Steam Hack More Severe Than Thought: Change Your Password NOW

qubit · Nov 11, 2011

Enmity said:
uh oh, i just seen all this about steam and realised that i cant even log into my steam account. If I try to execute steam it comes up with

"Unable to connect to the steam network. 'Offline Mode' is unavailable because there is no Steam login information stored on this computer. You will not be able to use steam until you are able to connect to the Steam network again"

what should I do?

Try it again. I just had a go and it worked fine. Now, I'm in the UK and I know that you can change the servers it contacts within the client settings. Can you do that without it authenticating?

If not, I reckon just trying every so often will eventually let you in.

Enmity · Nov 11, 2011

thanks man, tried again and still the same message. Will keep trying. Cheers

Rammkopf · Nov 11, 2011

Just the reason why I'm no fan of the cloud. Still trusting all those fat@$$ services that claim they're widely public and insanely safe in the same time? :nutkick:

I've always been asking myself, who needs that friggin' Steam and all other on-line services of the likes, anyway? :shadedshu

Just take our money for the game, give us a decent server for on-line play (should we feel like it) that only requires a user ID and a password to log into and quit squeezing credit card info and such from your customers, ffs. Geez!

Shihab · Nov 11, 2011

Funny, I didn't get the message when I ran Steam.
BTW, Wouldn't Steam Guard be more than enough for protection ? Unless you're E-mail is also compromised.

qubit · Nov 11, 2011

Shihabyooo said:
Funny, I didn't get the message when I ran Steam.
BTW, Wouldn't Steam Guard be more than enough for protection ? Unless you're E-mail is also compromised.

No man, they got the root database. :shadedshu

Millennium · Nov 11, 2011

changed my password just in case. If lots of steam accounts start getting hacked that would be pretty bad news for steam, they've been great so far. Except maybe the client is bloatware now but thats another story (and my PC can cope

)

shb- · Nov 11, 2011

Shihabyooo said:
Funny, I didn't get the message when I ran Steam.
BTW, Wouldn't Steam Guard be more than enough for protection ? Unless you're E-mail is also compromised.

I think it is enough to keep those hackers out of your steam account, unless u use same pwd for email too. So there is no real reason to change password (again - if u dont use it elsewhere). Other reason not to change pwd is that they were hashed and salted. I guess if your password is complex enough, no one will unsalt/unhash it.

Real problem is that they got some credit card data, IMO.

updated:
looks like credit card data was encrypted with aes256 (according to some comments @ toms), so no worries i guess.

n-ster · Nov 11, 2011

I used the same password for my TPU forum and some other forums lol. But I don't feel like changing so many passwords

Ahhzz · Nov 11, 2011

Thx Q, I don't use the steam forums, but changed my main one just in case.

John Doe · Nov 11, 2011

I doubt they got anything at all... Steam forums are hacked by fkn0wned, who used to make CS:S hacks. This hack, IMO, isn't what it's hyped up to be. They probably only hacked the VBulletin and not much else. Steam is way more complicated than hacking a forum. It's not something a kid can break, even the debugger of Steam requires specific knowledge. There's virtually not a single program that can mess with Steam; say, brute force it. And there never have been one. It's like trying to hack Winamp. These guys simply aren't capable of doing such act.

That said, Gabe also mentions to change your Steam pass "just in case". So yeah.

qubit · Nov 11, 2011

John Doe said:
I doubt they got anything at all... Steam forums are hacked by fkn0wned, who used to make CS:S hacks. This hack, IMO, isn't what it's hyped up to be. They probably only hacked the VBulletin and not much else. Steam is way more complicated than hacking a forum. It's not something a kid can break, even the debugger of Steam requires specific knowledge. There's virtually not a single program that can mess with Steam; say, brute force it. And there never have been one. It's like trying to hack Winamp. These guys simply aren't capable of doing such act.

That said, Gabe also mentions to change your Steam pass "just in case". So yeah.

I'm sure you're right about the overall complexity/security of Steam. I'll bet Valve end up ditching vB and creating their own forum software that's more secure.

It might be a bit expensive and time consuming, but a company that operates 100% online could go out of business if they were seen as having poor security, so I reckon this is a possibility.

ShiBDiB · Nov 11, 2011

Why is it that TPU, just like all the gaming wannabe news websites, are turning a hacking of the steam forum (not linked to ur steam account) into a hacking of steams secure servers..

All steam said to do is what you as a non retarded consumer should be doing anyway, watching your statements to make sure your not getting double charged, over charged, etc....

Sorry if I sound like an ass, but all this uppity make news out of nothing more then a Game Hack Website putting their ad into suddenly this being a full blown end of your credit score attack is retarded.

Your god damn topic title breaks forum rules as FUD.. Nowhere have I seen them doing anything besides covering their ass and doing what anyone whos had a forum hack done and resetting forum passwords. If they honestly had any hint that your accounts on a completely different presumably much better defended server had been compromised they would have also reset your steam account passwords.

qubit · Nov 11, 2011

ShiBDiB said:
You god damn topic title breaks forum rules as FUD..

It's more than that, it's a news title. Does that make it better?

ShiBDiB · Nov 11, 2011

I apologize I just worked all night so I'm grouchier then usual, but this entire thing is being blown completely out of proportion... And theirs no reason to get the less common sense empowered users all worried that their CC's are gonna have charges for random flat screen tv's and horse porn on them if they dont change their passwords.

John Doe · Nov 11, 2011

qubit said:
I'm sure you're right about the overall complexity/security of Steam. I'll bet Valve end up ditching vB and creating their own forum software that's more secure.

It might be a bit expensive and time consuming, but a company that operates 100% online could go out of business if they were seen as having poor security, so I reckon this is a possibility.

They don't have "poor security" at all. The system (Steam) has yet to be hacked in years. It's like a Media player, it doesn't get affected by traditional hacking methods. The only thing that's hacked here is SPUF, which is a pathetic forum. I stopped reading there a few years ago. Trolling/insults are galore, mods (volunteer) are chosen from users who praised VALVe the most against their update screw ups, people get banned left and right. People from VALVe don't care or even read it at all.

So basically, the forum is a representive of itself. It's not related to Steam at all. They're probably making fuss with the hopes of some guy that can't login to open a new account then buy the games again. lol.

qubit · Nov 11, 2011

ShiBDiB said:
I apologize I just worked all night so I'm grouchier then usual, but this entire thing is being blown completely out of proportion... And theirs no reason to get the less common sense empowered users all worried that their CC's are gonna have charges for random flat screen tv's and horse porn on them if they dont change their passwords.

Ya, no problem, I know all about feeling ratty! :laugh:

Thing is, I wouldn't feel too cozy that everything is all right. Think of the security breaches one sees with companies (not just gaming companies) who offer bland assurances that their customer's details are ok and then it turns out that the sh*t has hit the fan. Fact is, we just don't know yet and may never know, so it's a reasonable precaution to change our passwords.

n-ster · Nov 11, 2011

We learned that intruders obtained access to a Steam database in addition to the forums

So is it only the Steam forums or more? I'm confused

qubit · Nov 11, 2011

n-ster said:
So is it only the Steam forums or more? I'm confused

They got to the databases, we don't know what they got out of them, which is crucial. If it's meaningless highly encrypted data, then we're probably safe. Or if no data was extracted at all.

n-ster · Nov 11, 2011

qubit said:
They got to the databases, we don't know what they got out of them, which is crucial. If it's meaningless highly encrypted data, then we're probably safe. Or if no data was extracted at all.

