Slashdot Mirror
Steam Hacker Says More Vulnerabilities Will Be Found (arstechnica.com)
An anonymous reader shares an article on Ars Technica: The teenager who grabbed headlines earlier this week for hacking a fake game listing on to Valve's Steam store says there are "definitely" more vulnerabilities to be found in the popular game distribution service. But he won't be the one to find them, thanks to what he sees as Valve "giv[ing] so little of a shit about people's [security] findings." Ruby Nealon, a 16-year-old university student from England, says that probing various corporate servers for vulnerabilities has been a hobby of his since the age of 11. His efforts came to the attention of Valve (and the wider world) after an HTML-based hack let him post a game called "Watch paint dry" on Steam without Valve's approval over the weekend."It looks like their website hasn't been updated for years," Nealon told Ars. "Compared to even other smaller Web startups, they're really lacking. This stuff was like the lowest of the lowest hanging fruit."
that slashvertisement stuff rankle. The titles are not humorous.
I am disappointed to find out that this is not a real game. I was just imagining an 8 hour marathon multiplayer session with hundreds of players and how awesome that would be.
Guilty, because "hacker".
With all those exploitable vulnerabilities at least it will easier for indies to get their games green lit than it normaly is.
This 16 year old kid calls himself a "security researcher" as though he's been alive long enough to call himself an expert in anything but jacking off to mom's Victoria Secrets magazines.
Also, 16 and in University? I call bullshit.
I really do wonder how many games got past the team responsible for the curation of the Greenlight games. Could this explain the pure crap that has been published over the course of the past few years?
Don't get me wrong, I feel like Greenlight has been a net positive for the indie game community. I just wonder if Valve had started with stronger guidance and participation we wouldn't be having these sorts of questions happening.
So here's a fun test I tried. I work at a corp that has a public wifi hotspot (wanderingwifi). I disconnected my system from ethernet and connected it to the public hotspot. Steam loaded up the splash page right inside of the store page window. I did some further investigation, the browser is detected as chrome 47 under windows 8. Being as the current version of chrome is 50 I can only imagine the exploits that are available for the version that's used for steam. Good luck getting GabeN to do anything about it though; valve customer service is a disgrace to the IT industry.
We are experiencing some issues with our advertisement detection.
Sorry for the inconvenience. During this unpredictable day, we suggest reading Science Daily. We will have the problem fixed tomorrow.
I'm totally unsurprised by the assertion. I honestly wonder where the hell Valve's money goes. They must be making it hand over fist, yet they can't fix their CS even though they keep promising to and they haven't made much for new games in forever. We need to get someone to infiltrate Valve and do an expose on their inner workings.
I have no doubt Valve will fix this right after they have revamped their support portal.
Fisherman report there are more fish in the sea other than those they have already caught.
Not really security issues, but more examples of bad programming:
http://steamprivacy.tumblr.com...
Valve are hardly known for Good Code in the slightest.
Source, even at the time, was a terrible engine.
Source, even after updates to it for years, is still bested by engines that came out the same time it did.
An engine that takes an age to load anything and even longer to unload it.
The supposed "great for modding" is the worst lie since barely any mods came out for it because the modders gave up, and the ones that did come out usually never came out for years, came out buggy, and end up getting abandoned. (there are more mods for KILLING FLOOR, a small FPS at best)
Steam itself, what is literally a web browser, a chat client and file manager, is somehow still terrible after all these years.
Still thrashing hard drives, the update system is the worst update system I can recall using, interface is an inconsistent mess (despite their best efforts to tidy it up in recent years)
I used to always say the actual Steam website itself was the best thing Valve has ever made.
Even though this occurred , that is still true. The rest of Valvecode is horrific.
I pray to the computing gods that Source2 isn't a hacky piece of crap like Source became.
Why, why did Valve have to become the "saviours" of PC gaming? Why couldn't it have been literally any other company? Why them?