So the Steam security breach

[Aerozord]

Honestly not sure what the proper term is, it wasn't hacked and while it was a bug it was one that took no effort from users to exploit. I heard about it in passing but it wasn't until I was doing some youtube browsing that I found out the details. I heard the unofficial response that they determined no information of value was compromised but this is definitely not minor information.

If you are like me and were busy christmas afternoon, for a time of about an hour if you loaded up steam some (or all I dont know how wide spread it was) people would instead get the cached information of a random user. This includes anything visible on your account page at a minimum. Which is bad in and of itself, but there are people saying your shopping cart was also viewable which would include information like your name, address, phone number, potentially paypal email.

Thats, really bad. I mean even if no one abuses it even making that possible, and I'd say more so if was random with zero effort from the other person, makes it a bigger deal than Valve is treating it

[Flarecobra]

http://kotaku.com/steam-goes-nuts-of...ium=Socialflow

It was a cashing issue.

[Arcanum]

Originally Posted by Aerozord

I heard the unofficial response that they determined no information of value was compromised but this is definitely not minor information.

Did you see this 100% official response that was linked in the description of TotalBiscuit's video that you linked?

Originally Posted by Aerozord

If you are like me and were busy christmas afternoon, for a time of about an hour if you loaded up steam some (or all I dont know how wide spread it was) people would instead get the cached information of a random user. This includes anything visible on your account page at a minimum. Which is bad in and of itself, but there are people saying your shopping cart was also viewable which would include information like your name, address, phone number, potentially paypal email.

Since it was a caching error as Flare mentioned, you were only at risk if you tried to load up your Account Details page or your Shopping Cart. If you only did the former, the only thing that got out was your full email associated with your steam account. Credit card was only the last 2 digits, and phone number was only the last 4 digits.

If you did the latter then yes someone could end up seeing your billing address and phone number (or whatever paypal information shows up on that page if you use that).

Originally Posted by Aerozord

Thats, really bad. I mean even if no one abuses it even making that possible, and I'd say more so if was random with zero effort from the other person, makes it a bigger deal than Valve is treating it

I personally don't think it's that big of a deal since anyone who is determined enough could find someone's address and phone number.

But I'm curious as to what you want Valve to do in this situation. They said they would work on finding out who was affected and inform them, and were pretty transparent about what happened in their announcement. What else could they possibly do?