Slashdot Mirror


Researcher Uses Valve Security Bug To Upload Paint Drying Game On Steam (softpedia.com)

An anonymous reader writes: A security researcher found two bypasses in Valve's game review process that eventually allowed him to publish Steam Trading Cards and a full game on the Steam Store called "Watch Paint Dry" (reference to this case from last month involving the British film censors). The game was supposed to be an April Fools' Day prank, but the researcher forgot to set a release date, and [the game] was published on the Steam Store last weekend. Valve has fixed the security bypass in the meantime. These bypasses were extremely dangerous since they allowed anyone to publish games on the Store (possibly containing malware) without a Valve employee ever taking a look at them, or knowing they went through the review process.

2 of 48 comments (clear)

  1. a walk through on how it was done by pikalek · · Score: 4, Informative

    a walk through on how it was done can be read here: http://gamasutra.com/blogs/Rub... or here: https://medium.com/@rubiimeow/...

  2. Re:Damnit! by Qzukk · · Score: 3, Informative

    According to http://wiki.scummvm.org/index.... the best way to go about it is to pick an engine that ScummVM supports (SCI, AGI, or Wintermute 2D) and make a game for that engine.

    There's links for each:

    http://wiki.scummvm.org/index....
    http://wiki.scummvm.org/index....
    http://wiki.scummvm.org/index....

    --
    If I have been able to see further than others, it is because I bought a pair of binoculars.