- Steam App
- Blackdoor (4562430)
- Event type
- patch note
- Published
- 12 July 2026 - 20:15:53 UTC
- Source
- steam_community_announcements
Bug Fixesconnect() bypassed authentication - calling connect(ip, port) without credentials gave full filesystem access: list_files, read_file, download, write_file, delete_file, scrub_log, and decrypt all worked without cracking a user first. This was unintended. All filesystem API functions now require an authenticated session. Thanks second_hand crack() didn't authenticate after success - cracking a user stored the credentials but didn't log you in. Previously you had to reconnect as user@host to actually authenticate. crack() now logs you in immediately on success, which is what the docs implied it did. connect() now accepts SSH key auth - pass an id_rsa path as the third argument to authenticate via key file: connect("user@host", 22, "~/.ssh/id_rsa"). The third argument can be a key path or a plain password. boards name could be set without confirmation - the handle is permanent and ...