Slashdot Mirror


Lineage III Source Code Stolen?

Shack News and the Korean newspaper Chosun Ilbo are reporting that sourcecode for the MMOG Lineage III may have been stolen. As the third Massively Multiplayer game in a huge-selling South Korean series released by publisher NCSoft, over a billion dollars may be lost as a result of this theft. "The Seoul Metropolitan Police said Wednesday that seven former NCsoft employees are suspected of having sold the technology to a major Japanese game company. The seven left the Korean firm in February and allowed the Japanese company to review the software during a job interview. Police believe that the technology might have been copied during the demonstration."

21 of 61 comments (clear)

  1. The Departed by biocute · · Score: 2, Interesting

    How did NCSoft know about the leaks?

    I don't think any company would publicize its interviews, and I doubt these former employees would sing about their code demonstration.

    That means there might be a NCSoft mole inside the competitor.

    1. Re:The Departed by fishybell · · Score: 3, Insightful
      Well, without reading TFA, I would say it's pretty similar to any other data loss incident. You notice someone has the data (or the internet has it) and you investigate. Oh, some of your previous employees work for them now, that's a pretty indicator of who-done-it. A few subpoenas later you've found out the entire story.

      A company I used to work for lost their customer data in a similar way. An employee quit and took the entire database with him. We noticed there was a problem when a large amount of the customers started telling us about a competitor trying to sell them their product. Well, my company looked into it, and a few subpoenas and a lawsuit later everything was fixed.

      --
      ><));>
  2. Wow. by Z0mb1eman · · Score: 5, Insightful

    They lost over $1 billion because of the theft?

    It's gotta suck only having one copy of the code. Now they gotta write it again from scratch, or hope the other company gives it back. They should've made backups.

    Wait, what?

    --
    ClutterMe.com - easiest site creation on the Net. Just click and type.
    1. Re:Wow. by textstring · · Score: 2, Funny

      must be that exchange rate
      thanks for the laugh

  3. Uh by Knara · · Score: 4, Insightful

    The code was copied, not stolen. Talk about alarmist press. Even if one of their direct competitors got the code, what good is it going to do them? Players of lineage will continue to play lineage (cuz lineage people are obsessed, I think). It's not like someone's gonna be able to plop the code on some server farm in a couple weeks and make a competing mmo.

    1. Re:Uh by HTH+NE1 · · Score: 4, Insightful

      The code was copied, not stolen. Indeed, when talking about movies and music we have contingents so ready to say "copyright infringement isn't theft" but when it's unpublished source code the terms "stolen" and "theft" are used without any hesitation.

      Can't we just agree to say "illegally copied" across the board?
      --
      Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    2. Re:Uh by Fnkmaster · · Score: 4, Insightful

      Furthermore, the competitors would be foolish to ever use the code. They'll get sued into the ground for copyright infringement.

      This sounds ridiculous. It's unlikely to cost anybody anything except legal fees.

    3. Re:Uh by Miniluv · · Score: 4, Insightful

      MMOGs don't compete on technology for the most part, they compete on content and aesthetic. There is one possible exception to this, that being EVE Online in that they are basically the only un-sharded MMO I can find record of. And they talk pretty openly about most of the technology "secret sauce" that goes into sustaining their simultaneity numbers.

    4. Re:Uh by KDR_11k · · Score: 2, Insightful

      How about "espionage"?

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    5. Re:Uh by KDR_11k · · Score: 2, Insightful

      If it was possible to do such things just by knowing how it works the developer is really, REALLY dumb and deserves the resulting fiasco. That's like being able to gain root on a box just because you know how the password hashing works. The mechanism isn't supposed to be the secret, the data it is fed is.

      --
      Justice is the sheep getting arrested while an impartial judge declares the vote void.
    6. Re:Uh by MBGMorden · · Score: 2, Funny

      Kinda hypocritical. Either you can "steal" a piece of information or you can't. Bringing in "states" and "unpublished" is needless and only serves to vilify one type of copying ("They stole teh codez!"), while condoning another ("I just got Spiderman 3 for free off Bittorrent!").

      Now, I'm fairly anti-copyright myself anyways, but I say lets hold the same attitude in all cases. Information wants to be free right? Well then these guys were information rights activists. Those guys at NCSoft were probably performing all manner of crazy experiments on this code. I've heard from one person that semaphores may have even been involved. Twisted bastards.

      --
      "People who think they know everything are very annoying to those of us who do."-Mark Twain
  4. hmm by nomadic · · Score: 2, Funny

    Now Japan is copying Korean technology? Talk about turnabout...

  5. Something stinks about these accusations by Anonymous Coward · · Score: 5, Insightful

    This sounds like sour grapes because they got their team poached.

