Half-Life 2 Source Code Leak

A post to the Halflife2.net Forums by Gabe Newell finally has a comment on the leaked Half-Life 2 source code, brought to the world's attention by Gamer's With Jobs and Slashdot. Here's the deal:
Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, helpvalve@valvesoftware.com. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.

Gabe
View : : :
329 Replies. 17 pages. Viewing page 15.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older
49.
 
No subject
Oct 2, 2003, 18:55
49.
No subject Oct 2, 2003, 18:55
Oct 2, 2003, 18:55
 
C'mon people, cut this shit out.

Its like celebirty gossip without the celebirties. "Ohh, I wonder what so-and-so will say!", "Oh man, Gabe has such bad security kekekeke"


48.
 
Thoughts
Oct 2, 2003, 18:53
Quboid
 
48.
Thoughts Oct 2, 2003, 18:53
Oct 2, 2003, 18:53
 Quboid
 
Valve must be really pissed right now but I'm wondering how bad this really is. OK, this sucks. This sucks for Valve and while I'm not too bothered about HL2, I've a lot of respect for those guys. Now, how will this impact things?

The CD-Key code is available so any cracker worth his salt can create any number of CD-Keys. Problem? No. This code is about a month old (or so someone slashdot said). The game is a couple of months away from release. No CD-Key that validates on the leaked code will work, that's beyond doubt.

Licensing - big money nowadays, although there is a lot of players at present (D3, UT Warfare, Lithtech, renderware, even Q3 and others). Still, big money. Will companies use it? Not in it's current form. If Valve get a sniff of copyright infringement, they'll be racing to their lawyers faster than the speed of sound because they'll want a high profile, big money victory (which they'd probably easily get) to disuade future attempts. What will happen is some developers will use ideas - graphical stuff, AI etc but nothing huge. Will they gain a lot from this leak? Yes. Will Valve loss a lot from this leak? I doubt it. I doubt anyone can take enough so that they'd decide against licensing Source (what an ironic name now) because of the legal issues. I'm sure HL3 will be considerably more advanced than HL2 so I can't see HL3 being hugely impacted. However, it will probably be somewhat impacted as this leak will bring a number of developers up to speed and some of them might stay up to speed. I doubt this will be significant compared to what HL2/HL3 will make Valve but still, it's something.

Warez - this is the source source, not the game. No data files = no game. Useless for gamers.

Cheating - this is the big one. This code leaked is at least 2 months away from the final code and builds with multiplayer cheats in will be useless. However, security through obscurity is a major part of gaming security as the server doesn't have the resources to do as much as we'd like. If people can see all around the source, that security will be gone. In the next month or 2 or 3 or 6 this will be changed as much as they can but I doubt they can change that much without delaying the game.

I think this will impact online cheating. It won't be huge and, frankly, I can't see online cheating in HL2 ever not being an issue so the damage is limited but that doesn't make it much better. I don't think this all sucks for Valve or for us as much as it would appear but it still sucks.

Cheers,
Quboid
Avatar 10439
47.
 
Re: Thanks ATI!
Oct 2, 2003, 18:48
47.
Re: Thanks ATI! Oct 2, 2003, 18:48
Oct 2, 2003, 18:48
 
Wouldn’t a firewall have stopped stuff without permission accessing the internet?

46.
 
Re: No subject
Oct 2, 2003, 18:48
46.
Re: No subject Oct 2, 2003, 18:48
Oct 2, 2003, 18:48
 
I can't wait to see what Penny Arcade will make of this! Maybe they'll make Gabe out to be a babbling moron... oh ah wait a second...hehehe. AH well thats what you get, stilly Gabe, blaming it on outlook, when in doubt call MS out.

45.
 
Hackers suck.
Oct 2, 2003, 18:47
45.
Hackers suck. Oct 2, 2003, 18:47
Oct 2, 2003, 18:47
 
BTW, Hump, nice one

I wonder how many "security holes" would be found in Unix/Linux etc. if they had 90% market share? Could it be that Windows is "less secure" simply because so many people use it, thus making it a very high profile target?

My personal experience with Linux in particular is that it is by far the easiest OS to hack, mostly because it's such a pain in the ass to keep up to date.

I always find it funny that the slashdot crowd jumps on MS immediately for not knowing some crack in the OS/software suite, instead of jumping on the asshole hackers that are responsible for the crime, and yes it is a crime.

Hacker logic taken to your house:
"I just threw the brick through your front window to show you it could be done. You shouldn't have glass windows, they are too easy to break. I'm a hero, not a crook!"

44.
 
No subject
Oct 2, 2003, 18:46
44.
No subject Oct 2, 2003, 18:46
Oct 2, 2003, 18:46
 
One thing for sure, anyone caught with a copy of this source code will probably have the law come down on them like a ton of bricks.

