Uhm Cracker? And was it their website or what?
Spellbinder: Valve's Cyber Cafe server was hacked. Normal Steam users CC info is not leaked.
I was told that Valve is going to release official statement related to this soon so before that it's all just speculation.
Why would Valve store customer's CC numbers in plain text? Actually, why would they store them in the first place? If they store them, they'd be heavily crypted and protected. This is obviously fake and poor way to get attention.
It's still seriously bad news for Valve and online distribution in general.
His forum profile says he is a 22 year old Russian.
Well that explains everything :roll:
Can't say I'm surprised I'm afraid, this sort of thing was bound to happen, one of the reasons why I was always sceptical about using Steam for purchases and now I'm so glad I didn't bother.
It's no worse for online distribution in general than it is for online banking, online shopping, or any other service using credit card numbers that has been compromised in the past (or will be compromised in the future).
the screenshots show that his OS is a german verison of windows.... so i doubt hes russian..
I managed to download the "demo" that he released, and this seems to be true, there are some screnshots of valves internal web system, and hundreds of php files which look real.
Here are some of the images in the pack, i hope its ok to post them here:
[Blocked Image: http://img292.imageshack.us/img292/6141/screenshot1io6.jpg]
[Blocked Image: http://img256.imageshack.us/img256/3655/screenshot2hm7.jpg]
[Blocked Image: http://img105.imageshack.us/img105/7373/valvebalancegz2.jpg]
Quote from D3adsWell that explains everything :roll:
Can't say I'm surprised I'm afraid, this sort of thing was bound to happen, one of the reasons why I was always sceptical about using Steam for purchases and now I'm so glad I didn't bother.
valve... valve never changes..
Owned.
AGAIN. Damn guys get it sorted, eh.
Bleh, always lame when this type of thing happens. I don't think a lot of people realise how easy it is though; I work with e-commerce for a living and there are a hell of a lot of smaller businesses out there which have their entire credit card database available online in a reasonably easy-to-hack-into area for an experienced hacker.
If there's one thing to understand, it's that online purchases are about as far from bulletproof security-wise as it gets. Avoid purchasing from lesser known businesses whenever possible, as even if they're reasonably secure, something like a disgruntled employee (more likely for one in a smaller company to have access to sensitive details) could expose all your info.
It can happen to a company of any size though. I'm sure many of you've heard about TK Maxx having their credit card database exposed to the tune of 45,000,000 customer details a month or so ago, and similar issues on a smaller scale happen on a monthly basis all over the US and Europe.
It's probably best to be angry less at Valve and more the dick who hacked them. Bear in mind that few are truly immune to hacking, including high-profile government organisations, and that hacking resulting in the exposure of sensitive information happens all the time. It's just that only the big ones like Valve get thrown into the spotlight.
Thrik. You said it. Listen to this guy over here 
Now we just wait and see what Valve has to say on this, soon.
Quote from skdrThrik. You said it. Listen to this guy over here
The first part of the statement will be release Q3 2008 with follow up episodic releases Q2 2009.
Users can also purchase the "Full Statement" gold edition via Steam for $29.99 including plush
"Swiss Cheese" Valve security model and limited edition "We'll patch our servers, soon" t-shirt.
What is wrong with Steam? And why would some retard get so pissed off with it that he takes to hacking it to try and get them to change it - like they're even going to bother, honestly if he's russian this wouldn't surprise me in the slightest. At all. Hopefully he'll get cancer and die before he has a chance to post information only other retards will find use for.
Luckily my credit card is as empty as my wallet so good luck stealing from me ;D
People blame it on lack of security, I blame it on valve being so popular that alot of hackers know alot about them ;P
***cough and the cs 1.6 hax0rZ cough*** 
:P:P
I was really suprised how long this story stayed out of the "mainstream" web.
when will valve learn..
Quote from BioPulsePeople blame it on lack of security, I blame it on valve being so popular that alot of hackers know alot about them ;P***cough and the cs 1.6 hax0rZ cough***
CRACKERS!
First of all I highly doubt that Valve or any other online payment providers store any kind of CC information in unencrypted way. Generally such systems are built to rarely if ever have the CC information transferred or stored in an exposed way.
Quote from MJwhen will valve learn..
Why does people keep blaming Valve for not having high enough security? If you know the least about online security then you will know that _nothing_ is 100% secure. Considering how popular Valve's services are, then security breaches are bound to happen.
Don’t have an account yet? Register yourself now and be a part of our community!
