Seriously? Email Verification for EVERY Trade?

[curry]

Why are you trying to please these people that get their accounts stolen? The trade window is still bugged, and you're busy inventing new ways to make trading more difficult.

[Midnight Sky ✨🌙✨]

You can turn it off if you're confident in your ability to not get phished.

[curry]

Oh. Wheres that option at?

[hotdogPi]

privacy settings

[curry]

Thanks.

[†[BeaN]†]

can someone explain to me how this helps? Wouldn't someone have to hack my account and doesn't steaguard prevent exactly that from happening? It's like re-steamguarding for every trade. How does this prevent...whatever it's meant to prevent? Sorry if I don't understand the criminal mind =/ Seriously curious.

[curry]

I'm confused a bit now too. I thought I was safe as long as I didn't pay any mind to someone sending me links through steam. Is there some kind of new security breach going around?

[Matt]

TOP Curry eredeti hozzászólása:

I'm confused a bit now too. I thought I was safe as long as I didn't pay any mind to someone sending me links through steam. Is there some kind of new security breach going around?

There never was a security breach to begin with. This recent change (email confirmation) helps protect against the link that upon clicking will trade off your items in a trade offer. It's best to leave this setting to "enabled."

[curry]

Hi Matt, so should my understanding be that someone could access my "confirm trade" link without my assistance? or have things like this typically happened within a web browser, because I always use the Steam client to respond to offers.

I understand why you guys wouldn't want to be 100% transparent in this case, but I feel like I need to know more before I can decide for myself whether I need to take further precautions.

[Matt]

The scammer doesn't have to access anything. They simply send you a web link that appears to be an image. However, it is not actually an image. It's really a script that gets run on your own computer. It then sends your items via a trade request to the scammer. And the whole process happens fast. It's that simple. Thus, this new security protection is good to keep enabled. In the event you accidentally click one of these links, you'll have to confirm the trade via email.

[†[BeaN]†]

Thanks for the explanation Matt. I don't think I've ever seen this behavior before as I mostly sent offers and what not but it's good to know not to click images/links from people I don't know!

[curry]

Thats incredible. It all makes sense now. Thanks Matt.

[Teksura]

Also, if you believe the guys who write and distributed these phising scripts, the new system works.

https://i.imgur.com/ai2nLRQ.jpg



Honestly, I'd be really happy with the new system if it sent all of my incoming trade requests directly to my email, rather than having me check them directly through steam. I do a lot of trading, and while I have access to my email when I'm out of the house, I can't access any steam trading via my movile device.

[curry]

oh god its an image link!

[Ganger]

Would it not be easyer too stop links being sent in first place instead of the email. They is no need for links to be sent via chat.

[Teksura]

Ganger eredeti hozzászólása:

Would it not be easyer too stop links being sent in first place instead of the email. They is no need for links to be sent via chat.

I can't count the number of times I've had to send links via chat clients. I'd say there is plenty need to send them, espcially when you're talking to someone who isn't that good with Google, or when you're trying to show them something in specific.