K so it isn't blown out of proportion IMO... There IS a REAL chance that we could have had our passwords hacked etc etc

ShiBDiB · Nov 11, 2011

n-ster said:
K so it isn't blown out of proportion IMO... There IS a REAL chance that we could have had our passwords hacked etc etc

They would have reset your steam account passwords and issued more of a warning, the game industry learned from sony what to do in such a situation and steam isnt doing anything.. So I'm not worried.

n-ster · Nov 11, 2011

The chances are low that they got anything... but I ain't leaving my steam account, passwords and if I had one on the account CC info in the hands of chance. It takes a few minutes to make sure everything is safe

John Doe · Nov 11, 2011

n-ster said:
The chances are low that they got anything... but I ain't leaving my steam account, passwords and if I had one on the account CC info in the hands of chance. It takes a few minutes to make sure everything is safe

Trust me, they didn't get anything. It's fkn0wned, a bunch of kids who write off CS:S hooks. I highly doubt some lamer kid can hack Steam DB.

Even if they did hack, your account is one out of millions. What's the chance of a few kids messing with yours out of millions? I personally am not concerned about this. And not going to change mine. They're hyping this for people to make new accounts.

digibucc · Nov 11, 2011

i'm sure you're absolutely right john - but honestly it's a good idea to change passwords once every few years anyway, and i've had the same one forever.

also, while the chances may be small - my account is worth over $4k USD, i am not risking that to a friggin password, i'll change it thanks

Ahhzz · Nov 11, 2011

John Doe said:
.... They're hyping this for people to make new accounts.

I'm curious... for what reason would they want people to make new accounts?

n-ster · Nov 11, 2011

Ahhzz said:
I'm curious... for what reason would they want people to make new accounts?

He'll respond with something like stats or publicity

But WHO would make new accounts? noone... Who in the world would abandon their Steam account for this and not just change their password etc?

System Name	Quantumville™
Processor	Intel Core i7-2700K @ 4GHz
Motherboard	Asus P8Z68-V PRO/GEN3
Cooling	Noctua NH-D14
Memory	16GB (2 x 8GB Corsair Vengeance Black DDR3 PC3-12800 C9 1600MHz)
Video Card(s)	MSI RTX 2080 SUPER Gaming X Trio
Storage	Samsung 850 Pro 256GB \| WD Black 4TB \| WD Blue 6TB
Display(s)	ASUS ROG Strix XG27UQR (4K, 144Hz, G-SYNC compatible) \| Asus MG28UQ (4K, 60Hz, FreeSync compatible)
Case	Cooler Master HAF 922
Audio Device(s)	Creative Sound Blaster X-Fi Fatal1ty PCIe
Power Supply	Corsair AX1600i
Mouse	Microsoft Intellimouse Pro - Black Shadow
Keyboard	Yes
Software	Windows 10 Pro 64-bit

System Name	Enmity
Processor	Intel i5 3570K 4.6Ghz@1.320vcore
Motherboard	Asus P8Z77-V
Cooling	Corsair H100
Memory	2 x 4 GB Mushkin Frostbyte 9-9-9-24
Video Card(s)	2 x MSI 5850's
Storage	1 x 90GB OCZ Vertex2 SSD, 1 x 1TB HDD, 3 x 320GB HDD
Display(s)	Samsung XL2370
Case	Coolermaster Storm Stryker
Audio Device(s)	Asus Xonar DG PCI + Senn HD485's
Power Supply	Corsair HX850
Software	Windows 7 Ultimate x64

System Name	rK-MAGMAR (custom built)
Processor	Core i5-750 @ 4104MHz
Motherboard	ASUSTeK P7P55D-E Deluxe
Cooling	Thermalright Ultra 120 Extreme + 2x Coolink SWiF2-120P
Memory	2x2GB G.Skill Pi [F3-17066CL7D-4GBPIS] @ 2160MHz \| 7-10-7-27-2N \| 1,65V
Video Card(s)	PowerColor PCS+ 5850 @ 875/1050
Storage	1TB WDC Caviar Black WDC1001FALS
Display(s)	24" HP LP2475w
Case	CoolerMaster HAF922
Audio Device(s)	Creative Labs Sound Blaster X-Fi XtremeMusic
Power Supply	Corsair HX850W
Benchmark Scores	33000+ marks in 3DMark05 1.3.0 9100+ points in FurMark 1.6.5

