I just tried too connect my steam account and went through the wizard. I used the api key from my account however, I misremembered my account name as "Shredder" my actual account name is "Shredder5262" , However, I was still able to get through the wizard and currently a library is scanning for 7726 games that are not mine... I am assuming they are someone else's named "Shredder".... This should be considered an urgent security issue and a check should be addressed sooner than later. I just went through the wizard again and corrected the user name and it has added the correct account.
This suggests that as long as you can provide an api key, you can type in whatever username you want and it would connect to the account (I have not tested this outside of the accident described above, just a theory)
Question
shredder
I just tried too connect my steam account and went through the wizard. I used the api key from my account however, I misremembered my account name as "Shredder" my actual account name is "Shredder5262" , However, I was still able to get through the wizard and currently a library is scanning for 7726 games that are not mine... I am assuming they are someone else's named "Shredder".... This should be considered an urgent security issue and a check should be addressed sooner than later. I just went through the wizard again and corrected the user name and it has added the correct account.
This suggests that as long as you can provide an api key, you can type in whatever username you want and it would connect to the account (I have not tested this outside of the accident described above, just a theory)
1 answer to this question
Recommended Posts