Half-Life 2 Source Code Leak

A post to the Halflife2.net Forums by Gabe Newell finally has a comment on the leaked Half-Life 2 source code, brought to the world's attention by Gamer's With Jobs and Slashdot. Here's the deal:
Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, helpvalve@valvesoftware.com. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.

Gabe
View : : :
329 Replies. 17 pages. Viewing page 7.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older
209.
 
Re: You reap what you sow.
Oct 3, 2003, 10:02
nin
Re: You reap what you sow. Oct 3, 2003, 10:02
Oct 3, 2003, 10:02
nin
 
a good post on the Implications of the leak-
http://www.halflife2.net/forums/showthread.php?s=&threadid=10894

That's an excellent summary, fraggleroc.

Supporter of the "A fredster By Any Other Name Is Still The Same" fan club.

http://www.hybridsoundsystem.com/
208.
 
Re: You reap what you sow.
Oct 3, 2003, 09:50
Re: You reap what you sow. Oct 3, 2003, 09:50
Oct 3, 2003, 09:50
 
Bites the hands that feed.

I don't know about you, but it was quite an experience to have played thru Half-life the first time when it came out. And it's mods have let me enjoyed the game a further 5 years or so.

Well, you can make that kinda money too if you have the Skillz in making a great game. Apparently you don't. So stick your sorry, jealous, poor ass somewhere else.

a good post on the Implications of the leak-
http://www.halflife2.net/forums/showthread.php?s=&threadid=10894


207.
 
Re: You reap what you sow.
Oct 3, 2003, 09:41
Re: You reap what you sow. Oct 3, 2003, 09:41
Oct 3, 2003, 09:41
 
bid:
Try not to blanket the "gaming community" with the assumption that they share your communist views.

___________________________________________
My Blog = http://the.postingstation.com
206.
 
Re: You reap what you sow.
Oct 3, 2003, 09:35
Re: You reap what you sow. Oct 3, 2003, 09:35
Oct 3, 2003, 09:35
 
"Normally I'd be outraged by such an incident! However Valve's current reputation as a greedy money hungry corporation with dubious business practices has caused them to fall our of favor with the gaming community."

EXACTLY!!!!!!

STEAM is just smoke & mirrors for Valve to quadruple their money. BUNCH OF GREEDY FUCKS!!!

205.
 
You reap what you sow.
Oct 3, 2003, 09:19
B M
You reap what you sow. Oct 3, 2003, 09:19
Oct 3, 2003, 09:19
B M
 
Normally I'd be outraged by such an incident! However Valve's current reputation as a greedy money hungry corporation with dubious business practices has caused them to fall our of favor with the gaming community.

204.
 
Re: Anyone wondering...
Oct 3, 2003, 09:16
Re: Anyone wondering... Oct 3, 2003, 09:16
Oct 3, 2003, 09:16
 
That almost seemed an intelligent and valid argument. But, you sir, morally, are an idiot.


203.
 
Re: Anyone wondering...
Oct 3, 2003, 09:08
Re: Anyone wondering... Oct 3, 2003, 09:08
Oct 3, 2003, 09:08
 
The arguements and my rebuttles:

1.)"Valve is screwed because no one will liscence" - This is a silly arguement if I was going to put time developing a game I hoped to sell I sure as hell wouldn't do it on code which could easily be determined stolen. Some companies might take some of Valve's idea's and use them in their own projects. But once you start using Valve's code it gives them more incentive to liscence all of Source.
2.) Cheating - There may well be more cheats. Unfortunate but true. As far as I can tell Steam is simply a method of preventing cheating, so as far as Valve is concerned this is all for the best. "Keep those monthly payments comming!"
3.) "We owe Valve so this is terrible" - We do, HL was a great game for $50-$60. No denying it, but the major popularity came from Valve essentially exploiting the mod community. All modders want is a large possible install base and untill there are free engines available they will continue to use the largest engine available. HL2 takes this for granted with the introduction of Stream and monthly payments. Their business model turned from "Good" to "Evil", watch as public oppinion turns from "Positive" to "...".
4.) I look at the whole thing as the first chance for a mod team to develop a game complely for free with a current engine. If games are not created and released through the warez distribution system it will be a shame. Valve gets 50-250k to liscence their engine, I think they should get approximatly that much if someone releases a free (In both ways. [I.E. Beer and Open Source.]) modification. If you want to get up in arms about it feel free to pay them $50 when you download any free games which come out, if they make it possible I intend to.
5.) Security stuff - Let me just reiterate here, Valve did nothing wrong.
6.) Why only the source? - If hackers had access to all the game resources (Which they almost certainly did) why only release the source? It comes down to a hacker mentality that people are inherently good and therefore deserve access to almost all information. Releasing just the source means it's not a pirate release but an opportunity for the internet community to develop using these tools. People can now develop their own games based upon this while not hindering Valve's ability to release a quality product. If everyone did this Valve would indeed be thrown back in to the melee of competing game engines but the outcome would be better products all around. After the Steam fiasco (They are essentially getting people to pay, monthly, anti piracy servers.) I don't think we owe Valve enough to cry over a general improvement in gaming to their minor detriment. From now on every game that is released should have an engine and netcode equal to HL2. So Kudos.

