安装 Steam
登录
|
语言
繁體中文（繁体中文）
日本語（日语）
한국어（韩语）
ไทย（泰语）
български（保加利亚语）
Čeština（捷克语）
Dansk（丹麦语）
Deutsch（德语）
English（英语）
Español-España（西班牙语 - 西班牙）
Español - Latinoamérica（西班牙语 - 拉丁美洲）
Ελληνικά（希腊语）
Français（法语）
Italiano（意大利语）
Bahasa Indonesia（印度尼西亚语）
Magyar（匈牙利语）
Nederlands（荷兰语）
Norsk（挪威语）
Polski（波兰语）
Português（葡萄牙语 - 葡萄牙）
Português-Brasil（葡萄牙语 - 巴西）
Română（罗马尼亚语）
Русский（俄语）
Suomi（芬兰语）
Svenska（瑞典语）
Türkçe（土耳其语）
Tiếng Việt（越南语）
Українська（乌克兰语）
报告翻译问题
讨论规则及指引
0 
举报此帖
That's literally it.
Fair point, but steam having all these mitigations, yet I constantly have people telling me they get scammed. Not for much, usually about 10$ worth of CS cases, but it's INSANE to me that with all the preventions in place, there is nothing stopping a hijacker from spending 2000$ on your account the second he logs on, and there is NO WAY to get it back
The problem is PEBCAK, which you can't fix.
If you secure your account properly people cannot access it.
Changing your password does not restrict your account at all. However, resetting it will.
Those are you own doing and were easily avoidable.
What does that have to do with what I posted about?
Don't blame Valve for your own missteps.
Most hacking is not done by exploiting "technical" issues. It's done by exploiting human nature. Most top companies (and not just top companies) have incredibly hard to get to systems on the technical side and it's mostly human "error" that allows hackers in (including insider employee errors that lead to security breaches). Some years ago there was a photo of a US nuclear facility (I believe in Hawaii) and the codes to some of the systems were on show on the photo were some post it notes glues on the monitor screen with some codes...
Hijacking accounts is mostly done by actually getting to the person's user and password, hacking their email and changing passwords. We use easy passwords. We save the passwords in browsers, write then down in wordpad or on the phone, use unsafe password managers. We also (sometimes) use "unsafe" dodgy software from a dodgy source. I absolutely don't save any passwords in any browser. I have a password manager (not on the computer). Also, never use Single Sign On from any form.
The most famous hacker of all times is probably Kevin Mitnick. He himself has clearly stated "People, Not Technology, Weakest Security Link". Yes, companies can have 300 hurdles to prevent fraud. Too little, systems get borked and accounts stolen. Too much and people will complain about. But most of all, it's down to the user. We want easy access to stuff, so getting an account can't be too hard or we just don't do it. Companies are trying to authenticate accounts with personal IDs, credit cards and whatnot and everyone is unhappy about it. I'm not saying I support it, but that is just an example. Too much "security" and everyone gets unhappy about it. By large, most systems have 2 factor ID now and that is about as much as it can be without being too intrusive. Catch 22.