HL2 Source Code Leak Confirmed

TorchedN00dle @ 3:27 pm pdt - half-life, hl2 & tf2 - important - read comments

아주 불행하게도 밸브사의 Gage Newell은 halflife2.net 포럼에서 하프-라이프2 소스 코드 유출에 대한 소문의 진상을 밝혔다. 밸브사는 최근에 그들의 네트워크를 통하여 다수 침입을 받았다고 한다.

자세한 내용은 아래의 원문이 있으니 궁금하면 직접 해석해보기 바란다.


Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, helpvalve@valvesoftware.com. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.

Gabe

__________________
Gabe Newell




돈데크만 님이 쓰신 글 :
: 제가 게임쪽은 관심이 없지만, 3d 그래픽쪽은 자주 둘러보는 관계로..
: 3d 게임엔진에 관련된 사이트들은 난리가 났군요.
: 3d엔진부터 시작해서, 물리학 엔진, 사운드 등등 게임 전체에 대한 소스가
: 들어있나 봅니다. 몇몇 분들이 받아서 보고는 감탄을 금치 못하고 있군요.
:  제작사쪽에서는 유출범에 대한 공개 수배를 내렸다는군요..
: 저도 상용 프로그램 만들고 있는데, 소스 관리에는 좀 무관심한 편이거든요.
: 유출되도, 그거 분석하느니 새로 만드는게 낫다 싶을정도니까.ㅋㅋ
: 하여간 관심있는 분들은 당나귀 유심히 살펴 보시길..그리고, 제작사쪽에서
: 하프라이프2 코드라는 가짜 파일들을 당나귀에 유포시킨다는 소문도 있군요.