StartFragment
\nA security researcher on Hackerone recently submitted an exploit that could be used on Steam to gain unlimited funds. The exploit has since been patched by Valve and the company awarded the user who discovered this exploit $7500.
\n\n\nHackerone is a site that connects companies like Valve with users who like to hack and tinker with websites, apps, and other pieces of software. These folks can submit exploits and hacks to companies privately and then in exchange, these tech companies can award hackers money for their finds. It’s a system that has a track record of helping squash nasty exploits before they can go public.
\nOn August 9, Hackerone user Drbrix privately alerted Valve to a Steam Wallet exploit that involved changing your email address and intercepting transactions that use any Smart2Pay payment method. You can read about the full method of attack and how it works via the Hackerone report, which became public on August 1o and was spotted by The Daily Swig and NME a few days later.
\n“I think impact is pretty obvious, attacker can generate money and break the Steam market, sell game keys for cheap etc,” posted Drbrix in their Hackerone report.
\nAs you might expect, Valve quickly responded to Drbrix’s post. A Valve employee on the site named JonP thanked Drbrix for their find and explained that Valve had quickly validated what they reported and was taking steps to fix the issue. A follow-up message from JonP explained that the report was “clearly written” and “helpful in identifying a real business risk.”
\nG/O Media may get a commission
\n$10 or more
\nHumble Bundle - Starlight Bundle
\nBenefit the Starlight Children's FoundationFor $10 or more, you can help hospitalized kids get access to video games—and get some sweet games for yourself too, including Lego Star Wars - The Complete Saga.
\nValve then paid Drbrix $7500, which is nice, but doesn’t seem like enough. If this exploit had gone public or had been shared with a few small groups of people, it could have cost Valve a lot more than $7500. Come on, Valve. Last year, Riot was offering people $100k for finding Valorant exploits.
\nAfter everything was squared away and fixed, Valve and Drbrix made the full report public. At this time, we don’t know if anyone was able to use this exploit before Valve was notified and patched it.
\nSteam is one of the most reliable gaming platforms we have today. The best thing about this online streaming platform is that it can help you pack and send a game as a gift to your fellow streamers. This makes Steam an edge over its competitors. Not only this, but Steam also gives you info on any sale that’s going on concerning the product in that particular month. So, to do all this, firstly, you will have to know How to see your Friend’s wishlist.
\nHere are the step-by-step details on ‘how to see someone’s wishlist on steam:
\nWhat is a Steam Wishlist?
Steam wishlist is nothing but a bunch of games that any player wants to buy. For instance, you are a Steam streamer and you like some games off of the Steam goodies that it offers or games it offers. You will set and save them in your wishlist. Now the best part about it is everyone can access this list. Friends, Family, and Besties, everyone can watch this list, and if they want they can check them and give you your favorite games. Apart from that, the other aspect of this is timely notifications on sales and release news of games on Steam. So, the Wishlist’s original intent was to keep you updated. But it can also be accessed by Friends and they can give it to you.
EndFragment
\n","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[],"owner":"23528994","collectionId":"b92c0a32-423d-439c-b997-79131948a872","publishedId":"2s83KMFTXK","public":true,"customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"EF5B25"},"publishDate":"2022-09-24T08:21:26.000Z"},"item":[]}