Sign In
Create Account
Follow Us on Twitter
Subscribe on Youtube
6
Steam Forums Apparently Hacked
Suggestion: If your steam forum and steam account username/passwords are the same, I'd change them asap.
I don't understand why there weren't any emails sent out about this...
22 replies to this topic
#1
Posted 07 November 2011 - 06:01 PM
lethalwire
-
- Members
-
- 748 posts
while(false){ ... }
- Programming Language:Java, PHP
- Learning:Java, PHP
Back to top|
|
|
#2
Posted 07 November 2011 - 11:30 PM
Alexander
-
- Moderators
-
- 4,120 posts
It's Science!
- Location:Vancouver, Eh! Cleverness: 200
I had changed my password the other day for another reason, finally had repaired a gaming computer to working condition and forgot my login.
Makes me think, they use vBulletin rather than a custom built forum, hopefully they report to vBulletin what had happened in case it may be an unknown exploit kit.
Makes me think, they use vBulletin rather than a custom built forum, hopefully they report to vBulletin what had happened in case it may be an unknown exploit kit.
Be sure to read the updated FAQ! || Health is achieved through the same 10,000 steps.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.
#3
Posted 10 November 2011 - 04:29 PM
lethalwire
-
- Members
-
- 748 posts
while(false){ ... }
- Programming Language:Java, PHP
- Learning:Java, PHP
#4
Posted 10 November 2011 - 06:38 PM
mebob
-
- Members
-
- 490 posts
Programming Expert
Wow, I'm definitely glad my I don't have any important info on file there
Latinamne loqueris?
#5
Posted 10 November 2011 - 09:27 PM
RhetoricalRuvim
-
- Members
-
- 1,254 posts
JavaScript Programmer
- Location:C:\Countries\US
What is this Steam stuff all about?
#6
Posted 10 November 2011 - 10:39 PM
Alexander
-
- Moderators
-
- 4,120 posts
It's Science!
- Location:Vancouver, Eh! Cleverness: 200
RhetoricalRuvim said:
What is this Steam stuff all about?
It contains a lot of features for game management (updates, achievements, in-game chat) and most of the popular games out there and so it has a lot of people.
Be sure to read the updated FAQ! || Health is achieved through the same 10,000 steps.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.
#7
Posted 11 November 2011 - 07:27 AM
rk0r
-
- Members
-
- 20 posts
Newbie
I would have thought being so inventive by making games and connecting the users together with their infrastructure Steam would have hired a private team of coders to secure their Forums \ Pen Testers for their servers. :pinguin:
#8
Posted 11 November 2011 - 01:25 PM
RhetoricalRuvim
-
- Members
-
- 1,254 posts
JavaScript Programmer
- Location:C:\Countries\US
How does a forum get hacked?
#9
Posted 14 November 2011 - 12:17 AM
rk0r
-
- Members
-
- 20 posts
Newbie
Exploited by SQL injection.
:D
:D
RhetoricalRuvim said:
How does a forum get hacked?
#10
Posted 14 November 2011 - 12:22 AM
RhetoricalRuvim
-
- Members
-
- 1,254 posts
JavaScript Programmer
- Location:C:\Countries\US
So I guess server-side code should be more careful about what "values" it sends to the database.
* * *
I wonder if using files, instead of a database, would fix the problem. Like have all the names in one file, one name per line, and all the birthdays in another file, corresponding line number, etc.
* * *
I wonder if using files, instead of a database, would fix the problem. Like have all the names in one file, one name per line, and all the birthdays in another file, corresponding line number, etc.
#11
Posted 14 November 2011 - 01:11 AM
wim DC
-
- Members
-
- 2,084 posts
Writes binary right handed and hex left handed
- Programming Language:Java, JavaScript, PL/SQL
- Learning:Java
RhetoricalRuvim said:
I wonder if using files, instead of a database, would fix the problem. Like have all the names in one file, one name per line, and all the birthdays in another file, corresponding line number, etc.
Not to mention the performance hit you're likely to get.
#12
Posted 14 November 2011 - 01:48 AM
rk0r
-
- Members
-
- 20 posts
Newbie
One way to prevent this from happening again would be to air gap their online forums from the sensitive data. IMO companies should never hold personal details online i.e. CC# and address etc or even link it to an online forum.
Steam need to get their developers to write a new forum instead of using Vbulletin.
Steam need to get their developers to write a new forum instead of using Vbulletin.
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
