Half-Life 2 (PC)

[nips]

****ing hell, I didn't realise it was anything like that bad. That is a ****ing JOKE. We could all be playing HL2 if it wasn't for one person - possibly.

Absath from Ctrl-Alt-Del is majotly pissed off:

As I am sure most of you already know, Valve Software officially announced yesterday that via hacking of their personal development computers and email programs, the source code for Half Life 2 was stolen, and subsequently leaked onto the internet.

Some of you are asking yourselves why this is a big deal. I'll tell you. The source code, if it is infact complete and not partial, contains everything hackers will need to create fake CD keys, create multiplayer hacks, distribute free copies of the game, and alter the game itself.

Unfortunately there are a lot of retards who get some sort of empty gratification by using aimbots, maphacks and other online cheats to win multiplayer games. It has ruined games like Counterstrike and Starcraft in the past. Now, in order to prevent these ****sticks from creating anything useful from the source code, and turning the game into **** for the rest of us, Valve has to add and change code in a preventative measure. In all probability, this means the Half Life 2 release date will be pushed back even further.

But whether or not this event effects the Half Life 2 release date isn't even what boils my blood. It's the fact that some retarded piece of **** hacker who thought they were hot **** went and attacked a video game company in this manner. I mean, some people just have no respect for boundaries any more, and it really pisses me off.

I mean, sure, ok. Ripping games and distributing them on the internet is just a fact of our modern life. It's the way it goes, and it takes money away from the video game companies, but the percentage is fairly low. Most people don't want to bother with finding, downloading and cracking the game, and even better, they wanted to support the companies that made their favorite games. But pirated software still existed, and it was just natural.

But there used to be a time where there was a code of morals. Some ****ing ethics that people stood by, no matter how low or criminal they were. A code that you didn't attack the people on your side. There was a certain respect. At what point did all of these kids start thinking that these video game companies ****ing owed them entertainment? That these people, these coders and developers should work for sometimes up to two or three years on a game, and then give it away because some little twerp in his mother's basement doesn't want to pay for it. And even worse, at what point did these little twerps decide it was ok to blatantly attack and steal from these hardworking companies?

****. That. ****.

It pisses me off. I swear, if I could somehow locate the assmonkeys behind this stunt, I'd gut them with a flaming metal fork. Bastards.

I urge any of you that have downloaded the source code to delete it from your hard drive. Don't point people to links for download, and if you know anything about the source code theft, email valve.

You're ****ing hurting the game you waited so anxiously to get. It's not god damned funny.

Was HL1 Open Source from Launch? Why were there not huge problems following the HL1 SDK?

****ING WANKERS! It makes you wonder about the security of the online community!



****!

[Concept]

That's similar to what I posted before. And I agree with what that other poster quoted above says.

I can't understand the logic of this. Because of the stupidly short sighted actions of an individual/s, they've managed to set the release date back a fair margin for currently the most anticipated game on the planet. And they won't get anything out of the end of it, because the code will have been changed in due course anyhow come launch. There's no way Valve is going to release HL2 right now with the current source code.

So... It kind of defeats the purpose of the objective, (unless it was simply to harm development). Surely whoever hacked the source code could have come to this conclusion? All they've done is add a significant delay on and stolen code which in the long run won't matter all that much, because parts are now going to have to be changed anyway.

Absolute muppets. Not only that, but this could harm development of HL2. Newell was recently going about putting the few important final tweaks in the game's gameplay through user feedback... But instead, no doubt the team has been distracted by this utterly moranic stunt, which has probably in turn had a significant effect on morale at Valve. And all that means HL2 development is probably (almost certaintly) not going as smoothly as it needs to during such a crucial final spell.

I'm not a PC gamer, but to be honest it makes me ****ing sick that some one could do this. I hope they get it real bad...

They deserve a serious amount of bad-bad **** for what's happened. ft: ft: ft:

[Concept]

http://www.halflife2.net/forums/showthread.php?s=&threadid=10692

From Newell himself...

