Author Topic: [PLEASE READ] Heartbleed Issue at Steam  (Read 1700 times)

Zerviscos

  • Infinite Bread Chewing Powers! Activate!
  • *
  • Om nom nom nom nom nom*
[PLEASE READ] Heartbleed Issue at Steam
« on: April 08, 2014, 03:23:05 PM »
A Heartbleed bug has been discovered. Any steam services(steamdb, steamcommunity, etc.) are currently and potentially dangerous at the moment.
Here's the tweet hours ago.
https://twitter.com/SteamDB/status/453467152100917248

Though, I don't know if you should even click the link('cause I don't know how great the issue is). It's been said that you should not try to do anything rash as of the moment.
Don't log into, use, or log off of steam or any >other websites<. The bug effects the heart of encryption key libraries, it will leave your data vulnerable for eavesdropping without any trace of that having been done.
It's not known which users have been greatly affected, but it is advised that everyone should be careful, as a lot of web servers use OpenSSL.

Other sources:
http://www.reddit.com/r/Steam/comments/22i6ap/psa_steamdb_recommends_not_using_any_steam/
http://www.reddit.com/r/DotA2/comments/22iakc/steamdb_we_recommend_not_using_any_steam_services/

If you do not know Heartbleed is then check this out:
http://heartbleed.com/

Update:
As checked by multiple users. Though no official announcement yet from Valve.
store.steampowered.com | Clear
steamcommunity.com | Clear
support.steampowered.com | Not Clear

Ubisoft is affected.

Update 2:
Issue has been resolved as of seven(7) hours ago. Valve suggests to change password, and reset SteamGuard.

Original Tweet:
https://twitter.com/SteamDB/status/453598542943498240

Source:
http://www.reddit.com/r/Steam/comments/22jbo4/steamdb_valve_says_vulnerabilities_on_steam/

Resetting SteamGuard:
https://twitter.com/SteamDB/status/453601646690705408/photo/1
-
Edit:
Added Heartbleed status tracker(you can enter any site):
http://filippo.io/Heartbleed/#steamcommunity.com
« Last Edit: April 09, 2014, 01:54:32 AM by En »



Twitter | Steam | Battle.net[Zerviscos#1833]

Re: [PLEASE READ] Heartbleed Issue at Steam
« Reply #1 on: April 08, 2014, 05:43:48 PM »
In addition to all yahoo services (and porn, and VPNs),
 the other thing of note is all versions of World of Tanks Website are vulnerable.

This site is also vulnerable.
Might want to fix that.
« Last Edit: April 08, 2014, 05:50:28 PM by Think Komachi with a Rifle »

Jq1790

  • Wow I'm back to playing this game.
  • Let's puzzle together again, Karin!
Re: [PLEASE READ] Heartbleed Issue at Steam
« Reply #2 on: April 08, 2014, 06:06:03 PM »
support.steampowered.com is clear according to your tracker now.
If you're a Pazudora player and aren't on #puzzleandlibrarians, come join us!

Garlyle

  • I can't brain today
  • I have the dumb
    • Tormod Plays Games
Re: [PLEASE READ] Heartbleed Issue at Steam
« Reply #3 on: April 08, 2014, 10:49:36 PM »
There's a LOT of things that are vulneurable as a result of this, actually; Steam's just one of probably hundreds of thousands of places that could be affected.  The security hole is a weakness in a security system that's basically become a longstanding standard that huge amounts of things are built on.

Zerviscos

  • Infinite Bread Chewing Powers! Activate!
  • *
  • Om nom nom nom nom nom*
Re: [PLEASE READ] Heartbleed Issue at Steam
« Reply #4 on: April 09, 2014, 01:53:32 AM »
Issue has been resolved as of seven(7) hours ago.



Twitter | Steam | Battle.net[Zerviscos#1833]