Browse
Category
DiscussionsUncategorized

A random lv1 Steam account activated my Indie Gala gift link

Closed
faragona

So today I found out that, two days ago, a random user has activated my Lume gift link on Indie Gala, which I saved locally on my computer. This meant that the security system of Indie Gala sucks really bad, and you should be careful in the future.

I've sent an email to their support. I don't think they can do much about this matter, except removing the game from the other person account, but I do hope they can take a good look at their system and improve it.

Screenshot.

Update: support gave me another key (not link) for Lume, and said that they will investigate the matter deeper. That's it for now.

10 years ago*

Comment has been collapsed.

25 Comments
aforce273

The other possibility is that their system is flawed and gave both of you the same gift link. No? Either way, it's concerning.

10 years ago
Permalink

Comment has been collapsed.
faragona

They use a system similar to HB, which include a random 32-character query, so the chance that they gave the same gift link to different people are rather slim, even slimmer than the chance that their security system is flawed. And in my case specifically, the account that took my link has only 9 games, non of them but Lume is in the IG bundle, so it is more likely a hacking attempt.

10 years ago
Permalink

Comment has been collapsed.
Laptoprocker

as long as it's possible it can happen

10 years ago
Permalink

Comment has been collapsed.
GamingMaster424

Thanks for the heads up. This is actually the second time I've heard this story, so their security system needs some serious fixing.

10 years ago
Permalink

Comment has been collapsed.
Yellowpages2012

Could it be that some was has hacked/watching your home computer?

10 years ago
Permalink

Comment has been collapsed.
RazielAntemos

^
Users never believe a problem may be on their side.

10 years ago
Permalink

Comment has been collapsed.
Yellowpages2012

Haha! True! :)

10 years ago
Permalink

Comment has been collapsed.
faragona

Well, I'm confident it is not the case, since my HB link right there is not used.

10 years ago
Permalink

Comment has been collapsed.
Enverex

Pretty sure their support MUST do something about it considering they aren't delivering a product you paid them for...

10 years ago
Permalink

Comment has been collapsed.
sviat

Once I got 300K points for free on Galagiveaways, because their system duplicated my points when I removed my entries to one giveaway, so I had more than 600K in total, it happened when their site lagged, so I guess their indiegala site is not better, it always gave problems before.

Also faragona, did you dropped keys for ninjas from your indiegala? I wonder if this can be a problem, because you can even see users email of who tried to redeem it, as I remember.

10 years ago
Permalink

Comment has been collapsed.
faragona

No, I didn't. The last time I drop something is a free beta access for DI:E about 2 weeks ago.

10 years ago
Permalink

Comment has been collapsed.
Mew2

IG's system is messed up in general. You can unredeem gifts from other people's (edit: Indie Gala) accounts, see other people's email addresses, etc. A while back I think you could even log in to other people's accounts.

10 years ago
Permalink

Comment has been collapsed.
GeorgeCZ

for real?

10 years ago
Permalink

Comment has been collapsed.
Sini

Nope

10 years ago
Permalink

Comment has been collapsed.
GamesPlaying

There was a security problem and then they asked everyone to use a password.

Unredeeming is impossible as this requires intervention from Indiegala directly and a very good reason to do so, charge-back, credit card fraud. Something that would make Steam Support intervene and remove the game from account. What up to today is still possible is to disconnect someone from the gifted url from a third party, but this means nothing if key has already been redeemed. You can connect instead of the other disconnected person, but as the key has already been redeemed you end up achieving nothing.

10 years ago
Permalink

Comment has been collapsed.
Mew2

Yeah. What you said.

10 years ago
Permalink

Comment has been collapsed.
bloosh100

doesnt have to mean anything wut im about to say but really, coudlnt that screenshot be useless on here considering u had to block his name. if anyone looked at it, it coudl very well be seen as you blocking your own name just sayin. but yea i believe you. if it was a hack attempt such a low level account could mean its someones alt. anything weird on his friendslist?

10 years ago
Permalink

Comment has been collapsed.
faragona

You can see clearly the difference in length of the name. I did it on purpose since the rule says that calling out = getting banned ;)

10 years ago
Permalink

Comment has been collapsed.
bloosh100

lol yea i know but i just thought of it as silly when i saw it

10 years ago
Permalink

Comment has been collapsed.
Julee

Ask the support to make something. If they dont u can chargeback the money u paid cuz u didnt get the product. Chargebacks are ment for that

10 years ago
Permalink

Comment has been collapsed.
Vapourizer

I'm pretty sure they used a program that kept guessing for links

10 years ago
Permalink

Comment has been collapsed.
Angrygamer

+1 to this, definetely possible

10 years ago
Permalink

Comment has been collapsed.
Axelflox

Welp, just to be safe I went and activated everything on my indie gala account, not like I really trusted them.

10 years ago
Permalink

Comment has been collapsed.
tanim

Did you buy the bundle yourself, or traded gift copy from someone. If it was a gift copy, trader stole it.

10 years ago
Permalink

Comment has been collapsed.
HustlaOG

I remember them saying "activate your keys as soon as possible!".

Well, makes sense now :D

10 years ago
Permalink

Comment has been collapsed.

Closed 10 years ago by faragona.