Concerning Art of Stealth 17 JANUARY - JASON
We (Valve) have identified unacceptable behavior involving multiple Steam accounts controlled by the developer of this game, Matan Cohen. The developer appears to have created multiple Steam accounts to post a positive review for their own game. This is a clear violation of our review policy and something we take very seriously.
For these reasons, we are ending our business relationship with Matan Cohen and removing this game from sale. If you have previously purchased this game, it will remain accessible in your Steam library.
In particular, an "activation key" can grant access to a purchased game only to consumers in a particular EU Member State (for example the Czech Republic or Poland).
This may amount to a breach of EU competition rules by reducing cross-border competition as a result of restricting so-called "parallel trade" within the Single Market and preventing consumers from buying cheaper games that may be available in other Member States.
He keeps the details of the exploit “intentionally vague” due to its nature, but a user named DirtDiglett, who claims to be a web developer, has replied with a little more insight. DirtDiglett says “with the right know-how, a malicious user” could do the following to you, if you view his or her profile:
Redirect you to any non-Steam page. This could be used as part of a phishing scam, wherein you see a non-Steam page disguised as a legitimate Steam profile. Navigate away and you're shown what looks like a Steam login page. Nothing too unusual about that, if you think you're still on Steam, so you enter your details.
Utilise scripting to use your Steam Market funds on any item the malicious user chooses; you wouldn't even need to confirm anything as you're on a valid login session.
Manipulate elements on the page as they see fit.
DirtDiglett suggests you triple-check the URL of any website you navigate to before doing anything with your information, enable ‘display Steam URL address bar when available’ in Steam’s settings, and avoid viewing profiles of anyone you don’t know.
R3TR1X’s advice is similar:
If you think you might be affected, R3TR1X advises changing your Steam Account password, enabling mobile authentication if it’s not on already (otherwise deauthorise Steam Guard on all systems), and then restart your modem/change your IP and consider a malware/virus scan.
R3TR1X and DirtDiglett both seem confident Valve will be taking action. Until we hear more, though, take extra care when using Steam’s social features. Here's the announcement in full.
second_base wrote:You need to fuck off now...like right now dude.
Parv wrote:Edwin has been my least favourite forumite for a long time now.
Everything on the internet is 100% true.
– Abraham Lincoln
Users browsing this forum: No registered users and 2 guests