Because it’s supposed to reach affected users as quickly as possible, and a Steam/ingame announcement is the best way to do that? Slay The Spire made such an announcement when a popular mod was infected, and even though I didn’t use that mod, I still appreciated the outreach and care.
Why are you acting like it’s such a crazy idea to use broad announcement channels to reach all affected users?
It’s not reasonable when it means their users are possibly affected by this vulnerability without being informed. Even if it’s mod stuff, they have a responsibility towards their customers - and it’s not like it hurts them in any way.
Because it’s supposed to reach affected users as quickly as possible, and a Steam/ingame announcement is the best way to do that? Slay The Spire made such an announcement when a popular mod was infected, and even though I didn’t use that mod, I still appreciated the outreach and care.
Why are you acting like it’s such a crazy idea to use broad announcement channels to reach all affected users?
It’s not a crazy idea. But it’s also perfectly reasonable for the game publisher to not involve themselves with mods.
Well, but they involve themselves with mods quite a bit: https://www.beamng.com/resources/
It’s not reasonable when it means their users are possibly affected by this vulnerability without being informed. Even if it’s mod stuff, they have a responsibility towards their customers - and it’s not like it hurts them in any way.