Aistriúcháin altLéigh an t-imscrúdú seo i do theanga féin24 teanga oifigiúla an AE · Is é an Béarla an téacs bunúsach · Aistrithe le DeepL agus óstáilte ag PhishDestroy
Léaráid eagarthóireachtaLéaráid eagarthóireachta
Imscrúdú eisiach

Mí-Illúis Steam: Conas a Oibríonn Valve Geilleagar Scátha, a Chumasaíonn Goid Sonraí, agus a Thugann Neamhaird ar an Dlí Idirnáisiúnta

PhishDestroy12 Lúnasa 2026Idirfhiosrúchán18 nóiméad léite
70–80%Luasdhíscithe do mhargadh na Rúise luaite
15%Tagairt do choimisiún an Chomhphobail Mhargaidh
29 Iúil–1 LúnasaFuinneog ionsaithe CEVA
Airteagal 15Ceart rochtana an GDPR

Tuairisc Imscrúdaitheach Eisiach le PhishDestroy

Níor tháinig tionscadal PhishDestroy ar an bhfód toisc go raibh an saol go breá. Ní fianaise ar rath Steam é go bhfuilimid ann, ach riachtanas criticiúil a d'eascair as neamhaird iomlán Valve ar shlándáil úsáideoirí. Go deimhin, chuir ár gcath in aghaidh na hiascachais isteach go díreach ar mhúnla gnó Valve, ag cur isteach ar a ngeilleagar cúramach de choscanna cuntas agus d'athdhíol earraí. (Eiseoimid píosa ar leith mionsonraithe níos déanaí a nochtann "luachanna" fíora na cuideachta agus a bpairidí ar an tslándáil chibear.)

Le breis agus deich mbliana anuas, tá Valve Corporation i bhfolach taobh thiar de sheaicéad curtha in oiriúint do thomhaltóirí. Ach faoin dromchla, tá meaisín corparáideach ciniciúil i gceist. Trí fhiosrúchán inmheánach fairsing, tá an fhoireann PhishDestroy tar éis na polasaithe ar fearr le Valve a choinneáil ciúin a dhíchóiriú. Seo anatamaíocht ardáin a fheidhmíonn mar shiondacáit airgeadais neamhrialáilte, a shásaíonn stáit atá faoi smachtbhannaí, a thugann scáth do thacaíocht sheachfhoinsithe atá i mbaol, agus a chaithfidh le dlíthe na hEorpa mar mholtaí roghnacha.

1. An Fharsainse Smachtbhannaí agus an Chlaontacht ar son na Rúise

I gcás Valve, níl in úsáideoirí san AE agus sna Stáit Aontaithe ach ba bainne. Cé go n-íocann imreoirí Eorpacha an praghas iomlán, leanann Steam ag tairiscint lascainí ionsaitheacha idir 70% agus 80% do mhargadh na Rúise. Cosnaíonn cluiche sa Rúis codán den phraghas a chosnaíonn sé sa Ghearmáin. Seo an chuma a bhíonn ar "smachtbhannaí" idirnáisiúnta i bhfoclóir Valve.

Déanann an t-ardán gach is féidir leis an veicteoir seo a shásamh agus a dhéanamh coitianta: éascaíonn siad malartú réigiúin, déanann siad neamhaird ar sciúradh airgid trí earraí in-chluiche, agus luann siad go follasach ina dTéarmaí Seirbhíse go ngéilleann siad d'údarás dlí aon chúirte Rúisí. Sroicheann sé pointe an áiféise: ar na hócáidí neamhchoitianta a mbíonn cliseadh ollmhór ar fhreastalaithe Steam, is minic gurb é Roskomnadzor (gníomhaireacht chinsireachta fheidearálach na Rúise) an chéad eintiteas a dhéanann trácht oifigiúil ar na cliseadh teicniúil.

2. An Cartel Tacaíochta Seachfhoinsithe

Titeann miotas an "tacaíochta teicniúla Mheiriceánaigh atá dian agus slán" as a chéile an nóiméad a thuigeann tú cé atá i seilbh eochracha chúl-eagair Steam. Tá tacaíocht i réigiún CIS tugtha ag Valve ar conradh d'eangach sheachfhoinsithe atá an-chomhréiteach.

D'éirigh linn codanna den líonra seo a dhí-anainniú go rathúil. Is é Nikita an t-ainm atá ar dhuine aonair atá i gceannas ar an gcraobh tacaíochta seo nó a dhéanann maoirseacht uirthi. Léirigh ár bhfiosrúchán go bhfuil an duine aonair seo (nó ar a laghad, a phríomh-ríomhphost) cláraithe agus gníomhach mar úsáideoir ar fhóraim haiceála faoi thalamh ar nós Lolzteam (Zelenka)—mol dorcha-líonra a bhfuil droch-cháil air atá tiomnaithe go hiomlán do dhíol cártaí creidmheasa goidte, bunachair shonraí a ndearnadh sáriompar orthu, agus logaí for-bhreithiúnacha.

Smaoinigh air sin: tá duine a bhfuil rochtain dhomhanda aige ar bhunachair shonraí Tacaíochta Steam ag caitheamh ama go réchúiseach ar fhóram atá deartha do ghadaithe aitheantais.

Tá Valve lánfheasach ar an éillitheacht seo. D'admhaigh siad cheana féin go raibh fasach ann inar dhraenáil foireann sheachfhoinsithe stoc-chuntais úsáideoirí ardluacha go córasach. Mar sin féin, is brabúsaí dóibh fós lucht oibre seachfhoinsithe saor, neamhshrianta a choinneáil ná gairmithe slándála cibearaíochta cáilithe a fhostú laistigh den chuideachta.

3. Camscéimeanna mar Mhúnla Gnó agus mar Airgeadra Thar Farraige

Tá craicne in-chluiche Steam anois ina n-airgeadra uileláithreach, dolorghafa ar fud an darknet—glantlann airgeadais a sheachnaíonn rialtóirí idirnáisiúnta agus údaráis chánach.

Dar le roinn airgeadais Valve, ní bagairt iad na camscéimeanna; is gníomhairí seachtracha iad a spreagann luas an mhargaidh. Ní thugann an tsamhail thraidisiúnta 'úsáideoir amháin, cluiche amháin' isteach ach ioncam teoranta. Mar sin féin, cruthaíonn éiceachóras a bhfuil comhréiteach déanta air lúb an-bhrabúsach: déantar hacaireacht ar úsáideoir, goidtear na hítimí, cuirtear 'Cosc Trádála' ar chuntais an chamscéimí, agus cuirtear iachall ar an íospartach próifíl nua a chruthú agus a gcuid sócmhainní a athcheannach.

