Steam Winter Sale 2015

CaptainRAVE · 25 Dec 2015 at 21:27

Not worried tbh.

StudentDavid · 25 Dec 2015 at 21:34

So best to stay in offline mode?

Neil79 · 25 Dec 2015 at 21:34

Aww I wanted to buy lots of games with someone elses account

Rezident · 25 Dec 2015 at 21:38

Did steam get hacked? I can't even get in to the steam store!

Digital X · 25 Dec 2015 at 21:41

Caching issue ^

Don't login/out etc just stay put on whatever you're on.

Tibbz2 · 25 Dec 2015 at 21:43

It's okay now, I think they've taken the site offline so nobody can get on.

robin66 · 25 Dec 2015 at 21:53

Here's a quote I found on PC Gamer that might make things a little clearer.

It's a problem with their caching-server (varnish), caching pages that should not be cached (such as Account-Details, Cart, etc.). It invalidates after some time and is re-cached when the next user visits the page with their profile. You are not actually logged in (as in, you take over the session of the user), you just see pages rendered for others than yourself. This is why different parts of steam appear as different users.

Which page you see is probably dependent on the edge node (first server you connect to) closest to you, hence why different users see different profiles.

My guess to how this could've happened is that an untested configuration got activated when steam went down earlier, e.g. due to an auto-conf service (puppet, chef) pulling an untested config or some of their live servers being replaced by staging / development servers. It's also possible that they were under heavy load and the engineer on duty reconfigured all their edge nodes to cache more aggressively.

Let's hope they fix this fast, because this is a major data leak. I can see private E-Mail and account names. Let's hope their cache server is not delivering internal pages.

Credit to: /u/mrallon

StudentDavid · 25 Dec 2015 at 21:54

Will be changing my details as soon as this is fixed then.

macca672 · 25 Dec 2015 at 22:11

KillahInstinct [Moderator] 37 minutes ago
Account information incorrect
We've gotten reports that people sometimes see other people's account information on the account page. Valve has been made aware of this and are working on a fix.

Some frequently asked questions:
- No, Steam is not hacked

- Creditcard info and phone numbers are, as required by law, censored and not visible to users

http://steamcommunity.com/discussions/forum/0/458604254431478327/

Surfer · 25 Dec 2015 at 22:12

StudentDavid said:
Will be changing my details as soon as this is fixed then.

The one day I decided to download the steam android app..this happens. I thought something was up when it kept giving me error messages. I'll have to change my security details when I can get back in...have payment details saved as well unfortunately..

StudentDavid · 25 Dec 2015 at 22:13

Surfer said:
The one day I decided to download the steam android app..this happens. I thought something was up when it kept giving me error messages. I'll have to change my security details when I can get back in...have payment details saved as well unfortunately..

Hopefully nothing will happen mate.

Surfer · 25 Dec 2015 at 22:18

I suppose even the hamsters at steam get a break..don't begrudge them having a sleep for a few hours..it is Xmas afterall

Vulcan · 25 Dec 2015 at 22:20

robin66 said:
Here's a quote I found on PC Gamer that might make things a little clearer.

They are using Memcache too which is failing, as shown by the admin feature I was able to access earlier on.

StudentDavid said:
Will be changing my details as soon as this is fixed then.

Which will solve what?

StudentDavid · 25 Dec 2015 at 22:26

Changing my details would obviously make things more secure.If you think otherwise, good luck to you sir.

robmol · 25 Dec 2015 at 22:28

CaptainRAVE said:
Not worried tbh.

should be, this is a massive **** up. Apparently there was no SSL on connections to steam addresses either. Can't remember if I browsed the store in the last few hours but it can expose your full name, email, phone and even home address

neoboy · 25 Dec 2015 at 22:29

Guess I'm even safer seeing how I never save any details with Steam when making a purchase.

Scotspaul · 25 Dec 2015 at 22:30

I have my eye on Chivalry-Medieval Warfare.
Is it worth the time? It looks interesting.

StudentDavid · 25 Dec 2015 at 22:30

Scotspaul said:
I have my eye on Chivalry-Medieval Warfare.
Is it worth the time? It looks interesting.

I wouldn't buy anything right now tbh mate just incase.

Scotspaul · 25 Dec 2015 at 22:32

StudentDavid said:
I wouldn't buy anything right now tbh mate just incase.

I'm not. I've seen the other threads and comments but thanks for your concern.

Was browsing and saw something that took my fancy and wanted some other opinions.

StudentDavid · 25 Dec 2015 at 22:33

Was looking at that game earlier myself, looks fun.