WTF? Did Valve ever heard of security?

[Malic]

Ok.
Imagine you would code a Multimillion $ game.
Would you have it on a hd with accessable internet connection?
I mean why they dont used an closed system? Some pcs
for the developers without internet connection?
But damn. gabe gave out his e-mail adress and had access from his pc to all the hl2 code, beta etc... i think its their fault it got leaked.

 

[Gorgon]

I posted that before, but you know they imagined that they have IBM+SISCO firewalls.

 

[Malic]

well... firewall didnt work.
its their fault... end of story.. they should have spent a few thousands more in security instead of buying donuts for gabe. now the game is delayed... BS.

 

[No Limit]

WTF? Did Malic ever heard of searching?

 

[Gorgon]

if this game delayed till april 04, D3+SOL will terminate it by their technology. HL2 in that time will only worth playing because of one thing (storyline.)

 

[Mandelbrot]

Reverse Telnet

Too many network admins forget about how to stop it and it's usually an open door for anybody looking to get into a network. And there's the network admins leaving basic/deafult passwords on their routers and firewalls.

Even for basic network security, they need to setup an access-list that allows no traffic to come into the network unless it was originated from inside the network. Then there's setting up all procotols to be blocked except for specific TCP ports, etc. Unfortunately, a lot of people never learn about their network loopholes until it's too late (ie: Valve)

Either way.. it's too late.

 

[Shuzer]

Originally posted by G0rgon
if this game delayed till april 04, D3+SOL will terminate it by their technology. HL2 in that time will only worth playing because of one thing (storyline.)

By that logic, you're saying that if HL2 will only have a half a year or so life span, if it comes out holidays? Holidays, and then once D3 comes out, HL2 is old news and no one cares? I think not...

 

[PriNcE oF SpAcE]

Originally posted by Malic
well... firewall didnt work.
its their fault... end of story.. they should have spent a few thousands more in security instead of buying donuts for gabe. now the game is delayed... BS.

remember that if you ever get shot down in the streets...it's your own fault you could have worn a bullet-proof vest.

I say again, it's not fair to place blame on Valve...the ones you should blame should be the hackers.

 

[Malic]

Originally posted by PriNcE oF SpAcE
remember that if you ever get shot down in the streets...it's your own fault you could have worn a bullet-proof vest.

I say again, it's not fair to place blame on Valve...the ones you should blame should be the hackers.

True. BUT: if i would live in a city where 1000s want to shoot me you can be sure i would wear a ****in tank...

Its not like valve didnt expect any users to even try to hack em..

 

[.5c0ut-WHoR3.]

Well even if they put "Millions" into security from anything, there is always a fault somewhere - so a hacker (very skilled one) could just pop in and take a look around.

No system is perfect.

 

[Malic]

Originally posted by .5c0ut-WHoR3.
Well even if they put "Millions" into security from anything, there is always a fault somewhere - so a hacker (very skilled one) could just pop in and take a look around.

No system is perfect.

true... but from what i heard (outlook express was it) it was far from beeing half of what i call a secure system.

 

[BeagleWorth]

It's not Valve's fault.

It's the fault of the person who using a security hole to grab the source.

We live in such an hypocritical society where we put the blame on whom we can most easely bash.

All laws and security or not for people to protect themselves, it is to stop the abusers.

 

[Gorgon]

Originally posted by Shuzer
By that logic, you're saying that if HL2 will only have a half a year or so life span, if it comes out holidays? Holidays, and then once D3 comes out, HL2 is old news and no one cares? I think not...

I know what you mean, but I THINK you have your point and I have mine. :cheers:

 

[PriNcE oF SpAcE]

Originally posted by BeagleWorth
It's not Valve's fault.

It's the fault of the person who using a security hole to grab the source.

We live in such an hypocritical society where we put the blame on whom we can most easely bash.

All laws and security or not for people to protect themselves, it is to stop the abusers.

word! that was what I was trying to get across.

since there's a malicious 3rd party involved it's not Valve's fault...no matter how Naíve they might have acted.

 

[Maskirovka]

yay, another worthless post from another know-it-all being critical of valve's security.

of course it was bad. what happened happened. get over it

 

[Gilgamesh]

Well it's kind of funny hearing you folks talk about security and such, and some of you don't have a clue.

but the person who mentioned that the Valve Code servers should be on a private network with no internet access are right on the money with that one.

There is no reason any of those servers should have had any type of access to the internet.

Which again leaves me to believe this is a big time Fake Story to cover up the fact that this game was not coming out this XMas.

 

[Unnamed_Player]

It's partially Valve's fault. Lax security on a network that is connected to the internet is like leaving the front door to your house unlocked at night. The only way for the thieves to find out that your door is unlocked is to check it and since it looks the same as all your neighbors locked doors they'll have to check them all. Now on any given night the probability of them finding your unlocked door is very small, but a persistant thief will eventually find it and that one night that he does is likely to suck for you.

Is he wrong for breaking into your house? Yes he is.
Are you partially to blame for not taking simple precautions? You bet.

Valve were bitten by Microsoft software holes. Now you would think that two former Microsoft employees, of all people, would know to patch their stuff regularly. That's CIS101 stuff!

So, is the hacker wrong for stealing the stuff? Yes, very wrong.
Are Valve partially to blame for not implenting some simple security rules? Yes they are.

With their security like it was it was inevitable that they were going to get bit someday. The upshot is that it probably isn't likely to happen to them ever again. You know what they say, "Fool me once..."

 

[BeagleWorth]

If a computer is behind a firewall it is technically not on the internet.

The hackers got to install a software on a machine internal to the network by using a security hole of the mail software they are using.

So really, the hackers were stealing from inside Valve's network.

The real way to have been fully protected would have been to have each developer have 2 machines.

One that is on an internal network not linked to a firewall and with no acess to the internet. They would use that machine for development.

The other machine would have been connected to a second internal network connected to the internet. They would use that machine for internet activities.

That way the thieves could have got only into the network connected to the internet and would have never seen the source.

But obviously this is unproductive and expensive.

 

[Cheetarah654]

hey malic chill dude, youre just pissed off cause the gameis getting all ****ed, but blaming valve is the very wrong hting to do.

 

[Frizz]

d3 sucks it looks poor tbh dx2 looks 1000x better d3 looks like a 5 year olds toy

hl2 20000x better
stalker 19999x times better
farcry look better fs

 

[svMedia]

For starters... how can it be Valve's fault??? It sounds like an inside job! And another thing... NOTHING is 100% secure!!! If you can write software and encrypt it, it CAN and WILL be hacked. Saying that they have poor security and it was their fault that they didn't protect themselves better is like saying that once a life has been created it can't be destroyed. Anything made can be unmade, anyrhing protected can be unprotected. This is just like the whole deal with Microsoft... with all the latest and greatest viruses coming out people are blaming Microsoft for not developing a better OS, or a more secure OS. NEW FLASH people... Microsoft has one of the BEST and MOST SECURE Operating Systems on the planet!!! And do NOT come back saying, "then why is it always being hacked?" because you know what... that doesn't make a bit of difference... the Microsoft OS is on hundreds of millions of computers in the world so of course it would "seem" that Microsoft is always being hacked because it's the most "popular" and most widely used! Anyway... I'm way off on a tangent. But there is definate truth to what I'm saying. Valve is not responsible... the one who leaked the source IS!