​​​
  1. Stream security flaws allows hacking into accounts

Stream security flaws allows hacking into accounts

Internet-based digital distribution platform Stream has been hit by a major security flaw.

By: | Amsterdam | Published: July 28, 2015 2:00 AM

Internet-based digital distribution platform Stream has been hit by a major security flaw.

According to The Next Web, a major fault has been revealed in Steam’s account login process that allowed the users to reset any account knowing only the target’s email address.

A hacker could abuse the ‘forgotten password’ feature in Steam’s log-in service and requesting a password reset code then visiting the special reset page and pushing OK.

The reset page usually requests for a code that is sent to the users email address to verify their identity but it would also accept an empty code as valid.

So it was open for attack and anyone could break into a Steam account and change the password without needing access to the recovery email address.

The bug is now fixed.

Steam said that the bug affected only a small amount of accounts between July 21- 25.

The company is resetting passwords on any affected accounts.

Get live Stock Prices from BSE and NSE and latest NAV, portfolio of Mutual Funds, calculate your tax by Income Tax Calculator, know market’s Top Gainers, Top Losers & Best Equity Funds. Like us on Facebook and follow us on Twitter.

Go to Top