GameIndustry.eu Logo

2019 2017 2019 2019   2018  2023   2015 
GameIndustry.eu /  Blog /
English Blocking Steamcloud Uploads


Blocking Steamcloud Uploads

Published: 24.01.2023 Edited: 13.02.2023

Steam
The Steam Cloud automatically stores data of its own games on the Steam servers.

The cloud is a function of Steam that accompanies player from the beginning in the background and many users, especially new ones do not even know that there is something.

A significant disadvantage of this automatic solution for data uploads is that users have neither control over uploaded content nor a function to delete the content. As a rule we can say: What is gone is gone, because a deletion of uploaded data is not even planned. Data in a cloud without full access no longer belongs to us.

If savegames are corrupt and synchronized by the cloud, it may be that savegames are destroyed and players have to deal with it.

The amount of data is also not insignificant. Settings and save data can sometimes consume 50MB and more for each game and Steam's cloud syncs are active even despite disabled settings.

To prevent the client from making unauthorized uploads, domains can be blocked easily.




The settings provided to us in Steam itself are marginal at best and do not include the cloud information for uploading user-generated content such as screenshots or videos that are uploaded e.g. in chat or in general. Also missing information are which providers get our data, because the "Steamcloud" consists of different servers that are located all over the world.


Steamcloud Settings


What services are used for the Steamcloud?


  • Google Cloud Storage by Google, LLC
  • Microsoft Azure Blob Storage by Microsoft Corporation
  • Amazon Simple Storage Service by Amazon.com, Inc.
  • Oracle Cloud by Oracle

What happens when data no longer belongs to oneself, shows a report from Oracle , which was blown up in August 2022 when Oracle was catched by selling data of 5 billion people for a price of 42.4 billion.

Uploads of savegames and configuration files


Valve provides players a simple view of the uploaded content in Steam.

You can reach the page in the Steam client via Help » Steam Support » My Account » Data of your Steam Account » Steam Cloud

After login alternatively under the link: https://store.steampowered.com/account/remotestorage

For the example, data from Dead Cells is used.

Steamcloud Dead Cells


The "Folder" should actually show the location where the storage structure can be found, but Steam has its own labels or they are missing as here, completely and apart from downloads per file players have no possibility to delete. Also a function to mark all files to load everything in one go... missing.

Uploads in Steamchat


Content uploaded via the Steam chat will be sent to Google as well as Akamai at the same time. The structure of Akamai Technologies, represents the primary platform of Steam. The upload itself runs via the steamwebhelper.exe.

 Ipv4 - 142.251.36.48

PUT steamcloud-ugc.storage.googleapis.com/33/7D/21/09/744350/06F_7_21F0D176_F551A_1.dat?GoogleAccessId=1034790105812-5bdngop952i7sjvk3q8dm3nur4tlg4vb@developer.gserviceaccount.com&Expires=1674500840&Signature=es%2FWVOSliW1tkURcCFkuoLm%2FsD%2ByyxSIcqN3HnESZiXRwHUJ3Gw3WkS%2BjA0hcDKSsHtU1sTMKop82K%2F6gFB8RvlzNm1PmdXmx1KIPyfhSqYyR6TE16eJ6KYIZmCwrU8HeahisUk%2FKWWWBvD%2BXlJ2gRTsjnyRQrph%2BhTEmZuOtzk%3D HTTP/1.1

Host: steamcloud-ugc.storage.googleapis.com
Connection: keep-alive
Accept: application/json, text/plain, */*
Content-Disposition: inline; filename*=UTF-8''4837803.225_34517996%402x.png;
Content-Type: image/png
Origin: https://steam-chat.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 10.0; en-US; Valve Steam ClientUI/default/1666144119; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://steam-chat.com/chat/clientui/?l=english&cc=DE&build=1666144119&origin=https%3A%2F%2Fsteamloopback.host
Accept-Language: en-US,en;q=0.9,de-DE;q=0.8,de;q=0.7
Accept-Encoding: gzip, deflate
Content-Length: 13514

*image/file here*


 Ipv4 - 23.55.163.61, 23.55.163.57

https://steamuserimages-a.akamaihd.net/ugc/2008076624942028058/24907F203E99E1980DE9B4C05E4AA3EEF2D2F40B/

GET steamuserimages-a.akamaihd.net/ugc/2008076624942028058/24907F203E99E1980DE9B4C05E4AA3EEF2D2F40B/ HTTP/1.1
Host: steamuserimages-a.akamaihd.net
Connection: keep-alive
Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 10.0; en-US; Valve Steam ClientUI/default/1666144119; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://steam-chat.com/chat/clientui/?l=english&cc=DE&build=1666144119&origin=https%3A%2F%2Fsteamloopback.host
Accept-Language: en-US,en;q=0.9,de-DE;q=0.8,de;q=0.7
Accept-Encoding: gzip, deflate


Blocking of Steam Cloud


In addition to the official settings for switching off the cloud in the Steam client, there is the possibility to control the behavior via your own filter entries. This has the advantage that

  • Servers are to be controlled individually
  • New users can directly switch off the behavior before starting the client
  • Users have more control
  • Valve does not get any user settings made in the Steam client

Addressed servers differ according to the player location. The entries can be copied if necessary and transferred directly to your hosts or list for a used DNS resolver.

 0.0.0.0 steamcloud-br.s3.dualstack.sa-east-1.amazonaws.com
0.0.0.0 steamcloud-eu-ams.storage.googleapis.com
0.0.0.0 steamcloud-eu-fra.storage.googleapis.com
0.0.0.0 steamcloud-finland.storage.googleapis.com
0.0.0.0 steamcloud-saopaulo.storage.googleapis.com
0.0.0.0 steamcloud-sg.s3.dualstack.ap-southeast-1.amazonaws.com
0.0.0.0 steamcloud-singapore.storage.googleapis.com
0.0.0.0 steamcloud-sydney.storage.googleapis.com
0.0.0.0 steamcloud-taiwan.storage.googleapis.com
0.0.0.0 steamcloudams.blob.core.windows.net
0.0.0.0 steamcloudams2.blob.core.windows.net
0.0.0.0 steamclouddub.blob.core.windows.net
0.0.0.0 steamcloudfrankfurt.blob.core.windows.net
0.0.0.0 steamcloudlrsuswest.blob.core.windows.net
0.0.0.0 steamcloudsaopaulo.blob.core.windows.net
0.0.0.0 steamcloudsg.blob.core.windows.net
0.0.0.0 steamcloudsweden.blob.core.windows.net
0.0.0.0 steamclouduseast.blob.core.windows.net
0.0.0.0 steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com
0.0.0.0 steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com
0.0.0.0 objectstorage.eu-frankfurt-1.oraclecloud.com
0.0.0.0 objectstorage.eu-amsterdam-1.oraclecloud.com
0.0.0.0 objectstorage.eu-stockholm-1.oraclecloud.com
0.0.0.0 blob.mwh04prdstr01a.store.core.windows.net
0.0.0.0 steamcloudmumbai2.blob.core.windows.net
0.0.0.0 steamcloud-mumbai.storage.googleapis.com

Recently, data is also uploaded directly to an Ipv4 address, so that host entries no longer count. In this case, the Ipv4 must be blocked via a firewall

 http://208.64.201.182:80/depotupload/13118344279428356997/manifest
http://208.64.201.182:80/depotupload/13118344279428356997/chunk/0341a27f8133d8d7e7bfb76cba5cc4f46fdfd43c/2911502488

The upload of user-generated content such as images in the chat, screenshots, avatars, photos or other things must be considered separately, because Valve has implemented an external filter and analysis system for external content over time. Google Vision AI and Amazon Recognition are used for this purpose.

Contentfilter with Google Vision and Amazon Recognition


In the case of Amazon, data security is not guaranteed in any way, because an article from 2018 shows that they sell data to authorities . At the time, the Amazon Ring surveillance systems were not even considered.

 0.0.0.0 steamcloud-ugc.storage.googleapis.com

Uploading personal data should generally be avoided.

Upload of data despite deactivated user settings


Finally, something that was briefly mentioned at the beginning. Despite deactivated settings, the Steam Client repeatedly uploads data and consults with various cloud servers.


The result is that the settings in the client are useless and the program behaves differently than it wants to believe.


 PUT /33/7D/21/09/7/0B5_3_11B94FAD_8FA12_2165.dat?GoogleAccessId=598232204044-21ru0k2ok6gr481gik0nb9qqksceup85@developer.gserviceaccount.com&Expires=1674841469&Signature=G0kPuJz6Cl508z6raYmetge41BUKinj%2FyGYM6SwWbf0zJodj3DVNxaDen5fT1pxgJVVpEJfPYyLEwQt9ck2evfVJLR2sZOESDmCVLqhpAUljJHqr7X%2Fx1p4nzdtm9z7shagAEQUubDEvpgAmiM1FKRAd%2B%2Fw%2Brrj1UZ%2FZrR%2BSCqE%3D HTTP/1.1
Content-Type: application/octet-stream
Content-Disposition: inline; filename*=UTF-8''serverbrowser_hist.vdf.zip;
Host: steamcloud-eu-ams.storage.googleapis.com
Accept: text/html,*/*;q=0.9
accept-charset: ISO-8859-1,utf-8,*;q=0.7
user-agent: Valve/Steam HTTP Client 1.0
Accept-Encoding: identity
Content-Length: 2171

steamcloud-eu-ams.storage.googleapis.com
steamcloud-eu-fra.storage.googleapis.com
steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com
steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com


An answer to the behavior came from the support employee Kal
Steam uses various connections to offer the basic functionality of Steam. Any active connections you see are part of the processing and fulfillment of whatever feature(s) you are using at that time.

As you know, the Steam Cloud can be toggled for individual games, or as a global Steam setting for all games.

When Steam Cloud functionality of a game is disabled, all progress that would normally be saved via the cloud will only be saved locally on the machine where the progress was made.

Valve
Kal

Followed by instructions on how to deactivate the Steamcloud in the Steam-Settings provided to us...

---

Are entries missing? Send them by contact form so that the list can be completed.

 

Your opinion is important – please leave a comment!

×

BB-Code Explanations

Here are the BB-Codes you can use:

  • [b] for bold text: [b]Text[/b] turns into Text
  • [i] for italic text: [i]Text[/i] turns into Text
  • [u] for underlined text: [u]Text[/u] turns into Text
  • [spoiler] for hidden Text: [spoiler]Hidden Text[/spoiler] turns into Hidden Text
  • [url] for hyperlinks: [url]http://example.com[/url] becomes a clickable link  
  • [url=link]text[/url] for named hyperlinks: [url=http://example.com]Visit me[/url] turns into Visit me  
  • [github] for GitHub links: [github]http://github.com/example[/github] turns into a  GitHub-Link

0 Comments