steam聖誕節違規事件的閥門：“我們很抱歉”

在Steam的冬季銷售期間，大約有34000名使用者的個人資訊暴露給了其他使用者。這個缺口很不尋常。Valve稱，合作伙伴試圖透過部署新的快取規則來抵禦拒絕服務攻擊，希望將惡意流量與正常客戶流量區分開來。對於許多使用者來說，在嘗試登入Steam帳戶時，更改會意外地載入另一個人的資訊。...

在Steam的冬季銷售期間，大約有34000名使用者的個人資訊暴露給了其他使用者。這個缺口很不尋常。Valve稱，合作伙伴試圖透過部署新的快取規則來抵禦拒絕服務攻擊，希望將惡意流量與正常客戶流量區分開來。對於許多使用者來說，在嘗試登入Steam帳戶時，更改會意外地載入另一個人的資訊。

使用者無法進行購買或訪問其他人帳戶上的信用卡資訊，但他們可以檢視該人的電子郵件地址、購買歷史記錄和帳單地址等詳細資訊。Valve承諾會通知任何受到影響的人，並解釋違規行為。那封電子郵件終於發出了。

“我們很抱歉發生這種情況，”來自Valve的訊息說，“我們已經採取措施防止將來發生這種問題。”。擔心你的賬戶在聖誕節被駭客入侵是沒人想要的禮物。

我們在下麵提供了完整的電子郵件。

Dear Steam User,

As you may know, for a brief period on December 25th, a configuration error resulted in some Steam users seeing incorrectly cached Steam Store pages generated for other Steam users. If you are not familiar with the issue, an overview of what happened is available at http://store.steampowered.com/news/19852/ .

If you accessed the Steam Store between 11:50 PST and 13:20 PST on December 25th, your account could have been affected by this issue. If you did not use the Steam Store during that time, your account was not affected.

Between the times above, a requested web page displayed during your Steam Store checkout process may have been incorrectly displayed to another Steam user in your local area. This page may have included billing information previously saved to complete future purchases including your full name, billing address and billing phone number. It may have also included the last two digits of a credit card number or a PayPal email address, if previously saved for future purchases. It did not include full credit card numbers, Steam account passwords, or other information that would allow another user to complete a transaction with your billing information.

We are contacting you because an IP address previously used by your account to access Steam made a web page request as described above. Because IP addresses are commonly shared for home networks, mobile devices and by internet providers, we are unable to verify that your account was actually the one that made this request. For example one affected IP address was previously used by over 1,700 Steam accounts. C***equently we are notifying all users who have previously used this IP address.

This event did not make it possible to compromise your Steam account or make a fraudulent transaction from your account, but we want you to be aware of what information could have been seen by another Steam user.

We're sorry this happened and have taken steps to prevent this problem from occurring in the future.

If you used the store between 11:50 PST and 13:20 PST on December 25th and you have questi*** please email [email protected].

- Valve