Hacker News Reader

Comment by minimaxir | Hacker News Reader

Reddit thread with more discussion: https://www.reddit.com/r/Games/comments/3y7maa/something_is_...

To get an indication how bad this is, the default Steam account page was showing other people's accounts.

EDIT: Steam fully down for now. If you had a Steam Account, I recommend checking email/credit card on any linked accounts. (and, as always, sign up for 2FA if you haven't!)

EDIT2: Steam Community Moderator response (not linked):

- No, Steam is not hacked

- Creditcard info and phone numbers are, as required by law, censored and not visible to users

View on HN

Take that link down ASAP please. If it is a caching issue as suspected then all the hn crowd clicking on your link are getting their info cached & potentially exposed.

Everyone just leave it alone & don't access any steam pages until the caching is fixed.

Removed it, but the point was that account info could be accessed by a logged-out user.

Apparently, Google has actually cached these pages too.

This is my worry.

Steam shutting down doesn't mean anything to page that has been crawled already.

Can't wait for the postmortem on this nonsense. Makes me wonder why I would trust Valve with any confidential info going forward.

And the language randomly changes if you keep refreshing; maybe because I'm being logged in as a different person every time I refresh?

Best guess at the moment is that it's a caching issue and you're seeing pages previously sent to other people. In other words get the hell out of steam since if you actually do get to your profile it's likely that'll be cached and sent to other people.

Quite possibly, yes - if you can find the page that gives "your" account information, the language often matches the location.

I should really stop poking around, but this is a fascinatingly bizarre error. Has anyone seen anything like it before?

I had a similar problem with a site I worked on a couple of years back. Setting headers to disable caching did the trick. Annoying, but effective.

Not sure how authoritative:

https://www.reddit.com/r/Games/comments/3y7maa/something_is_...

Not on Steam; there was a Tomcat bug where it'd send HTTP response to wrong client: https://bz.apache.org/bugzilla/show_bug.cgi?id=57340

So maybe that's why Steam store pages have been displaying for me in Korean randomly over the last two years...

> EDIT: Steam fully down for now.

Steam is up for me. Haven't tried the Steam Store, but messaging, game access, and Family Sharing are all fully functional.

I'm getting an error trying to access the store right now, so I guess someone hit a Big Red Switch...

Reply on news.ycombinator.com