Valve has finally fixed an odd (and rather serious) bug that allowed hackers to easily take control of a Steam account using only a Steam username. The bug is detailed at length in this video, but the long and short of it is that the hijacking exploit took advantage of a security hole in Steam's password recovery system.
