[update]Steam has been compromised - SOLVED

[r1Ns3]

GUYS just chill, if your steam shit gets stolen make sure you write down EVERY game and item you had before that. It's ok if you didn't though, pretty sure steam can just check the logs. But don't worry too much about ingame items, contact steam support later after christmas and they will give you your stuff back IF you have email confirm and phone confirm active. Just worry about your location and shit.

[CaptainGazzz]

Im pretty sure steam has gone offline

[marldorthegreat]

Yeah, it took me to this russian guy's store cart.

Then, it took me to a spanish guy's account.

Then to a chinese one.

It's fucked

Origin is fine btw.

[Trik'Stari]

#UncheckSaveMyInformationForLaterMasterRace

 

jk, Valve royally fucked up. They'd better give me free games even though I wasn't really affected (sorry, my greediness is kicking in)

*bro-fist*

[CaptainGazzz]

Origin is fine btw.

Lord praise EA

[Nowak]

Welp. 

Those attacks aren't going towards Washington state. They're going to California. Valve is in Washington, not California.

[Nomy]

Wrong and wrong!

 

This isn't an attack/hack.  Their database is just glitching the f out.  It happens.

A database doesn't just glitch out like that, at least not in this way haha. It doesn't happen.

This is a screw up from the inside or a premeditated attack on their servers sadly enough.

[escape093]

I just signed out. Bad idea?

[marldorthegreat]

Those attacks aren't going towards Washington state. They're going to California. Valve is in Washington, not California.

Yeah. this is a glitch for valve not an attack, there trying to take out xbox and ps4, but after last year they have beefed up the defenses. btw origin is still fine.

[Master Disaster]

A database doesn't just glitch out like that, at least not in this way haha. It doesn't happen.

This is a screw up from the inside or a premeditated attack on their servers sadly enough.

Exactly. There's no reason why Valves backend would do this without either a fuck up or an attack.

Given the fact it's Christmas day I'd wager the latter.

[BrightCandle]

So I found a source on reddit claiming its just a bug with the configuration of the varnish caching servers. Its leaking read data for customers because its caching pages it shouldn't but its not possible to make payments or anything like that because that would be a write and hence bypasses the caching servers.

[Guest]

GG volvo, you just rekt every pc gamer on earth with this fuck up, take it down for as long as possible or this is going to turn into the greatest fuck up since psn got destroyed and stood down for over a month, i hope my account didn't end up with a asshole ttrying to do shit just because, then again i don't have cc or paypal linked and only 2 cents in my wallet.

Also they should give everyone something for fucking up this bad (and I'm totally saying that because i got shit for Christmas and i want rocket league...)

What does a car manufacturer have to do with this?

[Altecice]

Steam has NOT been comprised, what a clickbait title!

---

 

The Caching servers had an experimental image pushed to them (perhaps human error) and this has caused the issues with the store/account section showing other peoples information, NOTE: you could never actually purchase any games via other peoples account as it was only a cached page. Its still a big deal but its not a hacking or anything. They have shut the Steam store down for now until its fixed. Your information has been safe since the store had its client connection cut. Just keep an eye for password reset emails/account change request emails.

[Master Disaster]

Steam has NOT been comprised, what a clickbait title!

---

 

The Caching servers had an experimental image pushed to them (perhaps human error) and this has caused the issues with the store/account section showing other peoples information. Its still a big deal but its not a hacking or anything. They have shut the Steam store down for now until its fixed. Your information has been save since the store had its client connection cut. Just keep an eye for password reset emails/account change request emails.

It has been compromised. How else would you describe it?

[Nomy]

Steam has NOT been comprised, what a clickbait title!

---

 

The Caching servers had an experimental image pushed to them (perhaps human error) and this has caused the issues with the store/account section showing other peoples information. Its still a big deal but its not a hacking or anything. They have shut the Steam store down for now until its fixed. Your information has been save since the store had its client connection cut. Just keep an eye for password reset emails/account change request emails.

So it's an internal screw up, good to hear that. Makes me a hell lot happier than knowing that it was an attack. Screw ups happen. Feel bad for the person that caused it though, guessing this'll cost quite a bit of money to valve considering the holidays.

[elfensky]

Store and Account details are down for me (don't load at all) so I think Valve just fully disabled it for now as they're fixing the problem.

 

Edit: yeah, I see earlier comments confirm it.

[Altecice]

It has been compromised. How else would you describe it?

 

Its not been comprised as in something external has gained internal access, that is what I would call compromised. I would say that its indirectly been showing cached information to the wrong people. Still a big deal.

 

Your payment information will still be safe and nothing can be bought using it, as I said cached info only.... Even if you did know the last 3 numbers of a persons card/ Paypal info, you would error out as soon as you hit the live payment page.

 

 

So it's an internal screw up, good to hear that. Makes me a hell lot happier than knowing that it was an attack. Screw ups happen.

 

 

I stand corrected, but still not an attack.  

[Master Disaster]

Employee fucked up.  If an employee spilled water on everything would you claim that a hack too?

Compromised simply means it's not functioning correctly. How it was compromised is irrelevant, the fact remains it's doing something it shouldn't be doing ergo it's compromised.

Compromised is not the same as hacked, at all.

[Kamina]

They better do a rollback.

[Nomy]

Employee fucked up.  If an employee spilled water on everything would you claim that a hack too?

Depends what kind of water he used imo

It really has got to suck to be that employee right now, he really did a number on Valve. Kinda scary how easily databases or w/e can be screwed over from the inside.

[desertcomputer]

Looks like Phantom Squad took 'em.

It not ddnos attack though

[Bajantechnician]

The app is down now

[Master Disaster]

Also this might be some kind of record, 9 pages in 1.5 hours.

[Master Disaster]

You never gave context, and the only clear one lead to you meaning that.  My bad?

Well I will admit saying 'Steam has been compromised' does kinda imply it was a hack.

Perhaps 'Steam is compromised' would be better

[Master Disaster]

I feel so bad for the person that did this, though.

Someone somewhere is going to be joining the unemployment line on January 1st, assuming it wasn't a hack that is.