Support NeoGAF

[DryvBy]

Does Steam even check what people upload?

 

[simpatico]

Would this classify as an Unreal 5 vulnerability?

 

[Spukc]

What is this?
Why can't we have good things sir?

I miss the gmod days

 

[Labadal]

I have a lot of games where I download Steam Workshop items. Sometimes, the conspiracy theroist in me thinks: what if this person has some shit in there that will mess up my PC?

 

[Pantz]

Arrest them like that other guy

 

[simpatico]

I have a lot of games where I download Steam Workshop items. Sometimes, the conspiracy theroist in me thinks: what if this person has some shit in there that will mess up my PC?

I don't know enough about security, but I wonder if it's an engine-based vector, where some properly designed ones would naturally be immune. I don't even know enough to lean one direction or the other.

I'm sure we've got some cyber guys here. Hopefully they chime in.

 

[Fbh]

You could say the malware was ...well hidden

 

[ChoosableOne]

This is not the first time. Valve needs to own its shit.

 

[winjer]

Does Steam even check what people upload?

Yes, Steam checks what users upload.
The problem is that the malware was not uploaded to Steam. It was hosted somewhere else.
My guess is that whoever made this dropper, didn't activate the links with malware, until the map passed the Steam checks. So it never triggered any warning, because there was nothing there.

Also a reminder for anyone using a PC, do not run daily a Windows account with Admin privileges. If you do, any scrip will automatically have Admin rights and will be able to do anything it wants.
Using a normal User Account, negates most of these script attacks. And only elevate to Admin when you know it's something you control.

 

[The_hunter]

This is not the first time. Valve needs to own its shit.

Also happened with wallpaper engine and cities skylines

 

[Spyxos]

Which map? I have downloaded quite a lot.

Edit: Ok i have never played this one.

 

[Signalis]

Would this classify as an Unreal 5 vulnerability?

Unreal 5 is the vulnerability