It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussion (archive)Credit cards numbers leaked from the Steam(34 posts)(34 posts)
(34 posts)
Pages:
1
2
3
This is my favourite topic
Posted February 10, 2012
avatar
TheJoe: It would take someone several thousand years to decrypt the credit card info. Your cards are safe.
Ah thanks I can stop worrying now.
Posted February 10, 2012
avatar
TheJoe: It would take someone several thousand years to decrypt the credit card info. Your cards are safe.
unless of course they also got the codes to decrypt it.
Posted February 10, 2012
Why even bother posting this on gog? Anyone who uses steam on a regular basis will see it for themselves, and way to try and make it sound much worse than it is in the title

"We do not have any evidence that the encrypted credit card numbers or billing addresses have been compromised. "
Posted February 10, 2012
HAH! If they can find my old credit card I'll give them money!

Not that there's any on there anyway.
Posted February 10, 2012
avatar
Sikboy1029: Why even bother posting this on gog? Anyone who uses steam on a regular basis will see it for themselves, and way to try and make it sound much worse than it is in the title
Because some of us only use Steam to play the games, and not read the newspaper.
Posted February 10, 2012
Seems like we got ourselves (*sunglasses*) a Steam leak.

Bada-bish.
Posted February 10, 2012
avatar
Sikboy1029: Anyone who uses steam on a regular basis will see it for themselves, and way to try and make it sound much worse than it is in the title
That is completely untrue. I use Steam on a regular basis and I would not know if not for this thread (unless someone else made a similar one).
Post edited February 10, 2012 by Barefoot_Monkey
Posted February 10, 2012
avatar
Sikboy1029: Anyone who uses steam on a regular basis will see it for themselves, and way to try and make it sound much worse than it is in the title
avatar
Barefoot_Monkey: That is completely untrue. I use Steam on a regular basis and I would not know if not for this thread (unless someone else made a similar one). Also, Aver's post is to-the-point and without hyperbole. He stated the facts and provided a source - no exaggeration of danger there.
Same here, thanks to the OP for bringing it up!

Well, I joined Steam in 2009 and didn't buy anything until chrismas that year. And my current cc is from last year and the old has been cancelled.

I'm "triple safe". Nice feeling
Posted February 10, 2012
We know. It's all encrypted. It's safe.
Post edited February 10, 2012 by wpegg
Posted February 10, 2012
avatar
wpegg: We know. It's all encrypted. It's safe.
That's what they said about Skynet!

... or will they about Skynet... or will have said about Skynet...
Posted February 10, 2012
avatar
TheJoe: It would take someone several thousand years to decrypt the credit card info. Your cards are safe.
avatar
lukaszthegreat: unless of course they also got the codes to decrypt it.
That's incredibly unlikely. The decryption keys will be on a separate server, unless Valve are idiots and each card will have a unique key.

Additionally, the card numbers will be salted; random shit will be thrown in there so the encryption algorithm won't even look like regular stuff. It will still take you a century or so to sift all the salt out.

Seriously. The sun will roast the Earth before anybody gets your credit card numbers from this file.
Posted February 10, 2012
avatar
lukaszthegreat: unless of course they also got the codes to decrypt it.
avatar
TheJoe: That's incredibly unlikely. The decryption keys will be on a separate server, unless Valve are idiots and each card will have a unique key.

Additionally, the card numbers will be salted; random shit will be thrown in there so the encryption algorithm won't even look like regular stuff. It will still take you a century or so to sift all the salt out.

Seriously. The sun will roast the Earth before anybody gets your credit card numbers from this file.
unless of course they also got the codes to decrypt it. ;-)

But yes, that's unlikely. There are certain very strict standards that you must meet before you are legally allowed to store credit card details - the intention being that the information is safe even if your security is breached and files stolen. When Sony was sued a while ago after being hacked, it was over falsifying these precautions and not actually over the fact that they were hacked. Valve would be pretty stupid to make the same mistake.
Post edited February 10, 2012 by Barefoot_Monkey
Posted February 10, 2012
avatar
Aver: Recently Steam found out that during last attack hackers obtained a copy of backup file with information about Steam transactions between 2004 and 2008. This backup file contained user names, email addresses, encrypted billing addresses and encrypted credit card information.

Probably credits cards from 2004-2006 are already inactive but many those from 2007-2008 may be still active. Hopefully hackers won't break encryption.

Source:
http://store.steampowered.com/news/7323/?snr=1_550_552&utm_source=twitterfeed&utm_medium=twitter
One, they were encrypted, if they were properly encrypted than nothing is compromised, that's the point of encryption. Two, most banks don't change your number when they issue a new card, they simply change the expiration date forward by two years, which is easy to guess. Basically if they can decrypt it and the account is still active they essentially have the information to use it.
Posted February 10, 2012
My current cards expire in a couple months anyway, and my bank is one of those that issue new numbers. And I've got three different ID theft services working for me. I think I'm good.
Post edited February 10, 2012 by predcon
Posted February 10, 2012
When I received my latest cc all but the first 4 numbers were different. I think the personal information could lead to more trouble. I shudder when I think that someone can rifle through my "electronic trash." Contacts, unencrypted emails etc can lead to all sorts of mayhem.

I guess this is what happens when Gabe Newell challenges people to break his security. Hopefully the hackers are satisfied that they beat his system and that it ends there; that further criminal actions are not forth coming.
Pages:
1
2
3
This is my favourite topic
Community
General discussion (archive)Credit cards numbers leaked from the Steam(34 posts)(34 posts)
(34 posts)