Steam tightens security

[ubuysa]

I'm not sure whether this is of interest or even whether everyone already knows this stuff but just in case....

I subscribe to the Sophos NakedSecurity newsletters and this one on Steam security popped into my inbox today:

https://nakedsecurity.sophos.com/20...ity-to-stem-tide-of-77000-monthly-hijackings/

 

[SmokeDarKnight]

Yeah i thought the waiting period was always there, when every i reinstal windows and steam thinks i have a machine i have to wait a month on DOTA before i can gift and trade etc.

I've been using my phone to get into steam for a while now and its pretty awesome, until i lost my phone and had to recover but eventually found my recovery key and it was near impossible to get back in without it so it is secure.

The annoying thing is that my Steam account feels more secure than any of than any of my online banking. I feel like they could learn about 2 form factor security and mobile key generators etc.

 

[DeadEyeDuk]

Let me just set up a Steam mobile authenticator on my Steam account that I use to play Steam games on my Windows PC. What do you mean the Steam mobile authenticator app is only for iOS and Android and doesn't have a Windows phone equivalent, even though pretty much its entire player base (bar a few morons) use Windows computers to actually access Steam!

I generally just get a bit annoyed about there not being a Windows phone version of apps, even though it is just borne out of laziness, especially large companies that cannot even begin to pretend cost is an issue.

However, with regards to Steam I actually think it is proper shady, because even though I have never used the service, people with mobile authenticated accounts get something like a 5-10% discount on the market place. So essentially Valve have said "PAH HA" to Windows device users, even though there wouldn't be a Steam or even a Valve without Windows and the people that use it!

/rant

 

[Wozza63]

Yeah i thought the waiting period was always there, when every i reinstal windows and steam thinks i have a machine i have to wait a month on DOTA before i can gift and trade etc.

I've been using my phone to get into steam for a while now and its pretty awesome, until i lost my phone and had to recover but eventually found my recovery key and it was near impossible to get back in without it so it is secure.

The annoying thing is that my Steam account feels more secure than any of than any of my online banking. I feel like they could learn about 2 form factor security and mobile key generators etc.

Your bank doesn't use 2 factor? Nationwide requires me to have a little card reader to give me a code before I can access internet banking.

 

[Rakk]

Your bank doesn't use 2 factor? Nationwide requires me to have a little card reader to give me a code before I can access internet banking.

I think you only need the card reader if you can't remember one of the 15 million rememberable things to login with - ok, its only 3 , but I can never remember what rememberable date I had cos well the only remeberable date I know is my birthday, which I'm not using.

 

[Wozza63]

I think you only need the card reader if you can't remember one of the 15 million rememberable things to login with - ok, its only 3 , but I can never remember what rememberable date I had cos well the only remeberable date I know is my birthday, which I'm not using.

It's a requirement for me. I can't access without it. Except on phone but I need some other pin that I have no idea about to do that.

 

[SmokeDarKnight]

Nope, i have BOS, Tesco, Barkley and Clydesdale and they all just work off Username, Password and a memorable word.