System Name	192.168.1.1~192.168.1.100
Processor	AMD Ryzen5 5600G.
Motherboard	Gigabyte B550m DS3H.
Cooling	AMD Wraith Stealth.
Memory	16GB Crucial DDR4.
Video Card(s)	Gigabyte GTX 1080 OC (Underclocked, underpowered).
Storage	Samsung 980 NVME 500GB && Assortment of SSDs.
Display(s)	ViewSonic VA2406-MH 75Hz
Case	Bitfenix Nova Midi
Audio Device(s)	On-Board.
Power Supply	SeaSonic CORE GM-650.
Mouse	Logitech G300s
Keyboard	Kingston HyperX Alloy FPS.
VR HMD	A pair of OP spectacles.
Software	Ubuntu 24.04 LTS.
Benchmark Scores	Me no know English. What bench mean? Bench like one sit on?

System Name	Quantumville™
Processor	Intel Core i7-2700K @ 4GHz
Motherboard	Asus P8Z68-V PRO/GEN3
Cooling	Noctua NH-D14
Memory	16GB (2 x 8GB Corsair Vengeance Black DDR3 PC3-12800 C9 1600MHz)
Video Card(s)	MSI RTX 2080 SUPER Gaming X Trio
Storage	Samsung 850 Pro 256GB \| WD Black 4TB \| WD Blue 6TB
Display(s)	ASUS ROG Strix XG27UQR (4K, 144Hz, G-SYNC compatible) \| Asus MG28UQ (4K, 60Hz, FreeSync compatible)
Case	Cooler Master HAF 922
Audio Device(s)	Creative Sound Blaster X-Fi Fatal1ty PCIe
Power Supply	Corsair AX1600i
Mouse	Microsoft Intellimouse Pro - Black Shadow
Keyboard	Yes
Software	Windows 10 Pro 64-bit

Steam Hack More Severe Than Thought: Change Your Password NOW

qubit

Overclocked quantum bit

Enmity

New Member

Rammkopf

New Member

Shihab

qubit

Overclocked quantum bit

Millennium

shb-

n-ster

Ahhzz

Super Moderator

John Doe

Guest

qubit

Overclocked quantum bit

ShiBDiB

qubit

Overclocked quantum bit

ShiBDiB

John Doe

Guest

qubit

Overclocked quantum bit

n-ster

qubit

Overclocked quantum bit

n-ster

ShiBDiB

n-ster

John Doe

Guest

digibucc

Ahhzz

Super Moderator

n-ster

System Name	this_is_so_leet_it_needs_no_name
Processor	Intel I5 2500k @ 4.5Ghz
Motherboard	Asus P8 P67-M Pro
Cooling	MUX-120 with Dual Fan
Memory	Samsung Memory DDR3 2133 Overclocked (non LP)
Video Card(s)	XFX ATI/AMD 5870 1gb @ [tbc]
Storage	2*2tb Samsung Raid 0 + 64gb Kingston SSD
Display(s)	BenQ G2420HDBL LED monitor
Case	Lian Li PC-60 old skool alu case
Audio Device(s)	Asus Xonar DX/XD PCI-Express (great)
Power Supply	Corsair 650 TX
Software	Win 7 64bit

Processor	i7 950
Motherboard	Asus P6T Deluxe V2
Cooling	Zalman CNPS10X Extreme
Memory	Kingston HyperX 3x 2GiB
Video Card(s)	MSI GTX 570
Storage	OCZ Vertex 3 120GB + 8TB
Power Supply	Chieftec 750W