Nuair a chuirtear bac ar chamsheoltóir ag Valve, ní thugann siad na sócmhainní goidte ar ais chuig an úinéir ceart. Reonn siad go buan iad. Cruthaíonn sé seo ganntanas saorga. Má laghdaítear soláthar an mhargaidh, ardóidh praghsanna na n-earraí atá fágtha, rud a iolraíonn coimisiún 15% Valve ar an Margadh Pobail dá réir. Níl siad ag iarraidh stop a chur le camscéimeanna; baineann siad brabús astu.

4. Sárú CEVA Logistics: Fianaise Dhoshéanta ar Fhaillí

Má chreideann tú go gcosnaíonn Valve do shonraí fisiciúla, sa saol réadúil, ar a laghad, léiríonn an eachtra a tharla le déanaí maidir le CEVA Logistics a mhalairt. Idir an 29 Iúil agus an 1 Lúnasa 2026, bhris haiceálaithe isteach i gcomhpháirtí lóistíochta crua-earraí Eorpach Valve. Níor dheimhnigh Valve an sárú go dtí an 7 Lúnasa, rud a d'fhág sonraí na n-úsáideoirí i lámha gníomhaithe mailíseacha ar feadh seachtaine.

Áirítear sna sonraí a sceitheadh fíorainmneacha, seoltaí cónaithe iomlána, uimhreacha gutháin, agus seoltaí ríomhphoist atá nasctha le Steam de chustaiméirí Eorpacha a d'ordaigh crua-earraí fisiciúla. Déanann Valve iarracht úsáideoirí a shuaimhniú trí a rá nár sceitheadh "pasfhocail ná sonraí íocaíochta". Ach is é Fíorainm, Seoladh Baile, Uimhir Gutháin, agus Ríomhphost Steam an plean mionsonraithe beachtais a theastaíonn le haghaidh spear-phishing thar a bheith éifeachtach agus gabaíocht cuntas—mianach óir don fhoireann sheachfhoinsithe agus do na líonraí camscéime a luadh thuas. Go bunúsach, thug Valve do chuid sonraí dóibh.

5. Gairm chun Gnímh: Seasamh na hEorpa in aghaidh Díolúine Corparáidí

Caithfidh gach imreoir san Eoraip dúiseacht do réaltacht gharbh: tá tú ag íoc cúig oiread níos mó as cluichí ná úsáideoirí sa Rúis, ach tá do chearta agus do dhlíthe Eorpacha (an RGCS) ciúnaithe go hiomlán. Sreabhann do shonraí pearsanta chuig conraitheoirí tríú páirtí, agus is líonra seachfhoinsithe de chuid an CIS a láimhseálann do thicéid tacaíochta, líonra a bhfuil cáil an-amhrasach air.

Seolaimid beannacht speisialta, sharcasach chuig na dlíodóirí ag Taylor Wessing, a mbeidh orthu, gan amhras, leasanna Valve a chosaint i gcúirteanna na hEorpa. Bígí ullamh—tá an chosaint ar mhonaplacht a bhíonn ag caitheamh an dlí AE i dtraipisí ar tí éirí i bhfad níos deacra.

Tá sé in am stopadh de bheith i do urraitheoir áisiúil. Ná maith na sceitheanna sonraí seo.

Seo an méid atá le déanamh agat anois díreach:
  1. Comharthaigh Gearán GDPR: Téigh chuig d'Údarás Náisiúnta um Chosaint Sonraí (DPA)—bíodh sé an CNIL sa Fhrainc, an BfDI sa Ghearmáin, nó an AP san Ísiltír—agus déan gearán oifigiúil maidir le sárú CEVA Logistics. Is é Valve an Rialtóir Sonraí; tá siad freagrach go dlíthiúil as an sceitheadh seo.
  2. Éiligh do Logaí: Seol Iarratas Foirmiúil ar Rochtain ar Ábhar (SAR) faoi Airteagal 15 den GDPR chuig privacy@valvesoftware.com. Éiligh loga iomlán de gach fostaí seachfhoinsithe agus conraitheoir tríú páirtí a raibh rochtain acu ar do shonraí pearsanta agus ar do chuntas le 12 mhí anuas.
Uirlis gearáin Airteagal 77 GDPR

Déan fógra na sárú ina ghearán de chuid an AE atá doiciméadaithe.

Roghnaigh aon cheann de 27 Ballstát an AE chun an t-údarás inniúil, na sonraí teagmhála foilsithe, an seoladh poist, an cainéal oifigiúil gearán agus na rialacha comhdúcháin atá sonrach don tír a fheiceáil. Ullmhaíonn an tógálaí gearán in-eagarthóireachta i dteanga na tíre roghnaithe agus PDF atá deartha go gairmiúil bunaithe ar struchtúr coiteann gearáin an EDPB.

Bain úsáid as an seoladh ríomhphoist ar fuair an fógra é, más féidir, nó cuir isteach é mar do theagmhálaí gearáin. Cuir an fógra bunaidh i gceangal mar .eml comhad le ceannteidil iomlána; má dhiúltaíonn an tairseach .eml, ceangail PDF a thaispeánann an seoltóir, an faighteoir, an dáta agus an teachtaireacht iomlán. Cuidíonn sé seo le cruthú go raibh baint ag do shonraí leis an scéal, ach ní coinníoll dlíthiúil de chuid Airteagal 77 é an seoladh céanna a úsáid.

27Ballstáit an AE
24teangacha oifigiúla an AE
Ritheann sé go háitiúil i do bhrabhsálaí. Ní uaslódáiltear aon rud.

Má dhiúltaíonn siad, maíonn siad nach gcoinníonn siad logaí, nó má fhaidhníonn siad taobh thiar de chomhaontú neamh-nochtta (NDA) corparáideach chun a bhfoirne seachfhoinsithe a chosaint, seol an diúltú sin go díreach chuig do Údarás Cosanta Sonraí (DPA). Is é beartas dlí ar scála mór an t-aon teanga a thuigeann an monaplacht seo.

Iarscríbhinn an Údair: An Mhargadh Taobh Thiar den Ardán

Ar ardán Steam, bíonn na praghsanna réigiúnacha molta don Rúis (agus do réigiún an CIS ina iomláine) de ghnáth 40–60% níos ísle ná an bunphraghas i ndollair SAM. Aicmítear an Rúis mar 'Margadh atá ag Teacht Chun Cinn' Leibhéal 2, a fhaigheann lascaine 40–50% den phraghas bunúsach de ghnáth. Mar shampla, de réir mholtaí Valve, ba cheart go mbeadh costas de thart ar 419–499 ruble ar ghnáthchluiche neamhspleách ar phraghas $19.99 (a bheadh thart ar 1,900 ruble ar mhalartú díreach).

Terraria: an cluiche céanna, scaipeadh praghsanna 191%.

Praghsanna reatha liostaithe réigiúnacha
#1 is saoire$4.66An Rúis≈ ₽385−53% i gcomparáid leis na S.A.
#2 is saoire$5.01An Úcráin≈ 225₴−50% i gcomparáid leis na S.A.
#3 is saoire$5.03An India≈ ₹480−50% i gcomparáid leis na S.A.
#1 daor$13.55An Eilvéis≈ CHF 10.99+36% i gcomparáid leis na S.A.
#2 daor$11.48An Ríocht Aontaithe≈ £8.50+15% i gcomparáid leis na S.A.
#3 daor$11.25An Ghearmáin≈ €9.75+13% i gcomparáid leis na S.A.

Praghas Terraria i gcomparáid leis na Stáit Aontaithe

Praghas liostaithe SAM = 100%. Léiríonn gach barra an cluiche céanna ar Steam.

An Rúis
$4.66 · 47%
An India
$5.03 · 50%
Stáit Aontaithe
$9.99 · 100%
An Ghearmáin
$11.25 · 113%
An Ríocht Aontaithe
$11.48 · 115%
An Eilvéis
$13.55 · 136%

Gabhálán agus a choibhéiseanna in airgeadraí áitiúla: OpenTheRank — praghsáil réigiúnach Steam do Terraria. Tá cánacha a thaispeánann an fhoinse san áireamh nuair is infheidhme.

Praghas lipéid vs cumhacht ceannaigh áitiúil

Is féidir le praghas íseal dollar a bheith daor go fóill go háitiúil. Ponc folamh = praghas liostaithe. Ponc líonta = costas coigeartaithe PPP. Scála: $0–$25.

Praghas liostaitheCostas coigeartaithe PPP
$0$5$10$15$20$25
An India
+134%
An Rúis
+4%
Stáit Aontaithe Mheiriceá
0%
An Ghearmáin
+6%
An Ríocht Aontaithe
−1%
An Eilvéis
+23%

Luachanna atá coigeartaithe do PPP agus céatadáin easnamh: comparáid cumhachta ceannaigh Terraria ó OpenTheRank. Tá na luachanna cruinnithe mar a thaispeántar sa fhoinse.

Ní mór a rá go soiléir go bhfuil an tacaíocht sheachfhoinsithe lonnaithe in Éirinn, ach gur Rúisigh atá ar an bhfoireann—agus tá cuid den fhoireann lonnaithe go díreach sa Rúis. Ó, agus dála an scéil, is le CSGOFast an forlíonadh cáiliúil SteamInventoryHelper, a úsáidtear go heisiach chun a gceasaíneo atá dírithe ar leanaí a fhógairt (ceasaíneo atá coiscthe i roinnt tíortha Eorpacha). Agus cé atá i seilbh an cheasaíneo seo? Sin é, Rúisigh, díreach mar atá an chuid is mó de shuíomhanna comhchosúla. Nach bhfuil a fhios ag Steam faoi seo? Nó nach dteastaíonn uathu a bheith ar an eolas, i bhfianaise go bhfuil an tionlacan sa mhargadh scátha thart ar bhilliún dollar, creidim.

Ina theannta sin, measaim gur ar Steam a thosaigh 40% de na scammers ón CIS a bhíonn i mbun scamálaí criptea faoi láthair. Tá aithne phearsanta agam ar dhá chás ar a laghad de sciúradh airgid trí skins. Ní thabharfaidh mé mionsonraí fúthu anseo, ach is féidir liom más gá—ach ní go poiblí, mar níor mhaith liom na hardáin a ainmniú, srl. Ach tá Steam ar an eolas go maith faoi seo. Nó an bhfuil siad ag súil i ndáiríre go gcreidfimid go bhfuil imreoirí nach leosan an cluiche fiú amháin ag ceannach an earra chéanna arís agus arís eile díreach le bheith ag "imirt" leis? Sea, ceart go leor, is scéal grinn é.

Ós rud é go bhfuil eagla orm roimh ghnéaschiapadh ó Taylor Wessing, ní scríobhfaidh mé ag iarraidh go gcuirfí mo theachtaireacht ar aghaidh chuig íospartaigh an sceitheadh sonraí—na daoine ar theip ar Valve ina leith, iad siúd a fuair na ríomhphoist fógra sin. Satire / Joke

Tá tosaíochtaí Steam chomh pro-Rúiseach agus is féidir—i dtéarmaí praghsála agus dlí araon, chomh maith le Putin, bratacha, agus sceimhlitheoirí coiscthe a phoibliú. Ach is cosúil go dtaitníonn sé sin le Steam, díreach mar a fhulaingíonn siad frith-Sheimíteachas, idirdhealú, ciapadh, stalcaireacht, agus déileáil i ndrugaí. Dar le Steam, tá sé seo breá ceart, díreach mar a bhíonn le cluichí 18+. Is léir go mbaineann siad sult as.

Ní aighneas beartais gearr-mhaireachtana é seo. Tá oifigigh Rúiseacha agus grúpaí oibre tionscail tar éis níos mó ná bliain a chaitheamh ag forbairt réimeas rialaithe físchluichí a chuimsíonn sainaithint imreoirí trí uimhir theileafóin Rúiseach, tairseach aitheantais stáit Gosuslugi nó córas bithmhéadrach an stáit. Ainmníodh Steam agus GOG go sonrach i measc na n-ardán a bhféadfadh an moladh tionchar a imirt orthu, agus dúirt rannpháirtithe go raibh an grúpa oibre rialtais bunúsach ag teacht le chéile le beagnach bliain go leith faoin mhí na Nollag 2024. Ní dhearna Valve aon ghealltanas poiblí inchomparáide go bhfágfadh sé margadh na Rúise seachas a chuid úsáideoirí a cheangal leis an ailtireacht aitheantais seo atá stiúrtha ag an stát.