I think hackers will be few and far between in a few years, the laws are changing, anyone hacking now seems to get 3 years just for switching on their PC. Corporate hacking can get up to 15 years

43.
 
No subject
Oct 2, 2003, 18:42
43.
No subject Oct 2, 2003, 18:42
Oct 2, 2003, 18:42
 
Alright people, calm down.

1. I don't see why this should delay the release at all. Its not like someone destroyed the source-code. They just copied it. How does that affect Valvle? The delay was most likely (I'm guessing like 99% likelyhood) not caused by this, and neither will any future delay (if there are any), so just relax.

2. This didn't "destroy 5 years of work by a team of 30 poeple" or whatever. As I've said, the original source-code is still intact. So, it really wasn't that damaging to Valve.

3. This likely won't affect any potential licensing of Source for future games. No one will release a commercial game with pirated source-code. What it could do, and I hope it does, is allow people to use the Source engine for their own freeware projects. I have long been of the opinion that free-ware and independent games are at a disadvantage simply because they have to use crappier graphics engines, so they can't compete with the AAA games. If this changes that situation, all the better.

4. I don't think this really shows that Valve is incompetent or anything. If the CIA can be hacked, so can Valve. If someone is out to hack you, and they've got enough computer skills, there's not much you can do to stop them.

____

Aside from the sheer scope and importance of this, I don't think it will have any real-life consequences, or any negative ones anyway.

42.
 
Cheating.
Oct 2, 2003, 18:40
42.
Cheating. Oct 2, 2003, 18:40
Oct 2, 2003, 18:40
 
Hopefully Steam is robust/adaptable enough to deal with the cheating threat this poses.

As a side note- to all that were quick to blame Steam for the delay of Half-Life 2, I reiterate: frequently the situation is alot more complicated than what it looks like from the outside. Again, I'm not saying Steam wasn't a factor, but there seem to be other issues as well...

As for those that are blaming Valve devs for (using Windows/using Outlook/not cleaning their entire network), that is ridiculus. Would you blame a murder victim for their own death, because they forgot to lock the door? It might be unwise, but I think the blame lies soley on those people that are (fanatical/immature/obsessive) enough to hack Valve.

The Internet is full of stupid people... never underestimate the power of stupid people in large groups.
-_- ...

41.
 
Re: No subject
Oct 2, 2003, 18:36
41.
Re: No subject Oct 2, 2003, 18:36
Oct 2, 2003, 18:36
 
get used to it...
it only gets worse from here on in!

http://www.humanburger.com

40.
 
You sir are an idiot
Oct 2, 2003, 18:35
Gog
40.
You sir are an idiot Oct 2, 2003, 18:35
Oct 2, 2003, 18:35
Gog
 
why are you morons carrying about like a bunch of infantile degenerates?

I especially detest those assholes who write their posts in either italics, caps or end their sentences in ten billion exclamation points.

Children, listen, everything will be alright, your game will be in your sweaty palms shortly. Considering that I'm writing this to 20 and 30 something year olds, this is especially sad.

39.
 
No subject
Oct 2, 2003, 18:33
39.
No subject Oct 2, 2003, 18:33
Oct 2, 2003, 18:33
 
Yes, Valve/Gabe is using some "unsecure" software; but are they really to blame ??? IMHO the real culprits are some assholes which have nothing better to do, than to hack the pc's of other people. Think this is cool ?? Think again; if you have so leet skills then do something useful with that; not destroy others people work/property. //But of course it's easier to kill someone than to save someones live with a heart op.// Why don't they program their own game/net-application/whatever if they are soo cool. This secures them much more acknowledgment than such shit. This world is making me really sick. If I would be god I would start from scratch...experiment "mankind" failed lomg ago.

--------------------------------------------------
everyone who finds a spelling error can keep it and use it as a base for his own errors
--------------------------------------------------
"...you don't see me - 'cause I don't have much to say..."
http://www.gathering.nl
38.
 
No subject
Oct 2, 2003, 18:30
38.
No subject Oct 2, 2003, 18:30
Oct 2, 2003, 18:30
 
20$ says Nvidia or someone/ones working there are behind or involved in this somehow.

Pentium 4 2.4B 533 FSB
I850EMD2
512mb 40ns Rdram
Radeon 9700pro 330/330
Win Xp
The Whales name is Bob.
37.
 
Re: What the hell?
Oct 2, 2003, 18:28
37.
Re: What the hell? Oct 2, 2003, 18:28
Oct 2, 2003, 18:28
 
I doubt it will cost them much in licensing...

If any company used the leaked engine in an actual game, they'd be sued within an hour... and it's not really something that can be hidden well

The danger here really is the potential for cheating/hacking that'll be impossibly hard to prevent...

