Valve patches huge password reset hole that allowed anyone to hijack Steam accounts

After losing control of their Steam accounts, some gamers and Twitch streamers were definitely steamed. Valve blamed the account takeovers on a “bug,” but the vulnerability seemed more like a critical hole – an authentication pit – since anyone could exploit it to hijack an account. Valve has patched the problem, but there is an example of Steam’s password reset issue on JSFiddle for anyone who wants to try the exploit.

To read this article in full or to leave a comment, please...

What feeling does this article give you?

#hashtags to follow:

Twitch [+]    JSFiddle [+]   

More #news: