full-disclosure - Re: Steam defaced

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 11 Nov 2011 22:08:54 +1100
From: xD 0x41 <secn3t@...il.com>
To: Jacqui Caren <jacqui.caren@...world.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Steam defaced

this is starting to remind me of that time when everyone has like
30game valid steam lisences.... he is dead, Jim!


On 11 November 2011 20:52, Jacqui Caren <jacqui.caren@...world.com> wrote:
> On 10/11/2011 23:25, Henri Salo wrote:
>> As I usually have good news.. Here is some more: http://forums.steampowered.com/forums/
>>
>> Steam joins the failboat.
>
> Its worse than that Jim, he's dead!
>
> from another mailing list...
>
> On 11/11/11 00:29, Paul M wrote:
>  > > Did you get journalism training at the BBC?
>  > >
>  > > It's their forums, not the game distribution system
> Nope, it's credit cards and passwords too:
>
> http://www.pcgamer.com/2011/11/10/steam-database-hacked-encrypted-credit-card-information-and-passwords-compromised/
>
> -- Matthew Bloch
>
> and -------------------------------------------------------------------
>
> http://forums.steampowered.com/forums/forumdisplay.php?f=17
>
> We learned that intruders obtained access to a Steam database in addition
> to the forums.
>
>  This database contained information including user names, hashed and
> salted passwords, game purchases, email addresses, billing addresses and
> encrypted credit card information. We do not have evidence that encrypted
> credit card numbers or personally identifying information were taken by the
> intruders, or that the protection on credit card numbers or passwords was
> cracked. We are still investigating.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/