[–] Mytheral 0 points 3 points 3 points (+3|-0) ago (edited ago)
TL;DR - This method requires knowing a users steam login and only locks them out of their account
edit: Here is a video of someone "hacking" themselves. Looks like someone left some debug code on the password reset that bypassed the need for a verification code.
Steam | How accounts are getting hacked. - https://youtu.be/QPl_BJoBaVA
[–] Scraps 0 points 4 points 4 points (+4|-0) ago
Might want to try that again, yes it requires the login name but it gives them full access. The lock out for 5 days if Valve's response to try and limit damage probably also while they sort out any traded items and see if any vac bans are going to come through.
[–] lllllllllll 0 points 3 points 3 points (+3|-0) ago (edited ago)
It gives them full access only if you do not have Steam Guard enabled. With Steam Guard enabled they would also need access to your email because you still need a code when signing in from a new device.
[–] BlueSpeed 0 points 3 points 3 points (+3|-0) ago
Every company gets hacked, the issue then becomes how do they handle the security breach. Valve has already closed the hole but there is some uncertainty about what is going to happen to the hacked accounts. We will see what the official announcement says.
[–] GOAT_BURGER 0 points 7 points 7 points (+7|-0) ago
About 6 months ago, I signed into Steam, only to be greeted with a message about a sign-in attempt from Portugal. Which was weird, coz I live in Australia.
Anyway, Steam emailed me to double-check that it was me, which it wasn't, in fact. Love those double layers of security. Make sure you get 'em, VOAT.
[–] just_signed_up 0 points 2 points 2 points (+2|-0) ago (edited ago)
Is there a level past the Steam Guard? Currently I have to enter a code every time I log in from somewhere different. Is there a level above this that is more secure?
[–] Scraps 0 points 3 points 3 points (+3|-0) ago
You can use the mobile authenticator which uses the steam app and requires the 2 factor every time you sign in plus the code isn't emailed to you and they expire in 30 seconds.
[–] GOAT_BURGER 0 points 2 points 2 points (+2|-0) ago
So far as I know, there isn't. Can any VOATer tell me otherwise?