202.
 
Re: hmmm
Oct 3, 2003, 09:02
Re: hmmm Oct 3, 2003, 09:02
Oct 3, 2003, 09:02
 
"Where's the crime? If YOU got offered money and/or a real job, for a "hobby" project you did, wouldn't you take it?
"

If I had any inkling that it might be bastardized like TFC?

No. You couldn't pay me enough money to take a good concept, and turn it to crap. Money is not the ultimate peak of my life, maintaining my lifestyle and happiness about every decision I make is.

Before Valve, nobody went into mod-making thinking they were going to make any money off of it, and anyone still doing it would be wise to feel the same way. Great mods don't come from being paid, they come from doing something you love doing, regardless of whether you're getting paid. You can pay a crap team for their mediocre mod...it's not going to make it any better.

201.
 
Quake Anyone?
Oct 3, 2003, 09:00
Quake Anyone? Oct 3, 2003, 09:00
Oct 3, 2003, 09:00
 
This whole incident seems all to familiar to what happened to Quake. Before the game was even released, someone had given someone a password to a secured section of their FTP, and they got a hold of the quake source. It was then released between some people (not as many people compared to now since distribution methods and the internet itself weren't as mature) and some linux gurus got a hold of it. They did what they needed to do, and released a version of quake for linux before Id had even released the windows version. This is evidence for anyone that says that this whole thing will kill Valve and Half Life 2. This same thing happened to quake, and look where quake went, and where it still is today.
On another note, I gurantee that this also won't affect the way we play Half Life 2 online, as far as dealing with cheaters and such. Valve was fully aware of this problem, and more than likely assumed this would happen before anyone of us knew about it. Hell, it was stolen on the 19 of September. That was a full 13 days before we even knew about it. They aren't stupid, they will modify the crucial parts of the source so that once the game is released, the old source will be worthless. Oh well, I know that I will go out and buy this game the day its released no matter what happens between now and then. My father once said, (actually always) "Life's a bitch, then you die."

200.
 
200 comments!
Oct 3, 2003, 08:57
200 comments! Oct 3, 2003, 08:57
Oct 3, 2003, 08:57
 
Wow! I am 200!

Avatar 571
199.
 
GNU?
Oct 3, 2003, 08:54
GNU? Oct 3, 2003, 08:54
Oct 3, 2003, 08:54
 
alas, maybe it will go GNU and we'll see it listed on SourceForge...

198.
 
Buffer overflows and DDOSs
Oct 3, 2003, 08:46
Jim
Buffer overflows and DDOSs Oct 3, 2003, 08:46
Oct 3, 2003, 08:46
Jim
 
I think it is time for a class-action suit against MS. This shit has caused so much damage to the economy that MS needs a good slap in the face to say FIX YOUR #$%$@#$& SOFTWARE.

And to those saying Valve deserved it, shut the $#%@ up.

This comment was edited on Oct 3, 08:55.
Jim
197.
 
Re: Weird...
Oct 3, 2003, 08:43
Re: Weird... Oct 3, 2003, 08:43
Oct 3, 2003, 08:43
 
I was going on the assumption that since Outlook was mentioned that the "source" was on a windows machine and there fore if the hacker had only tftp access or a form of ssh even maybe (ew) telnet it would be difficult to tar/zip/rar it up... what ever is out there is "release group" packaged nested in rar's and zips and how the "source" was originally gotten is still a mystery...
i wonder if Id is refraining from taking a peek?....

196.
 
Re: Direct Attacks, Maturity and Security
Oct 3, 2003, 08:34
Re: Direct Attacks, Maturity and Security Oct 3, 2003, 08:34
Oct 3, 2003, 08:34
 
Well said

195.
 