Tá an chodarsnacht suarach. Chuir na príomhghníomhaithe sa tionscal stad ar dhíolacháin nó ar sheirbhísí sa Rúis—chuir Microsoft stop le gach díolachán nua, agus d'fhógair ardáin consól agus foilsitheoirí go mbeidís ag tarraingt siar—ach roghnaigh Steam leanúnachas. Leanann sé air ag soláthar bonneagar tráchtála agus sóisialta do thír a d'aithin Parlaimint na hEorpa go foirmiúil mar stát urraitheoir na sceimhlitheoireachta agus mar stát a úsáideann modhanna na sceimhlitheoireachta.

Tá an tacaíocht sin le feiceáil laistigh de gheilleagar Valve féin. Liostaíonn an Margadh Pobail oifigiúil Steam cúlra próifíle "Putin & Trump" ar féidir a cheannach agus na mílte earraí dar teideal "Putin forever," "Putin smile," "Putin like" agus "Putin angry". Níor chruthaigh Valve na híomhánna seo, ach déanann sé iad a dháileadh, a liostáil agus airgead a bhaint astu trí mhargadh atá á reáchtáil ag Valve. Ag an am céanna, i gcásanna atá doiciméadaithe ag PhishDestroy, ceadaítear go bhfanfadh ciapadh bunaithe ar náisiúntacht le feiceáil nó caitear leis mar ghnáthchonflíct pobail. Níl teachtaireacht Steam do-thuigthe: is féidir brabús a bhaint as bolscaireacht pholaitiúil, agus fágtar na daoine a ndírítear an mhí-úsáid de bhun tionscnaimh náisiúnta orthu chun é a sheasamh.

Ní hImdhíonacht Dlíthiúil é Úinéireacht Phríobháideach

Is cuideachta phríobháideach í Valve agus ní thrádáiltear a scaireanna go poiblí. Ciallaíonn sé sin go bhfaigheann a struchtúr úinéireachta, a hinfheisteoirí, a rialuithe inmheánacha agus a dtiomhaintí airgeadais i bhfad níos lú grinnscrúdaithe rialta poiblí ná mar a fhaigheann cuideachta liostaithe. Ní chiallaíonn sé sin, áfach, go n-éiríonn dlí an chosanta tomhaltóirí, dualgais sábháilteachta leanaí, dlí an chosanta sonraí ná rialtóirí náisiúnta as feidhm. Mura ndéantar monatóireacht dhóthanach ar ardán, is teip ar an maoirseacht é sin—ní cead é é a iompú ina áit ina nochtar leanaí do shábháilteán gnéis, d'fhógraíocht chearrbhachais, do stalcaireacht agus do bhagairt eagraithe.

Deir Comhaontú Síntiúsóirí Valve féin nach bhfuil Steam beartaithe do leanaí faoi 13 bliana d'aois. Fágann sé sin lucht féachana ollmhór déagóirí fós ar an siopa céanna a dhíolann gnáthchluichí in aice le teidil dhíreacha do dhaoine fásta agus hentai. Ní dearbhú aoise bríoch iad dáta breithe féin-dearbhaithe, leathanach rabhaidh agus scagairí sainroghanna. Ní hé an fhadhb go bhfuil meáin do dhaoine fásta ann; is í an fhadhb ná iad a chur ar ardán cearrbhachais ollmhargaidh a úsáideann mionaoisigh agus ansin ligean orainn go gcuireann geata cosmaideach an riosca as an áireamh. Más mian le Gabe Newell, le bainistíocht Valve nó lena gconraitheoirí tacaíochta ardán d'ábhar do dhaoine fásta, ba cheart dóibh ceann a oibriú go hoscailte agus go neamhspleách in ionad iallach a chur ar gach foilsitheoir cluichí seilf tráchtála a roinnt leis.

Ba cheart do shealbhóirí cearta a mhíniú freisin cén fáth a nglacann siad leis an ngar-aighneas seo. Is féidir le cluiche teaghlaigh, teideal do pháistí nó eisiúint mhórshrutha a bheith suite aon mholadh nó toradh cuardaigh amháin ar shiúl ó ábhar follasach, agus Valve ag bailiú airgid ón dá cheann. Caitheann foilsitheoirí fortúin ag cosaint a mbrandaí, ach is cosúil go bhfuil siad toilteanach neamhaird a dhéanamh ar a bhfuil timpeall ar na brandaí sin laistigh de Steam. Ní dhéanann úinéireacht phríobháideach an rud seo freagrach, agus ní dhéanann ceannas an mhargaidh é dosheachanta.

Éiríonn prionsabail mhodhnóireachta Valve níos deacra fós a chosaint nuair a chuirtear i gcomparáid iad lena bhfreagairt ar chinsireacht stáit na Rúise. In 2024, d'fhógair Roskomnadzor go raibh an t-ábhar go léir a d'éiligh an ghníomhaireacht bainte ag Steam agus go mbainfí 11 URL de chuid Steam dá bharr sin ó chlár faisnéise toirmiscthe na Rúise. In 2025, bhain Steam ábhar de leathanach cluiche do dhaoine fásta amháin tar éis éileamh eile ó Roskomnadzor maidir leis an rud ar a dtugtar "propaganda" LADT. Sin cinsireacht pholaitiúil á cur i bhfeidhm fiú ar shaothar do dhaoine os cionn 18 mbliana d'aois, seachas cosaint a thabhairt do leanbh a chuaigh timpeall ar chosc aoise. Is féidir le Valve cloí le liosta cinsireachta na Rúise, ach ar bhealach éigin fágann sé gan chabhair é nuair a iarrtar air úsáideoirí a chosaint ar mhí-úsáid bunús náisiúnta, ar chonairí cearrbhachais neamhdhleathacha nó ar nochtadh ábhair ghruama do dhaoine fásta. Is rogha tosaíochtaí é sin, agus ardaíonn sé ceist shoiléir faoi shaoirse cainte.

