• 0 Posts
  • 195 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle





  • fartsparkles@lemmy.worldtome_irl@lemmy.worldme_irl
    link
    fedilink
    arrow-up
    26
    arrow-down
    2
    ·
    9 days ago

    I had to help a buddy pick up the pieces after he ran a pirated game which had, unbeknown to him, been bundled with an infostealer.

    He saw a momentary CMD window too.

    A couple of minutes after he ran the game, the infostealer had vacuumed up all his credentials saved in his web browser including the session token for Microsoft.

    The actor behind it took control of his MS account and removed the account recovery settings he’d set (since with the session token, they didn’t even need to authenticate). Lost his email, cloud backups, Xbox everything, etc.

    Microsoft weren’t much help but they did transfer his Xbox profile. Everything else, they wouldn’t help with.

    Don’t run software you don’t trust, kids. At the very least run it in a sandbox or something and scan the files it unpacks with a security product or three.














  • I’m surprised people think this is odd since the original Steam Controller was the same - it’s a Steam Input device, not XInput.

    If you consider what it was designed for, it makes sense. This isn’t another generic controller but a controller designed for a Linux/PC-based video games console (Steam Machine).

    If you boot into a desktop UI without Steam running, desktop UIs don’t support xinput devices to navigate around them.

    The Steam Controller thus defaults to presenting itself as a keyboard and mouse so that the UI can be navigated without Steam running.

    If it was xinput, you’d be reaching for a keyboard and mouse to plug in just to click Steam and then immediately no longer need them.

    That’s why it’s not an xinput device.