this post was submitted on 02 Aug 2024
50 points (67.9% liked)
> Greentext
7538 readers
3 users here now
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Disclaimer: My steam account is turning 21 next month, and I own more games there than I'd like to admit.
There's a lot of valid criticism of steam or valve.
The main one I'd say is the 30% cut. But that's sadly basically industry standard. For an indie dev, that's still a lot better than having to go through things like a publisher.
Oh, and lootboxes. fuck those. should be banned.
Other than that, let's go through the list:
tl;dr: apart from the gambling enabling, it's fine.
What is this about a mobile app? I've half considered running steam, but I'm on Graphene, don't want anything google, and don't want anyone's apps, and especially anything with network access. Requiring anything on mobile is ridiculous nonsense to me.
Android is designed so that users can be completely ignorant of security and OS best practices. They do this by making every app developer the equivalent of a full user on the device. Even with a ROM like Graphene, Android is on untrusted hardware. Asking me to place any app on my device is like asking to make them my roommate and live in my house. Maybe people are cool with that, or enjoy the feeling of their head in sand. I imagine most are simply ignorant of what I am talking about and how the system works in the real world.
About forcing their app, while it's not necessary (you can use mail guard or extract the OTP key to run just the OTP generation); the improvements it makes to account security is top notch. I have a 2007 dated Steam account that had its username password combination leaked way back when i used the same username password combo everywhere. After setting up Steam Guard; I never had to change anything off of it. It used to just generate OTPs with its app; now it also shows where were login attempts made to your account, occasionally I get "yo this random fuck from China tried to login your account; is this you" notifications on my phone which i can pretty much ignore.
My old accounts on other platforms have really different stories, but on none of them i was able to call the account safe without changing its credientials at all.