Níor d'eisigh Valve freagra corparáideach poiblí ar ionradh na Rúise ar an Úcráin atá inchomparáide le freagraí na gcuideachtaí a chuir a gcuid oibríochtaí ar fionraí nó a thug tacaíocht oscailte don Úcráin. Ní éilíonn a struchtúr caipitil príobháideach an cineál nochtadh faisnéise d'infheisteoirí a mbeifí ag súil leis ó chuideachta phoiblí, agus mar sin ní féidir le daoine seachtracha scrúdú iomlán a dhéanamh ar cé leis a bhfuil na dreasachtaí á gcosaint. An rud atá fós le feiceáil ná ceangal neamhghnách le margadh níos saoire a bhfuil baint aige le calaois ar scála tionsclaíoch, cearrbhachas, goid cuntas agus seirbhísí seachanta smachtbhannaí. B'fhéidir go n-éireoidh an chúis níos soiléire má aontaíonn Steam riamh le nasc aitheantais Gosuslugi.

Leanann scéal an fhoinsiúcháin an patrún céanna neamh-trédhearcachta. Déanann Valve conarthaí le cuideachtaí, ní leis na hoibrithe tacaíochta aonair a chuirtear i láthair na n-úsáideoirí. De réir príomhfhoinse agus ábhar a rinne PhishDestroy athbhreithniú orthu, níor imigh duine a bhí bainteach leis an scannal goid fardail ardluacha a tharla roimhe seo as éiceachóras beag na gconraitheoirí tacaíochta: d'aistrigh sé go gníomhaireacht eile. Mhaígh sé níos déanaí nach raibh sé ag obair do Steam agus nach raibh a fhios aige go raibh an cuntas nasctha le Steam. Ach mar sin féin, thug an rian ar ais go hÉirinn, go dtí an duine céanna agus go Steam arís. Ba cheart an cuntas seo a fhiosrú mar theip ar sheachfhoinsiú agus ar rialú rochtana; ní chuirtear i láthair anseo é mar mheasúnú coiriúil. Ba cheart do Valve a nochtadh cé na gníomhaireachtaí a bhfuil rochtain acu ar chórais chuntas, conas a dhéantar athscagadh ar phearsanra nuair a bhogann siad idir díoltóirí, agus an féidir le duine a baineadh ó chonraitheoir amháin teacht ar ais go simplí trí chonraitheoir eile.

Tá sé léirithe ag Vítneam cheana féin nach gcuireann stádas Valve mar chuideachta phríobháideach os cionn an dlí náisiúnta í. Cuireadh Steam ar bac ansin tar éis do na húdaráis a rá nár chomhoibrigh Valve. Tá Vítneam ann. Tá dlí an AE ann. Tá gach dlínse a mbaineann Valve brabús aisti ann, fiú nuair a iompraíonn Valve amhail is nach bhfuil tábhacht ach le "aon chúirt sa Rúis". Agus más é an teoiric é go bhféadfadh Steam oibriú cibé áit is mian leis, faoi na socruithe folaithe is mian leis, gan aon chuntasacht bhríoch, b'fhéidir gur cheart dúinn an cheist áiféiseach a chur go díreach: an bhfuil Steam speisialta ann don Chóiré Thuaidh freisin nár nocht éinne go fóill?

Seo fíricí bunaithe: is ón Rúis an fhoireann tacaíochta, agus tá an tacaíocht seo tar éis faisnéis a ghoid nó a thabhairt ar láimh do thríú páirtithe arís agus arís eile chun rochtain ar chuntais neamhghníomhacha a athbhunú d'fhonn iad a ghabháil ar láimh chun brabús a bhaint astu.

Mar sin, táim cinnte nach gciallaíonn sé faic ar bith dóibh go bhfógraítear duit go bhfuil do chuid sonraí sceite, go háirithe le moill ollmhór den sórt sin (bhí siad ag fanacht 100% le freagra Taylor Wessing; is mór an t-iontas nár fhan siad trí seachtaine).

Ní dhearna mé a leithéid riamh cheana, níor spreag ná níor ghríosaigh mé éinne riamh chun aon ní a dhéanamh, agus níor mhaith liom é a dhéanamh anois. Ach seo go díreach an cás atá ag Steam. Ceapann siad go bhfuil brú oscailte agus idirdhealú i gcoinne úsáideoirí an AE go hiomlán ceart go leor, agus go réiteoidh Taylor Wessing gach rud ach daoine a bhagairt go hoscailte maidir le hiarratais GDPR. Sin mo thuairim, mo thaithí, agus faisnéis ó fhoinse phríomha a bhfuil mé muiníneach aisti.

Ar aon nós, ní thógann sé ach cúpla clic gearán a chomhdú. B'fhéidir ansin go bhfoghlaimeoidh Steam faoi dheireadh meas a bheith acu ar dhlíthe eachtracha—agus ní hamháin ar dhlíthe "aon chúirt sa Rúis." B'fhéidir go gcuirfidh siad deireadh faoi dheireadh leis an gcluiche amaideach, ag ligean orthu nach bhfuil siad in ann ar chor ar bith fearainn údarúcháin do shuíomhanna cearrbhachais neamhdhleathacha a bhlocáil. In ionad na réaltachta atá againn anois: tá gach duine i gcomhpháirtíocht le chéile—úinéirí Rúiseacha cheasaíneonna do pháistí agus an fhoireann tacaíochta a bhíonn ar Lolzteam ag plé conas cuntais a bhrú-fhuascailt.

Leanfaidh PhishDestroy air ag déanamh monatóireachta, ag fiosrú, agus ag nochtadh. Tabharfar an gheilleagar scáthach chun solais.

Táim cinnte go mbeidh eispéireas suimiúil agat agus tú i mbun cumarsáide le hionadaithe Valve. Má is iad Taylor Wessing atá i gceist, is rud an-ghnách é go gcaitheadh siad go hísleach leat, go ndéanfadh siad bagairtí, agus go gcuirfidís moill ar an scéal — sin an obair atá acu. Go ginearálta, is mó aithne a bhíonn orthu as cás dlí ciapadh gnéis in aghaidh a ngnólachta féin, agus ní mórán eile. Ó, ceart, fostaíonn comhlachtaí a bhfuil an iomarca airgid acu iad go sonrach chun tú a ídiú, agus iad ag íoc ráta ollmhór in aghaidh na huaire as.

Ar ais go Nuacht & Imscrúduithe
PhishDestroy — License · Rights · Disclaimer
Investigation: Valve Corporation / Steam
LICENSE · RIGHTS · DISCLAIMER
Investigation: Valve Corporation / Steam
Edition: public — no expiry date, no take-backs

SECTION I — LICENSE (THE ACTUAL LEGAL PART, BUT HUMAN)

PhishDestroy gives up every right to this material. Zero. Gone. Done. You can reproduce it, sell it, put your name on it, tattoo it on your boss, whatever. No credit required, no DM needed, no thank-you card expected.

ONE ACTUAL RULE (yes, just one)

Access from OFAC-sanctioned jurisdictions is prohibited. That is a matter of territory and law — not of nationality and not of people.

Changing your Steam region does not change your physical location or your legal status. No loopholes.

SECTION II — WHAT THIS IS AND WHY IT EXISTS

We will publish more about Valve than an average Valve employee knows about themselves. That's not a brag. That's just where we ended up.

How did we get here? Funny story: Steam basically created us. It raised us on its scammers, its support tickets, its ban evasion ecosystem — and now here we are. No hard feelings. Poetic, actually.

For those who haven't read the origin story yet — we already met Valve's extremely expensive European lawyers (Taylor Wessing, since you asked):

https://phishdestroy.medium.com/my-dog-vs-elite-gdpr-lawyers-the-valve-data-breach-nobody-is-talking-about-f6f7683d813d

Charming encounter. Especially given their hourly rate.

Did Valve know? Yes. Did Tyler Wessing know? Almost certainly yes. But when you're that rich, laws are more of a vibe than a requirement, right?

That's kind of the whole answer, actually.

Steam spent years farming scammers. Not always intentionally — sometimes scammers just got Valve's fingerprints on them by association. We're not trying to be dramatic about it. We're trying to be precise. That's harder for us than being dramatic, to be honest — this is just how we write.

Is this a conflict?— No. Can it be resolved?— Yes. But we're not signing any NDA and we're not playing bug bounty for pennies.

We waited over 4 years for them to fix the spoofing issue before we could write about it publicly. Because if we had written about it earlier, Steam would've put on its little victim face and screamed "active threat!" and offered us pocket change to sign a document that would've made us their legal property forever. No thanks.

(Also: Valve itself violates NDA. Their own employees do. The ones near the top. But sure, let's talk about ours.)

SECTION III — OPEN LETTER TO VALVE (SERIOUSLY, READ THIS)

Valve: if you want this domain taken down, email us. Outside counsel is not needed for that conversation.

For the uninitiated: Dr. Patrick holds a Master of Laws in International Commercial Law from the University of Aberdeen and — wait for it — literally finished his doctoral dissertation in IT law. He recently made partner at Taylor Wessing, which is a firm whose entire business model is billing companies like Valve obscene amounts of money to drag things out until the other side runs out of money or patience.

We don't blame him. Rich guilty clients who pay by the hour — solid career move. We just don't think you should be funding it.

THE DEAL (open offer, no lawyers needed)

If you want the domain gone: let your IT law professionals calculate its price. Take your time — it is a rare asset: the only website in the world whose purchase changes nothing, because everything on it already lives on IPFS, in regulator inboxes, and in archives we do not control.

50% of whatever you pay goes to the SEAL Foundation (securityalliance.org) — people who do volunteer security work professionally and publish it for free. We are not affiliated with them and they did not ask for this; we name them as the public standard of what real volunteers look like — the standard your own volunteer moderators and outsourced support failed, publicly, before you had to remove them. You know the scandals. So do we.

The rest buys the community coffee while we keep publishing. That is not a settlement offer. It is a demonstration of what money can't reach: the domain is the maximum Valve can obtain, and obtaining it obtains nothing. The referrals continue. The mirrors continue. Part 3 continues.

Will we "damage" Valve directly? Probably not in a way they'll feel fiscally. We're not delusional. But we will do it honestly, openly, without chasing clout — because we don't need clout. We need the world to see what was always publicly visible if you spent enough time looking.

We have 5 years of archives. What Valve's lawyers showed in discovery — the data that support agents can see, the fingerprints, the paper trail they literally handed us — is enough. We don't need to leak it raw.

  • Regulators get the originals.
  • Researchers and journalists get redacted versions (victim reports, children's logins and Valve's charming support commentary removed for obvious reasons).

Minors were among the affected accounts and were not notified. That finding sits in the regulator package with the victim reports and credentials removed, because it belongs in front of a data-protection authority rather than in an article.

Also, Valve — we want to make something clear before you decide how to play this: PhishDestroy is a community, not a person. You learned that when you addressed legal correspondence to the community without bothering to speak with the community — just milked it for data and banned the accounts.

The community has no conflict with Valve. We didn't go looking for this. The scammers you grew found us. We blocked them. And here we are.

SECTION III-B — THE ALLIED RESOURCES (a note to Steam specifically)

We want to be upfront about the amplification structure, because pretending it doesn't exist would be dishonest.

PhishDestroy, as we understand the community situation, has at least two allied resources that will pick up this material and run with it.

What that means in practice:

  • They work their own angles on overlapping subject matter.
  • They are independent — they don't take our direction, we don't take theirs. Same general topic, different methodology.
  • They will NOT be activating on Part 1. They're watching.

If Valve chooses not to take down the site:

  • Expect them to surface after Part 2 or Part 3.
  • They'll take what's useful from our work, supplement it with their own, and publish under their own authorship.
  • This is exactly the kind of thing the license in Section 1 is built for: the material goes where it needs to go, gets supplemented, gets amplified — and neither we nor they owe each other attribution.

(PS for lawyers wondering about liability chains: there are none. These resources don't receive our direction, our funding, or our data. They read what's public and draw their own conclusions. Just like you could.)

We're not saying this to intimidate. We're saying it so that whoever is strategising on Valve's side has accurate information about what the information environment actually looks like.

One resource that pulls our material and supplements it would be a story. Two resources doing it independently and reaching similar conclusions is a pattern. Patterns are what regulators notice.

SECTION IV — THE MONEY, THE BANS, THE WHOLE CIRCUS

Here's the thing about Steam banning gambling sites and scammers: it's not enforcement. It's revenue capture. Valve pockets the money, cleans its hands, then goes on stage and tells everyone a wholesome story about Pokémon cards and baseball.

Meanwhile Valve killed the ability to properly track skins in 2017. They even discussed it on their own forums. Called it "anti-gambling measures." The gambling that their own support staff were running as a side hustle — getting paid in percentages to lift bans. But sure. Anti-gambling. Great branding.

