The Register reports that the researcher “noticed it was fairly easy to change parameters in an API request, and get activation keys for a selected game in return. Moskowsky reportedly stumbled across the bug by mistake, while taking an innocent stroll down Valve”s developer site, where game sellers can manage their titles. Instead of selling the keys for illicit profit, he reported the flaw to Valve.Īrtem Moskowsky discovered the bug in August, but Valve published the news only recently, taking enough time to patch the flaw and make sure it can never be exploited again. An avid bug hunter has discovered a vulnerability in Valve”s Steam developer portal which, exploited properly, reveals every license key for every game available on the platform.
0 Comments
Leave a Reply. |