Sign in / up

back to article XSS marks the spot: Steam vuln dangles potential phishing line

Security researchers have discovered a significant security vulnerability in Steam, Valve's digital distribution platform for PC gaming. The bug, which has since been patched, allowed users to add malicious code to their profile, bypassing Steam's security measures. The trick, discovered by security researcher cra0kalo, could …

COMMENTS

Post your comment
House rules Send corrections
Add to 'My topics' unstar *
  1. John G Imrie

    Visit another users profile page

    Thank $DEITY I'm an antisocial bugger.

    4 0 Reply
  2. not.known@this.address

    I'm only (t)here for the Licence...

    I admit it - I am a 'Sins Of A Solar Empire' whor^H^H^H player and the only way I could get the latest one is through Steam...

    If I wanted to play with other people, I'd play football!

    1 0 Reply
  3. John 104

    Valve can kiss my ass. Ever try to contact them for support?

    0 0 Reply
    1. gypsythief
      Reply Icon

      Yes.

      ... and a lone tumbleweed blows gently through the silent wasteland...

      0 0 Reply
  4. lglethal Silver badge
    Go

    You gotta give credit to valve in this case

    They fixed the bug within about 4 hours of being informed of it... Not many other sites act that fast...

    0 0 Reply
  5. EnviableOne

    XSS, SQLI and CSRF are all just sloppy coding as the fast fix time indicates, when are people gonna priorities Security over time to market?

    0 0 Reply
    1. John G Imrie
      Reply Icon

      when are people gonna priorities Security over time to market?

      When the cost of not fixing the security hole rises above the cost of fixing it.

      1 0 Reply

POST COMMENT House rules

Not a member of The Register? Create a new account here.

Forgotten password ?

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like