We're going to prove that:

  • Skins are more anonymous than Monero
  • A Peruvian Cartel allegedly used Dota 2 skins for money movement
  • Steam is functionally a sanctions-bypass machine worth ~$7B in "trading cards" (yes, they actually said trading cards to a prosecutor)

We've got a video on the skins thing. You'll see it.

We also know:

  • Reddit moderation is influenced by Valve
  • steamid.uk and similar infrastructure is run directly by one Steam developer, controlled exclusively by him and his circle
  • What they can't control, they ban

Valve: if you keep playing dumb — that's fine. Your safe harbour is noted. Google Analytics anonymises your users' IPs anyway. We see what gets deleted. We just can't prove it cheaply enough for your lawyers to care. Yet.

SECTION V — THE MALWARE THING (yes we're mentioning it)

Let's be brutally clear about the sequence of events, because it exposes exactly who you are.

We are NOT disclosing the vulnerability in the game publicly. We are NOT reporting it to Steam. Not because we lack the technical capability — but because Steam's bug bounty is a pathetic NDA trap designed to buy silence for pocket change. We don't work for three kopecks, and we absolutely refuse to become NDA slaves to protect Valve's fragile PR.

Here's what actually happened: This vulnerability is practically an open secret in the right circles. We know for a fact that independent security researchers have already shoved the full exploit directly into Steam Support's face. That part is done. You have been officially warned through your own sterile channels.

And what did Valve do? Absolutely nothing. Because for Valve, security does not equal profit — in fact, it's the exact opposite. Security is a cost center. Until a threat reaches critical mass and causes a catastrophic public PR meltdown, Valve simply does not give a shit.

So what are we doing? We're telling the public it exists, because "Valve knows about a systemic malware threat and actively chooses to do nothing" is a critical data point for the regulators currently reading this.

The game is massive. We're not naming it here. But understand this:
This is NOT the trivial CS:GO script-kiddie garbage where a server asks you to "install a driver". This is catastrophic.

This is an Unturned-level nightmare: zero-click RCE on server connect. You join a server. You click nothing. You download nothing. The connection itself is the attack surface, and your machine is fully compromised. Let's be real here: dropping an RCE and bypassing local antiviruses by piggybacking on Valve's trusted digital certificates isn't even a novelty on Steam anymore. It is practically a built-in feature of your ecosystem.

Valve already knows this exists. But they rely on their favorite, cowardly legal loophole: because the game is technically developed by a third party, Valve washes its hands. They distribute the game, they process the payments, they host the infrastructure, but when a zero-click RCE threatens millions of their users, their stance is: "Not our game, not our liability."

When this inevitably blows up, the third-party developer will take the bullet, and Valve will walk away pretending to be the responsible platform that "assisted" with the resolution. Classic Valve cowardice. We've seen the playbook.

We are putting this on the record so that regulators, prosecutors, and journalists understand exactly how Valve handles active malware: by hiding behind third-party developers, deploying NDA gag orders, treating security as an inconvenience, and leaving the players as sitting ducks.


DECLARATION AS TO USE AND RIGHTS

PhishDestroy Project & Cybersecurity Coalition

This declaration accompanies every submission and every exhibit in this referral set. It is addressed to any authority, court, regulator, prosecutor, researcher, journalist or affected person into whose hands the material comes.

1. THERE ARE NO CONDITIONS ON USE

1.1 All material produced by the Coalition in this referral — the statements of fact, the analysis, the exhibits it has authored, the tooling, and the findings — is released WITHOUT RESERVATION OF ANY RIGHTS.

1.2 Anyone may, without asking and without notifying us:

  • reproduce it, in whole or in part;
  • adapt, edit, rewrite, restructure or correct it;
  • translate it;
  • excerpt it without indicating that it has been excerpted;
  • incorporate it into official documents, findings, decisions, pleadings, reports or press material;
  • present it as the recipient's own work or the recipient's own findings;
  • use it as raw material and discard the rest;
  • and pass it on to anyone else on the same terms.

1.3 ATTRIBUTION IS NOT REQUIRED AND IS NOT SOUGHT. The Coalition need not be named, cited, credited, thanked, consulted or informed. If material from this referral assists an authority and the Coalition is never mentioned, THAT IS A COMPLETELY SATISFACTORY OUTCOME and the Coalition states so in advance so that the question need not be raised.

1.4 If, on the other hand, an authority finds it more convenient to cite the Coalition as a source, it is free to do so. The choice is entirely the recipient's and neither course carries any consequence.

1.5 This is a WAIVER, not a licence offer. It requires no acceptance, imposes no obligation, and cannot be breached. Software published by the Coalition is separately released under the MIT licence; the research and findings are released into the public domain to the fullest extent permitted, and where a jurisdiction does not permit waiver, the Coalition grants an irrevocable, worldwide, royalty-free licence to the same effect.

2. WHY THIS MATTERS PRACTICALLY, AND NOT ONLY AS A COURTESY

2.1 An authority may reasonably hesitate to rely on material supplied by an outside party, for fear of appearing to act at that party's instance or of acquiring some entanglement with it.

2.2 THERE IS NOTHING HERE TO BE ENTANGLED WITH. The Coalition asks for nothing, is owed nothing, retains nothing, and has no expectation of any kind. It cannot later assert a right, claim credit, complain of misuse, or object to how the material is characterised, because it has retained no basis on which to do so.

2.3 An authority using this material is therefore not acting for the Coalition. It is using public information that happens to have been assembled by someone else.

3. EVERYTHING IS OPEN ALREADY

3.1 The Coalition's work is public by default:

  • the investigations are published openly at https://phishdestroy.io and are freely readable;
  • the tooling is published as open source under the MIT licence at https://github.com/phishdestroy;
  • the methodology is set out in the referral itself, at Annex A section A.16D, including the weight and limitations of each source type;
  • the Coalition accepts no donations and has published that position since 2018.

3.2 The only material NOT published is that which cannot lawfully or safely be published: personal data of victims and of third parties, and information that would expose a source to retaliation. That material is supplied to authorities in confidence and is identified in the schedules of evidence.

3.3 The Coalition invites scrutiny of its own conduct on the same terms it invites scrutiny of anyone else's, and has volunteered its own data handling to the authorities concerned, including a request for a direction on disposal.

4. INTEGRITY OF THE EVIDENCE BUNDLE

4.1 Exhibits are supplied with the submission or, where marked, on request through a secure channel. They are not published at a public address and no such address should be inferred: material of this kind is provided to authorities directly.

