"Seeing which of your friends are online and playing a game, sending quick messages, looking at screenshots for an upcoming game, or catching a sale -- these are all features customers have requested. Mobile is changing way people interact, play games and consume media, and the Steam app is part of our commitment to meet customer demands and expand the service functionality of Steam to make it richer and more accessible for everyone" said Gabe Nevell.

Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.

• Prevent AWP cycle time exploit using quick switch
• Fixed bug causing HUD History to display item pickups from nearby players
• Increased sized of HUD History resource to prevent clipping
• Changed grenade damage so that it always hits HITGROUP_GENERIC and takes into account armor for damage calculations
• Reduced standing and moving accuracy for pistols
• Decreased accuracy while moving with sniper rifles
• Added additional legacy mode (3) to cl_dynamiccrosshair
• Updated the localization files

Cumulative weapon updates

• All weapons now have a new accuracy model which fixes many bugs and provides more intuitive weapon behavior
• Weapons now have separate accuracy penalties for jumping, landing, and standing on ladders
• All weapons are now more accurate while crouching
• Accuracy penalties for movement no longer have a discrete threshold, but scale between crouch move and run speed
• All rifles are less accurate while running
• Fixed bug that caused the glock to fire burst rounds on three consecutive tick frames. It now fires burst rounds with a 0.05 cycle time
• Fixed a bug that cause the famas to fire burst rounds on uneven intervals (0.1 and 0.05). It now fires burst rounds with a fixed interval of 0.075.
• Fixed bug for the bolt action sniper rifles that caused their zoom state to incorrectly toggle when holding down fire.
• Fixed bug that would cause the suppressor state on the USP and M4A1 to not be accounted for correctly when the weapons were dropped with the suppressor attached and then picked up.
• Fixed fast suppressor switch exploit
• Decreased range of shotguns, while slightly increasing damage
• Slightly increased damage of m249
• Sniper rifles now zoom faster
• AWP fire animation changed to match 1.5 second cycle time
• Fixed burst fire prediction of FAMAS
• Fixed animation issue with elite dry fire
• Fixed timing of sounds on Glock burst fire
• Weapon spread patterns are no longer square
• Dynamic crosshair now uses actual weapon accuracy, rather than a separate simulation
• Increased run speed for Galil and FAMAS
• Increased FAMAS accuracy and reduced spread for burst mode
• Increased accuracy of silenced USP
• Increased accuracy of zoomed sg552
• Cycle time for dual elites increased to .12 second
• Fixed firing of "stale" burst mode bullets on glock and famas
• Fixed reload animation issue with shotguns under high latency
• Fixed bug which allowed a CT to defuse the bomb in the same frame that it exploded
• Pistols no longer continuously spam weapon_fire event when the +attack key is pressed. This has the side effect of no longer allowing the glock to continuously auto-fire in burst mode).
• Weapons no longer continuous cycle the weapon_reload event when the reload key is pressed
• Weapons no longer continuously cycle the empty fire event (and click) when out of ammo and the attack button is held

Other bug fixes

• Re-enabled the ability for max grenades to be set from server convars
• Allow observing other players when mp_fadetoblack is enabled and mp_forcecamera is something other than OBS_ALLOW_NONE
• Scoreboard is now more robust with user modified layout changes
• Added defuser icons to CTs on the scoreboard; these are analagous to the bomb icons for Ts, in that they only are visible for team members and spectators.
• Defuser, bomb, and VIP icons are now colored by team color convar.
• Bomb/defuser icons are no longer shown for members of the opposing team when you are not allowed to spectate them.
• Updated player max speed cap so that it no longer limits players to 240 movement speed
• Allow player max speed to be changed by mods
• Killing friendly players no longer increments the player stat for kills with enemy weapons
• Round no longer ends when timer runs out and mp_ignore_round_win_conditions is set
• Players no longer get weapon donation credit for buying, dropping, and picking up the same weapon
• Fixed crash related to planting C4
• Fixed positioning of hud_targetid; it now is correctly visible in wide screen aspect ratios and when spectating.
• Updated the multiplayer options UI so that it offers more options for configuring the crosshair.
• When dynamic crosshair is disabled, the crosshair is now completely static.
• Fixed a couple of issues with the view offset when dead was fighting with the observer code.
• Fixed a bug where the client would have a ragdoll entity in CS, but wouldn't have actually created a ragdoll which would give a one frame glitch in the death camera position setup.
• Fixed an exploit where users could disable flashbang audio effects using alias commands.
• Marked the "mat_diffuse" convar as a cheat to protect against exploits.
• Fixed issue with buying multiple grenades when ammo_*_max were set to other than the defaults.

