The problem with stupidity is that it doesn’t have a natural opposite.
What I mean by that is that lies are exposed and destroyed by truth.
Ignorance is erased by knowledge.
Foolishness is curbed by wisdom.
But stupidity remains undisturbed by reason, wisdom, argument or new information. The act of stupidity requires shutting off all inputs that could otherwise intrude upon the stupid idea.
When you fight against stupidity, all you do is make the mess worse, and get it on yourself.
Icare4America reshared this.
Linux Is Best
in reply to Linux Is Best • • •If you do not use a password manager, now is a good time to consider using one. Here are two (2) that are outside Us Jurisdiction.
Heylogin, located in Germany, Europe heylogin.com
Note: This password manager is tied to your hardware.
pCloud, located in Switzerland / Bulgaria, Europe pcloud.com/pass.html
Note: Use a VPN when first signing up to ensure your data is saved on their Europe Servers. You can see a copy of the documentation here: docs.pcloud.com
heylogin
www.heylogin.comThibaultmol 🌈
in reply to Linux Is Best • • •nicholai
in reply to Linux Is Best • • •mastodon.social/@gamingonlinux…
Poppe
in reply to Linux Is Best • • •Luna Sylveon
in reply to Linux Is Best • • •lea
in reply to Linux Is Best • • •the article makes no mention of usernames or passwords being leaked. and while a leak of phone numbers is obviously a problem, historical sms 2fa codes are, well, historical and aren't an active risk to account security
steam's authentication process never even sends a plaintext password to the backend if i remember right, so they definitely know how to do account security and not to store plaintext passwords
no need for unnecessary fear mongering
cthos 🐱
in reply to Linux Is Best • • •Lazuli'
in reply to Linux Is Best • • •my steam account and bank account share a password
muxelplexer
in reply to Linux Is Best • • •tbf - this is not as big of a panic moment as it may seem. This is only historic OTP data. Steam Guard seems to be as funxtional as when Gaben fave out his password/mail combo couple years ago to prove the point of otp codes.
Id expect more targetted phishing with the phone numbers though
Bizcochito
in reply to Linux Is Best • • •Arataka
in reply to Linux Is Best • • •SgtRenny
in reply to Linux Is Best • • •Valve denies it, and said they don't use twilio (the service that was said to have been involved in the leak).
Moreover, the guy who put out the news has considerably downplayed it in the last few hours. It is possible that there was never any leak.
scrottie (he/him/they)
in reply to Linux Is Best • • •Trinsec
in reply to Linux Is Best • • •Dan Goodin
in reply to Linux Is Best • • •@davewoodx
Please stop.
infosec.exchange/@dangoodin/11…
Dan Goodin (@dangoodin@infosec.exchange)
Infosec ExchangeEemon
in reply to Linux Is Best • • •Nazo
in reply to Linux Is Best • • •Looks like it's probably just 2FA info -- specifically SMS 2FA numbers -- that got leaked probably. If anyone is using SMS 2FA, they definitely should do something about it.
I won't disagree that changing passwords just to be on the safe side is a good idea though. I disagree with those who so adamantly insist that even though there is evidence of a breach of some kind we should just ignore it just because it's not immediately showing signs of including passwords.
Kanon
in reply to Linux Is Best • • •It seems there is an update.
bleepingcomputer.com/news/secu…
Ikani
in reply to Linux Is Best • • •Anyway, that's a long-winded way of saying I think you should update the post, but fully support pushing people to update passwords. ^^
Spoontaneous Consumption
in reply to Linux Is Best • • •Thanks for the heads up!
Changing my password was made extremely difficult by the way. I use steamguard-cli and ente Auth for 2FA but steam insisted on sending me a code to the app. I had to jump through many hoops to end up at email verification again.
The 2FA had to be fully removed before I could change my pw 😅