[H-Man]

It just worries me that HL2 could become infested by cheats now

Poor Valve - this really sux :/

[nips]

Well, cheats will happen for HL2 at some point, you just know that they will. But they are sorting out the game NOW. They are removing and changing all parts of the game which can be used to make cheats and CD Keys etc...

This is why there is a delay... They are sorting a lot of the source out!

It should be OK... *Crosses Fingers*

[Concept]

Well, cheats will happen for HL2 at some point, you just know that they will. But they are sorting out the game NOW. They are removing and changing all parts of the game which can be used to make cheats and CD Keys etc...

This is why there is a delay... They are sorting a lot of the source out!

It should be OK... *Crosses Fingers*

The potential ramifications of all this extend far beyond the prospects of cheating.

Following quote listing problems sourced from HL2net forums:

1) A game like Half-life 2 consists of two main elements, resources and programming code.

The resources consist mostly of all the non-logic/instruction based elements of a game, that is the art, textures, sound, story script, maps etc. Things like the model and textures for the headcrab is typical of this. This is the largest part of a game in size, for a game like Half-life 2 typically over a gigabyte of the game will be resources. These resources cannot do anything by themselves, and if you have the right software, can be viewed/played as when making a mod. These are like the bricks and wood for the "house" Valve was building.

The program code consists of the logic and instructions as to how the game will function. That is to say, the code directs the computer in how to utilize the resources mentioned above, in the correct manner to allow you to play a game. Examples of what would be included in the program code are the Source engine, the Havoc engine for physics, artificial intelligence routines, game launcher code etc. Using the analogy above with the headcrab, the corresponding program code would be the animation rules for the headcrab, its artificial intelligence behavior, its stats etc.
This is like the architectural plan of the "house" Valve was building.

2) To play the game (as you will when it is released) you need the program code and the resources. What has been leaked is the program code, which amounted to around 160 megabytes of text (though this did include some non half life 2 related code), which is a SERIOUS amount of code. The resources for half life 2 are not included, and they would have amounted to at least a gigabyte.

When programmers write code, they write it in so called high level language like C++. A high level language is one that is easy to understand to humans, so that editing it is easy during development. This is known as the source code, and is what Valve will be working on right until half life 2 goes Gold. This is what has been leaked to the public. The source code has many lines of C++ code, which you will have trouble understanding if you do not know C++ (though it is very easy to learn!), and some comments that explain what the code is doing.

A computer is not designed to directly execute C++ code, which has been designed for a human to read. Instead it executes machine code, a far lower level language which is very hard for a human to understand. Coding in machine code would be a nightmare for a programmer and so they prefer to use C++ and other high level languages. Now for the computer to understand Valve's C++ source code, it must be converted to machine code. This is what a COMPILER does. Valve will run a compiler on the source code every so often, creating a bunch of executable files (machine code based) that can then be used to run the game and test the changes made to the source code. This is what you get when you buy a game: Resources and the compiled source code to run them.

As such, the fact that the source code is in the public domain does not mean that anyone can compile a working game out of it, as all the resources are missing as well as a few other code elements. So this source code leak isn't a big deal for Valve right? Why all the worry?

3) A source code leak is a HUGE deal. Source code is only released for obsolete games (like Quake, Quake 2 etc) once the programming secrets they contained are deemed out of date and no longer valuable to rival developers.

Half-life 2 is NOT an obsolete game. Is a cutting edge game incorporating many features that have never been seen before in a game, and more importantly is HAS NOT BEEN RELEASED. What does this mean for Valve?

It means all the work behind the new features, the Source engine, the revolutionary AI etc is now exposed for anyone in the public and rivals to see, learn from, and God forbid, copy. Using the house analogy above, it means the new revolutionary solar powered house you were building has had its building plans stolen before you've built it. Now everyone knows how you solved all those problems which prevented people from building revolutionary solar powered houses.

As an example, the Strider as seen in the released videos, is an amazingly novel creature to see in a computer game. It is seriously big, yet maneuvers around and interacts with the landscape in a convincing and intelligent manner. Getting a Strider to function like this will have taken Valve months of painstaking AI and animation work. Rival developers would have had to guess how on earth Valve pulled it off. Now they can simply look in the equivalent of the Strider AI source code file, and it will all be there, conveniently commented and explained by the Valve programmers for their own internal private understanding.