Counter-Strike: Source Beta

• Weapons now have separate penalties for jumping and landing, allowing better weapon control after landing (and greatly reduced penalties for falling off small ledges). This also allows for in-air shots with proper timing.
• Dynamic crosshair now uses actual weapon accuracy, rather than a separate simulation.
• Glock and FAMAS each now use same accuracy for all burst shot bullets.
• Increased run speed for Galil and FAMAS.
• Bomb/defuser icons are no longer shown for members of the opposing team when you are not allowed to spectate them.
• Weapon spread patterns are no longer square.
• AWP cycle time restored to 1.5 seconds, and animation changed to match.
• HUD elements for health, armor, timer, and money now have a transparent background for better visibility.
• Fixed a couple of issues with the view offset when dead was fighting with the observer code.
• Made a convar for lag compensation position change tolerance.
• Made lag comp position checks use Length2dSqr (ignoring z).
• Fixed a bug where the client would have a ragdoll entity in CS, but wouldn't have actually created a ragdoll which would give a one frame glitch in the death camera position setup.
• Fixed an exploit where users could disable flashbang audio effects using alias commands.
• Fixed reload animation issue with shotguns under high latency.
• Fixed issue with buying multiple grenades when ammo_*_max were set to other than the defaults.
• Fixed timing of sounds on Glock burst fire.
• Fixed burst fire prediction of FAMAS.
• Weapons no longer continuously cycle the empty fire event (and click) when out of ammo and the attack button is held.
• Fixed animation issue with elite dry fire.
• Fixed crash related to planting C4.
• Fixed weapon accuracy related prediction errors that could cause performance problems.

Another way that the new content system improves the bandwidth picture is by requiring each user to download less data. With the Steam content system that’s been in place for a few years now, if an individual file on disk were modified by a game update, your client had to download the whole file. That can be painful when the file in question is really large. The new system supports delivering only the differences between the old and new files, meaning game updates will be much smaller overall.

Features

• Initial client side support for upcoming improved content delivery system (groundwork for future performance/reliability improvements to downloads)
• Added find text in HTML pages ( CTRL+F )
• Added “copy link” option to web browser right click menu
• Added suggested friends from Facebook display in client, if you’ve linked with Facebook
• Added the ability to push screenshots to Facebook after upload
• Additional HTTP API support for Steamworks partners
• Added check so screenshots for unreleased games can only be uploaded as private in the client.
• Added Facebook info when receiving a friend invite.

Bug Fixes

• Improved responsiveness of loading web pages in the client and in-game overlay browser
• Fixed a bug confusing cached HEAD request response with GET requests in Steamworks HTTP interface
• Improved fallback to different servers if first client connection attempt is to a down server
• Fixed a bug not immediately logging off on shutdown in some cases, leaving your state online until a timeout period was passed
• Improved line breaking/wrapping for most Asian languages
• Fixed a rare crash on shutdown in the browser control
• Fixed the store and community sometimes using English in the overlay instead obeying the user's language setting
• Improved Japanese font rendering on the Store and Community for users on Windows Vista or later
• The Steam client now detects if you’re not logged into the Steam Community or Store web pages, and automatically re-authenticates
• Fix a crash occurring if a multiuser chat got enough participants with long enough names
• Ensure user is logged in properly when accessing Steam web sites from the in-game overlay
• Facebook suggested friend UI improvements
• Fixed media playback using external player
• Prevent redeeming gifts of DLC or expansion packs for users who do not own the base game
• Fix the friend aliases dialog in the case where it’s the first time you have used it for a given user.
• The friend aliases dialog now retrieves friend aliases from the server, and now works for chat participants or group members with whom you are not friends.
• Fixed screenshot UI memory leak
• Reduced memory usage after ending a game session in which a large number of screenshots were taken
• Made the screenshot manager prioritize loading screenshots that are visible rather than just loading them from newest to oldest (so you see what you've just scrolled to if you scroll around while loading)
• Fixed steam://openurl and steam://openurl_external links in web pages not only opening the link in the default browser, but also loading a blank black page in the Steam browser.
• Fixed screenshots in D3D10/11 games with B8G8R8A8 or R10G10B10A2 backbuffer formats (Fear 3, Dirt 3)
• Fixed Team Fortress 2 not being playable in certain regions

