Half-Life 2 Source Code Leak

A post to the Halflife2.net Forums by Gabe Newell finally has a comment on the leaked Half-Life 2 source code, brought to the world's attention by Gamer's With Jobs and Slashdot. Here's the deal:
Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, helpvalve@valvesoftware.com. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.

Gabe
View : : :
329 Replies. 17 pages. Viewing page 6.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older
229.
 
Re: No subject
Oct 3, 2003, 14:43
Re: No subject Oct 3, 2003, 14:43
Oct 3, 2003, 14:43
 
Isn't most, if not all of what Valve is doing available via white papers/source already on the internet?

228.
 
Re: No subject
Oct 3, 2003, 14:16
Re: No subject Oct 3, 2003, 14:16
Oct 3, 2003, 14:16
 
C.S. 2.0 will be neither a retail product nor a free download. It will be a pay per month, hence the rage.

227.
 
Re: No subject
Oct 3, 2003, 14:06
Re: No subject Oct 3, 2003, 14:06
Oct 3, 2003, 14:06
 
Is counterstrike 2.0 retail or a free download?

226.
 
No subject
Oct 3, 2003, 13:57
No subject Oct 3, 2003, 13:57
Oct 3, 2003, 13:57
 
Look all the good hacks, like aimbots and wallhacks are done in DX or OGL they do not use the game's coding. So cheating and hacking is a non-issue, any game code dependant hack is easily thwarted with just minor updates.

The absolute worst thing will be that smaller companys who cannot affored the 500,000 liscenese fee to use Source will be able to take advantage of some of its features. I'm sure Source's source will end up an unofficial guide at how to program video game engines when all this is said and done. There are only three big names in the engine market, Valve, Epic, and John Carmack. We know Jhonny isn't going to need to look over the HL2 code since he's got very little to learn from it. So that leaves Epic, but I seriously doubt they want to touch this with a 10 foot pole. I'm sure they will have some "innovations" that will just be coincedentaly close in time to this leak.

That leaves all the other smaller companys out there who liscense engines, or the even smaler companys that have to craft thier own. I predict those smaller companys might be willing to risk getting the HL2 so they can barow ideas, while the companys that can affored to pay out for liscense will avoid it like the plague.

So, in english, Valve will have more competition but just due to the nature of the beast its unlikely to be devastating to them.

The game will still be out in november/december.
The game will have online cheats regardless.
The game will be bought by everyone and jesus too.
The smaller game companys will benifit from the code.
Epic might be willing to risk a bit to learn from it.
No game will be sold using the source code in full or even verbatim.


So stop sensationalizing this whole fucking thing and realize that while Valve will lose some money they are no where near a sinking ship. Counter Strike 2.0 alone will recoup thier losses, not to mention all you analy die hard fans.

"I'm too much of a narcisist to really hate stupid people."
225.
 
Re: Half-Life 2 Source Code Leak
Oct 3, 2003, 13:38
Re: Half-Life 2 Source Code Leak Oct 3, 2003, 13:38
Oct 3, 2003, 13:38
 
There's also the (false) sense of security people get with MS products. But what people don't seem to realize is whatever the majority of people use for software, is what the hackers of the world will tailor their apps towards. (In this case, MS apps.)

Also, most companies don't use POP email. For example, we have Lotus administrated email. Its not done via POP or SMTP... but something more in the line of remote folders.

Right now, the MOST common accepted business-class email systems (not clients, but WHOLE systems) are either Lotus Notes or Microsoft Outlook (not-express).

"Space. It seems to go on and on forever. But then you get to the end and a gorilla starts throwing barrels at you."
-Fry, Futurama
224.
 
Re: Half-Life 2 Source Code Leak
Oct 3, 2003, 13:19
nin
Re: Half-Life 2 Source Code Leak Oct 3, 2003, 13:19
Oct 3, 2003, 13:19
nin
 
except why the hell do you use outlook? Mozilla Thunderbird offers most basic needs with nightly builds.

You just answered your own question. Most people don't want to fool with nightly builds of an email client. I'm not knocking Thunderbird, but people want one version that works.

