Game Admin Panel Compromised Via Steam Support

[@chrimony]

Insurance companies spy on users' driving habits, get sued in court for fines. Hacker spies on government, goes to jail.

[@bogartwilley]

They even monitor your cell phone usage and raise your insurance costs accordingly

[@ImARealHumanPerson]

Because you can't throw a company in jail. They aren't singular like a hacker is. 😅

[@Un_Pour_Tous]

Cope

[@CentreMetre]

@ImARealHumanPerson But you can put the people in jail who, not only agreed to let it happen, ordered it to happen.

[@anteshell]

@ImARealHumanPerson So, you think that it was the company doing the spying and not the persons running the company? You're not very bright, are you.

[@napalmholocaust9093]

allstate jacked the rates on a kid after he went to an amusement park, the rollercoaster was turning hard and dangerously. He tracked it down through data brokers and there's a "G" event on every turn of the track.

[@liamblu]

"We totally fucked up here." are words we would like to hear from every company when they fuck up. Big W for GGG.

[@Aeduo]

good on them for that at least but kinda screw ingame economy stuff where it ends up creating real world "value" in ingame stuff.

[@SuperPerry1000]

A "big W" would be not having something this mind-strainingly stupid happen in the first place.

[@Bedroomguitarist3]

@@SuperPerry1000 admitting u fucked up is the next best thing tho

[@FenrirAlter]

@@SuperPerry1000 I mean, stuff like this happens everywhere, having steam support as an attack vector is not something u first think off.

[@reapimuhs]

@@SuperPerry1000 so how do you suppose they were supposed to prevent steam support, a part of a company they do not own or have ANY control over, from being socially engineered into giving the bad actor access to an account which could access their admin panel?

[@ENNEN420]

Just remember for our friends watching who are lucky enough to not live in the USA, the AllState thing is worse because car insurance is multiple hundreds of dollars a month and if you're a car owner it's legally required to have it. Yes, our health insurance issues spread to cars long ago.

[@lorenzo.]

love how within 19 seconds of you uploading this there's already a bot in the comments lol

[@dennis8196]

Just one?

[@lorenzo.]

no this was all a ruse to fool you and make you think i'm not one

[@kat_cit]

@@lorenzo. realer than real

[@bearwolffish]

Insurance is a total scam industry, no other sector can be so inefficient, in the business of not doing their job and be successful. You know they never used that data to lower premiums, and at the same time sold that faulty data on to other insurers boosting average peoples insurance off the back off some prejudice based association.

[@4bSix86f61]

All state "your in good hands" 💀

[@yeetyeet7070]

You know Elon has nothing do with this, because Elon doesn't actually play Path of Exile

[@kyliethecupcake]

I was literally about to comment about Elon 🤣

[@nexys1225]

*ALLSTATE exists for all car owners.*

[@AshnSilvercorp]

info security or opsec. If someone can walk into your physical network stack on a giant network and immediately know how to start infiltrating data in an undetectable way, you're missing key opsec in your network.

[@notsure1248]

Ricky Berwick as the driver is crazy work.

[@randyb.9143]

Steam probably was like "You have 30 guesses as to the birthdate set on this Steam account before we can recover it for you. Yes birthdate is all you'll need for us to change the password"

[@Un_Pour_Tous]

It keeps the scammers going. Thanks Steam.

[@IamN4m3l3ss]

2:40 yk shits fucked up when watch dogs 2's intro becomes reality...

[@insu_na]

and that's why logs should be copy-on-write

[@Knightik1]

Just to clarify trading items in POE2 for real world cash will result in your account being banned.

[@franciscosilva2135]

When will a nokia trend start ?

[@wlockuz4467]

You can't just hate insurance companies enough.

[@ValuedTeamMember]

Agreed. That's why I insure all my vehicles with H&S™ (Hit & Split). It's A LOT cheaper

[@newsnetworkchannel49]

@@ValuedTeamMember is this a joke or an advertisement

[@ValuedTeamMember]

@@newsnetworkchannel49 suppose to be a.... J.O.K.E. But now that you mention it, it could look like that. My bad. Cheeers

[@rusty2804]

Everyone's the N.S.A these days

[@RiskSanchez]

..they clearly know what they're worth.. 😆

[@Un_Pour_Tous]

Steam has always had a history of getting users items stolen or scam and they not giving jack shyt about it.

[@sd1gaming]

There's not much they can do, I got a bunch of items stolen once. And once items change hands, you're completely screwed

[@TaylorMorgan-y2z]

@@sd1gaming They could undo the theft, repay the victim, improve security. Valve's custom 2FA implementation doesn't seem to work at all.

[@unluckycord3218]

Steam isn’t gonna be able to give in game item back for a game they don’t develop for lmfao. This is a path of exile problem, not valves.

[@CommentFrom]

​@@unluckycord3218it doesn't matter if they developed the game or not they do not give items back for any reason.

[@Systematiclol]

Poe2 has not been launched. People are paying to bugtest.

[@user-to7ds6sc3p]

I don't see this as an issue. It is clearly stated as early access on the webpage and Steam. And based on the reviews and popularity, there is only one mention worthy "bug" and that is the game hard crashing your PC under Win11 only, so probably just Microsoft being Microsoft again.

[@GenesisAkaG]

PoE and PoE2 share an account system, and there is some value innately bound to those accounts (old MTX that are not for sale anymore like the kiwi pets) and some moveable value that should show up in trade logs (there are people with one of a kind items like race rewards and crafted abominations with legacy mods in standard/thousands of mirrors in their currency tab).

[@RGBA]

we should force funksec to rename to skidsec (i know i'm original, funny joke, please laugh now)

[@greedsin555]

You can't trade items for cash that against TOS and they ban you FAST for it. They also will not return items to accounts what would mean taking the item off the player who bought it off the hacker unknowingly witch isn't fair on them either. And they don't mint new items.

[@TaylorMorgan-y2z]

Valve could easily undo the trades from the other players too. They just don't want to.

[@reapimuhs]

@@TaylorMorgan-y2z Valve can only undo trades that happen within steam's own systems or games that Valve has developed. I doubt that POE is using steam's systems to store account data instead of using their own database.

[@greedsin555]

@ ​ @reapimuhs Valve has no control over the POE economy it's all done on GGG severs.

[@karamboubou8579]

5:12 actually the language of algeria is arabic, but french is heavily used because of good ol' colonialism

[@bennyklabarpan7002]

arabic was also brought through colonialism

[@psapple5858]

@@bennyklabarpan7002 do tell, what was their original language then and since when did they start speaking arabic.

[@alch3myau]

mark is a terrible liar.

[@genesisreaper2113]

No, it's not a dangerous precident. If you can be hacked that easy, it's either your fault for being technologically illiterate and unable to be secure or trusted with a computer, or it's the fault of the manufacturer or OS maker. The only dangerous precident is acting like Ai, a tool, is at fault for the failures of others that need to be held accountable. Hacking has been here longer than what we consider Ai today has been by far.

[@jazitbe]

This is some how Elon's fault

[@dudesicko]

December, NOT November was the release date

[@Amin_765]

My steam acc was compromised and it was surprisingly easy to get the password easy so I’m not shocked

[@randallvargas4457]

I remember gas buddy… I remember thinking "no thx, lol"

[@ICE0124]

My family use life 360 and kept wanting me to get it and im so glad i didn't get it.

[@ecwnikos]

wow talk about getting roded on a video game that sucks

[@uxiii9537]

How is it that steam shows you your password when you try to reset it? How eactlly do they keep it?

[@TheAkashicTraveller]

Steam don't, the games admin panel just lets them edit it freely apparently so make sure to use a unique password for PoE2 since their security very much isn't.

[@YoutubeUser2013lol]

steam support sucks lol

[@peq42_]

Bro why tf would you link an ADMIN ACCOUNT to steam? Thats the singular dumbest idea ever

[@minecrafter8001]

thats ur take from this? not that they didn't log password changes and that password changes where even possible (they shouldn't be, most you should be able to do is trigger a password reset)

[@Paco1337]

Valve stopped giving a f about their games or steam for a long time. They are just milking it and there was no single Steam update that would fix or improve something, they just add new shit to buy. And don't even let me start about CS2

[@kuukeli]

good video

[@tonysolar284]

Horrible logging, hello!

[@baseth-man]

Proviblues IRL 👀

[@yyk4149]

ELLO

[@gh0stp1rate]

lol

[@cdkw2]

Hello world!

[@newsnetworkchannel49]

Hello world!

[@halfsine]

Segmentation fault! (core dumped!)

[@Duckly97]

I hate that Steam doesn't support proper 2FA anymore. Best you can get is SMS verification which we all know is ultra secure. (Yes, it has the Steam app as well, but SMS verification overrides that).

[@Alkaris]

What are you even on? Of course Steam supports 2FA, and No it doesn't use SMS 2FA. When you enable Steam Guard on your account it uses the Steam Mobile App for your Steam Guard Codes.

[@user-to7ds6sc3p]

You can remove SMS Authentication, by removing your number. 1. Disable Steam Guard 2. Remove your number 3. Enable Steam Guard but skip adding a number Steam Guard is still overridden by mail, but imo that is more secure than SMS.

[@vipdedov7157]

How about you just use a strong password

[@fishyiscutes]

i miss my family

[@dennis8196]

Aim better.

[@linusgoblin]

Algeria language is arabic and berber, not french.

[@AhmadHossamMahmoud]

Yes that is true … but french is a very wide spread second language there and they prefer it over english and even other Arabic dialects due to the long history of french colonialism of their lands

[@Un_Pour_Tous]

AI generated malware has been around ever sense gpt3 get a few 4090's and you wont need gpt to make good malware/ransomware. HAIL AI!!!

[@Fiddleron]

no brain

[@immameme]

HackerNewsImma1st Don't take my comments seriously. It's only a meme

[@MrHathaway1337]

Don't let your life revolve around video games and you won't cry when your game gets hacked.

[@reapimuhs]

You sure must be fun if you think that's the only reason someone would be upset about losing potentially countless hours or even days worth of time invested into something they were enjoying.

[@MrHathaway1337]

@reapimuhs Shaming language doesn't work on me.

[@KitanTm]

@@MrHathaway1337 Hey man can i have some money? you got a trollface on your pfp surely you must be rich as hell

[@carson.develops]

wild

[@polocatfan]

I hope this game company sues Valve. This game is irrevocably destroyed because of Valve's actions. And if they lose, well that's what firearms are for.

[@GamMngitSssEmoTionaL5953]

I get your point but at end of the Day it was the Game Company that attached a admin account to the game 🤦🏽‍♂️🤣 like is not like Hacker went I sorry I don't have any of this information and Vavle Support went ahh that's no problem here have the account 🤦🏽‍♂️🤣🤣 No it wasn't like that , the Hacker got enough information to pass /convince Vavle Support that they where that account holder . So No it isn't really vavles Fault . If the account wasn't linked then all that would of hapoend is the account was hacked they couldn't do anything to the gane if they sill person persons in Game Compnay didn't link the Admin account to the account Game they published on Steam

[@jake1173]

fed

[@reset5899]

thank

[@SojoTaku]

Noice

[@whoisAPT38]

ChaosEaster39

[@aIfZThTh]

Mein Herz sagt Ja zu Eiscreme. Meine Jeans sagt nein✨