The source code for half life 2 is the result of 5 years of hard work by some of the best programmers in the games industry. No one would have seen it (bar engines licensees) for 5 or 6 years at least, upon which it might have been released to the public (like Id software with Quake).

The source code is not to be confused with the SDK as some people have. The SDK for half life 2 which will be released, is its Software Development Kit. This allows modders and fans to create games and mods using Half-life 2 technology, but does not tell them how the technology works. Unfortunately this is exactly what the leaked source code tells people.

So in short , this means for Valve:

All its clever routines and algorithms for making a revolutionary game like half life 2 tick, are available to be understood by anyone who knows C++, including game development rivals, hackers making cheats and exploits and the general public.

More worryingly the source code seems to contain a lot of source code from partner software developers that Valve had licensed to use in Half- life 2, such as the Havoc physics engine, and that Valve is contract bound to keep protected and confidential. These leaks enable people to potentially rip off these software partners too, and hence opens Valve to be sued.

Finally the internal workings of Half-life 2 have been so seriously compromised that I will be amazed if we see it released before 1st Quarter 2004. The potential for hacking exploits is enormous; it is like printing the blueprint to your high security safe in the local newspaper before having it installed in your home. SERIOUS work is needed now to rework the source code to protect it from future attacks on release. Let us not even mention that it seems Steam has been seriously compromised as well in the leaked source, as that had enough problems of its own to be getting on with without this.

A leak of the source code of a revolutionary highly anticipated game like Half-life 2, close to release is, as far as I know, unprecedented. My deepest sympathy as a games developer goes to the Valve crew and I wish them every success in catching the perpetrators of this crime.

In summary, some of the problems are:

1) The potential of Valve being sued by its develop-partners who helped co-fund development, for the compromise of code to be used in other products (HAVOC physics engine etc.)

2) The fact a significant proportion of HL2's code is now available to be understood, examined and taken a part by rival developers when it comes to finding out how Valve did what they did in precise terms.

3) Security issues - Hackers, cheaters and general troublemakers will have in-depth knowledge of HL2's inner code. So... Even if Valve were to do a significant re-write over the next few months, they aren't going to be able to change all the code they've been working on over the last god knows how many years. There are going to be people with detailed knowledge of how best to exploit and abuse HL2 both on and offline for their own gain.

4) Trust - The value of HL2's source code, in terms of selling and farming it out to third-party developers has just been compromised because its out on the net for free now if you know where to look. Not only that, but pre-contractual agreements no doubt drawn up with other devcos will be under threat because the source code will have to be altered, which may affect other products intending to use HL2's engine within their own development timeline. And what this essentially boils down to is money... Vivendi and Valve probably could have generated, and perhaps even needed, a lot of money that may be potentially made from licencing their technology out. All that is going to have to be put on hold right now, and the further the development process, the more likely HL2 will miss the holiday season. That may possibly hit the projected economic forecasts for the game hard. Oh, and then there's the fact the security conditions of Stream have been compromised, meaning there might be lost revenue from other developers holding off on licencing Stream until this situation sorts itself out.

--------------------------------------------------------------------------------------

The problem is, Valve probably have a lot riding on HL2 in terms of self-funding, and all that is potentially in tatters now, down to several complex issues. Several of which haven't been touched upon even in the above (which is the complete basics).

This whole situation is a mess. And it's the most depressing gaming news I've heard all year. I'm surprised there's been such a lack of a reaction to this on NTSC-uk, even if it is only a console-based forum.

We're talking about the most anticipated game of the moment anywhere on the rocks, due to several consequential effects which will probably arise from the unauthorised release of this source code.

Valve have of course stated that the delay in the release of HL2 has nothing to do with all of this. But then they would say that wouldn't they? Let's face it: Having to re-write a significant proportion of the source code is going to take some time, even if they hire extra staff to do so.

