Thanks for taking this seriously and alerting the coding team so
quickly. Glad to see it was resolved.

We appreciate it.

TehZomB
W: www.tehzomb.us
P: 1 (443) 805-6313
E: tehz...@hushmail.com

On 10/14/2010 7:36 PM, John McCaskey wrote:
> Thanks again Kyle. 
> 
> FYI for everyone else, there did turn out to be a security hole allowing 
> bypassing of email verification if you had a properly hacked client.  We 
> pushed out a server side fix for this and the exploit should be fixed as of 
> this afternoon.
> 
> If anyone has any details on Steam security exploits in the future please 
> continue to email me directly and we'll check them out.
> 
> John
> 
> -----Original Message-----
> From: hlds_linux-boun...@list.valvesoftware.com 
> [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle Sanderson
> Sent: Wednesday, October 13, 2010 10:51 PM
> To: Half-Life dedicated Linux server mailing list
> Subject: Re: [hlds_linux] hacking steam accounts
> 
> You've got mail.
> 
> Kyle.
> 
> On Wed, Oct 13, 2010 at 9:40 PM, John McCaskey
> <jmccas...@valvesoftware.com> wrote:
>> If you have concrete evidence of an exploit please provide us with any 
>> information you have.  We would certainly take such an exploit seriously.  
>> However, we currently aren't aware of any such exploit and have no evidence 
>> that one would be possible.  Sometimes rumors about exploits turn out to be 
>> greatly exaggerated.
>>
>> Please feel free to email me directly if you have details on any security 
>> exploits in Steam.
>>
>> John
>>
>> -----Original Message-----
>> From: hlds_linux-boun...@list.valvesoftware.com 
>> [mailto:hlds_linux-boun...@list.valvesoftware.com] On Behalf Of Kyle 
>> Sanderson
>> Sent: Wednesday, October 13, 2010 8:30 PM
>> To: Half-Life dedicated Linux server mailing list
>> Subject: Re: [hlds_linux] hacking steam accounts
>>
>> There are tools out there that can unverify a persons Steam account email.
>>
>> It's rather shocking how Valve doesn't take Security that seriously.
>> Kyle.
>>
>> On Wed, Oct 13, 2010 at 7:17 PM, tom n <screwtop...@gmail.com> wrote:
>>> Thanks,already did that. I guess my question was more on the technical side.
>>> I had verified my steam email along time ago.Cant remember the whole ip
>>> address but the link sent to me was along the lines of steam(company).com.cc
>>> On checking this I realize that .cc is a topdomain in Australia I guess..
>>>
>>> hmm
>>>
>>>
>>> On Wed, Oct 13, 2010 at 8:59 PM, Marlon Almeida | CGBR <
>>> mar...@cybergamesbrasil.com> wrote:
>>>
>>>> If you still can log in, go change your password and secret.
>>>> Don't waste time trying to figure how that happened.
>>>>
>>>>
>>>> -----Mensagem original-----
>>>> De: hlds_linux-boun...@list.valvesoftware.com
>>>> [mailto:hlds_linux-boun...@list.valvesoftware.com] Em nome de tom n
>>>> Enviada em: quarta-feira, 13 de outubro de 2010 22:49
>>>> Para: Half-Life dedicated Linux server mailing list
>>>> Assunto: [hlds_linux] hacking steam accounts
>>>>
>>>> Hi all,not the forum but I had a question to ask.
>>>>
>>>> Any of ya had your steam acct hacked or knew of someone who has? Got a link
>>>> sent to me today for a medal of honor beta. When i logged on tonite I had
>>>> realized for some reason that a cpl of friends had been "blocked" on my
>>>> steam friends list..
>>>>
>>>> Also I had joined a cpl of steam groups that I know I hadnt joined for sho.
>>>>
>>>> Any ideas?
>>>>
>>>> (Like I said,not the right forum but just bored and wanted to ask u guys.:)
>>>> _______________________________________________
>>>> To unsubscribe, edit your list preferences, or view the list archives,
>>>> please visit:
>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>
>>>>
>>>> _______________________________________________
>>>> To unsubscribe, edit your list preferences, or view the list archives,
>>>> please visit:
>>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>>
>>> _______________________________________________
>>> To unsubscribe, edit your list preferences, or view the list archives, 
>>> please visit:
>>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>>
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list archives, 
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>
>> _______________________________________________
>> To unsubscribe, edit your list preferences, or view the list archives, 
>> please visit:
>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>>
> 
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, please 
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux


_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux

Reply via email to