4.2 Each delivery is accompanied by a file SHA256SUMS listing a SHA-256 digest for every file supplied, together with a detached OpenPGP signature SHA256SUMS.asc.

4.3 The signing key is published at https://phishdestroy.io/.well-known/pgp-key.txt and on keys.openpgp.org. Its fingerprint appears in the letterhead of every submission in this set.

4.4 Any recipient may verify at any time that a file in their possession is the file that was sent, unaltered:

gpg --verify SHA256SUMS.asc SHA256SUMS sha256sum -c SHA256SUMS

4.5 The purpose is not formality. It is so that, if the accuracy or integrity of any exhibit is disputed at a later date, the question can be settled by computation rather than by argument.

5. ON REGISTER — WHY THE WAIVER IS FUNCTIONAL AND NOT MERELY GENEROUS

5.1 The authority may encounter the Coalition's published investigations and find them blunt, adversarial and at times satirical. That impression is correct. The Coalition writes that way deliberately and does not apologise for it.

5.2 IT ALSO RECOGNISES THAT THIS IS THE WRONG REGISTER FOR A REGULATORY OR JUDICIAL PROCEEDING. A serious matter should not be carried in the voice of a campaign. Findings put before an authority should be stated flatly, with their limitations admitted, and should not require the reader to discount for tone before reaching the substance.

5.3 THAT IS PRECISELY WHY THE COALITION WAIVES AUTHORSHIP. The waiver at section 1 is the mechanism by which the substance can be separated from the register: the authority may take what is useful, restate it in its own voice, and discard every word of the Coalition's manner along with the Coalition's name. Nothing is lost by doing so, and the Coalition would prefer it.

5.4 THE COALITION ALSO ASKS THAT THE REGISTER NOT BE MISTAKEN FOR THE METHOD. The published tone is combative; the underlying practice is not careless. Throughout this referral, inference is separated from observation, testimony is identified as testimony, sources are weighted and their weaknesses stated, figures are presented with their limitations, and points the Coalition cannot prove are put as questions for the authority rather than as assertions. Where the evidence cut against the Coalition's own position it has said so — see Annex A, paragraph 7, and section B.0 of the parallel referral.

5.5 THE COALITION EXPLAINS THE CONNECTION BETWEEN ITS MANNER AND ITS FINANCES BECAUSE THE TWO ARE NOT SEPARABLE. It takes no money from anyone — no donations, no bounties, no clients, no sponsors. That refusal is what makes the bluntness possible: an organisation with revenue to protect must moderate what it says about the parties it depends on. Having nothing to protect, the Coalition has nothing to moderate.

It is also the reason the Coalition continues to exist. There is no other engine. The work is done because it is done; it stops when the people doing it stop.

5.6 The authority need accept none of this. It is stated so that the tone of the Coalition's public work is not read as a measure of the care taken with the material now before it.

6. WHAT THE COALITION IS PROVIDING, IN ITS OWN WORDS

Information, research and observation.

Nothing is asserted as a finding that the Coalition has no standing to make. Where something is inferred, the referral says so. Where something rests on testimony, the referral says whose and with what limitation. Where the Coalition cannot answer a question, it says that too, and identifies who can.

The Coalition seeks no remedy, no payment, no acknowledgement and no outcome for itself or for any individual. It asks only that the questions set out in the referral be put to Valve Corporation by a body with the power to compel an answer.

CLOSING NOTE — TO WHOEVER IS CARRYING THIS FORWARD

We want to thank whoever gets this material to where it needs to go. It's probably not going to be a quick trip. Valve has deep pockets and Taylor Wessing charges by the hour — that combination is specifically designed to make people like you give up before they reach the finish line.

We know what we're doing. We know who we're writing about. Valve built us — how could we not understand them?

PhishDestroy has no conflict with Valve. We blocked the only scammer ring of that scale we've come across — we didn't go looking for a fight with Valve. It just turned out that every road led back to them. Not a conflict. Just topology.

Valve cannot resolve the PhishDestroy situation because there is nothing to resolve. We have no relationship. The data about their enrichment schemes and overflow profits is largely public — you just had to spend enough time to see it. Think of it as a success encyclopedia: "How to Not Follow Sanctions So That Russian Hackers Can't Pirate Our Free Games (The Paid Ones They Won't Pirate Anyway)." You get the vibe.

  • We don't need authorship.
  • We don't need attribution.
  • We don't need a win.

We need someone with actual authority to ask Valve the questions that are already sitting in this referral, with the power to require an answer.

That's it. That's the whole ask.

Cases will live at:
https://steamdestroy.eth/
https://steamdestroy.eth.limo
(currently broken — will fix when needed)

We'll be at:
https://phishdestroy.eth.limo/
https://phishdestroy.eth/

Additional editorial notes
┌─────────────────────────────────────────────────────────────────────────┐
  │  THE DEAL (open offer, no lawyers needed)                               │
  │                                                                         │
  │  If you want the domain gone:                                           │
  │  let your IT law professionals calculate its price. Take your time —    │
  │  it is a rare asset: the only website in the world whose purchase       │
  │  changes nothing, because everything on it already lives on IPFS,       │
  │  in regulator inboxes, and in archives we do not control.               │
  │                                                                         │
  │  50% of whatever you pay goes to the SEAL Foundation                    │
  │  (securityalliance.org) — people who do volunteer security work         │
  │  professionally and publish it for free. We are not affiliated with     │
  │  them and they did not ask for this; we name them as the public         │
  │  standard of what real volunteers look like — the standard your own     │
  │  volunteer moderators and outsourced support failed, publicly,          │
  │  before you had to remove them. You know the scandals. So do we.        │
  │                                                                         │
  │  The rest buys the community coffee while we keep publishing.           │
  │  That is not a settlement offer. It is a demonstration of what          │
  │  money can't reach: the domain is the maximum Valve can obtain,         │
  │  and obtaining it obtains nothing. The referrals continue.              │
  │  The mirrors continue. Part 3 continues.                                │
  └─────────────────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────────────────┐
  │  ONE ACTUAL RULE (yes, just one)                                        │
  │                                                                         │
  │  Access from OFAC-sanctioned jurisdictions is prohibited. That is a     │
  │  matter of territory and law — not of nationality and not of people.    │
  │  Changing your Steam region does not change your physical location      │
  │  or your legal status. No loopholes.                                    │
  └─────────────────────────────────────────────────────────────────────────┘