I'm just gonna quote your username on this
dafuqbro
Comment has been collapsed.
That is the way that you add something to a variable without repeating the variable name, however pretty much every language ever works that way.
Comment has been collapsed.
What you did not understand? Famous CS:GO streamers are getting they steam hacked, from hackers who knows only their ID's. Pro players too. Posted that just for heads up. There is some kind of exploit that you can change a pw of steam just knowing the ID of it. jeez whenever i post some topic i always get the same result
Comment has been collapsed.
There are people with good skills, even if hackers.
edit: seems they're just exploiters, not good hackers :/ Good I have mobile authentication on.
Comment has been collapsed.
Sigh.
That's probably because the message you wanna get across isn't clear enough. Making a topic about "famous streamers" getting hacked.. well, that doesn't affect or even interest most of the users here, I'd assume.
Also your original message didn't include anything about how they hack but I see that you added the "ID" part, so it is clearer now.
Comment has been collapsed.
"That's probably because the message you wanna get across isn't clear enough. Making a topic about "famous streamers" getting hacked.. well, that doesn't affect or even interest most of the users here, I'd assume." This.
Comment has been collapsed.
How do you know they only know their IDs?
Oh, my, god. You're one of them, aren't you.
Comment has been collapsed.
Because a guy today was offering to get your stolen accounts back just by asking for login name, I tried it with one of my accounts, and yea he changed it. I am assuming he sold that exploit to some hackers and now they are hacking those streamers, tho i don't know how they bypass the steam guard, but it is possible..
Comment has been collapsed.
Remove your post. The exploit is still possible, and therefore should not be advertised.
Comment has been collapsed.
Deleted the link and explanation, but it's everywhere, and OP's link should also be deleted...
FUUUUUU VALVE
Comment has been collapsed.
It is everywhere, but if we can make it at least a little bit harder to find, it's better. Thanks for deleting :)
Comment has been collapsed.
Wow. I'm a software QA Engineer and this is just amateur. Whoever let this through at Valve needs to be fired.
Comment has been collapsed.
Way to protect yourself could be to turn on steam mobile authentication on your phone. That happens to non-streamers as well, so be careful..
Comment has been collapsed.
Sadly I've read horror stories about mobile authenticator on reddit that people lost access to their accounts if anything goes wrong with the app.
Comment has been collapsed.
I did it on my second account and it f**king worked ._. (that was like 10 minutes ago)...I think its fixed now....
Comment has been collapsed.
Basically i know how to do it but i wont type it here so people wont troll their friends, what i can say mobile phone auth wont work i guess
Comment has been collapsed.
I guess you can't do it anymore... At least i can't anymore.
Tried with my 3 alt accounts. 1 worked like 30mins ago the other 2 dont work now.
Comment has been collapsed.
I won't post the exploit, I will post the security measure.
Never post your username. Your screen name, should not be your username.
That, is your username. What you use to log in, and should not be public. It is essentially a 2nd password to your account. You do not need to tell anyone it, and you do not use your screen name as it.
Comment has been collapsed.
A new screen name isn't out of the question, if it's for security's sake.
Comment has been collapsed.
What's the point of changing your screen name when you already created the account with that name? If you change it, people will still be able to see your previous screen names on your profile.
Comment has been collapsed.
You can do like i did and change your name 10 times. Steam only remembers the last 10 names you used. There is no way to see farther back than that.
Comment has been collapsed.
I don't get it man, maybe I am misunderstanding your post, but, isn´t the "screen name" the Steam ID? what's the point of hiding it if I can simply go to your profile and see your ID in the URL...I am probably misunderstanding your words
Edit: someone just explained to me the difference between custom url and screen name, my bad!
Comment has been collapsed.
Its fixed. You can try it. I tried it on my main and my second account just now. It doesn't work.
Comment has been collapsed.
I just did try it, on a friend's account, with their permission. It still works. I won't say how, but it still works, in a specific way. Delete the post please.
Comment has been collapsed.
Oh okay, I deleted it....You could post on reddit or on steam support so they can fix it....Sorry by the way :)
Comment has been collapsed.
I've reported it to the right people, It should be fixed soon too.
Comment has been collapsed.
Okay,they better fix it....I just don't understand,how could a company like Valve make such a mistake....
Comment has been collapsed.
My thought exactly. How could they not tested it....Its common sense that if you do something, let's say make a game/update/mod/ whatever in the world, the first thing you would do would be testing it. Its VALVE for f**k sake...
Comment has been collapsed.
Well holy fuck, that's the kind of thing anyone could have discovered by accident. I was expecting some sort of skill or work to be involved. That's weak from Valve.
Comment has been collapsed.
Part of it is fixed. Part of it is still live, and working. I would wait for official confirmation from Steam before saying it's fixed, or at the very least, SteamDB.
Comment has been collapsed.
What you mean ? You can't do it using a browser or the Steam app.
Comment has been collapsed.
Won't publicly say how, but tested as of 5 minutes ago, and it's working. Steam employees are aware.
Comment has been collapsed.
How ? When doing it in a browser keeps saying "Wrong code" or w/e, and if you use Steam app it will only show you a blank screen. At least for me
Try to do it know to confirm.
Comment has been collapsed.
1 )"Famous streamers's steam accounts getting hacked just by their ID"
2) Way to protect yourself could be to turn on steam mobile authentication on your phone.
NO. This is suspicious. "Streamers" hacked to discover Steam-users mobile phone numbers?
Comment has been collapsed.
Password resets trigger temporary trade bans. So people affected will still have their items. Users of the exploit may get IP bans so don't be one of those people. Its pretty easy find the exploit. How Valve could make such a mistake is beyond me.
Comment has been collapsed.
When you log in with new device of course it will activate 7 days security period.
Comment has been collapsed.
As per the thread, its been fixed. Good thing no one knows my steam ID. shrugs
Comment has been collapsed.
Thats the thing I can not comprehend.
The way to know someone's ID is to simply check their Steam profile and check the ID at the URL... Why is everyone recommending to hide your ID if everyone can easily see it. I can see your ID in this precise moment: its Z..... maybe I am retarded and I am confusing the meaning of ID with another thing
Comment has been collapsed.
Log in information is not same as custom url or your name... at least not for me :p
Comment has been collapsed.
Oh, I get it now haha I was totally confused between ID and custom URL... thanks for the clarification
Comment has been collapsed.
It's account name - the thing you type in when you log in and appears at the top right of your client/browser near your balance. It can be totally different from your profile name or custom url.
Easy to get confused though, I once had a very experienced Steam user ask me why I blanked out my account name when showing him a screenshot of my inventory. He didn't know that account name and profile name could be different even if you never change your profile name, stating incorrectly that he knew my account name was GBEE99. I've seen his and his was the same as his profile name.
Edit: Sorry you already know - got interrupted in the middle of typing that, hence the slow reply.
Comment has been collapsed.
That's just some big f**kup from Steam .. no hacking involved in any way.
Also I'm wondering how the reddit OP can claim he lost all his items from this (4 days ago he says).. a password change triggers an automatic 7 day trade-ban and the hijacker can't just put back the same password and wait without you noticing, so the hijacker changed the password, then OP didn't notice the password change for 7 days ??
Comment has been collapsed.
some people not visiting their steam for more than 7 days, there is a real life outside and they can be busy with it to not pay attention
Comment has been collapsed.
so it already fixed now ?
can't reset my old acc created 4 years ago
this maybe my last chance getting it after yahoo mail associated with it recycled already :(
Comment has been collapsed.
I've been using winauth for many years for all my authenticators in mmo's. The recent beta added steam support. The benefit to the windows open-source version is you don't need a specific phone. It's very safe as I can attest. For reference, I use winauth for my battle.net account, guild wars 2, wildstar, trion (rift, archaege, defiance), steam, and my generic google authenticator for my gmail account. It's basically an all in one and you can export it all for backup purposes, so I'm never worried about losing anything. My previous link was the current beta version but the site is here if you want to read more.
Comment has been collapsed.
Thanks. I do use it but didn't notice it now has Steam and Live support.
Comment has been collapsed.
I don't think you have to worry about this if you have steam guard enabled. Someone found a way to trick steam into letting them reset your password to anything they want, but when they try to login to your account from a new computer steam guard should require them to get a verification from your email account linked to steam.
So you would need to have steam guard disabled and the person hacking you would need to know the username that you use on the login screen for steam.
Comment has been collapsed.
Still not any annoucements from Steam as far as I know?
Comment has been collapsed.
Please remove the link. You're directing people to the exploit.
Comment has been collapsed.
Aye, the reddit discussion with the "How-To" video a few lines down from the top. Now that it has been fixed, the point is moot, but for a short period of time when it was like "Hey! Try this out!" In the future, please be careful when linking to discussions about exploits. I myself make it a point never to include such links for precisely that reason. You never know what someone else is going to link to add to the discussion.
Comment has been collapsed.
ye, but i went to sleep after i posted the discussion so didnt really look at the comments nor saw the video.. sry
Comment has been collapsed.
I think it has been fixed already and anyone that wants to know only needs to take a few seconds to google it.
Comment has been collapsed.
It has been fixed, by now, but it wasn't fixed at the time of my posting. If someone else wants to do the legwork to find out how to use an exploit, that's on them. I'd rather not be the guy that helped them to it.
Comment has been collapsed.
???could be this the reason why steam is down right now???
(???steam is doing a maintenance right now???)
Comment has been collapsed.
Had a friend start posting random crap to everyone, account was hacked from CS:GO
Comment has been collapsed.
Fuck yes ! Weed is such a stupid motherfucker,always reporting guys that are better than him and always getting carried on csgo games... enjoy scam :D
Comment has been collapsed.
No way Steam is learning anything i have on my mobile ...
Plus, these are all just lies. Even if they got their ID's, they would need their webmail accounts too to get access which is quite impossible.
Nough talking, Twitch or other programs the streamers use may have the exploits, not Steam. I would rather believe it is a conspiracy involving E.T. himself rather than that.
Comment has been collapsed.
whenever you connect from a different PC or generally a new device to Steam, an email is being sent to you with an extra code. Once you insert that code, you can proceed and login to Steam. Even if you have the password, you cannot connect to Steam unless you have that code.
And as soon as that code is delivered to you by email, you do need your email. This is why i said that this story is a lie
Comment has been collapsed.
Famous streamers's steam accounts getting hacked just by their ID,it's some kind of exploit.(CS:GO streamers) one of the biggest names with one of the biggest inventories. So far known hacked streamers: Summit, Weeds, goldglove,m0e,olofmeister
Reddit discussion: https://www.reddit.com/r/Steam/comments/3elt4w/several_twitch_streamers_just_got_hijacked_and/
Way to protect yourself could be to turn on steam mobile authentication on your phone. That happens to non-streamers as well, so be careful..
Comment has been collapsed.