There's also the (false) sense of security people get with MS products. But what people don't seem to realize is whatever the majority of people use for software, is what the hackers of the world will tailor their apps towards. (In this case, MS apps.)

A lot of the startup Valve crew coming from MS doesn't help, either...

Supporter of the "A fredster By Any Other Name Is Still The Same" fan club.

http://www.hybridsoundsystem.com/
223.
 
Half-Life 2 Source Code Leak
Oct 3, 2003, 12:04
Half-Life 2 Source Code Leak Oct 3, 2003, 12:04
Oct 3, 2003, 12:04
 
Explains the Sept. 30 release miss. Sucks for the rest of us. This also explains why Gabe was so easily angred. I mean damn, the pieces of the puzzle are starting to fall into place, except why the hell do you use outlook? Mozilla Thunderbird offers most basic needs with nightly builds.

www.mozilla.org

MooMoo

This comment was edited on Oct 3, 12:05.
222.
 
Re: round up the usual suspects
Oct 3, 2003, 11:47
Re: round up the usual suspects Oct 3, 2003, 11:47
Oct 3, 2003, 11:47
 
or at least their forums to vBulletin

221.
 
Re: Bad news
Oct 3, 2003, 11:35
Re: Bad news Oct 3, 2003, 11:35
Oct 3, 2003, 11:35
 
"Genius! You ever stop and think that they're making games FOR WINDOWS?? It might make sense to run WINDOWS then, eh?"

no, it doesnt make sense. As I said earlier, windows is unsafe. I program for windows and I program on a unix box. Odd eh? Ineptitude has led to the source being distributed. Source should *not* live on an outside facing machine. Test versions should *not* live on an outward facing system. The only thing that should live there is stuff you are using there and then, after usign it then sanitize it. If you need to test online stuff then build your own network and test it on a pseudo internet. If you need to simulate an internet connection then throttle your switch to 512k etc!

Never argue with an idiot. They will drag you down to their level and beat you with experience.
220.
 
Re: hmmm
Oct 3, 2003, 11:30
Re: hmmm Oct 3, 2003, 11:30
Oct 3, 2003, 11:30
 
Some crops are lively.
This comment was edited on Oct 17, 01:54.
219.
 
Re: Bad news
Oct 3, 2003, 11:13
Re: Bad news Oct 3, 2003, 11:13
Oct 3, 2003, 11:13
 
Ya by the time i got to the download thread 14,986 people had downloaded the source from JUST that location. WOW. There is no turning back on the code. Its time for damage control.

218.
 
ATI programmer's name in Half Life code
Oct 3, 2003, 11:11
ATI programmer's name in Half Life code Oct 3, 2003, 11:11
Oct 3, 2003, 11:11
 
http://www.theinquirer.net/?article=11923

guess no one found any Nvidia programmers names in there...

217.
 
Bad news
Oct 3, 2003, 11:02
Bad news Oct 3, 2003, 11:02
Oct 3, 2003, 11:02
 
This is the worst gaming news since Looking Glass folded. I could care less about cheaters, besides they probably can make changes to fix that, or how long HL2 will be delayed (c'mon people, grow up!), but the loss of this incredibly valuable intellectual property is staggering. They will still be able to license their engine out--no game developer is going to use stolen code for their product--but unscrupulous developers making their own engines can now make a product to compete with Source at a fraction of the cost. What Valve has lost with this is its competetive edge.

It staggers me, I mean my mind BOGGLES, that there are people who actually use Outlook! My god, it's unbelievable.

Edit: Just read that maybe this involved their ENTIRE source code tree, including Havoc code and other proprietary licensed technology. People, Valve could get SUED and go out of business.
This comment was edited on Oct 3, 13:07.
216.
 
round up the usual suspects
Oct 3, 2003, 10:53
round up the usual suspects Oct 3, 2003, 10:53
Oct 3, 2003, 10:53
 
looks like they have some suspects-

http://www.halflife2.net/forums/showthread.php?s=&threadid=10781&perpage=15&pagenumber=1

if u check www.*****.com, seeing the fingers pointed at em, these kids are now hosting the hl2 source code for d/ling on their site. i hope the fbi or other hackers get em soon. i mean, u can hack the CIA, banks etc, u don't hack a game company- it's a game company for christ sake, they make games! lol wtf u hack a game company for?

