Off-Topic, but interesting: Half Life 2 source code leak!

[Daynarr]

Looks like thread was made yesterday and it already has 34 pages.

[Mortifer]

The topic is closed now, guess it would have too many replies in a few days. [Propably thousands.]

Well why did they stole it? [Who??? I think that there is no way to figure out that who stole it.]

1. Valve was total stupid to store the source code on a comp, what was connected to the net. This is the stupidest thing what I ever heard...

2. I am almost sure, that the HL2 authentication @ Cd-key system is broken now, since the source code must contain these datas. -> This is the worst nightmare for Valve.

[ October 03, 2003, 17:46: Message edited by: Mortifer ]

[LordArioch]

Well I'd think they could make another cd-key authentication system...and honestly I'd imagine any cd-key system they make won't exactly Last forever anyway.
But yes...storing the entire source code on a internet linked computer running Windows of all operating systems. Not that there's anything wrong with Windows except that most people use it so there's a lot of people out there finding security flaws in it.

[Mortifer]

Well yes, Valve is in serious trouble now...What a shame...

[LordArioch]

I agree...why couldn't this happen to some company I don't like...like Blizzard or anyone making games Microsoft distributes.
As I understand the physics engine that isn't theirs is in the code too...so that's going to hurt them.

Wow...at the half-life.net forums there have been at least 800,000 views throughout the day and 2000+ Posts. That's a lot of people.

[ October 04, 2003, 01:15: Message edited by: LordArioch ]

[Mortifer]

New comments from Gabe Newell:

http://www.shacknews.com/onearticle.x/28641

1) We've taken our network connection down to pretty much a minimum. We're still finding machines internally that have been compromised.

2) The suite of tools that the attacker was using included the modified Version of RemotelyAnywhere (basically a Remote Desktop-style remote admin tool), Haxker Defender (a process, registry key and file hiding tool), the key logger, and various networking utilities that allowed them to transfer files (compressors, NetCat, and FTP). We also are pretty sure they were sniffing our network to gather passwords and other information. Haxker Defender includes a file system driver that allows an attacker to have stuff on your machine that is invisible, unless you do something like mount the drive under another OS that has NTFS support.

We have determined one way of detecting some infected machines, which is using a connection viewer to detect connections to anomalous hosts external to our network.

We still don't know their entry method.

3) In general, the community has been remarkably swift at tracking down the sources of the leak. What would be most helpful now are IP addresses of the people who were responsible for the intrusion or for the denial of service attacks.

4) Also, please continue to send in URLs of websites hosting the source code. We've been contacting people and asking them to take it down.

5) There's anecdotal evidence that other game developers have been targeted by whoever attacked us. This hasn't been confirmed. We've been providing other game developers with more detailed information about the exploits and evidence of infiltration.

6) We're running a little bit blind with our network shut down, but it seems like some of the press has picked up the story. I've been fielding calls from the mainstream non-games, non-technical press.all day. Hopefully they will get to report shortly what a mistake it is to piss off a whole bunch of gamers and get them hunting you around the Internet.

For any information related to this, please send it to helpvalve@valvesoftware.com, or you can always send to gaben@valvesoftware.com as well.

[Psitticine]

Originally posted by Mortifer:
Hopefully they will get to report shortly what a mistake it is to piss off a whole bunch of gamers and get them hunting you around the Internet.

That's not a mistake I'd want to make.