Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Team Fortress 2 source code has leaked

techradar.com

Post reply on HN
Print view View original

111–120 of 167 posts

Re: Team Fortress 2 source code has leaked

#111

Post by Karunamon »

ThrowawayR2 wrote: post #61
gbrown wrote: post #53

Earlier quoted context omitted.

> Unreal Tournament 99 though, has plenty of servers that put some dlls for "anti-cheat" software on your computer before you join. D: People put up with that?

Better than putting up with cheaters ruining the game.

Even if you actually believe this, Riot is not known for their high-quality code. This sounds a bit snarky but is entirely serious: Giving games root rights is bad enough, I absolutely don't want to run anything in kernel space from the same people who wrote the client for League of Legends.

And it's not even about trusting that Riot are not bad actors, tencent conspiracy nonsense aside, it's about leaving that trash running with that level of access in a way that some malicious process could use to elevate its permissions. That is the (ab)use case that worries me.

Re: Team Fortress 2 source code has leaked

#112

Post by falcolas »

sgillen wrote: post #109
hitpointdrew wrote: post #106

Earlier quoted context omitted.

> Open source code is much more likely to already have been audited better. Common wisdom. I just happens to not be true. People just aren't auditing random code on github for fun. Auditing code is hard, and time consuming. Most vulnerabilities are found by techniques like fuzzing, not by combing through thousands of lines of code.

Maybe the person you are replying to should have qualified “popular open source repositories”.

Like openssl? Rhetorical question; OpenSSL was both open source and broadly used, and it took over two years to identify heartbleed.

Plus. many companies, Microsoft included, open up their source code to partners.

The openness of source code has little correlation to its security.

Re: Team Fortress 2 source code has leaked

#113

Post by xwdv »

exabrial wrote: post #105
gbrown wrote: post #52

Earlier quoted context omitted.

Security by obscurity... isn't.

agree... but it's just a video game :/

Just a video game? Imagine someone plays this game inside a corporate network, gets compromised, and the data for millions of people is stolen and leaked into the wild.

The function of the actual program that gets exploited is irrelevant to security risk.

Re: Team Fortress 2 source code has leaked

#114

Post by LeSaucy »

meestaahjoshee wrote: post #74
tapland wrote: post #68

Earlier quoted context omitted.

> Overwatch is the first game from Blizzard to hit consoles the same time it was available on Windows PC. It's also the only game from the company that isn't on the Mac

if you're gonna game on a Mac, i'd suggest installing windows via bootcamp. ime most games simply run better that way anyway and you don't have to deal with the issue of games that aren't MacOS compatible.

Parsec from an actual gaming system works very well.

Re: Team Fortress 2 source code has leaked

#115

Post by enchiridion »

falcolas wrote: post #112
sgillen wrote: post #109

Earlier quoted context omitted.

Maybe the person you are replying to should have qualified “popular open source repositories”.

Like openssl? Rhetorical question; OpenSSL was both open source and broadly used, and it took over two years to identify heartbleed. Plus. many companies, Microsoft included, open up their source code to partners. The openness of source code has little correlation to its security.

I'm not sure if heartbleed is a good example here, given that it was basically a new class of exploit.

Re: Team Fortress 2 source code has leaked

#116

Post by kibwen »

Latty wrote: post #110
lgl wrote: post #103

Earlier quoted context omitted.

One of the best uses of portals I've seen was on The Stanley Parable game with seamless brainfuck moments like this: https://www.youtube.com/watch?v=8_UcYPaQWrI

Antichamber is a puzzle game that uses the same thing in a ton of extremely fun ways. I highly recommend it.

I second Antichamber, it's an overlooked gem. It combines the mind-bending puzzle platforming of Portal with the intriguingly interconnected world design of Metroid.

Re: Team Fortress 2 source code has leaked

#117

Post by gbrown »

AgentME wrote: post #85
d1zzy wrote: post #66

Earlier quoted context omitted.

Battle.net has been doing that since day 1, so if you played any game on Battle.net you have downloaded server provided code and executed locally with the privileges of the user running the game. (when a client connects to a battle.net server, one of the early handshake steps is to download a fixed named MPQ file, which is a Blizzard proprietary archive protocol which contains a DLL that is loaded and a certain fixed…

I think there's a big difference between the game downloading a DLL straight from the game developers (not all that different from an update) and a game downloading a DLL from a random server you join (that could be run by anyone that you have no reason to trust and that you don't realize you're giving them full read-write access to your computer).

Exactly. Neither is ideal, but they're not exactly equivalent...

Re: Team Fortress 2 source code has leaked

#119

Post by thatguy0900 »

andbberger wrote: post #91
philo23 wrote: post #51

Earlier quoted context omitted.

The F-STOP included in this leak, from my understanding, isn't Valve's prototype. It's just in-development fan-made game to try and replicate Valve's unreleased prototype.

Strong evidence that this is fan-made: there is Cave Johnson dialogue in the video [0]. F-STOP significantly predates Portal 2 and I presume the Cave Johnson character as well. [0] https://www.youtube.com/watch?v=HboQWe3FYbg

Cave Johnsons name was referenced in portal 1. It could be they already had the character idea in mind

Re: Team Fortress 2 source code has leaked

#120

Post by missblit »

enchiridion wrote: post #115
falcolas wrote: post #112

Earlier quoted context omitted.

Like openssl? Rhetorical question; OpenSSL was both open source and broadly used, and it took over two years to identify heartbleed. Plus. many companies, Microsoft included, open up their source code to partners. The openness of source code has little correlation to its security.

I'm not sure if heartbleed is a good example here, given that it was basically a new class of exploit.

Wasn't heartbleed a fairly typical buffer overflow?
Post reply on HN