very soon he will reach to the data of your account.

The cloud employee is also working slowly. He needs another week to get to your cloud connection. There are just too many users that have to be robbed.

[BloodShed]

Originally posted by shak59:

Originally posted by BloodShed:

Never heard it happened.
And I highly doubt it even possible.

You would have to 'leak' account credentials to scam site through the cloud service.

To play games on the cloud sites you literally fully login. It's not the API login...The only thing stopping a compromise is trust. And that is not long term stable.

That is very unlikely to happen, if not outright impossible.

[sandokanski]

Originally posted by BloodShed:

That is very unlikely to happen, if not outright impossible.

It is as possible as your average ISP rogue employee can take over your connections. What he would suggest? That Steam runs an optic cable directly to your home?

[Tito Shivan]

Originally posted by shak59:

To play games on the cloud sites you literally fully login. It's not the API login...The only thing stopping a compromise is trust. And that is not long term stable.

Not much different than when you log from a cybercafe.

[shak59]

Originally posted by Tito Shivan:

Originally posted by shak59:

To play games on the cloud sites you literally fully login. It's not the API login...The only thing stopping a compromise is trust. And that is not long term stable.

Not much different than when you log from a cybercafe.

When you logout from a cybercafe you can see it log out.

With a cloud you disconnect the cloud connection and hope it signed you out. If it didn't sign you out you would not know.

[nullable]

If you don't trust the cloud service and worry their employees will steal accounts, then don't use that service.

[rawWwRrr]

Originally posted by shak59:

Originally posted by Tito Shivan:

Not much different than when you log from a cybercafe.

When you logout from a cybercafe you can see it log out.

Assuming there wasn't a keylogger or some other malicious software capturing your login credentials.

You solve this with an alt account that you family share with it. Enable parental controls on the alt child account to lock it down and then use that alt for the cloud service login. If it gets jacked, you use your main/adult account to recover it from the family menu and stop using that cloud service.

[Tito Shivan]

Originally posted by shak59:

When you logout from a cybercafe you can see it log out.

IF you log out.