This thread is dedicated to discussing SteamDB Unknown App 445730 (Watch paint dry).
One of the reason I hate Steam.
More on this game and its origins
Yeah I know. It is ridiculous that the app can still stay in steam and those trading cards and emoticons are not yet removed.
I think it was fantastic. The "dev" hacked the game into Steam, prompting Valve to close the vulnerability. I wish I had a copy as a piece of Steam security history ;_;
It is funny but it's also worrying. It shows that the only way to get bug reports to Valve is to actually use them yourself so they see the effects. They need a proper bug reporting method and an active team to respond to them.
The way he managed to get the game on Steam is even more worrying. All he had to do was to simply change the submission form on his Steamworks account from "Submit for review" to "Release" by switching an id number 3 to 5 in the dropdown box. It hints to me that Valve have been more interested in securing the requests made to server-side pages on the public side of Steam rather than the developer side, rightly so I guess, however this could lead to more discoveries in the future if other forms are as unsecure. It's a lack of simple server-side validation that's to blame.
You are currently replying to another tree, would you like to make a top level comment? Reply
In order to reply to this thread,
you must login via Steam.
This site is not affiliated with Valve, Steam, or any of their partners. All copyrights reserved to their respective owners.