Tune In: 

Back on air soon!


Our live radio broadcasts are currently on hiatus while we work on improvements to Sanitarium.FM's core services. For further information, visit our Discord.

 Your Sanitarium.FM Account 


Today
  • 12pm - Auto DJ
  • 3pm - Auto DJ
  • 6pm - Auto DJ
  • 9pm - Auto DJ

Tomorrow
  • 12am - Auto DJ



 Support The Sanitarium.FM! 

Become a Patron!
Or donate to us via PayPal:





Sanitarium.FM, collect your straitjacket at the door.
Sanitarium.FM Site Search:  
Or click here to search the Forum.
Reddit Discovers Steam Exploit That Reveals Random E-Mail Addresses

Reddit users have discovered a security flaw in Steam, that allows for users to find out the e-mail addresses of other users.

 

Don’t panic though, all that can be done through the process to find it is that e-mail preferences can then be altered, but the actual address tied to the other user’s account can’t be changed to something else, nor can very much else be done with the ‘access’ to the address. Still, it’s not exactly comforting knowing that people can find out your e-mail address without you knowing.

 

 

The process involves something to do with using a cached token that is can change the e-mail preferences of an account. That same token is used instead of a login if a user wishes to unsubscribe themselves from e-mails without logging in. The token is a long, randomly generated one; but not much use if the token is being cached and stored for later use.

 

The method is not able to target specific addresses, but will reveal e-mails to other people without permission and if it can be used to edit the settings of another person’s account there’s a possibility that there could be other undiscovered vulnerabilities lurking that could change other, more potentially damaging settings of accounts. Valve have been notified of the exploit though, so here’s hoping that this hole will soon be plugged, along with any others they might discover during the plugging process.


January 5th, 2017 by
This entry was posted on Thursday, January 5th, 2017 at 16:12 and is filed under Gaming, General, PC. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

 Comments 

There are no comments yet for this post.


 Leave A Reply 

You must be logged in to post a comment.