RESOLVED URGENT: Ylands.exe logs privacy sensitive information

[Skully71 2]

Ylands.exe may create a file within the Steam installation directory which contains privacy sensitive information, namely:

• Steam Id
• Username
• E-mail
• First Name
• Last Name
• Address, ZIP, City & Country
• Activated
• Subscribed
• Last logged on date
• Account creation date
• Account update date
• Owned applications in Bohemia Store

This information is logged in a file called output_log_clean.txt typically found at C:\Program Files (x86)\Steam\SteamApps\common\Ylands\Ylands_Data\

Contents would read:

[IN] [08.12.17 09:54:17:08] Request #2: GET https://api.bistudio.com/user/api/v1.0/user?client_id=%...&access_token=... 

[IN] [08.12.17 09:54:17:21] Response #2: 200 {"steam_id":"...","username":"...","email":"...","first_name":"...","last_name":"...","activated":...,"subscribed":...,"city":"...","address":"...","zip":"...","last_logged_at":"...","created_at":"...","updated_at":"...","ownedApps":[...],"id":"...","country_code":"..."}
 

Please fix as soon as possible.

Public References:

1. http://steamcommunity.com/app/298610/discussions/0/1499000547474366484/?ctp=4#c1499000547481022086
2. http://steamcommunity.com/app/298610/discussions/0/1499000547474366484/?ctp=5#c1499000547481081249

[Aleš Ulm 1725]

Hi,

thanks for letting us know! 

Just as you said the file is created by the game itself is primarily for you to check and isn't sent anywhere (when things go wrong we the support might ask you for some information from this file). It definitely shouldn't contain sensitive information though since it's just a plain text file - just things that would help is identify potential issues in the game. Instead of selected entries, all were written into a file. There will be a patch released today that will fix that. It was a bug and we apologize for that.

[Aleš Ulm 1725]

The patch has been just released. Thanks again for notifying us!

[WijkagentAdrie 384]

Should/can we take our old logs we uploaded offline? As in, have you guys got a backup of them so you can fix the problems?

[Aleš Ulm 1725]

Good question.

Here's some additional info based on what we found out about this issue:

* this bug has been brought into the game as part of hotfix during the day one of public Steam release, when we turned on some additional information logging so that users who were unable to login in could provide us with more info. Unfortunately, there was more information put in the file than necessary. This means that this bug affected only logs created in between Dec 6th and today ( Dec 9th).

* also the majority of players should be unaffected and if they find anything in their logs, it will be just name of fields with empty values

* on Monday we will check if anyone hasn't sent us such a log and if we find some, we will discard it

[Aleš Ulm 1725]

@Adrie: sorry, I didn't exactly answer your question - sure! If you have put somewhere a log created in the last three days that contains anything you don't want others to see with others,  remove it.  Thank you.

[Skully71 2]

Fix confirmed in 0.6.1.42044.

Thank you for your expedient response.