Slashdot Mirror


Valve Announces Half-Life 2 Code Theft Arrests

Ant writes "GameSpot and other sources report arrests were made: Developer of the much-anticipated and delayed shooter sequel reveals an international wave of arrests has been made. The Half-Life 2 code theft saga entered a new chapter today when Valve Software announced a series of arrests had been made in the case. According to Valve, suspects in several countries had been taken into custody in relation to charges stemming from the theft of the Half-Life 2 code, distribution of the code, and breaking into Valve's network..."

41 of 545 comments (clear)

  1. Re:I wonder if... by Lux · · Score: 5, Insightful


    Not a bloody chance. It's pretty clear that they just capitalized on the source code leak as an excuse to slip the release date. There's really no way they could sit on a game for nine months reworking the code to break compatibility with potential cracks for the leaked code. It's neither that long of a project, nor an justifiable use of man-hours.

    The game is just way behind schedule.

  2. Use your words carefully by Anonymous Coward · · Score: 3, Insightful

    Please, editors, don't use words like 'theft' in the same way that the RIAA etc. use them. No-one was deprived of code in this incident and so it wasn't theft.

  3. things valve should be worried about by Da_Slayer · · Score: 2, Insightful

    I hope that Valve did not put all their efforts into just catching the people who did it. I admit that those people did break the law and need to be caught but Valve is a company that relies on it's products.

    Seeing as this game has been delayed since before this incident I wonder exactly as to the calibur of the game. If they shifted too much focus off development they might have shot themselves in the foot when they release a sub-par game.

    So if anyone from Valve is reading this or you know someone who works there just give them a gentle nudge and remind them that we care about the quality of their games and the promptness in which they are delivered. Not that Half Life 2 is vaporware or anything but people are losing interest just because of the delay.

    --
    Push harder towards Open Media/Content
  4. Let's just be honest here... by bigdady92 · · Score: 5, Insightful

    They aren't saying anything more than "Yup we got somebody"

    They aren't saying for sure it was the people that stole it.

    They aren't saying how they got them.

    They are't saying what they took from them.

    They are only saying they got SOMEBODY but who knows if it's really the guys or someone that downloaded a copy of the game from some warez IRC site and just redistributed it.

    Besides, until we get full details that the game is released/on schedule/delayed it really won't matter too much.

    --
    Wheel of Time: Book by Book and Sumview (summary review) Bigdady92 style: http://bigdady92.blogspot.com/
  5. Harder penalties for Pirates? by untwisted · · Score: 2, Insightful

    I wonder what this means for the people who got arrested. It sounds like these guys come from all around the world, is this a chance for the pirate community to unite? By publically chasing these guys, there will be someone who tries to support them, or try to top them. As an open source supporter, I can see some pirates trying to make themselves martyrs by saying they were pushing open source, but even as the supporter of open source that I am, I see reasons for games to be closed source, and sold. Are these guys going to be made poster children for punishing pirates? It seems like a really good time to get some PR in the "If you pirate, you get your ass kicked" department. I'll be interrested to see what happens.

    --
    --untwisted
  6. Someone dropped a dime by Supp0rtLinux · · Score: 3, Insightful

    Notice that M$ hasn't made similar announcements about their recent source code theft problems? Probably cause they realize that for every hacker who use it to try and exploit a vulnerability, another hacker will rewrite part of the code and make it better, more stable, and more secure. Heck with Microsoft source code out there, Windows could one day be a stable, secure platform for people to migrate to instead of from

    1. Re:Someone dropped a dime by The+Bungi · · Score: 2, Insightful
      I take it you get your news from Slashdot. I never would have guessed from your nick. Oh, and someone modded you up. Shocking!

      Score one for non sequitur opportunities to use "M$" in a discussion that has otherwise nothing to do with Windows or Microsoft. Mad propz.

      Make sure you post some "M$"-related thing in the next article about genetically modified Burmese Vampire Hedgehogs.

  7. Good by pilkul · · Score: 5, Insightful
    I'm glad police cyber-crimes units are taking care of real criminals instead of wasting their time going after petty file-sharers. These people (if they are indeed the culprits) are the real problem --- illegally breaking into servers and stealing private information. They directly hurt the community of Half-Life fans by causing disorder at Valve, and they probably had a negative effect on the entire gaming industry as companies were forced to tighten their security policy.

