Valve explains: DDoS-induced caching problem led to Xmas Day Steam data leaks and downtime

34,000 people may have had their personal data seen by others.

PC gamers were dismayed on Christmas Day to find that Valve's popular (and arguably essential) Steam store had gone haywire before becoming entirely inaccessible. Logged-in users were seeing account data that didn't belong to them, with partial credit card numbers, phone numbers, e-mail addresses, billing addresses, and purchase histories all visible. This happened for a period of about an hour and a half, from 14:50 to 16:20 EST on Christmas Day, after which the service went down entirely.

Valve has published an explanation of what happened and why. Steam routinely suffers from denial of service attacks. On Christmas Day, this traffic exploded. The Steam Store was already busy, due to the Winter Sale, and the denial of service attacks pushed the load to 20 times the normal load.

To handle the load of the attack, Valve's Web caching partner rolled out an updated configuration that resulted in personal, authenticated pages being cached and subsequently served to users they didn't belong to. After about 90 minutes the error was spotted. The Steam Store was taken offline entirely, the cache configuration was repaired, and the erroneously cached data was purged. Normal operation resumed thereafter.

Read 1 remaining paragraphs | Comments

Dealmaster: Get a Dell 20-inch, 1080p monitor and a $50 gift card for $109

Plus a few more deals to grab before 2015 ends.

Greetings, Arsians! Courtesy of our partners at TechBargains, we have a few more deals to close out 2015. Our highlighted deal is great for anyone who wants to upgrade monitors but has space limitations to adhere to: now you can get a Dell 20-inch 1080p LED monitor with VA panel plus a $50 e-gift card for just $109. The list price for the monitor is $129, and considering small screens like this are hard to come by in full HD, this is a unique find.

Check out the rest of the deals below, including savings on bluetooth headphones, portable hard drives, range extenders, and more.

Featured

Read 6 remaining paragraphs | Comments

Everykey 2.0 is a key to unlock…. everything

Everykey 2.0 is a key to unlock…. everything

Cleveland-based startup Everykey produces a small device that’s designed to unlock practically anything with a password or key (including physical locks and car doors) when you get close to it. Walk away with the Everykey in your pocket and and your computer, phone, and car will lock up tight. The company recently launched a crowdfunding campaign for […]

Everykey 2.0 is a key to unlock…. everything is a post from: Liliputing

Everykey 2.0 is a key to unlock…. everything

Cleveland-based startup Everykey produces a small device that’s designed to unlock practically anything with a password or key (including physical locks and car doors) when you get close to it. Walk away with the Everykey in your pocket and and your computer, phone, and car will lock up tight. The company recently launched a crowdfunding campaign for […]

Everykey 2.0 is a key to unlock…. everything is a post from: Liliputing

CBS, Paramount sue crowdfunded Star Trek filmmakers for copyright infringement

Axanar raised more than $1 million in donations, but it might get the legal axe.

Prelude to Axanar (Official).

On Tuesday, lawyers representing CBS and Paramount Studios sued Axanar Productions, a company formed by a group of fans attempting to make professional-quality Star Trek fan-fiction movies, for copyright infringement.

"The Axanar Works are intended to be professional quality productions that, by Defendants’ own admission, unabashedly take Paramount’s and CBS’s intellectual property and aim to 'look and feel like a true Star Trek movie,’” the complaint reads (PDF).

Axanar Productions released a short 20-minute film called Prelude to Axanar in 2014, in which retired Starfleet leaders talk about their experiences in the Four Years War, a war between the Federation and the Klingons that occurred in the Star Trek universe before The Original Series began. The feature-length Axanar is scheduled to premier in 2016 and follows the story of Captain Kirk's hero, Garth of Izar. Both productions were funded on Kickstarter and Indiegogo, raising more than $1.1 million from fans.

Read 12 remaining paragraphs | Comments

Opendata im SPNV: Deutsche Bahn öffnet sich weiter der Hackercommunity

Auf einem Chaos-Congress erwartet man eigentlich keinen Staatskonzern. Doch der Wandel der Deutschen Bahn zeigt sich ausgerechnet in Hamburg beim größten deutschen Hackertreffen am deutlichsten: DB-Mitarbeiter tauschten auf Augenhöhe mit der Community Ideen aus. (Deutsche Bahn, API)

Auf einem Chaos-Congress erwartet man eigentlich keinen Staatskonzern. Doch der Wandel der Deutschen Bahn zeigt sich ausgerechnet in Hamburg beim größten deutschen Hackertreffen am deutlichsten: DB-Mitarbeiter tauschten auf Augenhöhe mit der Community Ideen aus. (Deutsche Bahn, API)