Source Engine Changes (CS:S, DoD:S,TF2, HL2:DM)

• Fixed more crashes related to Alt-Tab in fullscreen mode on Windows
• Removed ConVars "r_portalscloseall" and "r_flashlight_version2" to fix a wallhack exploit

Counter-Strike: Source

• Fixed a server crash caused by players committing suicide

Team Fortress 2

• Fixed a bug that caused Mac replay renders to be blurry
• Fixed a client crashed caused by using custom main menu resource files
• Fixed a bug when crafting class tokens
• Fixed a paint bug on the Aperture Labs Hard Hatz
• Updated the localization files

Counter-Strike: Source Beta

• Made weapon accuracy changes in response to community feedback.
• Fixed firing of "stale" burst mode bullets on glock and famas.
• Re-enabled the ability for max grenades to be set from server convars
• Fixed code to allow observing other players when mp_fadetoblack is enabled and mp_forcecamera is something other than OBS_ALLOW_NONE
• Fixed round ending when timer runs out and mp_ignore_round_win_conditions is set
• Fixed pistols continuously spamming weapon_fire event when the +attack key is pressed. (This has the side effect of no longer allowing the glock to continuously auto-fire in burst mode). All weapons no longer spam weapon_reload when the reload key is pressed.
• Added defuser icons to CTs on the scoreboard; these are analogous to the bomb icons for Ts in that they only are visible for team members and spectators.
• Made scoreboard more robust with user modified layout changes. Defuser, bomb, and VIP icons are now colored by team color convar.
• Updated player max speed cap so that it no longer limits players to 240 movement speed.

Steam

• Made various improvements to Recommendations:
• Made some general improvements to the algorithm to make "Similar Items" a little more similar
• Changed primary source for generated recommendations to be recent playtime rather than recent purchases, prioritizing "new to you" games (ie, games where your recent playtime makes up the bulk of your total playtime for that game)
• Fixed DLC recommendations showing for games you haven't really played yet
• Games you've recommended will now be shown on your community profile page
• Fixed friend recommendations for free games you haven't yet played to show on your recommended page just like friend recommendations for games you don't own.
• Added links to the new "Friend Activity" page to the store homepage and community home panel.
• Added Turkish translation to the Steam client
• [Windows] Chinese, Japanese, and Korean typing support in the in-game overlay, for some games
• Fixed a case where a hyperlink in chat could take you to a player’s profile instead
• Fixed community opening to your profile instead of the blotter when community is your favorite window (thanks Sir_Brizz!)
• Improved Matchmaking function performance
• Fixed starting game executables with very long command line parameters (>255 characters)
• Fixed keyboard navigation in menus
• [Mac OSX] Overlay improved (works with Farming Simulator) and fixed an OpenGL state bug
• [Mac OSX] Implemented Minimize Cmd-M menu command.
• [Mac OSX] Improved Cmd-W to be more reliable
• Fix games not launching after resolving a Cloud conflict
• [Mac OSX] Fix layout on file open dialog when adding a non-Steam game
• Fix layout on server browser dialog
• Removed code for the now-ended Civilization V charity promotion
• [Mac OS X] Fixed cursor not showing up in game overlay on some games
• [Mac OS X] Dock Icon will not persistently bounce once it has a badge with a count of pending IMs.
• Fixed Steam not remembering Cloud settings in certain situations.

