# 《Steam 档案》：规则、路线与问责 > Valve 制定限制。Steam 提供基础设施。 Canonical: https://phishdestroy.io/steam_dossier/zh/index Language: zh Publisher: PhishDestroy Author: PhishDestroy Team This file describes the published investigation page. The full text preserves its arguments, figures, tables, qualifications and source links. Cite the canonical page and the relevant section. ## Reading - [Published page](https://phishdestroy.io/steam_dossier/zh/index) - [Complete Markdown](https://phishdestroy.io/steam_dossier/zh/index.html.md) - [Complete plain-text version](https://phishdestroy.io/steam_dossier/zh/index/llms-full.txt) - [Investigation index](https://phishdestroy.io/steam_dossier/llms.txt) ## Sections - [这项规则。这项纪录。这些未解之谜。](https://phishdestroy.io/steam_dossier/zh/index#briefing-heading) - [目录](https://phishdestroy.io/steam_dossier/zh/index#toc) - [致华盛顿州博彩委员会的公开信](https://phishdestroy.io/steam_dossier/zh/index#wsgc-public-address) - [十天变成了十年。 重新打开该记录。](https://phishdestroy.io/steam_dossier/zh/index#wsgc-public-address-title) - [该网站被屏蔽了，但登录路由未被屏蔽。](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [图3.1 — 两条路线的示意图。](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [“全局陷阱”：链接过滤只是合规作秀，而非防护盾](https://phishdestroy.io/steam_dossier/zh/index#linkfilter-coverage) - [如果主域名被封锁，而认证主机未被封锁，登录路径就会保持开放——而且这种状态会持续数年之久。](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [背景：什么是 Steam 以及它为何在此处重要](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [Valve 做了什么：域名屏蔽](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [什么是代理域名](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [关键点：每次请求中都会将认证主机发送至 Steam](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [这证明了什么](https://phishdestroy.io/steam_dossier/zh/index#proxy-bypass-explainer) - [在 Steam 中，Valve 的列表是唯一的列表。](https://phishdestroy.io/steam_dossier/zh/index#inside-steam-filter) - [链路过滤保护旁路](https://phishdestroy.io/steam_dossier/zh/index#inside-steam-filter) - [Big Picture 网页浏览器泄露登录 Cookie 并暴露敏感信息（可能导致账户被劫持）](https://phishdestroy.io/steam_dossier/zh/index#inside-steam-filter) - [这对安装了杀毒软件的未成年人意味着什么](https://phishdestroy.io/steam_dossier/zh/index#inside-steam-filter) - [一个端点已关闭。公共追踪丢失了一把密钥。](https://phishdestroy.io/steam_dossier/zh/index#evidence-blackout) - [停电前时代](https://phishdestroy.io/steam_dossier/zh/index#evidence-blackout) - [变更后](https://phishdestroy.io/steam_dossier/zh/index#evidence-blackout) - [一个会话。比用户所见的访问权限更多。](https://phishdestroy.io/steam_dossier/zh/index#vulnerability-profile) - [1. 增强型身份验证不足](https://phishdestroy.io/steam_dossier/zh/index#vulnerability-profile) - [2. 未遵循最小权限原则](https://phishdestroy.io/steam_dossier/zh/index#vulnerability-profile) - [3. 会话管理故障](https://phishdestroy.io/steam_dossier/zh/index#vulnerability-profile) - [4. 从技术上讲，对认证主机的域级封锁是可行的](https://phishdestroy.io/steam_dossier/zh/index#vulnerability-profile) - [Valve 每天都会根据这些规则进行编译。但这次它并未按照这些规则进行编译。](https://phishdestroy.io/steam_dossier/zh/index#integration-paradox-title) - [交互式漏洞利用与劫持模拟器](https://phishdestroy.io/steam_dossier/zh/index#hijack-simulation) - [该序列背后的端点。简体中文（大陆）](https://phishdestroy.io/steam_dossier/zh/index#api-reference) - [一个被勾选的复选框。是谁操作的？](https://phishdestroy.io/steam_dossier/zh/index#consent-analysis) - [Valve是如何最终消除“贸易替代”现象的——以及为何花了7年时间才通过各种变通措施实现](https://phishdestroy.io/steam_dossier/zh/index#autopsy-trade-substitution) - [他们的规则手册。记录在案的平台。](https://phishdestroy.io/steam_dossier/zh/index#selective-enforcement) - [一套规则。执行不一。](https://phishdestroy.io/steam_dossier/zh/index#enforcement-focus-title) - [一个自动化 API。一条禁止自动化的规则。](https://phishdestroy.io/steam_dossier/zh/index#api-paradox) - [“游戏开发者”谬论](https://phishdestroy.io/steam_dossier/zh/index#api-paradox) - [要求十天。