|
Steam Bug Allowed Games to be Downloaded for Free - TechAmok
Steam Bug Allowed Games to be Downloaded for Free - [security] (amigo) - 10:01 AM EST - Nov,12 2018 - post a comment Researcher Artem Moskowsky found a bug in Steam that let users download "previously-generated CD keys for a game which they would not normally have access." The bug was submitted to Valve on August 7, quickly fixed on August 10, and publicly disclosed on October 31. Valve was quick to point out that their "audit logs were not bypassed using this method," and that they didn't see any evidence that the bug was exploited in the wild. Moskowsky claimed a $20,000 bounty for his efforts, and he told The Register that he was somewhat impressed with Valve's quick response.
Essentially, anyone who had an account on the developer portal would be able to access the game activation keys for any other game Steam hosted, and sell or distribute them for pirates to use to play games from Steam. Fetching from the /partnercdkeys/assignkeys/ API with a zero key count returned a huge bunch of activation keys. "To exploit the vulnerability, it was necessary to make only one request," Moskowsky told El Reg. "I managed to bypass the verification of ownership of the game by changing only one parameter. After that, I could enter any ID into another parameter and get any set of keys." How severe was the flaw? Moskowski says that, in one case, he entered a random string into the request, to pick a title at random, and in return he got 36,000 activation keys for Portal 2, a game that still retails for $9.99 in the Steam store.
|
|
Add your comment (free registrationrequired)
Short overview of recent news articles |
Mar,18 2024 Haley Messick - Saatisfaction @bennybenassi - In10sive Mastercamp Mar,18 2024 1000W CPU: The Most Powerful Desktop Processor Mar,18 2024 Expands Snapdragon 8 Series to Cover More Price Points Mar,17 2024 Train Vs Lamborghini Mar,16 2024 Don't use a Microsoft Account! Mar,16 2024 This Ghillie Made from MIRRORS is SHOCKINGLY GOOD Mar,16 2024 How Hackers Deliver Malware to Hack you using Social Media Mar,15 2024 Call of Duty: Warzone Mobile - Launch Trailer Mar,14 2024 Intel's 4th Attempt At Beating Ryzen - "New" 6.2GHz Core Mar,14 2024 Asus Goes Big with Zenfone 11 Ultra Mar,14 2024 House Passes Bill to Force Sale of TikTok Mar,14 2024 Motorola Brings More Affordable 5G Phones to its 2024 Lineup Mar,14 2024 Capristan Swim - Miami Swim Week | Art Basel Miami Mar,11 2024 The Most Stunning All SSD NAS Ever? Inside QNAP's All-SSD Mar,11 2024 M2 vs M3 MacBook Air - ULTIMATE Comparison! Mar,11 2024 Risky PC Experiment: Direct CPU Water-Cooling! Can It Survive? Mar,11 2024 SpaceX Falcon 9 rocket launches 23 Starlink satellites from Mar,10 2024 I tried the Cheapest Arduino Alternative (that Nobody heard of) Mar,10 2024 This is the WEIRDEST PC I've ever seen. Mar,10 2024 Nvidia Retires GTX 16 Series, GDDR7 Arrives, FSR Upscaling Going AI? Mar,09 2024 The New BIOS Hack That Bypasses Every Antivirus Mar,09 2024 Microsoft says it hasn't been able to shake Russian state hackers Mar,09 2024 iOS 17.4, Out Today, Brings Transcripts to Apple Podcasts Mar,09 2024 Microsoft Kills Android-on-Windows Mar,08 2024 Don't Make These Common PC Building Mistakes! Mar,07 2024 Sydney Sweeney Gets Outcast By Her Hooters Co-Workers On 'SNL' Mar,07 2024 How A Journalist Uncovered America's Secret Doomsday Bunkers Mar,07 2024 Government Banning Hardware Wallets? Mar,07 2024 Xiaomi 14 Ultra Full Review: I prefer to call it '13S Ultra' Mar,05 2024 Windows Defender vs Ransomware 2024 Mar,04 2024 I fixed this PCIe card with tape - I can't believe this worked... Mar,03 2024 Auto Change IP Address in every 3 Seconds - 100% ANONYMOUS Mar,03 2024 Liquid Cooling is Dead Mar,02 2024 This AAA Hedera Powered Game Could EXPLODE HBAR'S VALUE Mar,02 2024 Gaming on Starlink - 2024 Review and Tes Mar,01 2024 World's Fastest Camera Drone Vs F1 Car (ft. Max Verstappen) Feb,29 2024 Top 5 Best CPU Coolers 2024 Feb,29 2024 Tangem vs Cypherock X1 Cold Wallet - Choose Wisely! Feb,29 2024 The All China PC Feb,28 2024 The NEW Legion 7i - A Game Changer
>> News Archive <<
| |
|