Valve Hacked. Your Info may be at risk

KNiVES · 19 Apr 2007 at 20:16

Not international law is it?

Durzel · 19 Apr 2007 at 20:24

nero120 said:
Oh for ****s sake:

1.) Amazingly enough, sensitive information is NOT stored in databases in plain text, it would be encrypted using a salted cryptographic hash function.

2.) Credit card companies have a fraud guarantee

So what do you say, can we skip the moronic "thank god I didn't pay using steam!" posts?

Why do you assume that credit card information is definitely stored in databases in unencrypted form? It's pretty dangerous to make that assumption...

I've been involved in hosting websites for companies that have stored peoples credit card details in an Access databases before, so don't assume it's automatically encrypted

Hxc · 19 Apr 2007 at 20:47

nbkpsycho said:
Thank god my accounts were free

Same

MoNkeE · 19 Apr 2007 at 20:53

Durzel said:
I've been involved in hosting websites for companies that have stored peoples credit card details in an Access databases before, so don't assume it's automatically encrypted

I'm pretty sure there's a legal requirement to have that sort of information encrypted

And let's face it, Valve use a bit more than just an Access database

-RaZ

sniffy · 19 Apr 2007 at 21:04

MoNkeE said:
And let's face it, Valve use a bit more than just an Access database

Considering steam is a platform for purchasing games, it'd be silly to assume valve don't encrypt sensitive data such a CC details IMO. I hope I'm not proven wrong!

Energize · 19 Apr 2007 at 21:40

Yeah I don't think they are going to put all their account information on the server they use for making transactions and then in a completley unencrypted file in a directory on the c drive called "accounts", like some would have you believe, and then not inform their customers when they are hacked into.

Draeger · 19 Apr 2007 at 22:43

There has been no security breach of Steam. The alleged hacker gained access to a third-party site that Valve uses to manage the commercial partners in its Cyber Café program. This Cyber Café billing system is not connected to Steam. We are working with law enforcement agencies on this matter, and encourage anyone with more information to e-mail us at [email protected].”

http://www.1up.com/do/newsStory?cId=3158852

Curiosityx · 19 Apr 2007 at 23:47

Hacking a website is one thing, using stolen credit card details is suicide.

bledd · 20 Apr 2007 at 11:59

malccy said:
Thought the law stated that credit card information was only allowed to be stored upto 24hrs max.

tell that to my play.com account

wish you had to enter details, i wouldn't order things when i'm hammered then