/?pid=20265

Updated:04:18 AM EDT Mar 18


this is ggmania.com subsite Steam Bug Allowed Games to be Downloaded for Free - TechAmok

Steam Bug Allowed Games to be Downloaded for Free - [security]
(amigo) - 10:01 AM EST - Nov,12 2018 - post a comment

Researcher Artem Moskowsky found a bug in Steam that let users download "previously-generated CD keys for a game which they would not normally have access." The bug was submitted to Valve on August 7, quickly fixed on August 10, and publicly disclosed on October 31. Valve was quick to point out that their "audit logs were not bypassed using this method," and that they didn't see any evidence that the bug was exploited in the wild. Moskowsky claimed a $20,000 bounty for his efforts, and he told The Register that he was somewhat impressed with Valve's quick response.
Essentially, anyone who had an account on the developer portal would be able to access the game activation keys for any other game Steam hosted, and sell or distribute them for pirates to use to play games from Steam. Fetching from the /partnercdkeys/assignkeys/ API with a zero key count returned a huge bunch of activation keys. "To exploit the vulnerability, it was necessary to make only one request," Moskowsky told El Reg. "I managed to bypass the verification of ownership of the game by changing only one parameter. After that, I could enter any ID into another parameter and get any set of keys." How severe was the flaw? Moskowski says that, in one case, he entered a random string into the request, to pick a title at random, and in return he got 36,000 activation keys for Portal 2, a game that still retails for $9.99 in the Steam store.


Add your comment (free registrationrequired)

Short overview of recent news articles

Mar,18 2024 Haley Messick - Saatisfaction @bennybenassi - In10sive Mastercamp
Mar,18 2024 1000W CPU: The Most Powerful Desktop Processor
Mar,18 2024 Expands Snapdragon 8 Series to Cover More Price Points
Mar,17 2024 Train Vs Lamborghini
Mar,16 2024 Don't use a Microsoft Account!
Mar,16 2024 This Ghillie Made from MIRRORS is SHOCKINGLY GOOD
Mar,16 2024 How Hackers Deliver Malware to Hack you using Social Media
Mar,15 2024 Call of Duty: Warzone Mobile - Launch Trailer
Mar,14 2024 Intel's 4th Attempt At Beating Ryzen - "New" 6.2GHz Core
Mar,14 2024 Asus Goes Big with Zenfone 11 Ultra
Mar,14 2024 House Passes Bill to Force Sale of TikTok
Mar,14 2024 Motorola Brings More Affordable 5G Phones to its 2024 Lineup
Mar,14 2024 Capristan Swim - Miami Swim Week | Art Basel Miami
Mar,11 2024 The Most Stunning All SSD NAS Ever? Inside QNAP's All-SSD
Mar,11 2024 M2 vs M3 MacBook Air - ULTIMATE Comparison!
Mar,11 2024 Risky PC Experiment: Direct CPU Water-Cooling! Can It Survive?
Mar,11 2024 SpaceX Falcon 9 rocket launches 23 Starlink satellites from
Mar,10 2024 I tried the Cheapest Arduino Alternative (that Nobody heard of)
Mar,10 2024 This is the WEIRDEST PC I've ever seen.
Mar,10 2024 Nvidia Retires GTX 16 Series, GDDR7 Arrives, FSR Upscaling Going AI?
Mar,09 2024 The New BIOS Hack That Bypasses Every Antivirus
Mar,09 2024 Microsoft says it hasn't been able to shake Russian state hackers
Mar,09 2024 iOS 17.4, Out Today, Brings Transcripts to Apple Podcasts
Mar,09 2024 Microsoft Kills Android-on-Windows
Mar,08 2024 Don't Make These Common PC Building Mistakes!
Mar,07 2024 Sydney Sweeney Gets Outcast By Her Hooters Co-Workers On 'SNL'
Mar,07 2024 How A Journalist Uncovered America's Secret Doomsday Bunkers
Mar,07 2024 Government Banning Hardware Wallets?
Mar,07 2024 Xiaomi 14 Ultra Full Review: I prefer to call it '13S Ultra'
Mar,05 2024 Windows Defender vs Ransomware 2024
Mar,04 2024 I fixed this PCIe card with tape - I can't believe this worked...
Mar,03 2024 Auto Change IP Address in every 3 Seconds - 100% ANONYMOUS
Mar,03 2024 Liquid Cooling is Dead
Mar,02 2024 This AAA Hedera Powered Game Could EXPLODE HBAR'S VALUE
Mar,02 2024 Gaming on Starlink - 2024 Review and Tes
Mar,01 2024 World's Fastest Camera Drone Vs F1 Car (ft. Max Verstappen)
Feb,29 2024 Top 5 Best CPU Coolers 2024
Feb,29 2024 Tangem vs Cypherock X1 Cold Wallet - Choose Wisely!
Feb,29 2024 The All China PC
Feb,28 2024 The NEW Legion 7i - A Game Changer
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs