Half Life 2 source leaked

Hmm why would someone use outlook express on a comp containing the most anticipated game in history? Congratz to the security officer of the company, you will be looking for a new job very soon.

It's a ploy.

welp, guess what i found?




























yep, me found the source code on irc

Perfect, now when the game is released the multiplayer is going to be ****ing loaded with cheaters.

so I read in that thread that Valve f*cks their fans around (who better to trust than the community itself).

screw your fans, get screwed. Karma has a way of doing that.

I'm surprised it took this long for someone to start a thread about this...anywho..
No, I don't think this is good at all. From what I've heard/seen in irc so far, it appears it just isn't some of the source that was leaked, it is all of the source.

DAMN that sucks!


there gonna have to make patches before the game is out! :O

From the Half-Life2.net Forums

Gabe Newell said:

Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, helpvalve@valvesoftware.com. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.

Gabe

Click to expand...

This isn't good.

I took a quick look at parts of the leaked source, and it pretty much outlined all the physics within the game. Unless Gabe and Valve do some drastic measures, any hope of having a cheat-free environment for ANY HL2 MP game/mod is pretty much lost.

I don't think patchs will fix the problem in this case. H-L 2 is just going to have to be loaded with a lot of anti-cheating software now. You really can't fix this, and its a shame too. I'm sure more then one person has been fired from Valve today.

I feel sorry for them

and i hope the people that did this..............lets just say there survirly(sp?) 'punished'

severely punished

I wasnt planning on buying half life 2 (no not even "borrowing" it) anyway so Im kind of meh about it.

Atleast there will be some positives that come out of it I suppose, like bi-passed steam multiplayer and such.


Id still be pissed if I was Gabe though.

Why would someone Hack Valve ?






Answer: Steam software

phil said:

I wasnt planning on buying half life 2 (no not even "borrowing" it) anyway so Im kind of meh about it.

Atleast there will be some positives that come out of it I suppose, like bi-passed steam multiplayer and such.


Id still be pissed if I was Gabe though.

Click to expand...

I concur.

I wasn't really as hyped up as some of you are about HL2, but it is pretty crappy someone went to such great lengths to get the source code. :tdown:

Serves Valve right. Idiots, after 5 years in development and millions of dollars, plus thousands of hours spent on the Source engine, you'd think you'd have enough sense to store the game and the source code on a computer with no access whatsoever to the Internet

Perhaps this is why the game was delayed. Anyhoo, it figures really, seems like outlook is never "fixed". Always some hole that someone exploits. Tis why i dont use it. What i find interesting is how they did it. No trojan or virus...
its almost like they had direct access to the network or something.
This is truelly a sad thing. If i was a man who swore i would have a few choice words to describe people who break into/ and steal other peoples property.
They put so much time and energy and money into that only to have someone steal it? Pisses me off something awful.

Maybe it's just me but about the time that they found the trojan on the first machine, (#2 on the list) wouldn't you do a scan of the other desktops on your network and start scanning your internet connection for suspicious activity as a prelude to pulling the plug if necessary? Heck a good round of immediate password changing sounds good too. I mean C'mon this is Microsoft software/networking your talking about....once something gets in it's [Hicks] game-over man game-over[/Hicks].

Heck I find it very interesting when normal applications want to talk to the 'outside world.' let alone some new or oddly named app. Or if all of a sudden your getting net activity at strange time periods when no one is in the office and the IP address is suspicious too...

In short, Valve really should have not allowed FTP/net access to the source through their internet connection. And oh yeah...wasn't that 'preview pane' bug a known and patched issue as early as Jan 2002?

So yeah it's too bad they got hit. But I'm certain there are far more business that this has happened to but don't tell anyone, don't know, or just aren't high profile enough for anyone to care.

As for potential fallout...this is such a high profile hack that if any one tries anything more adventureous than a client side hack, Valves legal team will be all over them like flies on stink. Mod makers may find it informational, but again, if anyone tries anything outside the normal allowed level/mod/Total Conversion changes Valve can drop on them pretty hard. So in the end I don't think this will change a whole lot other than pushing back the release date. And this is the most likely cause of the roll back of the Sept release date in fact. (The timing is right.)

Heck I really don't care that this is out there, I have no desire to look at it much. Although I think reading code like this and other games (Quake/Duke3d/RoTT/DOOM) is a great way to learn some programming...although I'd love it if the Wizardy 8 code was released.

mmmm....Wizardry 8 expansion paks/mods.......mmmmm

Off topic:
Yeah wizardry 8 was fun. I only tried the demo tho.