Security flaw for unlimited Steam Wallet funds found, fixed | PC Gamer - linthoom1978

1. Home
2. News
3. Steamer

Security flaw for unlimited Steam Notecase funds found, geosynchronous

This is in fact exactly what hacking looks like. (Image credit: Getty Images)

With the help of a security department researcher, Valve has found and geostationary an exploit that would have allowed a user to falsify the economic value of deposits to their Steam wallet. The exploit worked by—for good example—turning a $1 bank into a $100 stick. Information technology was accomplished by changing the account's email address to one including "amount100," then intercepting a message to a defrayal company API.

The writeup for the hack was posted on white-hat hacking bug bounty site HackerOne by the handle drbrix. Valve and drbrix later made the exchange public, once a specify was implemented. Drbrix first posted the bug as "medium" priority, saying "I intend impact is pretty obvious, attacker can generate money and break steam market, deal gamey keys for inferior etc."

Valve, after testing the exploit and trying a reparation, subsequently upgraded the bug to "Critical" severity and the corresponding payout to $7,500 USD "reflective the potential be to the business."

"We hope to hear more from you in the future," the Valve staff said.

Yes, I'm trustworthy they would.

Valve told The Daily Swig that "Thanks to the someone World Health Organization reported this bug we were able-bodied to work with the payment provider to resolve the issues without whatever impact on customers." Valve did non say whether anyone had actually abused the likely exploit.

Jon Bolding is a games writer and critic with an encompassing background in strategy games. When he's not along his PC, he can be found playing all tabletop game under the sun.

Source: https://www.pcgamer.com/security-flaw-for-unlimited-steam-wallet-funds-found-fixed/

Posted by: linthoom1978.blogspot.com

Share this post