3 years ago

Comment has been collapsed.

If there isn't should there be one?

View Results
Yes
No
YesNo or NoYes or Yesn't or Meh

I bet most people are going to read the title of the thread and then vote no in the poll not knowing that the poll is a different question.

There is no reason why someone wouldn't want the ability to enter a key on Steam and be able to see information about it without activating it. I really don't see why Steam doesn't at least have the simple ability to enter a key and they tell you what game it is for and if it has been used or not.

3 years ago
Permalink

Comment has been collapsed.

That could be abused to find random steam keys. (By bots and random key generation)

3 years ago
Permalink

Comment has been collapsed.

Not if it works similar to key activation where there's a cooldown period after a certain number of invalid entries.

3 years ago
Permalink

Comment has been collapsed.

They will try it one way or another and it will blow up their server or something~

3 years ago
Permalink

Comment has been collapsed.

If they use the same cooldown system they use now on key activations, then there shouldn't be any more server load than there is now. People can try activating random keys now, so nothing would be changing.

There is no reason people should be trying many invalid keys, so Steam should lock you out after a certain number of failed attempts and then every time you get locked out again, the lockout period should be increased. Maybe you get locked out for a few hours the first time, then a day, a few days, a week, a month, 6 months. You would need to check many thousands of random keys to find a working one, but with a system like this, you will only be able to test a very small number before getting locked out. There is no reason for legitimate people to get locked out that many times and if you do, you deserve it. I have activated over 1000 keys and probably only had 3 or 4 invalid attempts.

3 years ago
Permalink

Comment has been collapsed.

you could make thousands accounts and try tons of possible keys, filter the valid ones and activate/sell them

3 years ago
Permalink

Comment has been collapsed.

Not sell them as far as I understand because as soon as you can tell you have bruteforced a valid key, said key will already be activated but you could still farm them for cards or sell the account if it's a valuable game.

Unless..., no that still wouldn't be viable.

But as we all know there's enough people with plenty criminal energy on the Internet and tons of existing bot farms numbering hundreds, some even thousands of accounts so the potential gain of farming cards and selling accounts would still be incentive enough for them.

3 years ago
Permalink

Comment has been collapsed.

not if you could see if the key is valid, without activating it (what people suggest here)

3 years ago
Permalink

Comment has been collapsed.

Doesn't an account get a timeout after something like 10 failed attempts within a certain time period? You would need to create a massive number of accounts to test enough keys to find a single working one. Also, I think Steam could easily detect thousands of accounts from the same IP address. I would hope when they saw that many connections, they would block them because it would seem like an attack.

Steam could just bypass the normal timeouts and restrict this feature from accounts that are recently created and then only used to test invalid keys. If you create an account and do nothing other than test invalid keys, this feature should immediately be locked for you and not available unless you contact Steam support and give a good reason.

I really don't see this being an issue. They could also just not let new accounts use this feature until certain requirements are met. I don't know what the requirements would be, but maybe something to do with getting achievements in any game that is not free to play. This would make things drastically harder for people trying to create fake accounts while having little to no affect on real accounts.

3 years ago*
Permalink

Comment has been collapsed.

Though bot networks might still be a thing. If such a network consists of compromised computers (e.g. PCs, servers, IoT devices), then they all have different IPs. AFAIK DDoS attacks are still a thing, so this means there must be large bot networks, with maybe millions of bots.

3 years ago*
Permalink

Comment has been collapsed.

this is per account, so just make multiple accounts and no cooldown anymore
as the key isn't activated you can test millions keys at the same time

3 years ago
Permalink

Comment has been collapsed.

there's too many possible key combinations for this to work unless you're using an obscene number of accounts

3 years ago
Permalink

Comment has been collapsed.

Not really. There is absurdly many Steam keys to make guessing possible.

I say this someone who has very much achieved rateless-limit Steam key validation, made program around 4 years ago, which could recover 1-2 missing letters in ~800 milliseconds with success chance of >50% or tell if any key was invalid/used/unused, only missing what and who. (Shame Valve didn't have hackerone at that time)

If you somehow had partial keys, that could be useful.

Still it would take hundred million of years to find valid key from blank.

(Valve quickly patched the method, no need to look for it)

3 years ago
Permalink

Comment has been collapsed.

Yes, there is a way, but not for the user. I can see why only providers can see who used a key, but I would like to identify a game from a key without having to activate it.

3 years ago
Permalink

Comment has been collapsed.

which game does the CD key belong to?

you can check this using Steam Database Add-on IF you already have that game on steam account by entering it on key activation page

3 years ago*
Permalink

Comment has been collapsed.

Hard to know if I own the game, if I don't know which game it is

3 years ago
Permalink

Comment has been collapsed.

To know which game does the CD key belong to, go here. with a script like this chrome extension installed for example, for easier and more convenient game identification.

If the CD key has been used, and your steam account does not own the game the CD key is attached to, then a messsage will appear saying that the CD key is duplicate meaning that it was already used. However, previously, if you redeemed the key on the Steam application key redeemer, it use to pop up a "retrieve account" button which would send an email to the account that is attached to the account the CD key was redeemed on, however it seems they have removed that button. Personally I'm not sure if they send an e-mail automatically if that occurs at this current time.

If you have an unused or suspect to be unused CD key and you want to know what it is without redeeming it, there is another more sneaky, but FLAWED method. You can give it to someone, preferably to someone you trust, who has a LOT of games on steam(or at least owns the games you think it might be) and doesn't mind using the key on his account to check what the key is, preferably with the chrome extension installed on the Steam key redeem website. It would be helpful if you had a clue on what the key redeems, so you could dig through this user's account beforehand, to check if he owns the game you suspect it to be. When he uses the key, he will redeem the key's game content if he does not own the game, and he could tell you, or check his gamelist(if hes not very honest, but that would require more work for you to check upon since he has a LOT of games) for a new game if the profile is public, that's the end of it. If he does own the game, he'll be able to tell you which game it is, and the key will continue to be unused(because you know or suspect that it is). However that still does not tell you if the key is still unredeemed, as someone could have used it by guessing the key by random, revoked by the developer, the user with a LOT of games being sneaky and stealing it and using it on an alternate account, you accidentally leaked it on your online stream, you forgot that you redeemed it yourself a long time ago on your current or old account and now forgot about it, or that your own friend or the Amazon delivery worker accidentally saw it but since he has a photographic memory, decided to use it without you knowing about it. But at least you know what the game is, if he's honest and tells you. After all of that roller-coaster, you could then try it out on your account or give it to someone and see if it actually works, without knowing if it really does or not. The reason why you'd pick someone with a LOT of games, or just someone with the games you think it could be, would be because that he's less likely to redeem/consume the key due his HUGE library of games.

Or, you could, you know, just try the key and see for yourself what it is, knowing that you'll redeem if the key is unused and if you don't own it.
If by some chance you do own it, you could try using an alternate account or give it to a friend without that game and redeem there to verify if the key was previously valid or not.

3 years ago*
Permalink

Comment has been collapsed.

It's most likely, bordering on absolute certainty, intentional.

Even if there weren't concerns like the potential for abuse, you have to keep in mind Valve has no interest in making your 3rd party purchases, which don't net them a single cent, more convenient.
Afterall they want you to buy from Steam and not from Humble, Fanatical or even shady key reseller sites.

Yeah, I know: A 3rd party purchase might make Valve some money later down the road due to follow up purchases like micro-transactions or DLC but I don't think corperations go by that vague kind of rational.

3 years ago*
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.