    Now they're on a fishing expedition. Sorry but anyone who thinks you need to steal code to write an MMORG when you just poached a team that wrote one, or that the owner of code loase money because someone else sees it, OR that interviews are conducted by reviewing your previous employer's code, is a complete idiot.

    The biggest component of an MMORPG is content and design, not actually the code. Sure there's server load ballancing and client pagine etc, but that is all tractible. Art (masses of it) and game design are king for MMORG, you don't need to steal code (and I am a programmer and have been a game programmer).

    If someone showed up for an interview with code the last thing you'd do is hire them.

  6. A billion dollars! by 91degrees · · Score: 2, Interesting

    They made about a billion dollars so far. So presumably they expect to make the same amount again from their existing codebase. That's about the only part that seems not entirely unreasonable.

    Somehow, now that this code has been "stolen", they are unable to make another penny from it. Anything they would have made will go to the new possessor of the code.

    From the other comments, I'm clearly not the only one who thinks this makes no sense. For this to be worth that much, the code, and the code alone would have to be the sole reason people were playing the game. Marketting made no difference, content made no difference, game design made no difference. People were only interested in the game engine. And now that another company has it, people are going to choose the other company in preference.

    Sure, the code isn't worthless. Knowing how a successful project works can save a lot of time, but the competitive advantage this gives isn't going to be anywhere near the order of magnitude suggested. We're talkng tens of thousands of dollars. Not a billion!

  7. Yes and no by Moraelin · · Score: 3, Insightful

    Yes and no. Mostly I think you haven't thought about it much. There are a couple of problems I can see there right away:

    1. Rampant cheating. Think WoW Glider on steroids. If you have the source code, you can write a client which looks to the server 100% like a player at the keyboard on the official client. Write a client which drives a whole group of player characters on a farming or ganking spree from a single machine. Which _will_ screw up the game, and drive people away. (Especially in a game where _all_ there is to do is farm and PvP.) That's money lost.

    Or you could delay the game and invest in changing the whole protocol, so the old code doesn't even work with the server any more. Which again is money lost. Both extra development time, and time in which you're not collecting the monthly fees. A single month delay, if you had, say, 1 million players, is 10 to 15 million dollars lost in fees alone.

    But even if you do, someone saw all your weak points. Yes, most games do rely on security through obscurity, because noone has the funds, computing power and bandwidth, to do everything on the server securely. There's invariably a lot of functionality in the client, and you basically keep your fingers crossed. Maybe you code some "tripwires" on the server to detect if someone did something awfully wrong, but (A) it's still keeping your fingers crossed that noone will do something that you haven't checked, and (B) more importantly, whoever saw the code now also knows exactly what to avoid.

    Basically, it's pretty much _the_ cheating nightmare scenario.

    2. Whoever has that code will have a trivial job of making some "emulated" servers and stealing your subscribers that way. It's one thing to have a shabby half-way there alternative server available after a year, it's entirely another thing to maybe have a 100% perfect alternative right at the start.

    And yes, that _is_ money lost, and not just profits lost. Most MMOs have far more content than a single-player RPG. (Even Oblivion is a spit in the bucket compared to the sheer size of WoW.) For most, basically the boxed copy is subsidized, and they're betting you'll stay there for more than 2-3 months to break even and start making a profit. That already doesn't leave you with that much pure profit, since the average player stays about 6 months on a MMO. If half your player base buys the boxed copy and buggers off to play on someone else's servers, you'll feel it. If you also over-estimated a little what population you'll get (and hence, how much can you spend on development), it can turn a moderately survivable game into a flop right there and then.

    Yes, we all can look at WoW and see one big money printing license. They actually underestimated how many players they'll get. Most MMOs aren't WoW, though. Flops are more common than successes. Even big names like EQ2 or TSO have managed to get only a fraction of the player base they counted on. They may not have seen the plug pulled outright, but then again, others did. It doesn't take much of a shove to topple a game which already missed the mark.

    --
    A polar bear is a cartesian bear after a coordinate transform.
    1. Re:Yes and no by sethstorm · · Score: 2, Interesting

      Lineage hit the mark a long time ago. It's not as big as WoW. MMOcharts lists them with between 1M and 1.25M current active accounts and by that metric the number 2 AND number 3 in the market. That player base isn't going anywhere because of this little flash in the pan.

      Now if you were to subtract all bot/raid farming accounts, and accounts in known botfarming regions(e.g. China), I'd bet that number would drop far from 1.25M.


      I'd argue that if this was possible, the game code is already broken. In any event, there's any number of minor changes that could be made before release that can alleviate if not eliminate the problem. I don't see how any of it would require a huge investment in time.

      Their policy enforcement and design is broken - they slap on 2 applications that behave like rootkits (Themida, Gameguard) yet L2Walker and such go right through the front door without them being broken.


