Down voting security apps of choice is a weird decision…would you rather them tell you do download yet another program, and create new passwords and crap to add more security?
Gog, how are you even securing accounts? You mean securing access to accounts through 3rd party TOTP, which again, isn’t sessioning access authenticatively. We already invented that.
At a glance (haven’t enabled yet, will later today), GoG uses the RFC standard TOTP model. This means you can use whatever app you want whether that is the google authenticator that ties it to your cloud account, something related to your password manager (e.g. keepass or bitwarden), or even just a python script you have in a random directory. It gives you control of your 2FA and protects you in the event you lose a device without properly de-authenticating it.
Valve use their own model that, to my knowledge, is only accessible through the Steam mobile app. Which is a huge nightmare if you ever have a device stolen/damaged (and is why you back up the recovery code)
Just enabled. Yup, bog standard TOTP and they even provide the plaintext key so that I don’t have to extract it from a QR code.
I don’t quite remember how to get the TOTP secret from the Steam app (they could in fact take notes from GOG here), iirc you have to extract it from the Android app via adb;
but once you have it, if this GitHub comment is correct you simply have to set the code size to 5 digits.
If your phone has a rooted Android install, I found this guide.
I don’t recall, I’ve set it up a few years ago - I’ve been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.
Though it is RFC 6238 compliant, using 5 digits instead of 6.
Actually, it’s arguably even worse - it’s not that Steam doesn’t support normal TOTP, it’s that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.
Could be worse. GOG’s approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn’t been hit with any data breaches since 2011.
Their platform is really outdated. Can’t even edit or remove a game review without contacting support. It’s dumb. They’re losing precious time because of this
I don’t think it has cloud saving, easy wine/proton, API for achievements and shit… just overall unfit for “bigger games”. It has similar functionality to GOG’s offline downloads. I haven’t really used it so can’t say.
I probably won’t try it if they also take a huge cut from sales like 30% or something EDIT: They seem to let you choose whatever you want, and charge 10% by default (itch.io/docs/creators/payments#open-revenue-shari…). That’s neat! However, payment method fees always apply. You can opt into them collecting the money through their account at seemingly no fee, and won’t be exposed to chargebacks. That’s incredible!
It’s sad, because I’m sure they could fix all of this easily and get a lot of profit from GOG, but they prefer to spend their time elsewhere for some reason
I tried this on my 6700XT I had to play in 720p, the performance was that bad. Any of the available upscalers just made it look worse.
I upgraded to a more modern card since then and it works fine, but if you’re on something like a 6700xt I’d be wary or prepare to refund if you don’t like the performance.
I played on my Steam Deck on launch because i really wanted to play it. It was an experience lol. Most of the game was playable, but the prison got tedious at points with the lag
gog.com
Gorące