Valve: Steam Is Not Hacked, Account Information Issues Solved

[Exterminator]

Content source

http://news.softpedia.com/news/valve-steam-is-not-hacked-account-information-issues-solved-498107.shtml

Gamers were able to see some personal details of strangers
The team at Valve in charge of the Steam digital distribution service is announcing that it is aware of an issue that appeared on Christmas day which allowed some users to sometimes see the account information associated with other people on the official personal page and says that it has delivered an update which is designed to solve the problem.

The company also makes it clear that no actual hacking attempt caused it and that the entire ecosystem centered around the software is perfectly safe, with gamers able to continue their usual activity and enjoy the on-going Winter Sale.

An official update explains that details including credit card information and phone numbers for users are censored at all times and that no one should be able to identify a player based on the details they have seen accidentally.

Valve explains that, “As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users.”

Some gamers were understandable spooked by the ability to see some details on personal pages and the very existence of the issue raises some questions about the company's ability to protect details about its users but for the moment it seems that no security breach happened and that changing of passwords is not something that they should worry about.

Steam is the most important digital distribution system on the PC and that makes it especially important for Valve to make sure that it keeps it as secure as possible to maintain the confidence of gamers.

The Winter Sale is running until January 4
It would have been complicated for the company to deal with an actual security breach at the moment because it is running one of the biggest promotional campaigns of the year and wants as many of its users engaged with it.

The current Winter Sale cuts the price of more than 10,000 titles in the Steam library, with special offers that change each day to highlight particular video games and franchises.

The company is also encouraging users to go through their Discover queues to see games that may appeal to them and is using the Steam cards system to encourage them to do so, although no mini-game is linked to this particular sale.

A special comic is also offered to celebrate the occasion and there are special account emblems that can be unlocked.

In 2015 Valve expanded the Steam universe by launching its dedicated gaming controller and the Steam machines created in partnership with hardware makers, while also offering the Steam Link to those who want to play from the comfort of their couch.

The company is also interested in delivering a virtual reality solution in 2016, via a collaboration with HTC.

The Vive does not currently have a clear launch date or attached price and it will have to compete with the Oculus Rift and the dedicated hardware from Sony for the PlayStation 4

 

[Bergo]

Not working:

Spoiler: Steam

 

[DracusNarcrym]

It did seem like a caching issue from the very beginning (some sort of cache misconfiguration, as explained in Valve's official statement) which obviously resulted in private requests (e.g. a user attempting to add a product to his/her shopping cart) being handled as public ones, in which case anybody could view such confidential account pages; and this is also the reason why people were ONLY able to view or read but NOT modify those confidential user pages (e.g. people could view someone else's shopping cart, but not add items to it).