    I'm a supporter of open source, but "forced open source" by cracking developers' computers and making their data public is just unethical. These people were real black hats; IIRC, they wrote cracking programs for their private use, specifically to crack Valve --- every sysadmin's worst nightmare. I hope crackdowns like this will get more prominent media attention in the future.

  8. Perhaps a show of appreciation... by miketang16 · · Score: 4, Insightful

    "Everyone here at Valve is once again reminded of how much we owe to the gaming community."

    As a show of appreciation, how about taking the not so difficult step of porting HL2 to the Linux platform? I could understand if the game was written completely in DirectX, but it supports OpenGL which is fairly portable from one OS to another. Oh well... wishful thinking...

    --
    -------
    "In times of universal deceit, telling the truth becomes a revolutionary act."
    -- George Orwell
    1. Re:Perhaps a show of appreciation... by LurkerXXX · · Score: 2, Insightful

      As a show of appreciation? How do you know the guys that helped catch the guy use or even care about Linux?

  9. Re:Points of interest by Sajma · · Score: 3, Insightful
    3. A possible sign that Valve should hire more people so they can release it sooner.

    (standard mythical man-month rant elided)

    Bottom line: more people at this stage == bad idea.

  10. Re:I wonder if... by pilkul · · Score: 5, Insightful

    You might be right. But I wonder if the leak might not have caused a lot of chaos at Valve as well. I can imagine angry speeches from bosses, IT staff getting fired etc as a result of the crack. They may have had to realign much of their organization to have a stronger security focus. Certainly plain old delays are common in the gaming industry, but it seems also quite plausible to me that the leak may have played a part.

  11. Re:loading, please wait... by Anonymous Coward · · Score: 1, Insightful

    Prison rape is not a joking matter. Really. Suppose your brother had been raped in prison. Suppose you had been?

  12. Re:I guess they closed that leaky Valve? by The+Only+Druid · · Score: 5, Insightful

    No, its not. Its not even funny.

    Freeman, if anything, is a reference either to slavery or the 'Dune' series. There's no real relationship with the idea of a free game or intellectual property theft.

    What might have been ironic is if the game were entitled "Unstealable" or something, but even that would be a stretch at best.

    --
    "Stumble before you crawl"
  13. Re:Couldn't this (the leak)be a good thing for val by Xaroth · · Score: 2, Insightful

    Considering that a large portion of the money they will make from all of this will be the licensing of the underlying engine, no. Turning it into OSS would not only destroy their chances to make some *real* money off of the engine, it would also mean throwing years of work and untold sums of R&D money to the wind.

    Besides, there's no reason for a company like Valve to give away what is obviously worth a (perhaps not so) small fortune on its own. Now, maybe if their R&D work on the engine had come for free, *then* they could justify open sourcing it all. But, until the cost of developing such an engine approaches $0, don't expect anything like that to come any time soon.

  14. Re:Points of interest by 0racle · · Score: 2, Insightful
    Its quite simple really, people who wish to do something they're not supposed to, ie download music illegally, do not want you to think of it as stealing or theft because then they're theives, which is wrong. They attempt to justify this position by saying nothing *physical* was taken, they still have the original to release, therefore it was not stealing. Under these circumstances this use of the word 'steal' becomes important:
    Idiom: steal (someone's) thunder
    To use, appropriate, or preempt the use of another's idea, especially to one's own advantage and without consent by the originator.
    Anything taken, copied, downloaded and such without the owners permission is taking something you have no right to. That is Theft, plain and simple.
    Steal: To take and carry away, feloniously; to take without right or leave, and with intent to keep wrongfully; as, to steal the personal goods of another.
    --
    "I use a Mac because I'm just better than you are."
  15. Re:did they just arrest some people distributing.. by Anonymous Coward · · Score: 5, Insightful

    when they had no realistical hope of meeting the deadline(a deadline that they should have set and met 2 fucking years ago anyways).

    The first the general public knew about the existence of Half-Life 2 (beyond a few rumours) was not long before E3 last year, a bit over a year ago.

