CS Source Port/CS:CZ Leaked

[KhAoS]

I honestly hope that this hacker is an American citizen so he can be punished to the full extent of the law once he is found.

[-SDc-Match]

20 bucks the person that did this is a reg at CSN.



Wouldn't that just cook your noodle?



He could be posting in this very comments section.

[sardiax]

he could still be doing it for fame/attention anonymously, look, we're talking about him

[Simplex]

-:Nighthawk:- wrote..

The idea behind rewriting, Xero2kx, is to alter parts that a hacker could otherwise exploit. Such examples would include the netcode, the key generation, and who knows what else (probably stuff in the graphics area as well, to prevent visual hacks from being so easy to make). If a hacker has working source code, hacks are waaay easier to write, and can be much more powerful. That's why you have to change so much of it.

Ideally, the best level of security would be where even if you had the source code, it still would be mathematically [highly-]improbable to break, while adding on top the obscurity of not having access to the source. In my perfect world, the opening of the source wouldn't have been a big deal.

[Ghengis]

After watching a recent documentary ont he state of pirating gaems in the former soviet union, and given that they are so much leeter than the westerners, im prepared to bet that it was someone over there, a) they ae beyond the law, and as such can do what they like. B) They can actually market, and ship the pirated game even in its present form. This pre leak version is the beginning, mark my words someone will be burning and flogging it at some market.



The whole fame aspect im afraid has been achieved, what is more likely to happen if this guy gets caught nad he is within some jurisdiction is that he will be given immunity in return for woking his arse off for various security firms helping to prevent hacking or alternatively helping to hack corporates hack other corporates... He wont get hung drawn or quartered and whilst I abhor his actions there is a certain amount of admirationf or the audacity, the ability and the achievement. However he has gone too far with this leak, which is essentially spoiling the show for vlve, if h had stolen the code and not distributed it, the guy would have had a meal ticket to a serious income and serious job, now hes shown himself to be a cmplete jerkoff.

[MoDifiy]

Edited by [user="21274"] @ [time="1065731633"]

1 yes the file were only copied, and if they weren't they were for sure backed up, and of course if they weren't valve is dumber than I ever thought.

bozer wrote..

Only a matter of time before this moron is caught. Hes like a serial killer that is in it for the fame. He keeps making noise here and there.. watch.

heh, who cares if he gets caught the game would have been delayed anyway i could have bet money on that and to prove that, lets see if CS:CZ gets bumped back another 4 months, if it doesn't, that should tell you something... I think its also a little of an over statement to compair someone who stole code due to valves poor security to a serial killer.

rizzuh wrote..

Oh, you mean like all the other software companies that use open source development? Okay.

Whats wrong with that? you say that as if it's a bad thing, it's not. Ive seen it done for so many games, it helps promote some mods based on the engine. AvP2 is one that comes to mind.

Xero2kx wrote..

why re-write it to gain the same effect?! The only thing would be due to hax being developed easily!

I totally agree it's not like when this game comes out they wont decompile the code if they want it anyway.

-:Nighthawk:- wrote..

The idea behind rewriting, Xero2kx, is to alter parts that a hacker could otherwise exploit. Such examples would include the netcode, the key generation, and who knows what else (probably stuff in the graphics area as well, to prevent visual hacks from being so easy to make). If a hacker has working source code, hacks are waaay easier to write, and can be much more powerful. That's why you have to change so much of it.

Well see what i said above, and i will agree ****** would be one thing they would/could rewrite, but i would bet it would take under a week for there to be someone who "cracks" it and can make working keys.

-:Nighthawk:- wrote..

Hehe. :)



I liked this quote from the Gamespy article...

Ken Levine, head of Irrational Games, offered a more impassioned response:

"Whoever did this is an enemy not only of game developers, but of gamers.

To him I say, 'Congratulations: Thanks to you, developers are going to spend more time worrying about security and less time making fun games. Nice going, loser.'"

