A programmer discovered a serious vulnerability of Steam but only received 460 million VND

A programmer with the nickname 'Moskowsky' posted on the Hackerone forum about the discovery of a Steam security vulnerability that allowed him to download the entire game without losing any money. This means that if you take advantage of this vulnerability successfully, the hacker can get the CD key and download all Steam titles without losing a single penny.

Moskowsky's article quickly attracted the attention of forum members.

Moskowsky said, before announcing on the Hackerone forum, he reported this vulnerability to Valve in August.

A programmer discovered a serious vulnerability of Steam but only received 460 million VND Picture 1
Member Moskowsky shared on Hackerone about a very serious Steam security hole he discovered.

In the Hackerone post, Moskowsky did not disclose details of the vulnerability and how to take advantage of the CD key of any game that only said it exists on partner.steamgames.com, Steam's website. for game developers and publishers.

Moskowsky also added that if Valve does not have any corrective actions, the developer will publish information on security holes on November 1.

Right after Moskowsky posted on Hackerone, Valve gave feedback. Valve confirmed the vulnerability on partner.steamgames.com page, allowing users to download the CD key of all Steam games.

A programmer discovered a serious vulnerability of Steam but only received 460 million VND Picture 2
Valve confirms a vulnerability on partner.steamgames.com page.

This is really a very serious security hole, if widely publicized can cause huge damage to Steam.

Valve rewarded Moskowsky with the amount of $ 20,000 (about VND 460 million) with this discovery. It seems that Valve is quite stingy by 20,000USSD which is a number that programmers rated as relatively low compared to the extremely serious vulnerability that Moskowsky discovered on Steam.

A programmer discovered a serious vulnerability of Steam but only received 460 million VND Picture 3

Valve's Steam is the largest game release platform in the world today with revenue of about 4.3 billion USD and 21,000 games released in 2017, not to mention the DLC updates of each game.

See more:

There is a new zero-day vulnerability in Windows
Good hackers find and patch the vulnerability for more than 100,000 other routers
Three critical holes in Linksys routers, hackers can take advantage of hijacking

Isabella Humphrey

Update 24 May 2019

You should read it

May be interested

Log4Shell zero-day vulnerability discovered, the new nightmare of enterprises
how to exploit a critical zero-day vulnerability in the java-based apache log4j logging library has just been posted on the internet. this leaves users and businesses as well as organizations vulnerable to remote code execution attacks.
AMD CPUs also have security vulnerabilities that have existed for many years now!
another relatively serious vulnerability on amd processors has continued to be discovered, prompting the security community.
iOS 12.4 was unlocked after only a few weeks of launch by the mistake of Apple and an anonymous programmer
on the evening of august 18 (vietnam time), the information of the latest ios version is now ios 12.4 has been jailbroken so that the jailbreak community can not stop being shocked.
Google warns of a vulnerability that allows Android smartphones to be attacked with just a phone number
google researchers have discovered and reported 18 zero-day vulnerabilities in samsung-made exynos modems found in dozens of android phones, watches, and vehicles.
Steps to fix the error of not opening Steam on Windows 10
steam is a popular pc online gaming platform. this article will show you how to fix the error of not opening steam on windows 10 very quickly.
How to register a Steam account on your computer?
steam is a software that allows gamers to immerse themselves in an exciting game world, then choose to buy online games, download and manage the game on the computer. network administrators will guide you step by step to create a steam account ...
Discovered a new zero-day vulnerability on macOS that allows attackers to run commands remotely
an international team of security researchers has publicly disclosed a new vulnerability that exists in apple's macos finder.
There is a serious security vulnerability that has existed for 18 years in AMD processors, but it is not too worrying
security researchers at ioactive have discovered a serious vulnerability that exists in nearly two dozen amd-branded cpu models.
Critical Vulnerability Discovered in 3 WordPress Plugins, Affects 84,000 Websites
security researchers have just disclosed a new vulnerability affecting three different wordpress plugins, posing a security risk to 84,000 websites. by exploiting this vulnerability, hackers can take control of the affected websites.
6 Steam features that more people need to know about
steam is the world's largest digital pc gaming marketplace, and in its more than 20 years of operation, valve has added some great features to it. however, not everyone knows about all the features of this platform.

A programmer discovered a serious vulnerability of Steam but only received 460 million VND

You should read it

May be interested

Technology story