    Everyone's a security expert when it's somebody else's computer system that been broken into. Can you honestly say you've never done anything that might have potentially allowed a determined individual access to your private network?

    The original Half-Life was over a year late; that year transformed the game from a probable also-ran to being something memorable. Yes, it sucks that the sequel is delayed too, but I'd much rather they had the guts to go against what they've said and fix the problems they obviously saw in what they were creating.

    People are endlessly complaining about games being rushed to market, with horrible gameplay bugs or terrible hardware requirements, necessitating a series of patches to make the game halfway playable. I gather a good deal of what Valve has been up to is playtesting the game, making sure it's worth playing and is as good as they can reasonably make it. Weren't there complaints recently about the savegames in Thief 3 being broken? Perhaps that's the sort of thing they're trying to avoid.

    Then there are claims of 'scripting' in the leaked demos. Believe it or not, some things have to be scripted. Decent AI might get a simulated soldier to behave realistically and evade or attack the player at appropriate moments, but higher-order behaviours (like, say, breaking a door open) need to be scripted. It would be impressive for a human player to instantaneously figure out all the interactive aspects of a map, let alone a computer-controlled enemy. The scripting for such complex behaviours needs a lot of work to take account of many different possiblities, and it's obvious that Valve didn't include all of them in the demonstration map. But it's not as if the whole lot was faked, like the E3 2000 Halo demonstration...

    I've done a bunch of single-player mapping for Half-Life. One of the hardest things is the scripting - not the obvious, scripted sequence stuff, but the behind-the-scenes mechanics which makes the world come alive. AI works for the moment, while scripting is needed to set the scene, and to make the enemies more than simplistic automata. AI drives the scripting, and scripting drives the AI.

    But then, everyone's an armchair expert, and AI can do everything, release dates are always reached, and networks are impervious. I'd like to see these experts create a game...

  16. After all by bonch · · Score: 3, Insightful

    There's really no way they could sit on a game for nine months reworking the code to break compatibility with potential cracks for the leaked code. It's neither that long of a project, nor an justifiable use of man-hours.

    After all, you have inside knowledge that people working on the project would have, and you just happen to know how long reworking all of Steam from scratch due to its leak would take, not to mention redoing Half-Life 2's network code.

    Seeing as how Counterstrike is such a bastion of non-cheating, there's no way Valve is taking a long time making sure the net-based Steam client is up to snuff after a source code leak on the Internet!

    Thanks for enlightening us, Miss Cleo.

    1. Re:After all by pilkul · · Score: 2, Insightful

      That's easy to say, but it's in the nature of games that they can't be both efficient and perfectly secure. Obscurity is the only option in this case.

    2. Re:After all by Chandon+Seldon · · Score: 3, Insightful

      "Security through obscurity" is a phrase, in english, that refers to a specific class of security designs - where the system is secure because the attacker doesn't know how it works. That type of system is frowned upon by security experts because of one or more of the following:
      A.) The user needs to know how the system works to operate it, thus making the system insecure to anyone who has ever been a legitimate user.
      B.) The system can be reverse-engineered, at which point the attacker will understand the system - thus breaking any security.
      C.) Obscuring the method of security prevents any security review, therefore making it impossible to know if the system is secure or not.

      In an obscurity-free security system you create a system where even if how it works is known security hasn't been comprimised. A good example of this would be key based cryptography. If two people who are communicating using a key based cyrptosystem (such as RSA, Blowfish, DES, etc) keep their keys safe, their message cannot be read by an attacker - even an attacker who knows how RSA works. If they reveal their keys, then anyone can read their messages - but the cryptosystem itself won't be broken; other people who have not revealed their keys will still have security.

      Now you seem to be claiming that since the keys have to be kept secret that key based cryptography is "security through obscurity". That's misusing a well-defined english phrase - which properly refers to the first class of security systems that I describe above.

      --
      -- The act of censorship is always worse than whatever is being censored. Always.
  17. I doubt they arrested the real culprits by defile · · Score: 2, Insightful

    They probably just rounded up people who happened to have the source code on their machines (ratted out by friends/enemies, etc.) and asked them where they got it. If they couldn't name names, they were further scrutinized. If they can't name names (practical joke gone awry?) have the "capacity to commit the crime" (ie, they're techies) they get charged. Follow the names that were named. Repeat until the number of people you've arrested sounds impressive.

