Valve: "Steam Guard" to protect your Steam account
Page 2 of 3 Goto page Previous  1, 2, 3  Next
consolitis
VIP Member



Posts: 27317

PostPosted: Fri, 4th Mar 2011 23:58    Post subject:
Gabe Newell gave his username and password at CeBIT for everyone to try to log in, to prove that Steam Guard protects your account.

His login data:

 Spoiler:
 


A demonstration of how it works (and the fact it's optional) is here: http://www.neogaf.com/forum/showpost.php?p=26294247&postcount=218

You don't need an intel CPU, intel's tech just adds an additional layer of protection.

You can opt in the beta and secure your account right now: http://store.steampowered.com/news/5088/


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
JBeckman
VIP Member



Posts: 34997
Location: Sweden
PostPosted: Sat, 5th Mar 2011 07:22    Post subject:
It's interesting that it's mentioned to be optional but the current beta has no settings for it at all unless it's not something you alter from within the Steam client directly.

Still it's not a bad thing due to phishing, account hacking and the like so I don't see a problem with this protection, all you need is a e-mail account that's verified and then you enable this and every time someone tries to log-in with your account name you'll get notified about it which I find a nice protection addition, Intel processor further restricts this should it be needed but that might be difficult for those using multiple computers and the like but still it can likely be configured and security is important.
Back to top
Kyorisu




Posts: 671

PostPosted: Sat, 5th Mar 2011 09:48    Post subject:
Why not a keyfob that you associate with your steam account? If lost accounts are such a huge issue it seems odd to restrict this kind of protection to brand new intel processors.
Back to top
nightlith




Posts: 744
Location: Land of Bagged Milk
PostPosted: Sat, 5th Mar 2011 09:53    Post subject:
JBeckman wrote:
It's interesting that it's mentioned to be optional but the current beta has no settings for it at all unless it's not something you alter from within the Steam client directly.


If you restarted steam 3 times after you joined the beta, you'll see a 'Manage Account Security' button in the settings window, from which you can turn SG on or off, and also remove any computers you've authorized as being able to access your account from.

Overall, this is awesome, and I endorse this feature 100%. I'm not one to get my shit hacked or stolen (in fact, it's never happened) but that doesn't mean I'm going to start leaving my doors unlocked and windows open.


i can has computar?!
Back to top
Kyorisu




Posts: 671

PostPosted: Sat, 5th Mar 2011 09:54    Post subject:
sabin1981 wrote:
You have a choice NOW... but how long until it becomes mandatory?


This. Valve has a track record of beta additions being rammed down everyone's throat.
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sat, 5th Mar 2011 09:56    Post subject:
Kyorisu wrote:
Why not a keyfob that you associate with your steam account? If lost accounts are such a huge issue it seems odd to restrict this kind of protection to brand new intel processors.


Perhaps it's coming in the future? Right now intel's protection doesn't work anyway.

https://support.steampowered.com/kb_article.php?ref=8232-WSGZ-8021&auth=b7ecc37bd8f4a297efbafdce3d00a564

Quote:
Does Steam Guard take advantage of the Intel® Identity Protection Technology solution that Valve and Intel recently announced?

No, not in this beta. We hope to offer additional forms of authentication soon though, so you'll have your choice of secondary authentication methods with Steam Guard.


Also:

Quote:
Is there a limit to the number of machines that can be authorized at once?

No, there's no limit. Steam Guard is aimed to protect the value that is yours, not limit your access to your stuff. As always, you can access your Steam account and library from as many machines as you'd like.


If I interpret this correctly this means that if I want I can authorize my x (1,2,3.. ,9999999999) PCs at the same time? Then it's not 1 PC at a time, as we originally thought. So it's not restricting at all!


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sat, 5th Mar 2011 12:35    Post subject:
According to Valve: http://forums.steampowered.com/forums/showpost.php?p=21108515&postcount=135

Quote:
The vast majority of account hijackings are due to common phishing attempts where a user is prompted to provide his or her username and password. The number of instances where a hijacker has access to the user's email account is less than 1% of incidents.

If the account uses Steam Guard, the phisher will not be able to access the account. If the phisher can't access the account, he can't find out the owner's email. So even if the user has the same password for his email as he does his Steam account, the phisher has no way of knowing the user's email. Of course, the phisher could always ask but users will be much more suspicious if a phisher asks for their Steam username, password, and email account.


which is the reason they implemented this security feature.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 6th Mar 2011 19:04    Post subject:
Here is a FAQ on intel's website about how their new security feature works. http://ipt.intel.com/how-it-works.aspx

Quote:
Q: Is this a static number generated by the CPU?

A:It is neither static, nor generated by the CPU. The algorithm that belongs to the security vendor protecting the website or application and its customers actually runs on the chipset (not the CPU) in an area designed only for signed code from Intel called the Management Engine.


Quote:
Q: If I use Intel® IPT and associate it with my online bank account for example, is this the only PC I can use from now on to check my account?