Weapon fixes

• All weapons now have a new accuracy model which fixes many bugs and provides more intuitive weapon behavior.
• Fixed a bug that caused the glock to fire burst rounds on three consecutive tick frames. It now fires burst rounds with a 0.05 cycle time.
• Fixed a bug that cause the famas to fire burst rounds on uneven intervals (0.1 and 0.05). It now fires burst rounds with a fixed interval of 0.075.
• Reduced penalty for firing while on ladders. Previously, standing on a ladder while firing had the same penalty as jumping.
• Fixed a bug in the bolt action sniper rifles that caused their zoom state to incorrectly toggle when holding down fire.
• Added the ability to display weapon recoil by setting weapon_debug_spread_show to 2.
• Fixed a bug that would cause the suppressor state on the USP and M4A1 to not be accounted for correctly when the weapons were dropped with the suppressor attached and then picked up.
• Fixed fast suppressor switch exploit.

Additional changes/fixes

• Exposed player max speed to be changed by mods.
• Added a log event when a player's clan tag changes.
• Improved bots weapon handling.
• Killing friendly players no longer increments the player stat for kills with enemy weapons.
• Fixed a bug that caused bullets not to register hits in certain angles.

• Fixed prediction errors that were causing greater weapon inaccuracy (bullet spread) on client than server.
  
• Made the bomb the primary target of a USE command. This fixes a problem with objects placed around the bombsite interrupting defuse attempts.
  
• Fixed the ‘skating’ behavior that could occur when a bomb planting attempt was aborted. Also fixes the resulting out of sync hit boxes.
  
• Fixed bug in which a player who crouches rapidly and repeatedly was seen as stationery by other players.
  
• Fixed problem in which the sound of a reload that was occurring when a player was killed persisted into spectator mode, making it sound like a reload was taking place near the spectated player.
  
• Gave chat interface priority over scoreboard to reduce conflict between the two.
  
• Increased size of HUD icons.
  
• Fixed bug with env_hudhint that caused problems when its value was greater than 255 characters.
  
• Added fcvar_archive flag to mat_hdr_level, r_rootlod, r_waterforceexpensive.
  
• Made the message of the day screen dismissible by hitting ENTER.
  
• Improved the look of the font on the achievement toast.
  
• Fix servers not being to set sv_hudhint_sound
  
• Added console variable cl_hudhint_sound
  
• Added cvar sv_enablebunnyhopping, defaulted to 0. ( A value of 1 autotags the server with "bunnyhop" )
  
  Additionally, we've made some Counter-Strike Beta only changes to simplify perf testing. These changes only exist in Counter-Strike Beta and will not affect Counter-Strike:
  
  
• Disabled HDR
  
• Disabled vsync
  
• Disabled motion blur
  
• Disabled stats

Counter-Strike: Source

• Added Steam Clan Tag support ( Set yours in Options->Multiplayer->Advanced )
• Added new achievement "CLAN WARFARE": Win a match of at least 10 players where the entirety of each team is composed of a single clan.
• All weapon fire rates now tuned to match their pre-update, tickrate 100 equivalents. (http://forums.steampowered.com/forums/showthread.php?t=1368659)
• Added automatic server tagging for some server convars ( "mp_startmoney", "mp_friendlyfire", "bot_quota", "sv_nostats", "sv_allowminmodels" )
• Fixed some issues for players who were experiencing stat corruption.
• Fixed several server crash exploits.
• Fixed server commands "sv_disablefreezecam" and "sv_nowinpanel" not working on dedicated servers.
• Adjusted some DX9 shaders to look more like their DX8 counterparts, e.g. flashbang effect.
• Community Requests:
  • Fixed entity I/O messages "OnPlayerPickup" and "OnPlayerUse".
  • Restored UTF-8 support in the console.
  • Added env_hudhint entity, for use in custom maps (The allplayers flag must be set for the hint to work in Counter-Strike.)
  • Added client convar "sv_hudhint_sound" to turn off emit sound for hud hints.
  • Restored the "cl_minmodels" client convar.
  • Added server convar "sv_allowminmodels" that allows them to prevent clients from using "cl_minmodels".
  • Added a button to Options->Multiplayer that allows players to reset their in-game stats.

Note: Due to the nature of stats corruption, it is not possible to automatically fix all types of stats (such as weapon statistics reflecting usage of the wrong weapon). Players who suspect their stats are incorrect and wish to start fresh may want to use the new stat reset feature