Pages: [1] 
|
 |
|
 Author
|
Topic: Steam hacked, CC numbers stolen, Valve coverup (Read 3080 times)
|
bhodi
Moderator
Posts: 6817
No lie.
|
It's got all the drama you could ask for! So far they're only sending people who have questions over to this page. Thanks digg. |
|
|
|
« Last Edit: April 18, 2007, 09:33:30 AM by bhodi »
|
|
|
|
|
Trippy
Administrator
Posts: 23657
|
Steam wasn't hacked, a Valve Web site (apparently) was.
|
|
|
|
|
schild
Administrator
Posts: 60350
|
I'm so glad it was hacked by a happy guy. I was worried for a minute he had a grudge or something. Also, what Trippy said, the guy isn't exactly claiming what is implied.
|
|
|
|
|
bhodi
Moderator
Posts: 6817
No lie.
|
They rooted the Cafe webserver, which gave them access to CC numbers and account details. On that forum page, a quote from him: VALVe's security was recently shown for what it really is; no exsistant. A hacker known as MaddoxX recently infiltrated VALVe's web servers, exposing, what should be confidential information, to the public. The hacker managed to gain root
access to the server, meaning they could view anything they wanted (Including Customer Credit Card details, and even
VALVe's current assets). The hacker then ripped the site and created a "Release" ( http://rapidshare.com/files/24958280/CafeHomies-PROViSiON.rar.html) in an attempt to grab VALVe's attention (Who are renouned for poor security). Included in the release are all CAS/CAC files (Including certificates), proving once again that their Cafe program is not as secure as they thought. Valve has yet to fix the exploit the hacker used, and has not yet even replied to him. It has also failed to reveal to it's customers that this event even occured, even though they're private details have been exposed. Please help us to inform the public and VALVe customers of this important news. Access != stolen, I know, but still. Pretty big. No idea why their quickbooks files would be up on a webserver. |
|
|
|
« Last Edit: April 18, 2007, 09:47:50 AM by bhodi »
|
|
|
|
|
Yoru
Moderator
Posts: 4615
the y master, king of bourbon
|
Okay, so someone clarify - do I need to panic if I used Steam to buy something 6 months ago, or do I need to panic if I used Valve Cafe?
|
|
|
|
|
Trippy
Administrator
Posts: 23657
|
Okay, so someone clarify - do I need to panic if I used Steam to buy something 6 months ago, or do I need to panic if I used Valve Cafe?
It sort of sounds like the former considering that server apparently has Valve internal corporate information on it unrelated to the Cafe stuff. |
|
|
|
|
bhodi
Moderator
Posts: 6817
No lie.
|
That webserver was probably the vector into their database clusters, and probably had connection information on it; that was likely how he gained access to customer information.
|
|
|
|
|
|
Azazel
|
When exactly was HL2 released? I need to figure out if I have to get my cards reissued.
|
|
|
|
Trippy
Administrator
Posts: 23657
|
When exactly was HL2 released? I need to figure out if I have to get my cards reissued.
November 16, 2004 according to Wikipedia. |
|
|
|
|
|
Azazel
|
Ah, wiki. good point.
I checked my card, they were all reissued last year, so while the face numbers are the same, the code on the back will be different. Should be ok then.
|
|
|
|
Trippy
Administrator
Posts: 23657
|
Ah, wiki. good point.
I checked my card, they were all reissued last year, so while the face numbers are the same, the code on the back will be different. Should be ok then.
Assuming they even care about that stuff. SOE used to bill my CC even after it expired and I had to cancel the entire account just to make sure they wouldn't keep trying to do that forever. |
|
|
|
|
hal
Terracotta Army
Posts: 835
Damn kids, get off my lawn!
|
SOE is the debil.
|
I started with nothing, and I still have most of it
I'm not a complete idiot... Some parts are still on backorder.
|
|
|
eldaec
Terracotta Army
Posts: 11844
|
Okay, so someone clarify - do I need to panic if I used Steam to buy something 6 months ago, or do I need to panic if I used Valve Cafe?
Read your credit card statement each month and make a fuss if it is wrong. Then you don't have to panic whatever happened. And seriously, your bank is likely to be at least as insecure as Valve. |
"People will not assume that what they read on the internet is trustworthy or that it carries any particular assurance or accuracy" - Lord Leveson
"Hyperbole is a cancer" - Lakov Sanite
|
|
|
|
Azazel
|
Ah, wiki. good point.
I checked my card, they were all reissued last year, so while the face numbers are the same, the code on the back will be different. Should be ok then.
Assuming they even care about that stuff. SOE used to bill my CC even after it expired and I had to cancel the entire account just to make sure they wouldn't keep trying to do that forever. Well, yea. But any charges coming from Russian CC hax0rs would be new charges, rather than recurring billing like a SOE one. And even if my bank is at least as insecure as Valve.. my bank's not the one who got hacked in this instance. |
|
|
|
|
Pages: [1] 
|
|
|
 |