却要花十年来交代。](https://phishdestroy.io/steam_dossier/zh/index#case-study-section) - [VALVE 公司](https://phishdestroy.io/steam_dossier/zh/index#letter-company) - [遵循声明的返回主机。](https://phishdestroy.io/steam_dossier/zh/index#csgofast-scale) - [两个截止日期。一个尚未明确的执法标准。](https://phishdestroy.io/steam_dossier/zh/index#washington-record-heading) - [“10天通知”十年：对23个指定地点的法证生存审计](https://phishdestroy.io/steam_dossier/zh/index#cd-survival-audit) - [主机名已经包含在请求中了。](https://phishdestroy.io/steam_dossier/zh/index#autoban-feasibility-section) - [有据可查且已报告的先例](https://phishdestroy.io/steam_dossier/zh/index#autoban-feasibility-section) - [注册日期能反映什么、不能反映什么](https://phishdestroy.io/steam_dossier/zh/index#autoban-feasibility-section) - [比较审计：API合规标准](https://phishdestroy.io/steam_dossier/zh/index#autoban-feasibility-section) - [0以外的价格缺口](https://phishdestroy.io/steam_dossier/zh/index#market-thesis-heading) - [这一数字反映了什么](https://phishdestroy.io/steam_dossier/zh/index#market-gap-section) - [许多场地的标价都高于 Steam。](https://phishdestroy.io/steam_dossier/zh/index#market-chart-value) - [Steam 在报价数量上仍居首位。](https://phishdestroy.io/steam_dossier/zh/index#market-chart-offers) - [商业生态系统显而易见。](https://phishdestroy.io/steam_dossier/zh/index#market-gap-section) - [谁可以重置安全保护措施？](https://phishdestroy.io/steam_dossier/zh/index#insider-threat) - [一张导致该账户安全功能失效的恢复凭证，以及一笔报告的 $10,000 损失](https://phishdestroy.io/steam_dossier/zh/index#insider-threat) - [超越库存。](https://phishdestroy.io/steam_dossier/zh/index#insider-threat) - [Valve 两次推开了那扇门，相隔三十三个月。门从未关上过。](https://phishdestroy.io/steam_dossier/zh/index#theft-ledger-title) - [保密性必须伴随着技术上的问责制。](https://phishdestroy.io/steam_dossier/zh/index#insider-threat) - [追踪资金流向。将交易分拆。](https://phishdestroy.io/steam_dossier/zh/index#aml-kyc) - [资金实际流动的地方。](https://phishdestroy.io/steam_dossier/zh/index#revenue-path) - [先对活动进行分类，再对义务进行分类。](https://phishdestroy.io/steam_dossier/zh/index#aml-kyc) - [追踪资金流向、信息及协助情况。](https://phishdestroy.io/steam_dossier/zh/index#aml-kyc) - [《数字服务法》：将相关信息载入记录](https://phishdestroy.io/steam_dossier/zh/index#dsa-accountability) - [一项为期十天的要求。](https://phishdestroy.io/steam_dossier/zh/index#dsa-accountability) - [DSA时间窗口。](https://phishdestroy.io/steam_dossier/zh/index#dsa-accountability) - [“Duration”需要一条通知记录。](https://phishdestroy.io/steam_dossier/zh/index#dsa-accountability) - [全球年营业额的](https://phishdestroy.io/steam_dossier/zh/index#dsa-accountability) - [未成年人：a Steam 登录不属于年龄验证](https://phishdestroy.io/steam_dossier/zh/index#minors-protection) - [确定运算符和数据。](https://phishdestroy.io/steam_dossier/zh/index#minors-protection) - [记录从登录到存款的全过程。](https://phishdestroy.io/steam_dossier/zh/index#minors-protection) - [请求。响应。缺失的比较。](https://phishdestroy.io/steam_dossier/zh/index#gdpr-live-case) - [这些记录确实存在；但数据主体并未收到这些记录。](https://phishdestroy.io/steam_dossier/zh/index#gdpr-live-case) - [与该平台自身架构相悖的订阅协议](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [市场上限与商业用途禁令](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [API密钥漏洞是一个平台设计问题，而非用户疏忽所致](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [Valve 在每次登录时都会接收认证主机名](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [存档投诉中的规律](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [法院在审查本案卷宗时，不会孤立地解读《社会保障法》。](https://phishdestroy.io/steam_dossier/zh/index#tos-structural-void) - [调查结果。