    This makes great headlines and eases the PHB's nerves, but doesn't really solve anything. The original perpetrator may get away with it scott free, even.

    Just inventing details...

  18. Re:My idea of justice by Coneasfast · · Score: 2, Insightful

    i don't understand why xen was unpopular! i sure liked it! no seriously. it was cool, the bouncing around and the healing thingy.

    --
    Marge, get me your address book, 4 beers, and my conversation hat.
  19. Re:I guess they closed that leaky Valve? by orasio · · Score: 3, Insightful

    Hm.. there is no such thing as intellectual property theft, more like
    copyright infringement.
    The problem here is not that someone stole some CD or could break into some computer, but that the code was distributed.
    There would have to be such a thing as intellectual property, from which its legitimate owner could be deprived, in order for theft to happen.

  20. The delay is justified. by Anonymous Coward · · Score: 2, Insightful

    I can see a reason for a lengthy delay here. Say they were almost done coding the entire thing. Now, they get cracked, someone takes their source, and distributes a few copies.

    Can this code be deemed secure without a full audit of all the code? Could the crackers have reasonably included a backdoor in the program?

    If they were able to include some malicious code in HL2, and Valve were to distribute it without checking every last line, that would not only be a PR nightmare, but a rather serious security risk for their customers.

    Now, this may not be difficult, they could go to their last backup (if they have a recent one). They'd still have to rewrite quite a bit of code, which also takes more time.

    Not to mention the time it takes to lock down what appears to be a fairly insecure network before continuing (so it doesn't happen again during development).

    I can see how something like this could knock back the project a month or two easily. If they're already behind schedule, this just makes things worse.

  21. Re:Points of interest by Minna+Kirai · · Score: 2, Insightful
    The other definition is the "guy in the street definition",

    To interpret "guy in the street" (or "pedestrian") word meaning, we must compare with commonly accepted uses of the word.

    Here are two sentences that are widely acceptable uses of "steal" regarding intellectual property:
    1. "He stole my invention"


    2. "She stole my song"
    In both cases, it is implied that something similar has happened: the victim was working on a project, and was spied on by another person, who went on to publish that idea and claim it as his/her own (preventing the actual author from getting credit for the work). "He/she stole my $INTELLECTUAL_PROPERTY" is an accusation of plagiarism, not theft.

    And the Half-Life 2 incident never included any attempt to claim authorship of that code.

    comes down to "taking stuff without paying".

    And then you get into what "taking" means. Ask a pedestrian if something has really been "taken" if the victim still has it... no, that's not "taking". It's more "taking a copy", or even just "seeing".

    So it becomes "seeing without paying". And the street guy will think "Oh, I see stuff on TV all the time, and never pay"

    The debate would be improved if people argued with the *message* of what was being said, not the *wording*.

    It's the MPAA/RIAA/BSA that causes that problem by using by basing their argument on that wording: "Stealing is obviously wrong. Copyright infringement is actually stealing. So copyright infringement is wrong too".

    Reminds me of the logic of a certain US president... "Terrorists are obviously evil. You guys are actually terrorists. So you are evil too"
  22. Re:I wonder if... by SphericalCrusher · · Score: 4, Insightful

    I just hate the fact that when developers do get behind schedule, everyfuckingbody jumps at them. Maybe Valve should just be more like idSoftware, with the motto of "It'll be finished when it's finished." That way, they won't have any annoying ass gamers bitching and starting hate crimes against them when they miss a release date. I just think all developers should be like that. Besides, so what if they miss a release date? As long as they are taking their time and make an awesome game, I'll be happy. Sure, I'd want it to come out faster, but I would drop that need over the chance that the game would be improved if kept in development longer. Look at Enter the Matrix... they rushed to hit the release date, missed it, rushed some more.. and made a very shitty game.

    --
    "Instant gratification takes too long." - Carrie Fisher
  23. Re:Points of interest by DragonMagic · · Score: 4, Insightful

    How is it different?

    Valve still has the code, the music companies still have their audio.

