Valve Allegedly Hacked

[Linux]

Sorry to go off topic a bit guys just answer omgomgz question about MIS. I really do enjoy, its stressful, just hope you get in a good company with a good boss(s), if not you'll hate your job day in and day out like I do because my boss is a huge dick. Your welcome to email me more if you would like or to chat go to my site: http://ww.cyberdyn.net - At the buttom click Contact us, then click the link Computer Repair (Just for security reason on the internet I will not post my company personal email, this web site is my personal company with me friend not where I currently work as an MIS\IT Manager).



But back on topic, if a company CC"s or info is stolen it has to by law contact everyone who's was stolen or possibly, and it is public accessible what company had what happen to it, not people contact info, but what did happen and how much damage, etc, etc,. Correct me if I am wrong, I have been many time in the past and I learn from my mistakes :), first rule of IT work, if it doesn't fit, don't try pushing it any harder unless the instructions tell you so and if thats the case to heck with the instructions , haha.

[-smash-]

Zips, you're not gonna get a response. Valve is keeping this hush-hush; I notified them the day the post was made, and one response from them sounded like they were already aware of the situation.



And we were moving posts before Valve got a word in. And since Valve is dealing with this internally only, they haven't said whether this is 100% true or not, and won't for a long time.



Besides, it's been weeks. Saying he's going to release CC info; That's a load of bullshit. It's too big for this guy. It won't happen.

[Zips]

-smash- wrote..

Zips, you're not gonna get a response. Valve is keeping this hush-hush; I notified them the day the post was made, and one response from them sounded like they were already aware of the situation.



And we were moving posts before Valve got a word in. And since Valve is dealing with this internally only, they haven't said whether this is 100% true or not, and won't for a long time.



Besides, it's been weeks. Saying he's going to release CC info; That's a load of bullshit. It's too big for this guy. It won't happen.

I already realized I wasn't going to get a response days ago. :)



Well if Valve is dealing with this internally, that sounds to me like it's true.



And the person that did this seems to know how to play the game. As you know, he's been around the block a few times, so I wouldn't count on him just being full of BS just yet.

[entRo]

I've seen the site, and the guy even posted downloads for some of the data he got. It looks pretty legit.

[Mazuko]

It's not hard to make something look "legit" to people that have never seen what the real thing looks like in the first place.



A "real hacker" would not simply post for free the information gained, especially credit card numbers, as who in their right mind wants to get caught in the first 30 minutes after the posting? I mean seriously the whole purpose of stealing them is to do two things. A) Use them for yourself. B) Sell the list to someone who wants to use them for themselves or something like that.



I mean come on....and if the information was indeed stolen they are required by LAW to not only notify the individuals that had their data stolen but every single customer that has ever done any business with their "hacked" server even if that data was not stolen simply because of the fact it COULD HAVE been taken or at least viewed!

[Zips]

Mazuko wrote..

It's not hard to make something look "legit" to people that have never seen what the real thing looks like in the first place.



A "real hacker" would not simply post for free the information gained, especially credit card numbers, as who in their right mind wants to get caught in the first 30 minutes after the posting? I mean seriously the whole purpose of stealing them is to do two things. A) Use them for yourself. B) Sell the list to someone who wants to use them for themselves or something like that.



I mean come on....and if the information was indeed stolen they are required by LAW to not only notify the individuals that had their data stolen but every single customer that has ever done any business with their "hacked" server even if that data was not stolen simply because of the fact it COULD HAVE been taken or at least viewed!

They are not required to immediately notify anybody last I knew, especially if they are working on the legalities themselves. And based on what was seen, this is all very legit looking.

[le gritche]

Mazuko wrote..

A "real hacker" would not simply post for free the information gained, especially credit card numbers, as who in their right mind wants to get caught in the first 30 minutes after the posting? I mean seriously the whole purpose of stealing them is to do two things. A) Use them for yourself. B) Sell the list to someone who wants to use them for themselves or something like that.

Don't write off the fact that the supposed hacker could be just dumb, or angry and wanting to embarass Valve. It could also be some kind of escalation in a blackmail attempt.



If memory serves me well, I'm inclined to think that Valve will deny or cover the facts no matter the evidences.

When HL2 was hacked from their network, first they denied any hacking. When the source code started showing left and right on the internet they said only the source code was stolen, and finally when a working version appeared online they switched to blaming the hack for the HL2 delay whereas it was obviously unrelated.



So whether it's for calmly investigating the matter, trapping the supposed hacker, trying to cover up the mess or plain just not wanting to be exposed as a bunch of stupid asses, I'm not expecting much from them.

[FlyingMongoose]

A friend of mine claims inqueries with alfred that alfred has said this is a hoax. But your personal information's security should never be taken as a grain of salt whether it's been compromised or not. Though I think alfred said it was an issue being investigated into, so it seems they're playing both sides. And apparently valve forwards any support requests on the site to the security support page. So all I can do is sit and wait, and it looks like it's the same for the rest of ya.

[-:Nighthawk:-]

Karma.



Anyway, if this indeed happened, I have a few thoughts. First off, it's entirely possible that whoever hacked them was just trying to see what they could get, and not specifically going after credit card info per se. If that's the case, hopefully it'll just be this guy's online bragging rights (if he's dumb and wants to get caught) and never actually exploited.



As much as it's not fair for such info to be stolen, I have to admit I'm curious about VALVe's financial records, especially if they contain info about how much they've been making with their Steam service, as well as their new "shove it down our powerless customers' throats" advertising campaign.



Anyway, always sucks to get hacked... but I kind of feel like there's a mix of karma and action/reaction going on here. Perhaps two events is not enough to base a trend off of, but it would seem that major hacking has followed times where VALVe has either lied to the community blatantly or simply mistreated them for their own financial gain. You have to wonder if people would be trying this hard to harm VALVe if the general feeling of the community was that VALVe listened to and respected them.



Hopefully this doesn't slow down the development cycle even more...

[=[GTA]=TaT-2-MoNkEy]

luckily my credit card has expired that i last used on steam, so i should be safe...



btw hi Zips :p

[kenshin muen]

People are worried about their cc esp me im just gonna say if my cc is exposed i`m suing i don`t care. That being said



I think its wrong for someone to take revenge against a company and make the people pay its wrong and immoral.

[Mulan]

Banks are actually sending out new CC's now!



Seems like Maddoxx has really done it..



u have the link right?

[Threeboy]

"Atleast one website says"



The story's on slashdot, haha.