我们要求的记录。](https://phishdestroy.io/steam_dossier/zh/index#findings-and-requests) - [证据备忘录——由来源1提供的材料](https://phishdestroy.io/steam_dossier/zh/index#official-memorandum) - [生成的PDF文件中的遮盖仅是表面处理：被遮盖的文本仍可被提取](https://phishdestroy.io/steam_dossier/zh/index#academic-response) - [赡养费及法律信函附件](https://phishdestroy.io/steam_dossier/zh/index#exhibit-gallery-section) - [精选原始记录](https://phishdestroy.io/steam_dossier/zh/index#evidence-matrix-section) - [2016年申请的硬件密钥](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-gh-01) - [没有有效退出机制的崩溃报告](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-gh-02) - [已向 Valve 报告了 Auth-ticket 滥用情况](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-gh-03) - [44笔有争议的市场采购](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-rd-01) - [永久封号及上诉通道关闭](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-rd-02) - [恢复重置及报告的 $10,000 损失](https://phishdestroy.io/steam_dossier/zh/index#receipt-heading-rd-03) - [ArchiSteamFarm 以及自动化条款](https://phishdestroy.io/steam_dossier/zh/index#asf-case-study) - [选择一条规则。检查匹配的记录。](https://phishdestroy.io/steam_dossier/zh/index#legal-ledger-workspace-section) - [DSAR 操作指南：索取证据](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [保留您的时间线。](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [申请获取您的保留数据。](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [请保留送货记录。](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [比较这些回答。](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [账户安全与访问记录](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [差异是需要调查的证据。](https://phishdestroy.io/steam_dossier/zh/index#dsar-playbook) - [支持量。已公布的响应时间。](https://phishdestroy.io/steam_dossier/zh/index#support-stats-section) - [一个支持服务台有两条等候队列，共涉及21张存档截图。](https://phishdestroy.io/steam_dossier/zh/index#support-stats-section) - [统计记录数。检查范围。](https://phishdestroy.io/steam_dossier/zh/index#evidence-base) - [Valve 未公布任何执法记录。 我们造了一个。](https://phishdestroy.io/steam_dossier/zh/index#phishdestroy-manifesto) ## Evidence and downloads - [auth-route-audit.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit.json) - [比较已保存的 Steam 链接筛选结果 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-all-results.json) - [rollbit.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/rollbit.com.json) - [skin.club.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/skin.club.json) - [howl.gg.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/howl.gg.json) - [duelbits.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/duelbits.com.json) - [文件授权审核 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/csgofast.com.json) - [farmskins.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/farmskins.com.json) - [cobaltlab.tech.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/cobaltlab.tech.json) - [csgo.net.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/csgo.net.json) - [ggdrop.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/ggdrop.com.json) - [rustchance.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/rustchance.com.json) - [skin.fans.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/skin.fans.json) - [skinport.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/skinport.com.json) - [skins.cash.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/skins.cash.json) - [tf2hunt.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/tf2hunt.com.json) - [linkfilter-2026-09-22.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-2026-09-22.json) - [csgoempire.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/csgoempire.com.json) - [cs.money.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/cs.money.json) - [csfloat.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/csfloat.com.json) - [g4skins.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/g4skins.com.json) - [juice.gg.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/juice.gg.json) - [market.csgo.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/market.csgo.com.json) - [rust.tm.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/rust.tm.json) - [skinbaron.de.