    How on earth is there a distinction? Because one needed another illegal means to get the files, while other it just downloading?

    If you call one theft, you have to call the other theft.

    --

    Human nature is the same everywhere; the modes only are different. -- Earl of Chesterfield
  24. Re:I guess they closed that leaky Valve? by The+Only+Druid · · Score: 3, Insightful

    I'm sure the thousands of lawyers in 'intellectual property' classes, not to mention the lawyers who practice in it, would disagree with you.

    Someone either broke physically into their building, broke electronically into their servers, or illegally duplicated a legal copy (which is defined by law as theft), so no matter what Valve had something stolen from them.

    Next time you want to make a snide comment about the lack of 'intellectual property', you do me a favor and suggest at the same time why any programmers should be paid. Is it for their labor? Then no programmers should ever have 'rights' to their code, right?

    --
    "Stumble before you crawl"
  25. Re:loading, please wait... by mrchaotica · · Score: 2, Insightful
    That would help a different problem.

    It stands to reason that the people that rape others in prison are there for violent crimes to begin with (i.e. actually should be there.

    Even if you removed all the people who "shouldn't be there" (exactly who that should be is a different discussion), you'd still have the problem of the violent criminals raping each other. Before you say "but they deserve it!" remember these things:
    • The U.S. forbids "cruel and unusual" punishment. It's been established that rape qualifies.
    • Neither you nor the rapist gets to decide who "deserves it"!
    --

    "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  26. Points of interest that you missed by Tim+Browse · · Score: 5, Insightful

    7. What moron thinks there's such a thing as 100% security?

    8. What moron thinks you can ship software faster just by hiring more people?

    9. Maybe the 'retarded' programmer was actually trying to do his job and get the work done as soon as possible, and not reading bugtraq all the live long day or modelling attack trees so he wouldn't get owned.

    10. Cut Valve some slack. They are the victims here, despite what some might think.

  27. Re:I guess they closed that leaky Valve? by Anonymous Coward · · Score: 1, Insightful

    You misunderstand. People who claim that there is no such thing as IP theft don't live in the same world as us; yes, the laws are the same, and they can still be fined or jailed for doing what they claim can't be done, but the thing is they just refuse to believe.

    Such people don't have to think about earning a living as a programmer because they either can't do it in the first place, or would never be hired if they could - issues with reality are a significant drawback in most employer's eyes. And these nuts would never sign the confidentiality agreement anyway.

    It's sort of like believing Benny Hinn can cure your blindness. Getting caught is the same as walking off the edge of Benny's stage and breaking your neck because you can't see.

  28. Re:Points of interest by Fallen_Knight · · Score: 4, Insightful

    valves code wasn't published, and to get it they had to hack (well trick) valve to get it.

    I would be the charges laid on the hackers would not be theft, corporate espionage, hacking, copyright violations, and such.

    Downloading music is much diffrence as its published, someone is offering you a copy (witch is why downloaders are kinda safe and uploaders are not)

    Also the money lost by each act is diffrent, vavle has taken a BIG hit in the $$ department because of the "theft", how much (if any) money the RIAA and co lose when a song is copied is debatable and might be a gain.

    That is why poeple get all up in arms about P2P being called tehft, but when it comes to valve and sounce code theft they tolerate and join in in calling it theft, its much more like theft and it did cause damage to valve in many ways, unlike P2P.

    and it STILL isn't theft, it is a multitude of other crimes, but NOT theft at all.

    if this was theft, there would be no such charge as corporate espionage. because all corporate espionage is is "stealing" information and ideas.

    Neither is theft. One is copyright violations, the other is corporate espionage/hacking/copyright.

  29. Re:Points of interest by caryw · · Score: 3, Insightful

    Big difference.

    Mp3's are already ready for public consumption. The public already has access to the song, be it on the radio, a cd in a store, in a friend's car, whatever. By downloading that song you are getting a copy of the finished product that many others already have.

    Source code, however, is definitely not in a form for public consumption. Nobody should have the source code unless they're part of the project.

    Stealing the source code would be analogous to stealing the band that makes the music, not the finished product.

    band:mp3::souce code:binary

  30. Re:loading, please wait... by Minna+Kirai · · Score: 3, Insightful

    Can someone please tell me why anal rape is so funny to Americans?