System Name	Homelabs
Processor	Ryzen 5900x \| Ryzen 1920X
Motherboard	Asus ProArt x570 Creator \| AsRock X399 fatal1ty gaming
Cooling	Silent Loop 2 280mm \| Dark Rock Pro TR4
Memory	128GB (4x32gb) DDR4 3600Mhz \| 128GB (8x16GB) DDR4 2933Mhz
Video Card(s)	EVGA RTX 3080 \| ASUS Strix GTX 970
Storage	Optane 900p + NVMe \| Optane 900p + 8TB SATA SSDs + 48TB HDDs
Display(s)	Alienware AW3423dw QD-OLED \| HP Omen 32 1440p
Case	be quiet! Dark Base Pro 900 rev 2 \| be quiet! Silent Base 800
Power Supply	Corsair RM750x + sleeved cables\| EVGA P2 750W
Mouse	Razer Viper Ultimate (still has buttons on the right side, crucial as I'm a southpaw)
Keyboard	Razer Huntsman Elite, Pro Type \| Logitech G915 TKL

System Name	OrangeHaze / Silence
Processor	i7-13700KF / i5-10400 /
Motherboard	ROG STRIX Z690-E / MSI Z490 A-Pro Motherboard
Cooling	Corsair H75 / TT ToughAir 510
Memory	64Gb GSkill Trident Z5 / 32GB Team Dark Za 3600
Video Card(s)	Palit GeForce RTX 2070 / Sapphire R9 290 Vapor-X 4Gb
Storage	Hynix Plat P41 2Tb\Samsung MZVL21 1Tb / Samsung 980 Pro 1Tb
Display(s)	22" Dell Wide/24" Asus
Case	Lian Li PC-101 ATX custom mod / Antec Lanboy Air Black & Blue
Audio Device(s)	SB Audigy 7.1
Power Supply	Corsair Enthusiast TX750
Mouse	Logitech G502 Lightspeed Wireless / Logitech G502 Proteus Spectrum
Keyboard	K68 RGB — CHERRY® MX Red
Software	Win10 Pro \ RIP:Win 7 Ult 64 bit

System Name	[Daily Driver]
Processor	[Ryzen 7 5800X3D]
Motherboard	[MSI MAG B550 TOMAHAWK]
Cooling	[be quiet! Dark Rock Slim]
Memory	[64GB Crucial Pro 3200MHz (32GBx2)]
Video Card(s)	[PNY RTX 3070Ti XLR8]
Storage	[1TB SN850 NVMe, 4TB 990 Pro NVMe, 2TB 870 EVO SSD, 2TB SA510 SSD]
Display(s)	[2x 27" HP X27q at 1440p]
Case	[Fractal Meshify-C]
Audio Device(s)	[Fanmusic TRUTHEAR IEM, HyperX Duocast]
Power Supply	[CORSAIR RMx 1000]
Mouse	[Logitech G Pro Wireless]
Keyboard	[Logitech G512 Carbon (GX-Brown)]
Software	[Windows 11 64-Bit]

System Name	i7-PC / HTPC / iMac
Processor	i7 3820 / Phenom II 940
Motherboard	GIGABYTE G1.ASSASSIN2 / M3A79-T Deluxe
Cooling	Corsair Hydro H100i / Scythe II (HS only)
Memory	G.SKILL Trident X Series 8GB (2 x 4GB) DDR3 1600mhz / 4GB DDR2 1066 (@800) Corsair Dominator
Video Card(s)	GB Radeon HD 7950s 3GB / GB Radeon HD 7950s 3GB
Storage	2x 80GB Intel X-25, 2x600gb SATA, 1x1tb 5400RPM storage /1x600GB, 3x500GB,1x160,1x120 SATA
Display(s)	1x 27" Yamakasi / Vizio 42" HDTV
Case	Lian Li Lancool PC-K58 / Antec 900
Audio Device(s)	HT Omega Striker 7.1 / Onboard and HDMI from ATi Card
Power Supply	PC Power & Cooling 750W / 610W
Software	Ubuntu / Windows 8.1 Pro / OS X / PHPStorm / Gaming