I know it’s unethical, but I’m kinda excited for the source release. When was the last time we saw the source for a AAA game?
Half Life 2's source code was leaked in 2003 before the game even released
CD Projekt Red has been subject to a cyber attack and ransom demand
41–50 of 252 posts
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#42Do companies ever give into straightforward extortion like this? It doesn't seem like it would ever make sense for a company to pay the ransom. Do hackers like these have some kind of smart play that I'm missing?
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#43Let's not forget that data is still encrypted. It's all in Polish :)
PS: For reference, I speak the language
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#44Weirdly, no amount of money was requested to pay...
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#45I know it’s unethical, but I’m kinda excited for the source release. When was the last time we saw the source for a AAA game?
Do you really think there'll be that much in it. Most triple A games aren't that massively different from old games. They just have better textures and the ability for threads to handle more complex game loops.
Like sure there maybe some shaders or some cool performance mods. But it seems like where AAA makes its mark is by having the budget to build the environment.
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#46The note makes it seem like the attackers got access to their internal network; but the (admittedly little) information I have on the subject indicates that the perforce server was hosted on the internet with username/password access (not cert based authentication as is recommended by Helix these days). I suppose the IT team got overwhelmed with requests to open up the firewall for people working from home during the…
This may be a stupid question, but isn't it standard practice to require that employees use VPN? Why would they expose servers to the internet?
A lot of places are skipping that because they dont have self hosted servers but is allready hosting everything in "the cloud". Like for a simplified example, if you are using google docs + gmail it does not really make sense to force the employees throught a VPN first.
The companies that do it well implement something like google's beyondcorp, the bad just uses direct authentication.
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#47I know it’s unethical, but I’m kinda excited for the source release. When was the last time we saw the source for a AAA game?
The source code for Watch Dogs: Legion leaked just a few months back.
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#48The note makes it seem like the attackers got access to their internal network; but the (admittedly little) information I have on the subject indicates that the perforce server was hosted on the internet with username/password access (not cert based authentication as is recommended by Helix these days). I suppose the IT team got overwhelmed with requests to open up the firewall for people working from home during the…
This may be a stupid question, but isn't it standard practice to require that employees use VPN? Why would they expose servers to the internet?
At least not unusual for many companies but there are proponents of a different philosophy [1].
The idea is that drawing a clear line between outside and inside became futile and you are much better off with an approach that recognizes that fact. Their somewhat provocative slogan is: "The perimeter is dead".
For those working at FAANG: Do you have a corporate VPN? Do you use it? Do you need it for your daily work?
[1] https://www.usenix.org/system/files/login/articles/login_dec...
Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#49Re: CD Projekt Red has been subject to a cyber attack and ransom demand
#50I know it’s unethical, but I’m kinda excited for the source release. When was the last time we saw the source for a AAA game?
You'll probably be quite disappointed, because it's most likely the same mess as any other multi-million-line codebase ;)
IMHO frame rendering analyses like this:
http://www.adriancourreges.com/projects/
...or working through GDC presentations, blog posts and whitepapers from those companies is more helpful to understand their technology.
(edit: better link)