    Sexual assault is now a major component of the US criminal justice system. The understanding is that the strongest prisoners will rape the others. It's an unspoken additional punishment that law-enforcement winks at.

    This is related to the way that the Iraqi prison scandal got started (the US MP who was court martialed was a New Jersey prison guard in civilian life, remember). Of course, in Abu Ghariab the prisoners didn't start on their own, and needed some prodding to get the idea...

    Imagine being raped in the arse repeatedly for "Stealing" some source code...

    Or for growing marijuana... no, it's not fair, is it?

  31. Re:I guess they closed that leaky Valve? by Anonymous Coward · · Score: 1, Insightful

    There's a powerful argument - something found on a popup-farm on the Intarweb!!!111!!!1

    But you forget - in accessing Valve's systems the thief rendered questionable the integrity of the code. Valve couldn't use it for some time until it had been checked. The thief did have posession, in that only the thief knew whether it was trustworthy or not. Valve had to waste valueable resources finding that our for themselves. Or maybe you feel they would have just said "looks like it's all there! let's ship!"?

  32. Re:Points of interest by MrScience · · Score: 2, Insightful

    What moron allows an email to install a keyboard sniffer on his computer. Anti-virus and patches take care of a lot of that. Not to mention the network guys should have caught that one quick.

    What?? A/V patches wouldn't do anything if it was custom written. And how the heck are network admins going to catch a few tiny URL posts (assuming the logger sent packets via port 8000) in all the traffic a big corporation generates.

    I mean, seriously... the moron may not even have had a good email client that let him know something was running-- and that is ignoring the various overflow bugs that could have been exploited.

    --

    You quitting proves that the karma kap worked. The most annoying of the whores shut up. --CmdrTaco

  33. Re:I wonder if... by Vengeance_au · · Score: 2, Insightful

    To build on this point - I've got a coupon for Half Life 2 that came with an ATI video card. That coupon is about 7 or 8 months old, as is the (at the time bleeding edge) Radeon 9800. I'm jacked that I'm waiting for a game I've paid for is not in my hands. I'll be even more ropeable if the video card has ANY troubles with the game at all, but thats another story.

    Serves me right I suppose.... repeat after me boys and girls, never pay for something that is not available yet. Preordered games fall into the same category.

    Ah well, I guess Far Cry will tide me over :-).

  34. Re:Points of interest by lavaface · · Score: 2, Insightful

    This isn't a proper analogy. Stealing the source to the game is more like stealing the master tapes for a music track. A closer comparison for downloading an mp3 (a finished product) would be downloading the game (a finished product.) The fact that the source code included copy protection measures only compounds the problem.

  35. Copying or theft? by Andy+Smith · · Score: 3, Insightful

    I swear this isn't flamebait!

    How come in Slashdot discussions about music/film piracy, we get hundreds of posts from people arguing that piracy isn't theft, it's "sharing". But in this thread, everyone's talking about how the source code was "stolen".

    1. Re:Copying or theft? by Anonymous Coward · · Score: 1, Insightful


      Hold on. Are you asking the difference between distributing source code and binary data? You know, pirates have been distributing binary application data for a *lot* longer than binary music data. This is source code. Do you really need an explanation of the difference? If Valve doesn't come after these guys, someone can take their code and essentially pull it into their own tree without consequence. In musical terms, it's like stealing lymerics or parts of other artist's music and putting it into their own... without consequence. This is a *lot* more obvious of an infringement in my eyes.

  36. Re:Source code theft and Half-Life 2 being late by rallen911 · · Score: 3, Insightful

    I am just as bummed about HL2 being late as anyone, but what I don't get is why so many people are ATTACKING the developers. They are making a game to sell. Don't you think they want to release it as soon as possible? They announced a release date last summer. It didn't happen. GET OVER IT!!! They don't owe anybody anything except a good product when it ships. If people don't buy it, because they have lost interest, fine. Valve doesn't make as much money, and probably takes steps to prevent this type of thing in the future. My guess is everyone who is bitching about it will buy the game, and be totally blown away. Do you think they will eat a little crow when the time comes? NOPE. They will just be bitching about the next thing.