October 08, 2003

Playable version of Half-Life 2 stolen

From CNN.com

Theft of game's source code was just the beginning.


NEW YORK (CNN/Money) - When hackers broke into the computing system of Valve Software, they stole more than just the source code to Half-Life 2. They also stole enough game maps and other components to put together a playable build of the game. Today, five days after the first leak, they have released that build.

Message boards and chat rooms were buzzing Tuesday morning with word of the leaked game. Some fan-based and hacker sites were even displaying in-game images. It is unclear whether the leaked version features the entire game or a limited number of levels. Also unclear is how current the assets used to create the game are.

t's the latest in a series of frustrations for Vivendi Universal Games (V: Research, Estimates) and developer Valve. Earlier today, Christophe Ramboz, VU Games president of international operations, told Reuters the source code theft would result in a four month delay, pushing Half-Life 2 back to April 2004.

Valve, though, has not confirmed that delay. (Calls to the developer were not returned.) That's an important thing to note. Large independent game developers such as Valve and id Software typically decide when their games are released not the publishers.

The hunt for the thieves is ongoing, but a rough timeline of events has emerged. Somewhere on or around Sept. 11, hackers broke into the email of Valve founder Gabe Newell, possibly utilizing a security hole in Microsoft (MSFT: Research, Estimates) Outlook. Eight days later, they made a copy of the game's source tree. Keystroke recorders were also installed on the computers of several other employees. The invasion was methodical and seems deliberately aimed at the developer.

"This [keystroke] recorder is apparently a customized version ... created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools)," said Newell in a message board posting last week.

In the same post, Newell said the company had been subject to "a variety of denial of service attacks" over the past year. He was unsure whether these were related to the code theft.

The company has since minimized its network connection to the Internet, as it was still finding infected machines on Saturday.

The company has asked the Half-Life fan community for assistance as it searches for the attackers. Newell also mentioned in a Saturday update that it's possible other game developers might have been targeted by the same group.

"There's anecdotal evidence that other game developers have been targeted by whoever attacked us," he wrote. "This hasn't been confirmed. We've been providing other game developers with more detailed information about the exploits and evidence of infiltration."

Valve did not name the other developers who might have been targeted.

Id Software, though, knows a few things about source code leaks. Several of the company's biggest games, including all of the Quake games, have seen their source code leak out. Last year, a playable build of the still-in-development Doom 3 hit the Internet.

"It's happened enough that you think you'd start to get used to it," said Todd Hollenshead, CEO of id Software. "But whenever it happens, it's a sinking feeling. It's like somebody died. I don't mean to over dramatize it - I know its just a video game - but this is our lives here."

Today's release of a playable version of the game brings Vivendi's comments from earlier today into question. Ramboz told Reuters "a third of the source code was stolen". However, with the stolen game now out, it's possible a more complete version of the source code was taken.

While it's possible to make a playable version of a game without its complete source code, doing so without a strong knowledge of game development is extraordinarily challenging.

There are additional fears that the thieves could distribute other aspects of the game, which have not yet been officially announced.

Valve has been actively pursuing the thieves since the hacking came to light, which is a different approach than other developers have done in previous instances of code theft. Hollenshead said he understands where the drive to find who was responsible comes from, but questions its usefulness.

"From what I've seen of Half-Life 2, it looks like it's going to be a really fun game," he said. "My focus would be on doing the thing that's going to make the game great: Focus on finishing it. ... The risk is they find out who did it and [the hacker is] a resident of Russia. Then there's not a damn thing you can do about it. Ultimately, we're in the business of making games, not chasing hackers."

Half-Life 2 was shaping up to be the year's most anticipated PC game. Vivendi was counting on heavy sales to help it improve revenues and possibly make its gaming unit more attractive to potential buyers. The game, originally scheduled to be released Sept. 30, was first delayed on Sept. 23, with Valve saying it was "targeting a holiday release."

The leak could also have a negative impact on graphic chip manufacturer ATI, which Valve recently named the preferred graphics card partner of Half-Life 2. ATI (ATYT: Research, Estimates) planned to give away a free copy of the game with its two latest products. The leaked version could lessen demand for those graphics cards, though.

Posted by Muddy at October 8, 2003 09:30 AM | TrackBack


Pathetic. 4 months to implement a method to check to see if you have a hacked client? That's sad. In other news, the world's media is a bunch of liars anyhow and one should hesitate to believe much of what they say, especially about the wars in Iraq and Afghanistan.

Anytime you see Iraqi's protesting the US occupation, they were probably paid to stage the protest by reporters. How do *I* know? I've seen home video footage of reporters staging such stunts. Video shot by United States Marines and sailors. Howdaya likes dem apples?

Posted by: skywalker at October 10, 2003 09:02 PM

Skywalker your back! WooHoo!

Gimmie some more info so we can post up an article on it man.

Posted by: muddy at October 10, 2003 10:18 PM

Young Skywalker, you have returned? I will echo Muddy's "Whoo Hoo" and give you my own:)

Yes, yes, tell us more....preferably in person (your past due for a visit) but we'll take you anyway we can get ya:)

Posted by: mrs. muddy at October 10, 2003 10:42 PM

Back to the HL2 story at hand...

Microsoft security flaws have been blamed for the vunerabilities that allowed hackers to steal the code. VERY interesting. I'm curious to see if the publisher tries to litigate.

The odd part is that a company that is as into tech as a game developer left their systems unpatched and open to attack.

The delay forces them to miss the Christmas season - and I know one tree that would have had HL2 under it - and that has to hurt. I would think that they could come up with something workable to still hit their release date.

Single player would not be affected at all. They could develop something to screen versions for multiplayer later and still have the holiday to help with sales, perhaps?

What do I know though?

Posted by: Baker at October 16, 2003 09:06 AM
Post a comment

Remember personal info?