this post was submitted on 19 May 2025
292 points (99.0% liked)

Games

38883 readers
860 users here now

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Rules

  1. Submissions have to be related to games

  2. No bigotry or harassment, be civil

  3. No excessive self-promotion

  4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

  5. Mark Spoilers and NSFW

  6. No linking to piracy

Authorized Regular Threads

Related communities

Video games

Generic

Help and suggestions

Platform specific

Game specific

Language specific

Others

PM a mod to add your own

founded 2 years ago
MODERATORS
all 41 comments
sorted by: hot top controversial new old
[–] [email protected] 41 points 1 week ago
[–] [email protected] 38 points 1 week ago (1 children)

Thanks for this. Long overdue from GOG.

[–] [email protected] 8 points 1 week ago (4 children)

Their platform is really outdated. Can’t even edit or remove a game review without contacting support. It’s dumb. They’re losing precious time because of this

[–] [email protected] 4 points 1 week ago (2 children)

the store is a losing proposition right now from CDPR perspective. I am just happy to have a different place I can buy games that's not steam

[–] [email protected] 4 points 1 week ago

Any competition is good :)

[–] [email protected] 1 points 1 week ago (1 children)

They'll need to put more effort into it. Make their APIs more open & maybe even fund Wine ?

Oh & DEFINITELY bring Galaxy 2.0 to linux, NATIVELY

[–] [email protected] 1 points 1 week ago

I'd love that but don't get your hopes up, they can only do one small change every few years. You're asking them for at least 3 centuries of dev time

[–] [email protected] 2 points 1 week ago (1 children)

Do you consider Itch.io to be a viable platform ??

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago)

I don't think it has cloud saving, easy wine/proton, API for achievements and shit... just overall unfit for "bigger games". It has similar functionality to GOG's offline downloads. I haven't really used it so can't say.

~~I probably won't try it if they also take a huge cut from sales like 30% or something~~ EDIT: They seem to let you choose whatever you want, and charge 10% by default (https://itch.io/docs/creators/payments#open-revenue-sharing). That's neat! However, payment method fees always apply. You can opt into them collecting the money through their account at seemingly no fee, and won't be exposed to chargebacks. That's incredible!

[–] [email protected] 2 points 1 week ago (1 children)

We can’t even edit the cookies section in their app or website and GOG is EU company btw, it’s bonkers!

[–] [email protected] 2 points 1 week ago

It's sad, because I'm sure they could fix all of this easily and get a lot of profit from GOG, but they prefer to spend their time elsewhere for some reason

[–] [email protected] 1 points 1 week ago

EDIT: Not sure what I meant for "precious time"

[–] [email protected] 21 points 1 week ago

Thanks, immediately went to set it up. No issues. Also works properly in combination with keepassxc's TOTP feature.

[–] [email protected] 17 points 1 week ago

It's about time!

[–] [email protected] 10 points 1 week ago (4 children)

Now when will Steam do this?

[–] [email protected] 20 points 1 week ago

They do. Just not 3rd party.

[–] [email protected] 13 points 1 week ago (2 children)

Idk why people think they cant add steam, i have it in my Aegis app.

[–] [email protected] 5 points 1 week ago

How did you manage? Thought steam 2fa was tied to steams app?

[–] [email protected] 1 points 1 week ago* (last edited 1 week ago)

How? I can't get it to give me the TOTP key, it just asks me to download their stupid app.

[–] [email protected] 6 points 1 week ago (3 children)

What does GOG's 2FA do that Steam's 2FA doesn't?

[–] [email protected] 27 points 1 week ago* (last edited 1 week ago)

At a glance (haven't enabled yet, will later today), GoG uses the RFC standard TOTP model. This means you can use whatever app you want whether that is the google authenticator that ties it to your cloud account, something related to your password manager (e.g. keepass or bitwarden), or even just a python script you have in a random directory. It gives you control of your 2FA and protects you in the event you lose a device without properly de-authenticating it.

Valve use their own model that, to my knowledge, is only accessible through the Steam mobile app. Which is a huge nightmare if you ever have a device stolen/damaged (and is why you back up the recovery code)


Just enabled. Yup, bog standard TOTP and they even provide the plaintext key so that I don't have to extract it from a QR code.

[–] [email protected] 6 points 1 week ago* (last edited 1 week ago) (1 children)

It ~~presumably~~ works with a normal TOTP app.

E: confirmed it works

[–] [email protected] 4 points 1 week ago (1 children)

Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me

[–] [email protected] 5 points 1 week ago (1 children)

I'm pretty sure it doesn't but I'll bite: How did you set that up?

[–] [email protected] 3 points 1 week ago (1 children)

I don't recall, I've set it up a few years ago - I've been trying to look for instructions for another comment, but it seems that they made it VERY difficult for people without rooted Android to obtain the TOTP secret.

Though it is RFC 6238 compliant, using 5 digits instead of 6.

[–] [email protected] 5 points 1 week ago* (last edited 1 week ago) (1 children)

Okay, let's say there's currently no native support for normal TOTP, mostly because Steam doesn't give you access to your TOTP key.

[–] [email protected] 2 points 1 week ago (1 children)

That much I can agree with at this point.

Actually, it's arguably even worse - it's not that Steam doesn't support normal TOTP, it's that Steam goes out of their way to prevent TOTP from being used without switching to an entirely new algorithm.

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago) (1 children)

Could be worse. GOG's approach is super annoying, and a lot of platforms (like fucking Apple) actually require the use of insecure and invasive SMS verification. And as far as I know Steam hasn't been hit with any data breaches since 2011.

[–] [email protected] 3 points 1 week ago

require the use of insecure and invasive SMS verification

My honest reaction:

[–] [email protected] 2 points 1 week ago (2 children)

Unless I’m missing something, Steam only does code to email 2FA, not an actual TOTP app

[–] [email protected] 10 points 1 week ago (1 children)

They have TOTP but only in their app.

[–] [email protected] 3 points 1 week ago (1 children)

So effectively, they don’t do what GOG is doing.

[–] [email protected] 3 points 1 week ago

Not exactly, no

[–] [email protected] -1 points 1 week ago (1 children)

Steam works with a normal TOTP app for me, hell, it works with two normal TOTP apps for me

[–] [email protected] 2 points 1 week ago (1 children)

Teach a brother how? I swear I couldn’t find it anywhere in the account settings.

[–] [email protected] 3 points 1 week ago* (last edited 1 week ago)

I don't quite remember how to get the TOTP secret from the Steam app (they could in fact take notes from GOG here), iirc you have to extract it from the Android app via adb;
but once you have it, if this GitHub comment is correct you simply have to set the code size to 5 digits.

If your phone has a rooted Android install, I found this guide.

... I swear when I did it, it wasn't this hard ._.

[–] [email protected] 5 points 1 week ago
[–] purplemonkeymad 2 points 1 week ago

Thanks, and added.

Although it would have been nice if I could "upgrade" from email based 2step instead of having to disable it.

[–] [email protected] 1 points 1 week ago

Does it still work with Heroic and Lutris?🤔