215.
 
Re: What the hell?
Oct 3, 2003, 10:33
Re: What the hell? Oct 3, 2003, 10:33
Oct 3, 2003, 10:33
214.
 
Re: What the hell?
Oct 3, 2003, 10:30
Re: What the hell? Oct 3, 2003, 10:30
Oct 3, 2003, 10:30
 
I know, I know... Valve is going to start charging a monthly subscription fee for Steam pretty soon. Well, when they do... don't pay. It's that simple. If enough people don't pay, Valve will shut down Steam.

well Mr.Insideinformation

Valve has stated like 15 times now, that its OPTIONAL to subscribe to steam for 10$month INSTEAD of buying the game, either that , or you can buy games (50$ one time) and play free like you always have.

BicycleRepairMan
213.
 
Re: What the hell?
Oct 3, 2003, 10:29
Re: What the hell? Oct 3, 2003, 10:29
Oct 3, 2003, 10:29
 
"Valve probably has a bunch of computers, if they only separated the development computers from the internet completely (by actual cables and not software)."

Yeah, I agree. Fragment your friggin network man. Have one LAN not internet connected for Dev and one LAN for web surfing communicating. If Gabe had the full source tree on his PC then shame on him. I do feel bad for valve, but use some common sense, jeez.

212.
 
Re: What the hell?
Oct 3, 2003, 10:19
Re: What the hell? Oct 3, 2003, 10:19
Oct 3, 2003, 10:19
 
Genius! You ever stop and think that they're making games FOR WINDOWS?? It might make sense to run WINDOWS then, eh? Not to mention the fact that they have to interact with a whole bunch of other people and businesses around the world - most of whom use WINDOWS. *sigh* I'm also willing to bet that YOU use Windows!

The people trying to blame this on Valve need to take a look in the mirror - their fanaticism is what has bred this sort of attack!

--Noel "HB" Wade
Ex-Sierra / WON.net employee / Level-Designer

Well, Using windows is one thing, but the fact is its prime target for attackers, whether tou like it or not. Valve probably has a bunch of computers, if they only separated the development computers from the internet completely (by actual cables and not software). and just used another for communicating with fans etc. This wouldnt have been possible. Also , not using outlook or IE is also good advice, not only because they actually "F#¤KIN STINK!!" but also because they are the most used, and therefore the most attacked.

And always listen to movie qoutes.

If there is one thing in this world I hate, it is an unlocked footlocker! If it werent for idiots like you there wouldnt be any theivery in this world now, would it!!
-Gunnery Sergeant Hartman, Drill Instructor



BicycleRepairMan
211.
 
Re: You reap what you sow.
Oct 3, 2003, 10:14
Re: You reap what you sow. Oct 3, 2003, 10:14
Oct 3, 2003, 10:14
 
STEAM is just smoke & mirrors for Valve to quadruple their money. BUNCH OF GREEDY FUCKS!!!

You're paying for Steam? Yeah, I'd be upset too. Most of us are getting it for free.

I know, I know... Valve is going to start charging a monthly subscription fee for Steam pretty soon. Well, when they do... don't pay. It's that simple. If enough people don't pay, Valve will shut down Steam.

Personally, I'm going to wait and see what Steam offers and how much they want to charge for it. If it sounds like a good deal, I'll sign up. If not... plenty of other games out there. Plenty of free stuff on the internet. I don't blame Valve for trying to make money. Thats what companies are in business for, remember? To make a profit?



I'm sprawled across the davenport of despair.
It's the land of the brave, and the home of the free, where the less you know the better off you'll be.
210.
 
the future..
Oct 3, 2003, 10:14
the future.. Oct 3, 2003, 10:14
Oct 3, 2003, 10:14
 
so will every game from this point forward be accused of using "source" source?

scenario:
New Game "X" revolutionary "xyz" feature..
Valve:"that was our technology"
no doubt game devs are clamouring for a peek and have already d/l'ed their 48Mb of infamy...
smells like the SCO/Linux/IBM situation...

329 Replies. 17 pages. Viewing page 6.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older