[aceman67]

*Shambles out of my lurker cave*

Just a PSA for you guys
Check your steam login history, and see if there's anything fishy: https://help.steampowered.com/en/acc...amLoginHistory

I "Apparently" got banned from PUBG on the 8th. Funny though, since I was on vacation and didn't have my computer with me (Camping and all), and after checking my login records, there were 19 logins from China from the 6th to the 13th.



I have Steamguard (Mobile app code) enabled, and they were able to bypass it (never even got a notification or email), and there's no way they got into my email account (My Gmail account requires my fingerprint on my phone or a physical NFC token I keep on my keychain).

I've since changed my password.

I've sent a ticket to Steam to ask WTF (And to refund Pubg, which I only have 3hrs playing and haven't played since 2017, mostly to remove the Red BANNED FROM PUBG from my profile, and out of spite).

But seriously, check your account, change your password if you haven't in a while.

*Shambles back from whence I came*

[Sorotia]

I just checked mine a bit....I don't know what to think. All of the logins in 2021 are from where I live but in 2020 all the logins are from a town very far north of me but in the same state. But nothing from another state or country...maybe the geolocation was just screwy

Sorry you're having problems and this definitely sounds like a Steam problem if they're able to circumvent all the security measures.

[Palechimera]

Didn't know you could look at Stream logins history I looked though mine and all i can say is man she's a mess lol

[Jestersmith]

You think that's bad you should check Microsoft security logs since the start of this month to today i have had 173 failed log in attempts from all over the place. I wouldn't even want to count up the years attempts i can not remember the last time i had a day that had none, i check all mine at least once a month nowadays its tedious but necessary.

[Sunfire]

You think that's bad you should check Microsoft security logs since the start of this month to today i have had 173 failed log in attempts from all over the place. I wouldn't even want to count up the years attempts i can not remember the last time i had a day that had none, i check all mine at least once a month nowadays its tedious but necessary.

That is fine though. Let's be real, every account will be probed one day. That's the reason we use strong passwords and MFA. I work in cyber security for a company that gets several dozens to hundreds suspicious login attempts per day. Unsuccessful means the password did not leak or any attempt of brute force was not successful, after all. So the data itself is safe.

So please use string passwords and MFA, people!

As for the Steam thing above, I haven't checked into that. Circumventing MFA is possible but not easy except you get the user to approve the MFA request for you or you use an older technology like Email or SMS (Steam doesn't do that). That's strange.

[Heyallo]

The only location change recently (of a few months ago), is from the next town over, to my current town and that's only because my local ISP (founded here in town) uses their own hardware instead of Telstra/Optus =)

[aceman67]

or an older technology like Email or SMS (Steam doesn't do that).

Steam has 2 forms of 2FA: Email or Mobile App Authenticator.

[Taku]

I disable 2FA/MFA for most sites. But I don't use cloud-based storage, and anything else is handled by a 3rd party local password manager (KeePass). That way I can have passwords like this partial sequence:

_>xB'Px-&5X<eu}~\j[%WUx9+Qx4Yd8a=6]s{x[`_J)^U4M"8><:E^z"K_#gBzG[-J.<?`!,bB[NN}-jeSQ}Ly,KJ7Kmz@{?'CCt2m)@+/&,a{kW{7m./C9U}!vjv#j

Even my UFPlanets password is more than 50 characters.

My cellphone is a cellphone and isn't attached to any of my accounts. No banking, no shopping, no Instagram or Twitter or facebook on my phone.

I think I'm good.

[Sunfire]

Steam has 2 forms of 2FA: Email or Mobile App Authenticator.

Oh, didn't even know that. I only use SteamGuard with app. Thanks!

- - - Updated - - -

I think I'm good.

Until you click on a phishing link and log in to a fake website giving your 50-character password directly to the attacker
Or the password being leaked from a supplier/shop/whatever.

Don't get me wrong, this is more secure than most people are but willingly ignoring MFA is just bad practice.
Says the security guy who even has their UFP-account protected by MFA. I'm paranoid

[Jestersmith]

Tbf even those of us in the know can still be compromised i have a good IT background having taught in the past it repair networking and security my last compromise was ubisoft i have had steam in the past they sorted it pretty quick my first ever was Ebay someone had started selling on my account as i had not used it in some time that was a few years back only caught as i was sat in a cafe with the wife and phone went PayPal notifying me about me sellers fees due out soon, got that cleared up and all negative feedback removed from account.

My sons PC was compromised once and lucky for me its sat next to mine on my desk for if i want to use it for something when he isn't sat here one day and the mouse cursor starts moving thought at first i had knocked the mouse then watched it open a web browser and start to go to PayPal watched a few seconds and then opened a notepad and asked whoever it was if i could help them needless to say that day i flattened his PC and forced a change via virgin media on my IP address by turning the router they provide into modem mode only.

Its a headache but it is what it is as the saying goes.

[Emmy]

Stupid question,friends. How do i access the history?

[Solace]

Stupid question,friends. How do i access the history?

https://help.steampowered.com/en/acc...amLoginHistory <-- Click that link Emmy and sign into your steam account

[Arno12]

This is why I avoid saving my credit card info on sites, if I do, I make I have 2 factor authentication active