A: NO! Using your new PC with Intel® IPT and opting in for this protection gives you the easiest to use one-time-password or OTP solution for your online activities, but it is not your only method to log into your account. Each website or application that uses the technology will have its own way of making sure it is really you when you come from a different device. First of all, it is often possible to associate more than one device with your account (your work PC and your home PC, for example). Secondly, since this technology has been around for years, many solutions have been developed to let you log in from a new or unknown location. You may be prompted with a few more security questions, an automated call to your cell phone, or an additional OTP token may be emailed to you. Regardless of the method, you will still be able to access your online OTP protected accounts from a variety of PCs or devices, but the primary device that your register will provide what we believe is the easiest to use scenario with the embedded token.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Mon, 7th Mar 2011 20:25    Post subject:
Another demonstration to see how it works: http://www.halflife2.net/forums/showthread.php?176230-Steam-Guard-Now-in-Beta

A member of the forum makes his username and password publicly available but nobody can hack into his account!


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
AssA




Posts: 910

PostPosted: Mon, 7th Mar 2011 22:37    Post subject:
consolitis wrote:
Another demonstration to see how it works: http://www.halflife2.net/forums/showthread.php?176230-Steam-Guard-Now-in-Beta

A member of the forum makes his username and password publicly available but nobody can hack into his account!


heh I could log in fine to that guys (empty) steam account with the old client on my server ^^
couldn't get into gabe's account like that though... Neutral


|IcedFreon| wrote:
lol you're done wih the game? already ??????? jesus. ppl havent even finished downloading it yet

source
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Mon, 7th Mar 2011 22:45    Post subject:
AssA wrote:
heh I could log in fine to that guys (empty) steam account with the old client on my server ^^


Explain for those of us not familiar?


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
AssA




Posts: 910

PostPosted: Tue, 8th Mar 2011 07:14    Post subject:
consolitis wrote:
AssA wrote:
heh I could log in fine to that guys (empty) steam account with the old client on my server ^^


Explain for those of us not familiar?


I have a secondary PC that I used to download steam games when I was e.g. at work - so my primary PC could stay turned off.
now I haven't updated steam on that PC for quite a while and I could log in fine with the user-details that forum-member provided. Smile



trying to login to gabe's account throws me back to the login though...


|IcedFreon| wrote:
lol you're done wih the game? already ??????? jesus. ppl havent even finished downloading it yet

source
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Mon, 14th Mar 2011 03:04    Post subject:
intel demonstrates how IPT secures your ebay account:

In this case, again, it's optional.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 18:55    Post subject:
Yeah... REAL fucking "optional" honest Rolling Eyes



I never signed up for that bullshit and it's obviously NOT "optional" because now it's being forced on me. I was having an issue with my HL2 mods, in that none of them would load (You are trying to launch an unknown App ID) and the Steam Support guy recommended reinstalling the client itself and trying again. I copied out my SteamApps folder (redownloading 195GB? No thanks) and then uninstalled/reinstalled the client. Now it's saying this is a different machine and I have to enter the authentication code before I can access MY account.

So yeah... it is, in no way shape or fucking form, "optional" Way to force everyone to do your bidding, Gabe. Pretty soon this won't only be mandatory, but no doubt Valve will find a way to make people pay for it too Rolling Eyes


~edit~

FUUUUUUUUUUUUUUUUUUUUUUUUUUUCK YOOOOOOOOOOOOOOOOOOU!!!!!!!!!


Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:03    Post subject:
It is enabled by default, but you can disable it AFAIK.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 19:04    Post subject:
Fat lot of good that does when the fucking system doesn't even work! I DIDN'T sign up for this shit, it's been forced on me and now I'm locked out of my account until some drone gets back to me via Support and manually unlocks it.
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:05    Post subject:
Here: http://forums.steampowered.com/forums/showthread.php?t=1796050

edit Oh I see. Sad


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:07    Post subject:
Are you sure you don't have the activation code in your inbox? Because this is how it works, if it thinks it's a new PC you get emailed a code.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 19:08    Post subject:
I DID put the activation code in! It says "SORRY!! THAT ISN'T QUITE RIGHT" like some fucking idiot.
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:15    Post subject:
Aside of the bug that Steam Guard doesn't work at all for some people: http://forums.steampowered.com/forums/showthread.php?t=1795771 (which affects me) I don't see anyone else reporting your issue here: http://forums.steampowered.com/forums/forumdisplay.php?f=14

So I think that only Steam Support can help you. Sad


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 19:16    Post subject:
Of course not, it's always just ME isn't it? I swear to god, I'm fucking CURSED when it comes to shit like this ... because if it can go wrong, it WILL go wrong.


Last edited by sabin1981 on Sun, 20th Mar 2011 19:19; edited 1 time in total
Back to top
tonizito
VIP Member



Posts: 51432
Location: Portugal, the shithole of Europe.
PostPosted: Sun, 20th Mar 2011 19:18    Post subject:
Classic sabin is back. Laughing


boundle (thoughts on cracking AITD) wrote:
i guess thouth if without a legit key the installation was rolling back we are all fucking then
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:18    Post subject:
Lol, I don't know what's that supposed to mean, I didn't mean to imply you did something wrong with your account or whatever. It's obviously a bug if the code doesn't work and you are not responsible for it!


