{"id":46116,"date":"2012-10-18T11:38:22","date_gmt":"2012-10-18T09:38:22","guid":{"rendered":"http:\/\/mygaming.co.za\/news\/?p=46116"},"modified":"2012-10-18T11:38:48","modified_gmt":"2012-10-18T09:38:48","slug":"steam-is-vulnerable-to-hackers","status":"publish","type":"post","link":"https:\/\/mygaming.co.za\/news\/business\/46116-steam-is-vulnerable-to-hackers","title":{"rendered":"Steam is vulnerable to hackers"},"content":{"rendered":"<p>Valve\u2019s online distribution service Steam has been found to be vulnerable to hackers.<\/p>\n<p>According to a report, the way in which browsers and other applications handle the \u201csteam:\/\/\u201d protocol URLs can be exploited.<\/p>\n<p>This protocol is used for websites, such as the Steam Web Store. The problem is that hackers can abuse these commands remotely by tricking users into executing these commands through maliciously crafted steam:\/\/ URLs on various websites.<\/p>\n<p>&#8220;All the browsers that execute external URL handlers directly without warnings and those based on the Mozilla engine (like Firefox and SeaMonkey) are a perfect vector to perform silent Steam Browser Protocol calls,&#8221; the researchers from ReVuln said.<\/p>\n<p>&#8220;Additionally for browsers like Internet Explorer and Opera it&#8217;s still possible to hide the dodgy part of the URL from being shown in the warning message by adding several spaces into the steam:\/\/ URL itself.&#8221;<\/p>\n<p>The security firm even put together a concept video, proving their claims:<\/p>\n<p><iframe loading=\"lazy\" src=\"http:\/\/player.vimeo.com\/video\/51438866?title=1&amp;byline=1&amp;portrait=1\" frameborder=\"0\" width=\"600\" height=\"450\"><\/iframe><\/p>\n<h5>Source: <a href=\"http:\/\/www.computerworld.com\/s\/article\/9232427\/The_Steam_URL_protocol_can_be_abused_to_exploit_vulnerabilities_in_games_researchers_say\" target=\"_blank\">ComputerWorld <\/a><\/h5>\n<h3 class=\"my-4\">Related articles<\/h3>\n<p><strong><a href=\"http:\/\/mygaming.co.za\/news\/news\/45342-steam-gets-first-non-game-software.html\">Steam gets first non-game software<\/a><\/strong><\/p>\n<p><strong><a href=\"http:\/\/mygaming.co.za\/news\/news\/45377-indie-game-stand-gives-platform-for-indie-devs.html\">Indie Game Stand: \u201cpay what you want\u201d platform for indie devs<\/a><\/strong><\/p>\n<p><strong><a title=\"Black Mesa free Half-Life 1 conversion mod released\" href=\"http:\/\/mygaming.co.za\/news\/news\/44662-black-mesa-free-half-life-1-conversion-mod-released.html\" target=\"_blank\">Black Mesa free Half-Life 1 conversion mod released<\/a><\/strong><\/p>\n<p><strong><a href=\"http:\/\/mygaming.co.za\/news\/news\/44240-steam-community-launched-by-valve.html\">Steam Community launched by Valve<\/a><\/strong><\/p>\n<p><strong><a href=\"http:\/\/mygaming.co.za\/news\/news\/44253-erotic-game-seduce-me-gets-booted-off-steam-greenlight.html\">Erotic game \u201cSeduce Me\u201d booted-off Steam Greenlight<\/a><\/strong><\/p>\n<p><a href=\"http:\/\/mygaming.co.za\/news\/news\/44458-steams-big-picture-mode-heads-to-your-living-room-tv.html\" target=\"_blank\"><strong>Steam\u2019s Big Picture mode heads to your living room TV<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Be careful of Steam tricksters <\/p>\n","protected":false},"author":196,"featured_media":46118,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[2],"tags":[31,6532,405,85,2349,7258],"class_list":["post-46116","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","tag-active","tag-hackers","tag-hacking","tag-steam","tag-steam-hack","tag-steam-vulnerability"],"_links":{"self":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/46116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/users\/196"}],"replies":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/comments?post=46116"}],"version-history":[{"count":0,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/posts\/46116\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media\/46118"}],"wp:attachment":[{"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/media?parent=46116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/categories?post=46116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mygaming.co.za\/news\/wp-json\/wp\/v2\/tags?post=46116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}