Go Back   Halflife2.net Forums > Games > Game Help and Support

Reply
 
Thread Tools
  #1  
Old 27-09-2003, 10:01 PM
Munro's Avatar
Munro Munro is offline
Halflife2.net Staff
Site Owner
 
Join Date: Mar 2003
Location: East Sussex, UK
Steam ID: munro
Posts: 10,086
Be careful who you talk to..

..they may not be who they say they are.

I posted a thread in the official forums here about this which I think is a very serious oversight. There is no email activation on Steam so you can put in anyones email address with no problem and start impersonating them. So far we've got people pretending to be most the Valve staff, Bill Gates, John Carmack and countless others.

I thought this would of been on the top of the list :/
Reply With Quote
  #2  
Old 27-09-2003, 10:11 PM
Pi Mu Rho's Avatar
Pi Mu Rho Pi Mu Rho is offline
Halflife2.net Staff
Enemy Of Fun
 
Join Date: Aug 2003
Location: *.*
Posts: 8,250
I'm Elvis.
__________________
Now I've swung back down again, it's worse than it was before,
If I hadn't seen such riches, I could live with being poor.
Reply With Quote
  #3  
Old 28-09-2003, 12:41 AM
DarkelP's Avatar
DarkelP DarkelP is offline
Zombie
 
Join Date: Aug 2003
Location: U.K
Posts: 992
good one munro, i hate the way we have perverts and idiots who think its funnt to pretend to be someone there not, its not big or clever at all, its stupid and goes to show how insecure they are in there own self, if that makes sense..
__________________
'Physically Simulated' Yorkle Yorkle

Anything can happen in the next 24 hours!

Lightning bolt! Lightning bolt!
Reply With Quote
  #4  
Old 28-09-2003, 01:23 AM
Magicpants's Avatar
Magicpants Magicpants is offline
Barnacle
 
Join Date: Sep 2003
Posts: 178
Having been one of Munro's 'Victims' i must say it's an incredibly large oversight. He fooled me for ages

I'll get you next time, Gadget...
Reply With Quote
  #5  
Old 28-09-2003, 02:22 AM
BloodyL's Avatar
BloodyL BloodyL is offline
Poison Headcrab
 
Join Date: Jul 2003
Location: Cheshire, UK
Posts: 354
Thanks for the heads up Munro
Reply With Quote
  #6  
Old 28-09-2003, 03:08 AM
|\/|oDdiC(_)$'s Avatar
|\/|oDdiC(_)$ |\/|oDdiC(_)$ is offline
Headcrab
 
Join Date: Sep 2003
Posts: 338
those commie bastards!!!!!!!! COZIS! (communist nazi)
Reply With Quote
  #7  
Old 28-09-2003, 10:42 AM
ascetic
Guest
 
Posts: n/a
This relates somewhat to a question that I am having about Steam: how are they validating people?

I did have Half-Life installed, but I formatted my entire hard drive, getting rid of this installation and having to reinstall Windows. This would have cleared any registry entries that Half-Life had entered verifying that I actually owned the game. Shortly after, I installed Steam 1.0, allowing me to download and install all of the listed games for FREE. As said in this post, you can input any email addrees you like to create a user account, so where are they getting the SteamID's from?

Possibilities:

-IP Address (easily changed for most people)
-MAC Address (can get a new NIC)

I'm sure there are others, but really they have opened the door for exploits. Unless I have completely missed something, it seems that cheaters and other annoying individuals will be able to easily get by any types of restrictions set on them. That can only be bad...
Reply With Quote
  #8  
Old 28-09-2003, 11:41 AM
Xtasy0
Guest
 
Posts: n/a
Quote:
Originally posted by ascetic
This relates somewhat to a question that I am having about Steam: how are they validating people?

I did have Half-Life installed, but I formatted my entire hard drive, getting rid of this installation and having to reinstall Windows. This would have cleared any registry entries that Half-Life had entered verifying that I actually owned the game. Shortly after, I installed Steam 1.0, allowing me to download and install all of the listed games for FREE. As said in this post, you can input any email addrees you like to create a user account, so where are they getting the SteamID's from?

Possibilities:

-IP Address (easily changed for most people)
-MAC Address (can get a new NIC)

I'm sure there are others, but really they have opened the door for exploits. Unless I have completely missed something, it seems that cheaters and other annoying individuals will be able to easily get by any types of restrictions set on them. That can only be bad...
your steamid is from your cd-key, if you install steam and already have HL installed it grabs the key from the registry, if you don't have it installed then steam will ask you to enter your cd-key before creating your account.
Reply With Quote
  #9  
Old 28-09-2003, 11:48 AM
Epsi Epsi is offline
Fast Headcrab
 
Join Date: Jul 2003
Posts: 822
Actually, when you create a Steam account, it gets a SteamID. If you can then play HL with that Steam account is determined by if you entered a valid CD Key for that account.

The SteamIDs are allocated on a sequential, first-come-first-serve basis.
Reply With Quote
  #10  
Old 28-09-2003, 12:40 PM
Xtasy0
Guest
 
Posts: n/a
Quote:
Originally posted by Epsi
Actually, when you create a Steam account, it gets a SteamID. If you can then play HL with that Steam account is determined by if you entered a valid CD Key for that account.

The SteamIDs are allocated on a sequential, first-come-first-serve basis.
yeah, i didn't mean the cd-key was converted into a steamid, but without a cd-key you get no steamid.
Reply With Quote
  #11  
Old 28-09-2003, 01:02 PM
Login_Here's Avatar
Login_Here Login_Here is offline
Fast Headcrab
 
Join Date: Jul 2003
Location: Under your bed
Posts: 845
Quote:
Originally posted by Xtasy0
yeah, i didn't mean the cd-key was converted into a steamid, but without a cd-key you get no steamid.

And without a SteamId you dont get games either...
Reply With Quote
  #12  
Old 28-09-2003, 07:13 PM
Owskie Owskie is offline
Headcrab
 
Join Date: Sep 2003
Posts: 477
Re: Be careful who you talk to..

Quote:
Originally posted by Munro
..they may not be who they say they are.

I posted a thread in the official forums here about this which I think is a very serious oversight. There is no email activation on Steam so you can put in anyones email address with no problem and start impersonating them. So far we've got people pretending to be most the Valve staff, Bill Gates, John Carmack and countless others.

I thought this would of been on the top of the list :/
i have a few confirmed valve members, i found one fake one so far but he admited he was a fake so
Reply With Quote
  #13  
Old 03-10-2003, 06:19 AM
ISS
Guest
 
Posts: n/a
This can't be good...


[LH-EDIT] - Your not allowed to post that

Last edited by Login_Here; 03-10-2003 at 08:34 AM.
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 02:11 AM.


Powered by: vBulletin Copyright Jelsoft © 2000 - 2005