Steam Hacker Says More Vulnerabilities Will Be Found (arstechnica.com) 37
An anonymous reader shares an article on Ars Technica: The teenager who grabbed headlines earlier this week for hacking a fake game listing on to Valve's Steam store says there are "definitely" more vulnerabilities to be found in the popular game distribution service. But he won't be the one to find them, thanks to what he sees as Valve "giv[ing] so little of a shit about people's [security] findings." Ruby Nealon, a 16-year-old university student from England, says that probing various corporate servers for vulnerabilities has been a hobby of his since the age of 11. His efforts came to the attention of Valve (and the wider world) after an HTML-based hack let him post a game called "Watch paint dry" on Steam without Valve's approval over the weekend."It looks like their website hasn't been updated for years," Nealon told Ars. "Compared to even other smaller Web startups, they're really lacking. This stuff was like the lowest of the lowest hanging fruit."
Watching Paint Dry (Score:5, Funny)
Re: (Score:3)
Go play the original, Desert Bus, nothing beats in terms of testing dedication and perseverance in the face of utter boredom and your ability to not sleep.
Re: (Score:2)
I almost want to get that. Almost.
Re: (Score:1)
It's just a cheap copy of the original:
Watching Grass Grow
which actually has some exciting interactions when the sheep come along
Re: (Score:1)
Re: (Score:2)
i know, right? all i could think was "finally, a game i can win against all the 14-year-olds who torment me! \o/"
Looking on the bright side... (Score:1)
With all those exploitable vulnerabilities at least it will easier for indies to get their games green lit than it normaly is.
Re: (Score:2)
I was in university at 17, and there were several freshmen 16 years old (University of Chicago).
Re: (Score:2)
That explains a lot ;-)
Re: (Score:2)
Skipped the last year of primary school here in the UK after my parents (rightly) decided it was a waste of time and as a result went to university at 17. I knew a few others who did the same, as well as one who went at 16 (but she was frankly weird).
Don't think it did me any harm, but having to worry about getting IDed pretty much anywhere except the college bar (which just assumed everybody was 18+) for the first few months kinda sucked.
Re: (Score:2)
University of Chicago is a little different. They admitted a student in 2003 who was 12 years old, who went on to get his PhD at 18 and his MD at 21.
https://youtu.be/SsOs-26lhEQ [youtu.be]
Every year, there are still a handful of incoming freshmen who are under 18. Back in my day, there were usually more. I was one. My last research assistant before I retired was 19 when she worked for me and 16 when she was admitted.
April Fools or not (Score:1)
I really do wonder how many games got past the team responsible for the curation of the Greenlight games. Could this explain the pure crap that has been published over the course of the past few years?
Don't get me wrong, I feel like Greenlight has been a net positive for the indie game community. I just wonder if Valve had started with stronger guidance and participation we wouldn't be having these sorts of questions happening.
Not surprised (Score:4, Interesting)
Re: (Score:2)
I honestly wonder where the hell Valve's money goes.
Steam Controller
Streaming play from other computers
Steambox
Streaming spectating from friends
Recent VR support
You may not be interested in any of that, I'm not interested in most of it myself, but I'd say Valve has clearly been doing a lot of development work for the platform.
I recently pickedup a steam controller, and have been impressed with it overall. Its not going to replace keyboard and mouse for shooters for me; and its not going to replace my xbox 360 for twinstick games like binding of isaac... but
Re: (Score:2)
Re: (Score:2)
I disagree. They've added the curators, and the explore your queue feature. They've done some work with 2 factor, and completely revamped the marketplace for trading cards etc. They added the refunds.
They did something with GoG I think to enable some sort of cross-chat / cross-play? I think.
As for the "basic functionality" of the store front... I'd say it doesn't need much attention... it works. And it doesn't need a team of "UX monkeys" rewriting the user interface every week.
Re: (Score:1)
Maybe it works for you - but in the steam app I can't get to the store front, and support has ignored me for almost two months now despite me posting daily the issue is still there.
Re: (Score:2)
On one device or on any device?
On one account or on all accounts?
I will say their support is insanely hard to reach and tedious to deal with, especially for one off issues that aren't widespread.
Re: (Score:1)
True, but they seem to be ignoring the basic functionality of their marketplace, which is where the money for all that comes from. It's like if Amazon had let their storefront stagnate 5 years ago in favor of JUST doing their special projects. I dunno. Maybe I'm wrong, maybe those are all money-making projects, but I doubt it.
What's the problem with their marketplace?
One thing they have been doing there is trying to increase the safety for misused accounts so it will be harder to sell or give-away someone elseÂs stuff.
Re: (Score:2)
I recently pickedup a steam controller, and have been impressed with it overall. Its not going to replace keyboard and mouse for shooters for me; and its not going to replace my xbox 360 for twinstick games like binding of isaac... but it definitely has a niche where it is best in class.
Out of curiosity (haven't tried it myself), what niche is that? What kind of games? By the looks of it I'd say not fighting games at least.
Re: (Score:2)
The steam controller has moved a LOT of games from games i would only play with keyboard and mouse at a desk to games I will also happily play on the couch with a steam controller. Its not so much better at anything (yet) that I literally won't play the game without the steam controller; but it IS so much better at "mouse and keyboard on the couch" that there are now a whole slew of games I can happily play from the couch with the SC. I'd say that's its niche right now.
Games such as CivV, Xcom2, Endless Spa
Valve time (Score:2)
I have no doubt Valve will fix this right after they have revamped their support portal.
In releated news... (Score:3)
Fisherman report there are more fish in the sea other than those they have already caught.