Monday July 27, 2015

Steam Security Hole Closed

For those of you that missed this earlier, Valve has closed that Steam security hole that was allowing anyone to hijack another person's account in minutes.

As this video demonstrates, this involved simply entering a blank in place of a required security response code, making it a trivial matter to hijack any account only by knowing a user's name. Valve says this resulted from a bug which was active between July 21-25 which has now been fixed.