To him i say congrats to valve, they should have worried about security in the first place, you're a fool to run a company that has something to do with computers, whether its games or whatever else and not worry about security for things like this. The bottom line is if they did get this breaking and if they would have had "good" security he should have been caught already



Of course you could always just blame steam, thats always popluar these days :)

[Ghengis]

Simplex wrote..

Ideally, the best level of security would be where even if you had the source code, it still would be mathematically [highly-]improbable to break, while adding on top the obscurity of not having access to the source. In my perfect world, the opening of the source wouldn't have been a big deal.

Codemasters have just developed and are betaing self destructing code, which somehow mutates over time to prevent useful copying, now thats s me futuristic shit

[G0tham]

Item 1. I find the confusion over the fact that Valve is still in possession over their code (as opposed to having the code on the dev machines deleted and no backups) fascinating as it nicely illustrates the difference between stealing and "stealing" in the digital world. Indeed, no theft occurred. I don't know under what laws this crime of intrusion and dissemination of copyrighted material would be prosecuted, but I doubt it would have much to do with thievery.



Item 2. That Gamespy article, in addition to being infested with astoundingly annoying ads, was full of bad info. Which, of course, is hardly surprising considering Gamespy is full of cockslaps. But enough flaming, the point is - Nighthawk pay attention too - that SECURITY SHOULD NOT RELY ON CLOSED SOURCE CODE. Some anti-cheating aspects, perhaps, CDkey stuff, maybe. But certainly not the protection of credit card information! Security through obscurity is no security, a thought I've been trying to convey on other forums, to no success I'm afraid.



Item 3. I am modestly disturbed at all the proposals for what should be done for the hacker once caught, at least the ones that appear to be serious. Punishments in the USA are tremendously harsh as it is and computer crimes are viewed as borderline terrorism, so is it truly necessary to call for ultratough penalties? Ok I suppose an "anonymous" is fair game and if it makes you feel more at ease with the whole thing..



Item 4. Everyone needs to chill the fuck down. I hesitate to check the halflife2.net forums, the panicky fanboys there are propably organizing suicide pacts. :\



Item 5. CS on HL2!!! W00000000T!!

[rizzuh]

G0tham wrote..

Item 1. I find the confusion over the fact that Valve is still in possession over their code (as opposed to having the code on the dev machines deleted and no backups) fascinating as it nicely illustrates the difference between stealing and "stealing" in the digital world. Indeed, no theft occurred. I don't know under what laws this crime of intrusion and dissemination of copyrighted material would be prosecuted, but I doubt it would have much to do with thievery.

I don't know about that, intellectual PROPERTY is still property.



Theft, dictionary:

The act or an instance of stealing; larceny.



Steal:

To take (the property of another) without right or permission.



Take:

To get into one's possession by force, skill, or artifice



Let's say that hacking is a skill.

[EL17E]

I want cs on the hl2 engine!

[Buddah]

BlackKnight wrote..

Boy, ........ then CZ goes gold, and now this?

I know, it's a shame they can't push it back any further. Come one people Valve has a reputation of delays and even more delays to uphold and now all of sudden CZ goes gold. What the hell are they trying to do? :P

[snake plissken]

CHANGE????!!!??

[alex`]

valve: keep source code on computers with no internet access.

[Diamond Dust]

Logikal wrote..

I would never touch ANY code compiled by this moron. You never know what's been slipped into there.

I am with you, I don't care about this beta crap and I wish no one would report on it so we could just ignore it.

[rizzuh]

alex` wrote..

valve: keep source code on computers with no internet access.

Jesus Christ we're getting real tired of you Junior IT professionals. The computers with the source had no Internet access. Other computers on the network did have Internet access. While it's obvious that poor security is to blame here, it's not like the server housing the code was torrenting anal porn 24/7.



Also your exact same comment has been said about three billion times on slashdot already so please try to keep your revelations less redundant.

Diamond Dust wrote..

I am with you, I don't care about this beta crap and I wish no one would report on it so we could just ignore it.

Posting news is what we do. Believe me, I don't enjoy covering this. I'm a big VALVe fan and have met many employees of the company in person. Heck, I was at VALVe last week the day after the source code was originally leaked to the public. It's disheartening, but it is news.