Steam Forum Warning

[+Gary7 Subscriber²]

I was wondering if everyone knew about this? I did not join the forum.

[Athernar]

Re-read the text, it says that access went beyond the forums.

This has also been posted on the front page.

[McCordRm]

Yep, so change your passwords, people.

Seriously, like right now. Otherwise we'll have a whole new thread of people

complaining they got hacked even though fair notice was given.

[Reacon]

Straightforward and sincere. I didn't think I could have more respect for that blob of flesh at Valve.

[ozgeek]

Yeah I'm a regular there. the forums are still down.

And yeah just incase (even though the forums are seperate from the steam program), change your passwords for the steam program. I just did.

[Nagisan]

My forum account has a different password than my main account, I really don't care if my forum account is "hacked" (I never use it anymore), and my email password is different than both. To be safe, I went ahead and changed my steam account password, to a password different than what I use on both the forum and for my email, and more secure ( > 6 unique characters vs 6 unique characters only).

I would also suggest that anyone who used the same password for their email address also change that, so they can't gain access to your email if the passwords are cracked.

[+Gary7 Subscriber²]

I changed my password even though I never joined the forum, since the damage went beyond the forum.

[Hell-In-A-Handbasket]

tried changing steam PW on forums, says cant, still down.

changed it through the client though

[psreloaded]

Thankfully my forum password was different than the original a/c. but i will still change it after going home.

[Ayepecks]

It appears Valve will be giving out copies of Dota 2 and Portal 2 to apologize:

(Source: http://www.lo-ping.o...s-compensation/)

I already have Portal 2, but it's still awesome of them nonetheless.

[Teebor]

Sweet! free games :) already got Portal 2 but I will happily take a DOTA 2 :D

I'm pretty sure my forum pass, account pass, and email pass were all different anyway (as it should be) so think I'm gonna be ok for a bit. Gonna change them as soon as I get in tonight though

[Ayepecks]

Sweet! free games :) already got Portal 2 but I will happily take a DOTA 2 :D

I'm pretty sure my forum pass, account pass, and email pass were all different anyway (as it should be) so think I'm gonna be ok for a bit. Gonna change them as soon as I get in tonight though

Well it appears you wouldn't have to worry even if they were the same, to be honest.

[Salty Wagyu]

Should all 3 be changed? It seems Forums, Store and Support all have accounts independent of each other.

[Teebor]

Well it appears you wouldn't have to worry even if they were the same, to be honest.

iirc its only the credit card details are AES256 it was said somewhere else the passwords are just salted and hashed

[Xtreme2damax]

I use a unique password for pretty much everything except a few sites I'm not worried about. My Steam password, my Steam forum password and my email passwords are completely different. I'm not too concerned since everything is hashed and salted but I will keep an eye on my CC/Paypal and my Steam account just in case.

[oceanmotion]

I always thought it was bothersome to make a separate account for the forums, kinda glad now as my passwords were different.

[Athernar]

iirc its only the credit card details are AES256 it was said somewhere else the passwords are just salted and hashed

If they're using 256-bit AES for credit card details and etc, I'd imagine they probably are using SHA-256 or SHA-512 to generate the hashes. So with salting, I doubt there is anything to worry about.

Forum-wise though, they're using an outdated copy of vB so I wouldn't be surprised if those are just plain salted MD5.

[inferniac]

It appears Valve will be giving out copies of Dota 2 and Portal 2 to apologize:

(Source: http://www.lo-ping.o...s-compensation/)

I already have Portal 2, but it's still awesome of them nonetheless.

Fake

[giantpotato]

Fake

How do you know the mail saying it's fake isn't fake?

[Ayepecks]

Hmm, I actually believe that it's fake more. It doesn't seem like Gabe's writing style.

[Athernar]

The "Not me." email is classic Gabe, he is rarely verbose and would never make a joke like that.

[+Gary7 Subscriber²]

I did not receive any emails about free games.

[giantpotato]

So this means we're not getting free games, which makes sense. Valve would have no way to justify the development costs of DoTA 2 if pretty much everyone got it for free at launch.

[Anibal P]

What I read was DOTA2 BETA access, and Portal2, makes a huge difference

[giantpotato]

What I read was DOTA2 BETA access, and Portal2, makes a huge difference

Where did you read that? because BETA clearly isn't in the email.