zlacker

Steam "Offline" status leaks exact login timestamps (Valve: Won't Fix)

submitted by xmrcat+(OP) on 2026-01-20 22:43:03 | 79 points 95 comments
[view article] [source] [go to bottom]

NOTE: showing posts with links only show all posts
◧◩◪◨⬒⬓
24. rvnx+h6[view] [source] [discussion] 2026-01-20 23:26:27
>>nemoma+Q2
> Steam "Offline" status leaks exact login timestamps (Valve: Won't Fix)

On the profile of a friend you can see the last time they signed-in to their account:

https://preview.redd.it/can-anyone-beat-my-last-online-frien...

Before it was public, and now restricted (for a couple of years already) to friends only.

I guess this is why they won't change it, since it's a feature.

◧◩
36. xmrcat+89[view] [source] [discussion] 2026-01-20 23:43:03
>>anonym+96
here you go https://i.ibb.co/39GRMySs/png.png
◧◩◪
57. krapp+tc[view] [source] [discussion] 2026-01-21 00:06:45
>>Someon+Ia
LLM generated comments aren't allowed on HN[0]. Period.

If any of the other instances whereby HN users have quoted the guidelines or tone policed each other are allowed then calling out generated content should be allowed.

It's constructive to do so because there is obvious and constant pressure to normalize the use of LLM generated content on this forum as there is everywhere else in our society. For all its faults and to its credit Hacker News is and should remain a place where human beings talk to other human beings. If we don't push back against this then HN will become nothing but bots posting and talking to other bots.

[0]>>45077654

◧◩◪◨⬒⬓⬔⧯
72. gruez+Vk[view] [source] [discussion] 2026-01-21 01:15:16
>>anonym+zg
>They specifically went to the third-party vendor, because the third-party vendor offers a platform to give them credit and pay them for finding security exploits. It is not the responsibility of the third-party vendor to manage all bug reports.

I don't know, the wording on their site suggests hackerone is the primary place to report security issues, not "if you want to get paid use hackerone, otherwise email us directly".

>For issues with Steam or with Valve hardware products, please visit HackerOne — https://hackerone.com/valve. Our guidelines for responsible disclosure are also available through that program.

https://www.valvesoftware.com/en/security

93. xmrcat+Z14[view] [source] 2026-01-22 01:47:53
>>xmrcat+(OP)
https://xmrcat.org/discord-invisibility-bypass seems like steam is not alone :D
[go to top]