[HN Gopher] Steam "Offline" status leaks exact login timestamps ...
       ___________________________________________________________________
        
       Steam "Offline" status leaks exact login timestamps (Valve: Won't
       Fix)
        
       Author : xmrcat
       Score  : 5 points
       Date   : 2026-01-20 22:43 UTC (17 minutes ago)
        
 (HTM) web link (xmrcat.org)
 (TXT) w3m dump (xmrcat.org)
        
       | bigyabai wrote:
       | > Their logic: You have to be friends with the user to receive
       | this packet. Therefore, a "trust relationship" exists.
       | 
       | That logic is acceptable. You could also DM an offline friend a
       | tracking pixel to reconstruct their activity, a lot of this
       | endpoint security is entirely up to the user.
        
         | xmrcat wrote:
         | True, but a tracking pixel is an active attack that leaves a
         | visible trail. This leak is passive surveillance; I can
         | silently graph the sleep cycles of 200 friends without ever
         | interacting with them. Trust shouldn't imply consent for
         | invisible, automated logging.
        
       ___________________________________________________________________
       (page generated 2026-01-20 23:00 UTC)