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/skinbaron.de.json) - [tf2royal.com.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/tf2royal.com.json) - [tradeit.gg.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/tradeit.gg.json) - [upgrader.pro.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/auth-route-audit/upgrader.pro.json) - [linkfilter-recheck-2026-09-21.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-recheck-2026-09-21.json) - [domain-registration.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/domain-registration.json) - [wayback-snapshots.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/wayback-snapshots.json) - [linkfilter-2026-09-22c.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-2026-09-22c.json) - [master_registry.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/master_registry.json) - [longitudinal-steam-phishing-audit.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/longitudinal-steam-phishing-audit.json) - [linkfilter-steam-phishing-100.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-steam-phishing-100.json) - [linkfilter-coverage-2026-09-22.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/linkfilter-coverage-2026-09-22.json) - [platform-audit.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/platform-audit.json) - [platforms-removed.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/platforms-removed.json) - [hackerone-reports.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/hackerone-reports.json) - [PCI SSC 资源指南 ↗](https://listings.pcisecuritystandards.org/pdfs/PCI_DSS_Resource_Guide_(003).pdf) - [WSGC 立法报告 PDF（本地副本）↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/wsgc-skins-gambling-briefing-2018.pdf) - [wsgc.wa.gov 上的同一份文件 ↗](https://wsgc.wa.gov/sites/default/files/2023-10/Skins%20Gambling.pdf) - [检索记录与哈希值 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/wsgc-briefing-manifest.json) - [之前的 CSFloat 快照 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/csfloat-catalogue.json) - [39行提取 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/priceempire-marketplaces.json) - [五个市场图集数据集 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/cs2sh-atlas.json) - [来源清单 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/cs2sh-manifest.json) - [Skinport 快照 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/skinport-floor-over-cap.json) - [源行和哈希 ↓](https://phishdestroy.io/steam_dossier/steam_tos_assets/outsourcing-archive-records.json) - [美国财政部金融犯罪执法局（FinCEN）FIN-2019-G001号文件，第1–2节、第5.1节 ↗](https://www.fincen.gov/sites/default/files/2019-05/FinCEN%20CVC%20Guidance%20FINAL.pdf) - [已归档 2025-07-11 ↗](https://web.archive.org/web/20250711185007/https://www.fincen.gov/sites/default/files/2019-05/FinCEN%20CVC%20Guidance%20FINAL.pdf) - [screenshot-manifest.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/screenshot-manifest.json) - [页面级 PDF 测量及其方法 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/regulatory-review/disclosure-audit.json) - [下载这六首歌曲 ↓](https://phishdestroy.io/steam_dossier/steam_tos_assets/selected-evidence-records.json) - [可搜索的存档清单 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/archive_manifest.json) - [database.json](https://phishdestroy.io/steam_dossier/steam_tos_assets/database.json) - [欧洲数据保护委员会（EDPB）访问指南，第2、4至6节 ↗](https://www.edpb.europa.eu/system/files/2023-04/edpb_guidelines_202201_data_subject_rights_access_v2_en.pdf) - [下载 .txt ↓](https://phishdestroy.io/steam_dossier/steam_tos_assets/dsar-request-template.txt) - [列出度量和哈希值 ↗](https://phishdestroy.io/steam_dossier/steam_tos_assets/part2-measurements.json) - [掌握 CSV ↗](https://phishdestroy.io/steam_dossier/VALVE_EVIDENCE_PACK/databases/TOTAL_VALVE_SCANDALS_MASTER_DB.csv)