Heartbleed and Steam

April 9, 201412 yr

Hey Guys,

Just a heads up regarding a security hole that's been discovered:

http://gizmodo.com/heartbleed-why-the-internets-gaping-security-hole-is-1560812671

And here is a list of vulnerable and not vulnerable sites:

https://github.com/musalbas/heartbleed-masstest/blob/master/top1000.txt

I'm posting this only because I saw that steamcommunity.com was listed as vulnerable.

As a result, you may want to change your password.

Though, based on what I can find, there is no way to tell if your information has already been compromised.

Report

April 9, 201412 yr

Author

According to Valve, they've fixed the heartbleed vulnerability with Steam. But they recommend you change passwords:

http://www.incgamers.com/2014/04/heartbleed-vulnerabilities-steam-resolved-say-valve

Report

April 9, 201412 yr

Thanks for the heads up, Klai.

Report

April 9, 201412 yr

That is a bug found in openssl, it wasn't the first and it will not be the last. How do you think that the NSA can read everything?

Last month there was a bug in iOS that allowed encrypted connections to be attacked. The bug was so stupid and just shows how Apple doesn't care about security.

Yes, if you used home banking or any other kinds of "secure??" connection in iOS, someone could have been watching everything that you did.

Make sure you don't use the same password for more than one service and that you have a way to recover any password, there is always the risk of an account being compromised and by using different passwords, you minimize the risk of losing more than one access.

IE: if you use the same password for steam and your email account and someone finds out the password that your are using, they can try to login into your email account using the steam password, if both passwords are changed, you will be locked out of both.