Steam Loophole + Spyware

[OhMyToast]

Hey guys, so recently I've been downloading a lot of stuff and unfortunately I got some spyware/malware that completely bypassed the mobile authenticator in terms of selling items at a low price (under a dollar) to bypass 2nd authenticator. This is a big problem because steam doesn't allow you to enable or disable if you'd like a popup notification or your phone if you're selling an item for under a dollar even though the item can be worth much more. I believe they used my login token to gain access on steam in a browser, this isn't an API scam because they never had my api key, it was never registered. I lost around 600 dollars worth of items that they only got 100 dollars for themselves. This is my fault but for Valve, a multi billionaire company to not have the option to request authentications on your phone for items worth less than a dollar (for security reasons) is terrible. I like steam as much as the next guy but I can't help but think that my items could've been safe safe if the mobile authenticator notified me of listings and purchases I've made.

[iepurooy]

Hy there, I am sorry for you but I think it would be better to reach directly to steam support for this issue and next time get an anti-virus if you download unsafe apps

[OhMyToast]

Publicado originalmente por Scraureskrr:

Hy there, I am sorry for you but I think it would be better to reach directly to steam support for this issue and next time get an anti-virus if you download unsafe apps

This is just a heads up to anyone who downloads anything they shouldn't and I want people to be aware of this, I don't think steam gives a ♥♥♥♥ about what I have to say in particular

[Cathulhu]

You are responsible for the security of your account, your computer and all actions on those.
You failed to secure your computer and account properly, now you have to deal with the consequences of your actions.

[OhMyToast]

But it could happen to anyone, login tokens are easy to get your hands on. One mistake I had was that I didn't have family share activated, didn't actually know that was a thing before. Heres the thing though, you're missing my point. Let's say someone at your house has access to your computer, you have your login token activated so they go ahead and go into steam and list all your expensive items for less than a dollar. could happen anywhere anytime like you lend your pc at a party or sometying. My point is, however. Steam a platform that I trust and lost things that I found valuable is a result of not being able to be notified ON THE PHONE when selling items at less than a dollar, and Steam doesn't give two flying ♥♥♥♥♥ because they earn a small cut of my valuables that are sold. It's literally one gap, one sneaky scheme that certain people take advantage of, and it needs to be heard! you click one link by accident and boom now somebody has your login token and you loose all your cases or whatever. I find it rude how people are critisizing it , cause its literally just one function that should be activated by default right? ("Do you want to be notified when selling things under a dollar?") I don't really care that I lost 600 dollars all I want to do is share my opinion on the safety of the mobile authenticator regarding the steam community market. And I also did the maths, steam earned around 30 dollars on me getting my login token comprised, so it's win win for steam and the Russian. My point being x2 steam isn't working with you they are also working against you, and is why I'm writing this because it is ridiculous. Anyways, thanks for responding.

Publicado originalmente por Cathulhu:

You are responsible for the security of your account, your computer and all actions on those.
You failed to secure your computer and account properly, now you have to deal with the consequences of your actions.

[Cathulhu]

Publicado originalmente por OhMyToast:

But it could happen to anyone, login tokens are easy to get your hands on.

Only if you are stupid enough to give them away like candy.

Publicado originalmente por OhMyToast:

One mistake I had was that I didn't have family share activated, didn't actually know that was a thing before. Heres the thing though, you're missing my point. Let's say someone at your house has access to your computer, you have your login token activated so they go ahead and go into steam and list all your expensive items for less than a dollar.

Again, your problem. Why is the computer not locked? Just press Win+L when you leave the PC.
You are responsible for the security of your account and your computer. You are also responsible for all actions on your account and your computer, no matter who used them.

Publicado originalmente por OhMyToast:

could happen anywhere anytime like you lend your pc at a party or sometying.

You are not allowed to give anyone access to your account. Account sharing is grounds for a permanent account suspension or even account termination.

Publicado originalmente por OhMyToast:

My point is, however. Steam a platform that I trust and lost things that I found valuable is a result of not being able to be notified ON THE PHONE when selling items at less than a dollar, and Steam doesn't give two flying ♥♥♥♥♥ because they earn a small cut of my valuables that are sold.

I suspect Valve should stop trusting you if you are that careless about account and computer security.

Publicado originalmente por OhMyToast:

It's literally one gap, one sneaky scheme that certain people take advantage of, and it needs to be heard!

You are the gap, not Steam.

Publicado originalmente por OhMyToast:

you click one link by accident and boom now somebody has your login token

Wrong, just clicking a link will not reveal that token. You have to actively help giving over that information.

Publicado originalmente por Cathulhu:

You are responsible for the security of your account, your computer and all actions on those.
You failed to secure your computer and account properly, now you have to deal with the consequences of your actions.

This statement is still correct.