Capitalism 2 Redeem Steam Key

Technical Support forum for Capitalism II
Post Reply
Message
Author
azureel
Posts: 2
Joined: Sat Apr 30, 2016 6:48 am

Capitalism 2 Redeem Steam Key

#1 Post by azureel » Tue Aug 08, 2017 10:06 am

Hello,

In this page, only writing the email is enough to get the key.
http://www.capitalismlab.com/account/ca ... m_key.html

1. No password is asked on that page. So just guessing the email (from forum username?) would be enough to get the key I guess.
2. The key is printed on that page, and it is not sent to the entered email address. This is frightening.
3. The site is not HTTPS, but that's not that important at the moment.

If the key printed is only usable to the Steam account with that email, than ignore this post. But if the key is generic and can be usable with anyone, it is a kind of security breach.

Thanks.

User avatar
David
Site Admin
Posts: 4793
Joined: Sat Jul 03, 2010 1:42 pm

Re: Capitalism 2 Redeem Steam Key

#2 Post by David » Tue Aug 08, 2017 5:44 pm

If anyone has redeemed your key, making it impossible for you to redeem the key normally, please email us at info@enlight.com and we will send you a key manually.

azureel
Posts: 2
Joined: Sat Apr 30, 2016 6:48 am

Re: Capitalism 2 Redeem Steam Key

#3 Post by azureel » Tue Aug 08, 2017 5:49 pm

David wrote:If anyone has redeemed your key, making it impossible for you to redeem the key normally, please email us at info@enlight.com and we will send you a key manually.
Thank you, it didn't happen but I just wanted to state this situation.
Thanks again for quick response, have a nice day/evening.

Njeroe
Level 3 user
Posts: 56
Joined: Fri Jul 21, 2017 6:51 pm

Re: Capitalism 2 Redeem Steam Key

#4 Post by Njeroe » Tue Oct 10, 2017 7:14 pm

Azureel is right this makes it vulnerable to bruteforce attacks and from a security standpoint it is not very secure to only verify using email and not using that email to send the key but displaying it on the webpage.

Post Reply