Re: Appoligies if this is posted
Oct 3, 2003, 07:31
Re: Appoligies if this is posted Oct 3, 2003, 07:31
Oct 3, 2003, 07:31
 
here is a fast chat someone had with myg0ts fearless leader:

Well, if it was a myg0t or maggot that got the source code then maybe it'll open up Valve's eyes on cheating. These assholes probably just want the source code so they can figure out how to cheat & hack the game and possibly its mods, nothing more. If you played CS with cheaters then you probably ran into them. If I was a game addict hacker and got that deep into Valve's servers, I'd just get a beta of HL2, not the source code. These jack-offs go to such lengths just to cheat, hack, and grief in games like CS that its beyond me that they have nothing better to do. These kids seriously need girlfriends.

This comment was edited on Oct 3, 07:41.
194.
 
Re: hmmm
Oct 3, 2003, 07:28
Re: hmmm Oct 3, 2003, 07:28
Oct 3, 2003, 07:28
 
Hbringer,

Its also DEFINITELY a business! Its there to make money

Which is EXACTLY the reason why I find the current prevailent attitude amongst game developers so repugnant. You're not providing a global cure to all forms of disease, you're just providing a product that some people want to buy, in order to make yourself some money.

And it seems that, a few exceptions noted, most game developers nowadays think that pissing off their customers is the best way to do so. Quite frankly, I'm amazed at the fact the gaming industry is still growing. With the ever increasing "Ship it now, patch it later, maybe" attitude, and the plain sheer arrogance found in a lot of companies, why people keep buying so many games is a damn good mystery.

many game developers would still develop - just on a smaller scale as they couldn't afford to do it as a "day job"

Which might actually not be a bad idea, if you ask me. Every writer in the world has to start out that way (believe me, I know), and apart from Stephen King, no writer in the world bitches at his customers. Remember that "biting the hand that feeds you" bit?

Creston


Avatar 15604
193.
 
Oh ya
Oct 3, 2003, 07:25
Oh ya Oct 3, 2003, 07:25
Oct 3, 2003, 07:25
 
Put your development material in a DMZ zone with no connection to the net. I worked for IBM, Kodak, Lucent and ReadRite, they had enough sense to put there development code in an isolated network and used seperate machines on another network for email corispondence and such. You guys are security idiots no wonder Half Life is the most haxed game of all time.. what idiot is running that place?? I need a job and some easy money for not knowing how to do it... cant hack an isolated network unless you break into the building.... Wake up this is Standard procedure in my experience.


Sean

192.
 
LOL
Oct 3, 2003, 07:04
LOL Oct 3, 2003, 07:04
Oct 3, 2003, 07:04
 
I Guess someone got STEAMED at them.... Maybe that Krap Steam messed with some haxz Counter Strike game??? HelpValve put STEAM on your Systray to Live forever.... Like HL2 wont take enough of our system resourses, without steam... I guess there getting treated like MicroScum and getting attacked for there "community spirit".. If there such the part of the community why do they ignore the million complaints about STEAM and the Communities desire not to have another system resourse LEACH like steam forced on us like some Lame azz AOL or Microsoft marketing sceem. Valve is about $$$$$$$ so get off the Fn community soapbox your standing on Gabe and say it like it is... "We want your $$ and do not give a F!@# what the community wants". I already canceled my preorder of HL2 after the fourth installation of Steam proved to be a complete waist of my time. Plenty of games have content update as part of the game and do not need another piece of software to accomplish it. The only not so original thing Steam offers is another way to get at our money and another "HOOK" into us and our rigz. I hope HL2 goes as well as STEAM and Valve Chokes on there arogance.

Sean

191.
 
Re: Appoligies if this is posted
Oct 3, 2003, 06:54
Re: Appoligies if this is posted Oct 3, 2003, 06:54
Oct 3, 2003, 06:54
 
here is a fast chat someone had with myg0ts fearless leader:

http://www.counter-hack.net/content.php?page=interview_%5Bmyg0t%5Dg0d

just a kid. just a little punk kid. what a waste.

----------------------------------------------------------------------
PAH!
----------------------------------------------------------------------
"Both the “left” and the “right” pretend they have the answer, but they are mere flippers on the same thalidomide baby, and the truth is that neither side has a clue."

- Jim Goad
Avatar 10137
190.
 
Re: Appoligies if this is posted
Oct 3, 2003, 06:50
Re: Appoligies if this is posted Oct 3, 2003, 06:50
Oct 3, 2003, 06:50
 
Good luck 28 pages of DRAMA

Fucking myg0t clan. They are the bane of all gaming, especially HL's and its mods.

329 Replies. 17 pages. Viewing page 7.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older