Steam hit by major security breach
The exploit has been fixed, and this video shows how easy it was to perform: <a href="https://www.youtube.com/watch?v=QPl_BJoBaVA" rel="nofollow">https://www.youtube.com/watch?v=QPl_BJoBaVA</a><p>TL;DW: Steam accepted blank recovery codes for password resets, enabling passwords to be changed without needing access to the recovery email account.<p>I hope someone is writing a new test case.