I don't want to be negative, but it's looking like 2004 for HL2.

All down to the actions of a bunch of gimps. I hope they're happy. ****wits.

[Spatial]

I saw the source leak posts late last night but at that point many people were still speculating it was false

You are all right and my thoughts echo whats been said above

This is a hell of a set back and I get the feeling because of it, we won't be seeing Half Life till 2004 at least ft: ft: ft:

I can't really believe that someone would be as much of a bastard as to do this to Valve. I mean, they're the only games developer I know of that actually take the time to really involve the community, and IMO they don't deserve it.

And it looks like from what Gabe Newell was saying on the HL2.net forums that someone had been trying this for a while.

All Valve are trying to do is make a game - a media that will bring entertainment to people. Is that so bad ? Do they really deserve this **** ?

I mean, getting source code from an obsolete game is one thing, hacking source code for something that isn't even released yet ?? Thats just ****ing sad and down right evil

Industrial sabotage ? Attention seeking hacker(s) ? Personally I don't think it matters. I hope they call in the authorities or take whatever steps they need to and catch the bastard(s)

ft:

[C']

And it looks like from what Gabe Newell was saying on the HL2.net forums that someone had been trying this for a while.

Which again begs the question, why would they store the source code on a machine hooked up to the Internet. I've been speaking with a few people (developers) who say that their company policies don't allow such a thing (although none of these developers are working to the scale of valve). Especially as Valve seemed to place their trust in Micrsoft Outlook of all things

I'm not trying to justify what has been done. It's **** and shouldn't have happened but surely security questions have to be asked at Valve. Especially by those people who licensed their engines out to Valve.

[Spatial]

Its a good point C'

Maybe that's why Newell looks so bad, he's ****ting himself

Or maybe there's more to it than this ? Maybe it wasn't as simple as being hacked and its partly an insider job ?

Who knows as its all speculation at this point

Would Valve be wise to just release the game in Single Player for now ?

Anyone think this what they'll be doing for the projected November / December release ?

I hear a lot of arguments for and against this.

[Edame]

Just to play devil's advocate, I know this is a horrible thing to have happen, but what does this say about Valve's security practices?

They're working on one of the most anticipated and secretive PC games of all time, and not only do they seem to have their source-code accessible from the Internet, but they are apparently using Outlook with the preview pane function (doesn't that allow automatic execution of files?). This seems to be in spite of the fact that we've had god-knows how many virus's spreading all over the world and getting mentioned on the news all the time.

While it's possible that this has been an inside job of some sort, if not, what does it say about Valve? Would you feel safe giving them your credit card details over Steam knowing the apparent state of their network security?

Edit: aah, C' beat me to it.

[Ciaran]

Would Valve be wise to just release the game in Single Player for now ?

Anyone think this what they'll be doing for the projected November / December release ?

I hear a lot of arguments for and against this.

I really hope they decide to do this and soon.

The biggest problem is that it will be easily copied and put all over the internet because of the leak. (but that would of happened anyway)

[MartyG]

You do have to question about source code being stored on internet connected machine, although it doesn't actually mean that it was the source master (which presumably is stored on some kind of source safe server) was the leak. It could have been a dev machine with net access that wasn't as secure.

Mind, if they knew there were security breaches, you'd have thought they'd have taken steps to prevent it happening again.

Regards
Marty

[Ciaran]

Since they were running key loggers would it not be possible to access other computers running on the valve network?

[MartyG]

All key loggers do is log your key strokes - if the machines are secure from a network point of view it doesn't really matter. They're generally put in place to grab userIDs and passwords - if the machine can't be accessed unless you're on a local domain, then all the key strokes in the world won't help.

Besides, it was mentioned they noticed this happening, and yet it seems they did nothing about it. If Valve's network is that insecure, I'd certainly not be placing my CC details on it.

Regards
Marty

[nips]

Ok, I just want to put my cards down and say:

"Valve, take as long as you want. If you need until next year to sort this hella mess out, then take it. I really don't care what problems there are, and whether there should have been tighter security or whatever. Take your time, do what you gotta do.

Good luck!"