#Steam view more info prank code#

From a user perspective it is you going to a legitimate Steam profile, then you see a login page. Redirect you to any non-Steam page, for example a phishing login page.With the right know-how a malicious user could do these actions for example, and you only need to view a Steam Profile: Appropriate information has been forward to Valve and this issue should be resolved soon, sorry for any inconvenience.'įellow subreddit moderator 'DirtDiglett', who says they're a web developer, adds: Do NOT click suspicious (real) Steam profile links and disable JavaScript on browser. I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including Steam). If this isn't some ha-ha-hilarious boner, then Steam may be suffering from a security hole which would let scoundrels mess with you from within Steam. The issue is raised by several moderators of the Steam group on Reddit, which is unofficial but is broadly respectable enough that this would be a curious prank for them to pull. What's the harm in not peeping on your pals for a while? Valve haven't commented on this yet but, for now, probably best to be safe. Even looking at your Activity feed could let people redirect you to non-Steam sites or even silently buy Community Market items with your Wallet funds. A group from the Steam subreddit say they have discovered an exploit related to Steam profiles, which could do some dreadful things. Just be to safe, don't go near any of Steam's social pages for a bit.

#Steam view more info prank code#

Spoiler: it involved putting naughty code in the titles of guides. If you're curious, follow that link to discover quite how the exploit worked. The eagle-eyes who spotted the security hole say it's once again safe to visit profiles, activity feeds, and all that. Update: The exploit which let subversive Steamers inject code into Steam pages has been fixed.