Updated:06:44 AM EDT Jul 17


this is ggmania.com subsite Steam Bug Allowed Games to be Downloaded for Free - TechAmok

TOP STORIES

HEADLINES

Ryzen 9 3900X & Ryzen 7 3700X Review
3-Second Video Of A Cat Jumping Over A Gate
Emily Ratajkowski Dancing GIF
Fast & Furious Presents: Hobbs & Shaw - Final Trailer
Intel to Cut Prices of its Desktop Processors by 15%
Succubus Trailer
DXR Tech Demo
Terminator: Dark Fate - Official Teaser Trailer (2019)
How to Download the Windows 10 1903 ISO from Microsoft
20mm vs Aluminium Blocks
71-Year-Old Arnold Schwarzenegger Is Barely Fazed By Running Drop
NVIDIA's earnings in Q1 FY20 down by 31% compared to Q1 FY19
Inexplicable Rubik's Cube Magic Trick!
GOG.com is offering the first Witcher game for free
Google debuts 'next-generation' Assistant
How Viagra Made Pfizer Billions Before Generics
Tesla Will Release Fully Self-driving Cars in 2019
Catch-22 Trailer (Official)

Elon Musk's Neuralink Says Itís Ready for Brain Surgery
Nokia 2.2 Offers Small-Notch Design for $140
Apple's 2019 MacBook Air is significantly slower than last one
NVIDIA Won't Launch GeForce RTX 2080 Ti Super
3 FROM HELL Official Trailer (2019) Rob Zombies, Horror Movie
HyperX Announces First Wireless Headset Under $100
DOOM: Annihilation is set to arrive at the start of October
The King's Man - Official Teaser Trailer
Snapdragon 855 Plus Brings More Power to Gaming Phones
ASUS Begins Enabling Limited PCIe Gen 4.0
Why It's Nearly Impossible To Return A Serve Going 160 MPH
AMD Retires the Radeon VII Less Than Five Months Into Launch
Age of Wonders III is free on Steam
Hulu now supports 4K streaming on Apple TV and Chromecast Ultra
Snowball the cockatoo has 14 distinct dance moves
Feasting Shark Swallowed Whole in Cruel Twist of Fate
Intel "Comet Lake" Not Before 2020, "Ice Lake-S" Not Before
Qualcomm, T-Mobile Successfully Test First Full-Featured 5G Modem

Steam Bug Allowed Games to be Downloaded for Free - [security]
(amigo) - 10:01 AM EST - Nov,12 2018 - post a comment

Researcher Artem Moskowsky found a bug in Steam that let users download "previously-generated CD keys for a game which they would not normally have access." The bug was submitted to Valve on August 7, quickly fixed on August 10, and publicly disclosed on October 31. Valve was quick to point out that their "audit logs were not bypassed using this method," and that they didn't see any evidence that the bug was exploited in the wild. Moskowsky claimed a $20,000 bounty for his efforts, and he told The Register that he was somewhat impressed with Valve's quick response.
Essentially, anyone who had an account on the developer portal would be able to access the game activation keys for any other game Steam hosted, and sell or distribute them for pirates to use to play games from Steam. Fetching from the /partnercdkeys/assignkeys/ API with a zero key count returned a huge bunch of activation keys. "To exploit the vulnerability, it was necessary to make only one request," Moskowsky told El Reg. "I managed to bypass the verification of ownership of the game by changing only one parameter. After that, I could enter any ID into another parameter and get any set of keys." How severe was the flaw? Moskowski says that, in one case, he entered a random string into the request, to pick a title at random, and in return he got 36,000 activation keys for Portal 2, a game that still retails for $9.99 in the Steam store.


Add your comment (free registrationrequired)

Short overview of recent news articles

Jul,17 2019 Elon Musk's Neuralink Says Itís Ready for Brain Surgery
Jul,17 2019 Nokia 2.2 Offers Small-Notch Design for $140
Jul,16 2019 Apple's 2019 MacBook Air is significantly slower than last one
Jul,16 2019 NVIDIA Won't Launch GeForce RTX 2080 Ti Super
Jul,16 2019 3 FROM HELL Official Trailer (2019) Rob Zombies, Horror Movie
Jul,16 2019 HyperX Announces First Wireless Headset Under $100
Jul,16 2019 DOOM: Annihilation is set to arrive at the start of October
Jul,15 2019 The King's Man - Official Teaser Trailer
Jul,15 2019 Snapdragon 855 Plus Brings More Power to Gaming Phones
Jul,15 2019 ASUS Begins Enabling Limited PCIe Gen 4.0
Jul,13 2019 Why It's Nearly Impossible To Return A Serve Going 160 MPH
Jul,13 2019 AMD Retires the Radeon VII Less Than Five Months Into Launch
Jul,12 2019 Age of Wonders III is free on Steam
Jul,12 2019 Hulu now supports 4K streaming on Apple TV and Chromecast Ultra
Jul,12 2019 Snowball the cockatoo has 14 distinct dance moves
Jul,12 2019 Feasting Shark Swallowed Whole in Cruel Twist of Fate
Jul,11 2019 Intel "Comet Lake" Not Before 2020, "Ice Lake-S" Not Before
Jul,11 2019 Qualcomm, T-Mobile Successfully Test First Full-Featured 5G Modem
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs