URL in a browser. This was the second serious vulnerability of gaming-related software following a recent problem with Ubisoft's own game distribution platform Uplay. German IT platform Heise online recommended strict separation of gaming and sensitive data, for example using a PC dedicated to gaming, gaming from a second Windows installation, or using a computer account with limited rights dedicated to gaming. In July 2015, a bug in the software allowed anyone to reset the password to any account by using the "forgot password" function of the client. High-profile professional gamers and streamers lost access to their accounts. In December 2015, Steam's content delivery network was misconfigured in response to a DDoS attack, causing cached store pages containing personal information to be temporarily exposed for 34,000 users. In April 2018, Valve added new privacy settings for Steam users, who are able to set if their current activity status is private, visible to friends only, or public; in addition to being able to hide their game lists, inventory, and other profile elements in a similar manner. While these changes brought Steam's privacy settings inline with approaches used by game console services, it also impacted third-party services such as Steam Spy, which relied on the public data to estimate Steam sales count. Valve established a HackerOne bug bounty program in May 2018, a crowdsourced method to test and improve security features of the Steam client. In August 2019, a security researcher exposed a zero-day vulnerability in the Windows client of Steam, which allowed for any user to run arbitrary code with LocalSystem privileges using just a few simple commands. The vulnerability was then reported to Valve via the program, but it was initially rejected for being "out-of-scope". Following a second vulnerability found by the same user, Valve apologized and patched them both, and expanded the program's rules to accept any other similar problems in the future. The Anti-Defamation League published a report that stated the Steam Community platform harbors hateful content in April 2020. In January 2021, a trading card glitch let players generate Steam Wallet funds from free Steam trading cards with bots using Capcom Arcade Stadium and other games, resulting in the game becoming one of the statistically most played titles. User interface and functions Since November 2013, Steam has allowed for users to review their purchased games and organize them into categories set by the user and add to