August 2019 – Hellcat5 Music Producer

A short while ago a friend of mine posted to me this article about two new Steam security holes found by outside sources that participated in Steam’s bounty program:

https://www.zdnet.com/article/researcher-publishes-second-steam-zero-day-after-getting-banned-on-valves-bug-bounty-program/?ftag=TRE-03-10aaa6b&bhid=27769547626970209573932858879932

Here’s a link to the Russian article:

https://amonitoring.ru/article/steamclient-0day/

Twitter post from Matt Nelson:

I'd like to take this Valve fiasco and highlight a few points:
1. Don't scope your program so tightly that it completely removes things like LPE
2. If you do, give researchers a place to go that isn't Twitter.
3. Don't lock an issue when disclosure is mentioned pic.twitter.com/lygNLkiUiz
— Matt Nelson (@enigma0x3) August 12, 2019

Month: August 2019

Steam’s Boat has a Leak They Don’t Plan to Fix