Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Team Fortress 2 source code has leaked

techradar.com

Post reply on HN
Print view View original

161–167 of 167 posts

Re: Team Fortress 2 source code has leaked

#161

Post by _pmf_ »

josefx wrote: post #135
_pmf_ wrote: post #125

Earlier quoted context omitted.

> People just aren't auditing random code on github for fun No, just the important code that everyone is running.

Afaik it had the opposite effect for OpenSSL. Not only was the code so bad that it would crash if ran with a secure malloc implementation. Due to being free and open source nobody felt the need to donate[1], with only one developer employed to work on it full time. [1] https://arstechnica.com/information-technology/2014/04/tech-...

Well. eventually someone looked at it. And probably Heartbleed has been used a long time before it was published.

Re: Team Fortress 2 source code has leaked

#162

Post by snvzz »

baby wrote: post #144
nestorD wrote: post #143

Earlier quoted context omitted.

Avoid reading the code, being inpired by it and using the same pattern (or worse, snippets) in your project (which could result in legal actions against you). I have often heard it in the context of windows operating system developper which should be careful of not accidently introducing open-source code in the kernel if it might have a license that is not compatible with Microsoft's one.

There’s no law against that unless you’re implementing a patented algorithm, which is dumb in any case.

Alternative implementations of programs often use Clean Room reverse engineering, for a reason.

Re: Team Fortress 2 source code has leaked

#163

Post by klmadfejno »

lgl wrote: post #103
klmadfejno wrote: post #69

Earlier quoted context omitted.

I think it's obvious why FStop wasn't finished... It looks boring. The gist seems to be that you can use the device to move and resize objects. Kind of cool but looks hella tedious. I always assumed it was going to be about making different sized portals so you could change size of things (including yourself) by passing through. Those non-euclidean rooms at the end of the video are sweet though. Honestly the most sur…

One of the best uses of portals I've seen was on The Stanley Parable game with seamless brainfuck moments like this: https://www.youtube.com/watch?v=8_UcYPaQWrI

A really interesting side effect of this is you can do it in VR to make room scale maps which are really really big. If done properly, our brains don't notice it nearly as much as you'd expect. This video does a great job of making it excruciatingly obvious. I love it.

Re: Team Fortress 2 source code has leaked

#164

Post by nestorD »

baby wrote: post #144
nestorD wrote: post #143

Earlier quoted context omitted.

Avoid reading the code, being inpired by it and using the same pattern (or worse, snippets) in your project (which could result in legal actions against you). I have often heard it in the context of windows operating system developper which should be careful of not accidently introducing open-source code in the kernel if it might have a license that is not compatible with Microsoft's one.

There’s no law against that unless you’re implementing a patented algorithm, which is dumb in any case.

What if you copy paste code that is under a viral license ?

Re: Team Fortress 2 source code has leaked

#165

Post by hitpointdrew »

segfaultbuserr wrote: post #153
hitpointdrew wrote: post #106

Earlier quoted context omitted.

> Open source code is much more likely to already have been audited better. Common wisdom. I just happens to not be true. People just aren't auditing random code on github for fun. Auditing code is hard, and time consuming. Most vulnerabilities are found by techniques like fuzzing, not by combing through thousands of lines of code.

>> Open source code is much more likely to already have been audited better. > It just happens to not be true. I think it's true, free and open source code, on average, is more likely to have been audited to a greater extent. I think most people confuse "audited to a greater extent", "coverage" and "security". The paradox here is: Merely increasing the chance of fixing bugs do not automatically guarantee security by…

> Having the source code available allows pentesters and auditors to use compiler-based instrumentation for fuzzing, which is more efficient than binary fuzzing.

I will concede that is pretty valid point. My argument is basically that there is the false sense of open source code being "more secure" because of an assumption that "the community" is checking it thoroughly. Most people will just grab it off of github and run it, without giving it a second thought at all. Generally speaking you don't get high quality full code audits for free, pentesters and auditors generally like to get paid and aren't out there testing github code-bases out of the goodness of their heart.

Re: Team Fortress 2 source code has leaked

#166

Post by sgillen »

swixmix wrote: post #124
missblit wrote: post #120

Earlier quoted context omitted.

Wasn't heartbleed a fairly typical buffer overflow?

the typical buffer overflow would have been caught by OpenBSD's protective malloc. > [...] OpenSSL adds a wrapper around malloc & free so that the library will cache memory on it's own, and not free it to the protective malloc. [...] So then a bug shows up which leaks the content of memory mishandled by that layer. [...] https://marc.info/?l=openbsd-misc&m=139698608410938&w=2

I don’t think the vulnerability was in malloced memory, it was some buffer on the stack. I’ve actually patched OpenSSL to stop heart bleed as an excersice and iirc the fix was in fact just preventing a typical buffer overflow.

Re: Team Fortress 2 source code has leaked

#167

Post by tapland »

meestaahjoshee wrote: post #74
tapland wrote: post #68

Earlier quoted context omitted.

> Overwatch is the first game from Blizzard to hit consoles the same time it was available on Windows PC. It's also the only game from the company that isn't on the Mac

if you're gonna game on a Mac, i'd suggest installing windows via bootcamp. ime most games simply run better that way anyway and you don't have to deal with the issue of games that aren't MacOS compatible.

Which would be a great suggestion to the person wanting to play his favorite game on the Mac, instead of recommending another non-mac game, wouldn't it?
Post reply on HN