      Yeah, no way there'd be lawsuits there. Besides, people play MMOs for coherent content and (supposedly) the community/social aspects. If all your friends are on Lineage II, they're gonna move to Lineage III, not some half-assed quasi-Lineage that no one has heard of. I also think you're intentionally ignoring the infrastructure costs of running an MMO that would even start to compare with the player population of Lineage. Not to mention that the content would have to completely re-written in order to even start attracting players without attracting Lineage-Lawyers.

      Do those costs include the cost of defending the bot/raid farmers?

      Or change the protocol just enough that it doesn't work.
      Lineage II has seen tons of "protocol changes" and yet third party programs still persist.

      --
      Twitter supports and protects racists - by smearing their critics with the "Hate Speech" label.
    2. Re:Yes and no by Moraelin · · Score: 2, Informative

      Methinks you're still underestimating it, or maybe I haven't explained it well enough:

      A) Just having a number of players in Lineage 2 doesn't mean you'll have the same audience in Lineage 3. Ask Turbine about Asheron's Call 2, which flopped abysmally. Just being the sequel to AC1 didn't say much. Or ask Sony about Everquest 2. They went from EQ1 being the #1 MMO to EQ2 being a niche game. So what makes you think that Lineage III has already hit the mark, when it's not even released yet?

      B) You don't seem to understand how those "emulated" servers work. We're not talking something that just looks vaguely similar, we're talking stuff that's:

      - played with the official client, hence it looks exactly the same

      - quite often has the exact same maps, quests, etc, since enough information usually exists in the client. E.g., don't think that when you play WoW it transfers the landscape from the server. Your client CD already has those files. You'd be surprised what else is on a client CD. For starters all the quest texts and rewards.

      That's the way it worked ever since the first free servers were made for UO. The "emulated server" would be just an executable, maybe also some tools, and it would require an installed client or a client CD to get the rest of the game from. E.g., the whole Britannia map and all the creatures.

      And it's pretty hard to sue them, since:

      1. They're not distributing any copyrighted material. They don't distribute a copy of your map or meshes or textures, they tell people to go buy a boxed copy of the game for those. You can't easily forbid people from just making an exe that incidentally reads your files, or MS would stop OOo from working with Office files.

      2. It's hard to even take the DMCA route (which I don't think Korea has anyway), since they're not gaining or providing any unauthorized access to your servers. Quite the contrary, they let your client connect to their server, if anyone wants to. It's also not circumventing any copy-protection mechanisms, since a MMO isn't copy-protected anyway, and they're not telling people to copy anything.

      Now having a source theft is a different thing, but even there you'll first have to prove that they've actually used your files. It can take some time.

      At any rate, we're talking about something which is an exact clone of the official game at launch. We're not talking about asking people to switch to a similar game, but about asking them to play on a free server from the start. Having something like that from the start, when people don't have social networks keeping them on the official servers, can be very damaging.

      I din't know if it will actually happen to Lineage III, but it is a possibility.

      --
      A polar bear is a cartesian bear after a coordinate transform.
  8. Why is Parent Insightful? by rjhubs · · Score: 2, Insightful

    Leaked source code hurts a company not because they no longer have a copy of the code, but because the thousands of man hours that went into writing have been partially wasted. The code now needs to be rewritten to protect it from potential hackers and cheaters who will have a much easier time now that they know the inner workings of the code (remember the hl2 source leak?) Not to mention a rival company has acquired for free all your hard work and could effectively release a game very similar to lineage iii (it'd probably have to be free to avoid legal action.. IANAL) and hurt your potential sales. But there are many other reasons as well, but it boils down to: theft of intellectual property is indeed a loss despite what whoever modded parent insightful thinks.

    So please, mod parent funny.. but not insightful.

    1. Re:Why is Parent Insightful? by nog_lorp · · Score: 3, Insightful

      I always find it interesting when jokes get modded horribly wrong.
      However, if they need to rewrite the source code when someone malicious has seen it... well then it already needed to be rewritten, because all it had was "security through obscurity".

  9. Oh, the irony... by sethstorm · · Score: 3, Interesting

    They protect their other product (Lineage II) with Themida and Gameguard, yet they let a little unauthorized third party program walk right through, as well as not drop the botfarmers of the server(who have ruined the economy despite what some minority may say otherwise)

    I have no real sympathy for NCSoft in this case. Maybe if they dropped all the bots for good, stripped out the ineffective Gameguard / Themida, and supplanted the non-automated parts of L2Walker, they'd have a leg to stand on.

    --
    Twitter supports and protects racists - by smearing their critics with the "Hate Speech" label.
  10. Oh No! by Alzheimers · · Score: 2, Funny

    Now Slugworth will be able to produce an inferior and cheaper version of the Everlasting Gobstopper!