But more than that, I'm sure it's just really disheartening

36.
 
Re: Microsoft is The Poo!!!
Oct 2, 2003, 18:28
beaves
 
36.
Re: Microsoft is The Poo!!! Oct 2, 2003, 18:28
Oct 2, 2003, 18:28
 beaves
 
DCOMBOBULATOR!!!

Avatar 14756
35.
 
Windows, sure, Outlook & IE NOT!
Oct 2, 2003, 18:27
35.
Windows, sure, Outlook & IE NOT! Oct 2, 2003, 18:27
Oct 2, 2003, 18:27
 
I tell people that Outlook, Outlook Express and Internet Explorer are bad things to be running on your computer, but many people seam to ignore me.

From what I can tell the Outlook family was so badly written you could drive a fleet of cruise liners through it even with every security patch installed. Personally I use Netscape 4.8 Mail and am moving to Mozilla Mail probably soon and haven't had any problems with viruses. Of course I almost never run any EXE, COM, or VBS files I get in my inbox unless I know for sure they are safe. Also, unlike Outlook, you can't get around having to click on the file to run it.

Now I know that IE is the most used web browser right now, but it's still very dangerous. There are at least 2 well known bugs that people can use to do anything they want on your computer. Now for the most part you do have to go to their web page for them to do this to you, but still, just having the ability for some one to make a malicious page scares me.

Then you get those banner adds. Can anyone say Gator? The add comes on, a message box pops up with a yes or no, most people I bet click the Yes thinking just get this box out of my way. What if some one hijacks one of these adds and puts a virus in? What if Gator or one of these other spy ware programs has a security hole in it. I've never had a problem with this using Mozilla. IE, I've had to fix too many people's computers because of this.

As for why they use Windows, most of the people with PCs run Windows, whether you like it or not, that's where the most money is for the gaming market right now.

34.
 
Re: Microsoft is The Poo!!!
Oct 2, 2003, 18:25
34.
Re: Microsoft is The Poo!!! Oct 2, 2003, 18:25
Oct 2, 2003, 18:25
 
i know im using windows!!!
its all go can use for games, what the fuck else am i going to do!
I said , "the wretchid filth on all our machines!", need anymore clearification?
The fact that its a monopoly is the reason there is nothing else... and that my friend, is the real crappy part! Cuz the program SUCKS MAJOR ASSHOLES!!!

http://www.humanburger.com

33.
 
Re: Microsoft is The Poo!!!
Oct 2, 2003, 18:21
33.
Re: Microsoft is The Poo!!! Oct 2, 2003, 18:21
Oct 2, 2003, 18:21
 
Thats what they get for trusting microsoft...
Windows is the wretchid filth on all our machines, making them all run like shit and crash all the time...
we must rise up and disemember bill gates!

I must say, I always wonder just what percentage of people who say things like this are running Windows themselves. I'll wager it's about 90%. Is it cool to badmouth Windows, but still use it?

Myself, I'm dual-booting Windows XP Pro and Red Hat Linux 9. It's getting more and more to the point where the only reason I have Windows installed is for games. That and it's a handy fallback in case I cock something up in Linux

32.
 
Re: What the hell?
Oct 2, 2003, 18:19
32.
Re: What the hell? Oct 2, 2003, 18:19
Oct 2, 2003, 18:19
 
Don't be ignorant. The vast majority of the industry and the world uses Windows.

Back in the box Linux-boy.

31.
 
Re: Thanks ATI!
Oct 2, 2003, 18:18
31.
Re: Thanks ATI! Oct 2, 2003, 18:18
Oct 2, 2003, 18:18
 
You know, ive always wondered about this, why if you have a super secret piece of software/data keep it on a computer thats connected to the net? Maybe im just niave or something, but surely u would keep youre work network seperate from the outside world? and then it wouldent matter how good the hackers are, unless they can get a signal to spark from the socket thru the air and into a comp then they are not getting in,..

I read something about this kind of thing on everything2.com
There was a node about something called a "Ten finger interface" which basically means just what you said - that two networks are utterly separate. There is no physical connection between the two. Anything that needs to be done between the two networks involves your ten fingers reading output off one machine and using it as input on the other, or vice versa.

30.
 
Microsoft is The Poo!!!
Oct 2, 2003, 18:17
30.
Microsoft is The Poo!!! Oct 2, 2003, 18:17
Oct 2, 2003, 18:17
 
ahahha....

Thats what they get for trusting microsoft...
Windows is the wretchid filth on all our machines, making them all run like shit and crash all the time...
we must rise up and disemember bill gates!

http://www.humanburger.com

329 Replies. 17 pages. Viewing page 15.
Newer [  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  ] Older