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 19:22    Post subject:
tonizito wrote:
Classic sabin is back. Laughing


You try losing access to your account because of some bullshit bug in their "glorious" new security system.. and see how long you can maintain a smile. This is ridiculous! I didn't sign up for this (I'm not even using their beta client) and I didn't ask for it.

~edit~

I just received two new emails with different codes, one of which works this time, and I've disabled the SteamGuard nonsense. Urgh.... what an absolute crock of shit Mad


Last edited by sabin1981 on Sun, 20th Mar 2011 19:28; edited 1 time in total
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:26    Post subject:
sabin1981 wrote:
tonizito wrote:
Classic sabin is back. Laughing


You try losing access to your account because of some bullshit bug in their "glorious" new security system.. and see how long you can maintain a smile. This is ridiculous! I didn't sign up for this (I'm not even using their beta client) and I didn't ask for it.


The beta client ended, and now it's on by default for all PCs. http://store.steampowered.com/news/5123/

I didn't report it here, because I am affected by the bug that it doesn't work at all for me, I can't enable or disable it, it's just not there at all like before they announced this feature. So I didn't want to talk about it here without trying it first hand.


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY
Back to top
xExtreme




Posts: 5810
Location: 43 6C 75 6A 2D 4E 61 70 6F 63 61
PostPosted: Sun, 20th Mar 2011 19:27    Post subject:
Just checked my account tho, looks like I already have the damn Steam Guard enabled -_- How exactly this crap works ? If you reinstall your Winshit you get some code in email to re-auth the login ?
Back to top
consolitis
VIP Member



Posts: 27317

PostPosted: Sun, 20th Mar 2011 19:29    Post subject:
xExtreme wrote:
Just checked my account tho, looks like I already have the damn Steam Guard enabled -_- How exactly this crap works ? If you reinstall your Winshit you get some code in email to re-auth the login ?


If you login from a different computer (note: a different computer might be your computer after upgrading your graphics card or I suppose your OS too) you get emailed a code to authorize the new computer. Once you authorize it, it doesn't bother you again. You can authorize as many computers as you want.

And if you don't like it you can disable it like this: http://forums.steampowered.com/forums/showthread.php?t=1796050


TWIN PEAKS is "something of a miracle."
"...like nothing else on television."
"a phenomenon."
"A tangled tale of sex, violence, power, junk food..."
"Like Nothing On Earth"

~ WHAT THEY'RE TRYING TO SAY CAN ONLY BE SEEN ~

http://www.youtube.com/watch?v=CHTUOgYNRzY


Last edited by consolitis on Sun, 20th Mar 2011 19:29; edited 1 time in total
Back to top
tonizito
VIP Member



Posts: 51432
Location: Portugal, the shithole of Europe.
PostPosted: Sun, 20th Mar 2011 19:29    Post subject:
sabin1981 wrote:
You try losing access to your account because of some bullshit bug in their "glorious" new security system.. and see how long you can maintain a smile. This is ridiculous! I didn't sign up for this (I'm not even using their beta client) and I didn't ask for it.
Hey!
It was them, not me!

How many games have you got tied to that account anyway?

consolitis wrote:
The beta client ended, and now it's on by default for all PCs. http://store.steampowered.com/news/5123/

I didn't report it here, because I am affected by the bug that it doesn't work at all for me, I can't enable or disable it, it's just not there at all like before they announced this feature. So I didn't want to talk about it here without trying it first hand.
I restarted Steam twice and didn't see any changes yet.

Where's the option?


boundle (thoughts on cracking AITD) wrote:
i guess thouth if without a legit key the installation was rolling back we are all fucking then


Last edited by tonizito on Sun, 20th Mar 2011 19:30; edited 1 time in total
Back to top
sabin1981
Mostly Cursed



Posts: 87805

PostPosted: Sun, 20th Mar 2011 19:30    Post subject:
consolitis wrote:


The beta client ended, and now it's on by default for all PCs. http://store.steampowered.com/news/5123/

I didn't report it here, because I am affected by the bug that it doesn't work at all for me, I can't enable or disable it, it's just not there at all like before they announced this feature. So I didn't want to talk about it here without trying it first hand.


Damn... I guess that would explain that. Thank you - at least now I know =) ShitGuard has been disabled and, for as long as I have the CHOICE, it's never being reenabled again.
Back to top
slal




Posts: 819

PostPosted: Sun, 20th Mar 2011 19:30    Post subject:
Yeah its enabled on my account too.

ps. What will happen if i buy new mobo and cpu?(if i wont turn it off).
Back to top
Page 2 of 3 All times are GMT + 1 Hour
NFOHump.com Forum Index - PC Games Arena Goto page Previous  1, 2, 3  Next
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group