AT&T waves goodbye to smartphone subsidies, 2-year contracts in 2016

AT&T waves goodbye to smartphone subsidies, 2-year contracts in 2016

AT&T is set to be the next US wireless carrier to do away with 2-year smartphone contracts and subsidized prices for phones. Starting January 8th, if you want to buy a smartphone from AT&T you’ll pay full price for it, either by paying for the phone up front or by paying for your phone with a […]

AT&T waves goodbye to smartphone subsidies, 2-year contracts in 2016 is a post from: Liliputing

AT&T waves goodbye to smartphone subsidies, 2-year contracts in 2016

AT&T is set to be the next US wireless carrier to do away with 2-year smartphone contracts and subsidized prices for phones. Starting January 8th, if you want to buy a smartphone from AT&T you’ll pay full price for it, either by paying for the phone up front or by paying for your phone with a […]

AT&T waves goodbye to smartphone subsidies, 2-year contracts in 2016 is a post from: Liliputing

The human migration out of Africa left its mark in mutations

The farther from Africa, the more of them there are.

(credit: Wikimedia Commons)

When it comes to evolution, people tend to focus on the big driving force of natural selection, which latches on to helpful mutations while purging the harmful ones. But there are other processes that change the frequencies of mutations—everything from random drift to the founding of small isolated populations.

Looking at our own species' history, we would expect to see some of this in action. After modern humans established themselves in Africa, smaller populations branched out to establish footholds in Asia before spreading east, eventually reaching the Americas. At each step, a small group of migrants took a fraction of humanity's genetic diversity with it, creating a series of population bottlenecks.

This should be easy to see in our DNA, but so far it has turned out to be complicated. Different attempts using distinct populations and methods have come to mixed conclusions about whether a clear signal is there. Now, a large international team of researchers has gone and sequenced genomes from multiple populations along humanity's route out of Africa, and they found a signature of these bottlenecks both in terms of genetic variation and in terms of potentially harmful mutations.

Read 11 remaining paragraphs | Comments

Nextbook 2-in-1 tablets get Cherry Trail upgrades

Nextbook 2-in-1 tablets get Cherry Trail upgrades

Budget tablet maker E Fun is updating its line of 2-in-1 tablets with four new models sporting Intel Atom x5-Z8300 Cherry Trail processors. The company will show off three new Windows 10 models and one new Android tablet at the Consumer Electronics Show next week, but E Fun is already offering up most of the important […]

Nextbook 2-in-1 tablets get Cherry Trail upgrades is a post from: Liliputing

Nextbook 2-in-1 tablets get Cherry Trail upgrades

Budget tablet maker E Fun is updating its line of 2-in-1 tablets with four new models sporting Intel Atom x5-Z8300 Cherry Trail processors. The company will show off three new Windows 10 models and one new Android tablet at the Consumer Electronics Show next week, but E Fun is already offering up most of the important […]

Nextbook 2-in-1 tablets get Cherry Trail upgrades is a post from: Liliputing

Epic Fail Collection: Wie man einen DDoS-Angriff nicht verhindert

Wie verhindert man einen DDoS-Angriff nicht? Dieser Frage ging der Sicherheitsforscher Moshe Ziono in seinem Vortrag auf dem 32C3 nach. Demnach wird das teure Anti-DDoS-Equipment offenbar manchmal selbst zur Falle. (32C3, VoIP)

Wie verhindert man einen DDoS-Angriff nicht? Dieser Frage ging der Sicherheitsforscher Moshe Ziono in seinem Vortrag auf dem 32C3 nach. Demnach wird das teure Anti-DDoS-Equipment offenbar manchmal selbst zur Falle. (32C3, VoIP)

Crypto Wars II: Der neue Tanz um den Goldenen Schlüssel

Der Geheimdienstausschuss des US-Senats plant offenbar eine gesetzliche Pflicht für Hintertüren in Verschlüsselungsprogrammen. Aktivisten sind aber der Ansicht, auch die nächsten Crypto Wars gewinnnen zu können. (32C3, Apple)

Der Geheimdienstausschuss des US-Senats plant offenbar eine gesetzliche Pflicht für Hintertüren in Verschlüsselungsprogrammen. Aktivisten sind aber der Ansicht, auch die nächsten Crypto Wars gewinnnen zu können. (32C3, Apple)