Page 1 of 2 1 2 LastLast
Results 1 to 10 of 13

Thread: It remains trivial to associate a player's match history with their Steam profile

  1. #1

    It remains trivial to associate a player's match history with their Steam profile

    Not sure if this was intentional or not, but it seems that:

    - The account_id of a player who has their match history set to private doesn't change between games.
    - You now have a player's matchmaking history, but don't know who they are.
    - Replay files contain a player's steam 64 id.
    - Assuming you have one replay file in which the player has a unique name and have collected the data for that game, you've now linked a steam profile to a "new" account_id.
    - You match history is now public again.

  2. #2
    Basic Member DarkLite's Avatar
    Join Date
    Dec 2011
    Location
    Patch Anticipation Station
    Posts
    3,919
    I can't really see this being practical on a large-scale way, and it's not going to be done by any of the large sites for fear of something worse happening. Which means if done, it's going to be done by individual people trying to stalk someone else in exchange for a silly expenditure of effort.

  3. #3
    Basic Member
    Join Date
    Dec 2012
    Posts
    23
    The intent behind making private info "default" was to announce Valve's stance on any future attempt to circumvent around hidden MMR. Even if one can associate people's steam ID with DotA nickname somehow, noone would bother (or dare) to attempt a large-scale conversion learning from Dotabuff's lesson.

  4. #4
    Quote Originally Posted by DarkLite View Post
    I can't really see this being practical on a large-scale way, and it's not going to be done by any of the large sites for fear of something worse happening. Which means if done, it's going to be done by individual people trying to stalk someone else in exchange for a silly expenditure of effort.
    I disagree on practicality, it is clear that Dotabuff are already parsing the majority of (if not all) replays.

    Not sure why this is moved out of critical bugs since it is something in the patch notes which doesn't do what is stated.

  5. #5
    They are not parsing any replay to get their informations.

    If you are using the webapi valve made, if someone has is account set as private the account_id field will be 4294967295 (-1).

    What dotabuff does is connecting with throw away account to steam with steamkit, faking being in game and then request a game by its match_id.
    If you do this there is nothing hidden for now even if you're account is set to private.
    Last edited by Serialloser; 01-25-2013 at 07:00 AM.

  6. #6
    Basic Member
    Join Date
    Sep 2011
    Location
    Lille, France
    Posts
    52
    Quote Originally Posted by Serialloser View Post
    They are not parsing any replay to get their informations.
    You can't have Lone Druid Bear items without parsing replays, ie: https://dotabuff.com/matches/107799862.

  7. #7
    So they are parsing replay when there is a lone druid player, doesn't change the fact that for the majority of games they don't have to

  8. #8
    Basic Member Diabolic's Avatar
    Join Date
    Nov 2011
    Posts
    792
    Quote Originally Posted by Serialloser View Post
    So they are parsing replay when there is a lone druid player, doesn't change the fact that for the majority of games they don't have to
    Developers from dotabuff already said they're not using the API brought by Valve. They're doing it in another way they didn't disclose.

  9. #9
    Basic Member
    Join Date
    Sep 2011
    Location
    Lille, France
    Posts
    52
    Quote Originally Posted by Serialloser View Post
    So they are parsing replay when there is a lone druid player, doesn't change the fact that for the majority of games they don't have to
    Take a Plus account, items build + skills builds for each replay from the Match menu. All replays are parsed.

  10. #10
    Quote Originally Posted by Diabolic View Post
    Developers from dotabuff already said they're not using the API brought by Valve. They're doing it in another way they didn't disclose.
    Quote Originally Posted by Serialloser View Post
    What dotabuff does is connecting with throw away account to steam with steamkit, faking being in game and then request a game by its match_id.
    If you do this there is nothing hidden for now even if you're account is set to private.
    Please read all my post, and no faking being connected to steam and sending protobuff message is not using valve api

    Quote Originally Posted by papa_pointnet View Post
    Take a Plus account, items build + skills builds for each replay from the Match menu. All replays are parsed.
    Ok my mistake.
    Last edited by Serialloser; 01-25-2013 at 08:23 AM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •