Hackers breach Electronic Arts, stealing game source code and tools • Hacker News Board

Re: Hackers breach Electronic Arts, stealing game source code and tools

#21

Post by maybeOneDay » Fri, Jun 11, 2021, 9:57 AM UTC

lrem wrote: post #17

sanxiyn wrote: post #4

> "Anytime source code gets leaked it's not good," said Ekram Ahmed, a spokesperson for the cybersecurity firm Check Point. "Hackers can comb through the code, identify deeper flaws for exploit, and sell that previous code on the dark web to malicious threat actors." This seems like a strong argument against using open source codes. Should I take this argument seriously and avoid them?

There's a presumption that open source code has been looked at by independent researchers. "Many eyes". In contrast, source code of games is a trade secret. It is being worked at by famously overworked developers. And companies in the industry are known to sit on vulnerability reports for months or years. Don't ever install games on a machine you use for work or identity.

Could you clarify what you mean by identity please?

Re: Hackers breach Electronic Arts, stealing game source code and tools

#22

Post by jxf » Fri, Jun 11, 2021, 9:57 AM UTC

ReptileMan wrote: post #11

dijit wrote: post #8

Earlier quoted context omitted.

No, he's being a bit stupid, security through obscurity is arguably no security at all however it makes identifying vulnerabilities _easier_. The main issue for leaking source code of _games_, especially _multiplayer games_, is that people learn how to bypass the anti-cheat mechanisms which leads to a degraded online experience for everybody. I worked on Tom Clancy's The Division and the mantra was always "write code…

There is much simpler solution about cheaters. Local servers to play on lan. Many games came with them.

Not everyone lives close enough to the people they are friends with to make this a feasible response, and there's still an active pandemic going on.

Re: Hackers breach Electronic Arts, stealing game source code and tools

#23

Post by bottled_poe » Fri, Jun 11, 2021, 9:59 AM UTC

lrem wrote: post #17

sanxiyn wrote: post #4

> "Anytime source code gets leaked it's not good," said Ekram Ahmed, a spokesperson for the cybersecurity firm Check Point. "Hackers can comb through the code, identify deeper flaws for exploit, and sell that previous code on the dark web to malicious threat actors." This seems like a strong argument against using open source codes. Should I take this argument seriously and avoid them?

There's a presumption that open source code has been looked at by independent researchers. "Many eyes". In contrast, source code of games is a trade secret. It is being worked at by famously overworked developers. And companies in the industry are known to sit on vulnerability reports for months or years. Don't ever install games on a machine you use for work or identity.

It’s very hard to believe that games are unique here.

Re: Hackers breach Electronic Arts, stealing game source code and tools

#24

Post by aseerdbnarng » Fri, Jun 11, 2021, 9:59 AM UTC

Is their plan to they sell it back to them in micro transactions?

Re: Hackers breach Electronic Arts, stealing game source code and tools

#25

Post by goatse_aas » Fri, Jun 11, 2021, 10:00 AM UTC

Excellent.

Re: Hackers breach Electronic Arts, stealing game source code and tools

#26

Post by intricatedetail » Fri, Jun 11, 2021, 10:00 AM UTC

scambier wrote: post #13

Otek wrote: post #7

Earlier quoted context omitted.

I take it you think pirating things is not stealing either?

"Stealing" a digital product implies that every stolen copy is a net loss for the distributor. It's definitely not.

So how would you call it?

Re: Hackers breach Electronic Arts, stealing game source code and tools

#27

Post by bottled_poe » Fri, Jun 11, 2021, 10:01 AM UTC

mlatu wrote: post #3

"steal"... it's still there, no?

Intellectual property is not physical. Think about it.

Re: Hackers breach Electronic Arts, stealing game source code and tools

#28

Post by mercora » Fri, Jun 11, 2021, 10:01 AM UTC

okamiueru wrote: post #19

mlatu wrote: post #3

"steal"... it's still there, no?

Not sure what the benefit is of turning this into semantics. "Get a hold of" is what is implied here, everyone should understand that. As such, getting hung up on "stealing" is rather pointless.

it is likely that way because it is an argument that often comes up when discussing losses accumulated through piracy. were the argument typically is that not every copy should be accounted for a loss of sale. it does not really apply here because this game will probably sell the same amount as before someone got a hold of the code. And if it does not its likely because of some second order issue arising like not being able to fight cheaters...

Re: Hackers breach Electronic Arts, stealing game source code and tools

#29

Post by ClumsyPilot » Fri, Jun 11, 2021, 10:03 AM UTC

danielheath wrote: post #15

dabeledo wrote: post #10

Earlier quoted context omitted.

in the same way that you can steal secrets

When I copy your secrets, you no longer have secrets - just information that someone else also has. When I copy your code, you still have the code.

They are still secrets so long as you dont go punlish them but use them yourself

Re: Hackers breach Electronic Arts, stealing game source code and tools

#30

Post by sildur » Fri, Jun 11, 2021, 10:03 AM UTC

maybeOneDay wrote: post #21

lrem wrote: post #17

Earlier quoted context omitted.

There's a presumption that open source code has been looked at by independent researchers. "Many eyes". In contrast, source code of games is a trade secret. It is being worked at by famously overworked developers. And companies in the industry are known to sit on vulnerability reports for months or years. Don't ever install games on a machine you use for work or identity.

Could you clarify what you mean by identity please?

I think they mean a machine you use to identify to do something official, like banking or interacting with government.