Slashdot Mirror
Steam: No "Unauthorized Actions" On Exposed Accounts
The Steam bug that allowed users to see other users' account details may not have been as harmful as it first appeared. Valve said in a statement (reported on Mashable) that while cached data showed usernames, "sensitive details such as credit card numbers are automatically censored on user account pages, which mitigates the potential harm of someone having seen your personal data." From Mashable's report:
"Steam is back up and running without any known issues," Valve told Game Informer in a statement. "As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users."
If you had any care for email privacy anyway, you'd buy a stupendously cheap domain, activate forwarding on the catch-all, and then use a bunch of one-time addresses.
I know what address I gave Steam. I know it's never been spammed. Because only they and I know what it was. If it does get spammed, someone hacked Steam, or me, or something like this happened.
So I then generate another address, change my steam email to that, block the now-public one, and carry on with my life.
The problem with people who claim the sky is falling is that they never stop to think about how to stop it falling on them.