Updated:04:50 PM EDT Apr 24


this is ggmania.com subsite Steam Bug Allowed Games to be Downloaded for Free - TechAmok

TOP STORIES

HEADLINES

Huawei P30 Pro vs Samsung S10 Plus vs iPhone XS Max Camera Comparo
4K Falcon 9 video
10 Hottest moments from youtubers doing Bikini Try on & haul videos
Get GRID 2 for free
Kara Del Toro Is Amazing
10 Famous Funny Commercials
28 SIMPLE HACKS THAT WILL CHANGE YOUR LIFE
Jessica Alba Is A Bad Girl
Apple MacBook Pro 2018 Appears to Have a Serious Design Flaw
Cache, from History to the Future of CPU Memory
When You Think You Are Fast And This Happens...
The Factory Flawed Air Jordans Worth $143,000
BEST NEWS BLOOPERS JANUARY 2019
Why Everyone is Going to Iceland Lately
27 EASY MAGIC TRICKS
15-inch, 4K OLED laptops are coming
Yes, Batteries Are Our Future. Here's Why.
25 BEST HACKS FOR YOUR SMARTPHONE

Catch-22 Trailer (Official)
Ratajkowski Spends Easter Sunday with the Easter Bunny
GeForce 430.39 WHQL driver download
AMD Releases Radeon Software Adrenalin 19.4.3 Driver
Inner Fire - Yoga On The Frozen Lake Baikal
Rooftop Swimming Pool Emptying During Quake In Manila
How do you say SUSE?
Google Pay Gains Automatic Import From Gmail
The best pics on the Internet #267
Inside an $88M Bel Air Mansion with a Hidden Car Elevator
When They See Us - Official Trailer - Netflix
Just Another Totally Normal Day On The New York City Subway
Te latest Windows update breaks McAfee, Sophos, Avira, Avast
Cricket Launches Data-Only Plans
AT&T Prepaid Promo Doubles the Data
Avengers: Endgame - To the End Trailer
Keanu Reeves Shows Us His Most Prized Motorcycles
Ubuntu Linux 19.04 'Disco Dingo' is finally available

Steam Bug Allowed Games to be Downloaded for Free - [security]
(amigo) - 10:01 AM EST - Nov,12 2018 - post a comment

Researcher Artem Moskowsky found a bug in Steam that let users download "previously-generated CD keys for a game which they would not normally have access." The bug was submitted to Valve on August 7, quickly fixed on August 10, and publicly disclosed on October 31. Valve was quick to point out that their "audit logs were not bypassed using this method," and that they didn't see any evidence that the bug was exploited in the wild. Moskowsky claimed a $20,000 bounty for his efforts, and he told The Register that he was somewhat impressed with Valve's quick response.
Essentially, anyone who had an account on the developer portal would be able to access the game activation keys for any other game Steam hosted, and sell or distribute them for pirates to use to play games from Steam. Fetching from the /partnercdkeys/assignkeys/ API with a zero key count returned a huge bunch of activation keys. "To exploit the vulnerability, it was necessary to make only one request," Moskowsky told El Reg. "I managed to bypass the verification of ownership of the game by changing only one parameter. After that, I could enter any ID into another parameter and get any set of keys." How severe was the flaw? Moskowski says that, in one case, he entered a random string into the request, to pick a title at random, and in return he got 36,000 activation keys for Portal 2, a game that still retails for $9.99 in the Steam store.

Short overview of recent news articles

Apr,18 2019 Samsung shares fall following reports of Galaxy Fold issues
Apr,17 2019 Barbara Palvin Is Officially a Victoria's Secret Angel!
Apr,17 2019 Assassin's Creed Unity is FREE
Apr,16 2019 The Perfection - Official Trailer (Netflix)
Apr,16 2019 Watch The World's Largest Plane Successfully Land
Apr,16 2019 AMD Releases Radeon Software Adrenalin 19.4.2
Apr,16 2019 AMD Readies 50th Anniversary Special Edition Ryzen 7 2700X
Apr,16 2019 Famous eSports Stars: You Won't Believe How Much They Make
Apr,13 2019 Star Wars Jedi: Fallen Order Reveal Trailer
Apr,13 2019 Twitch Sings Released
Apr,12 2019 Star Wars: The Rise of Skywalker Revealed
Apr,11 2019 Scarlett Johansson Tries To Not Spoil Avengers
Apr,11 2019 Samsung Galaxy Fold Ships in Two Weeks; S10 5G in May
Apr,11 2019 Alexis Ren - This, a book, Coffee, And You
Apr,11 2019 NVIDIA GeForce 425.31 WHQL driver adds DXR support
Apr,11 2019 AOC Readying New AGON 353-series - 4K HDR 1000 Gaming
Apr,11 2019 Adobe Declares Shockwave Dead
Apr,10 2019 THE LION KING Trailer #2 (2019)
Apr,10 2019 Surveillance-Class Storage with Extreme Endurance For AI
Apr,10 2019 Samsung's Galaxy A80 has Spinning Cameras
Apr,10 2019 Visible Offers Free New Phone With Almost any Trade-In
Apr,09 2019 Microsoft Launches Chromium-based Edge Browser
Apr,07 2019 Microsoft drops safe removal of USB drives as the default option
Apr,05 2019 Alien 40th Anniversary Short Film: "Specimen"
Apr,05 2019 Google Makes Smart Reply Available to Third-Party Apps
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs