Seems the steampipes sprung a bit of a leak recently, as it's been confirmed that both Counter-Strike: Global Offensive and Team Fortress 2 had their source code put up online.
The popular but unofficial website SteamDB confirmed it on Twitter, with Valve following up from the CS:GO Twitter account later to also confirm it. There seemed to be some panic, with a claim of an exploit out in the wild although that doesn't appear to be true. Valve said:
"We have reviewed the leaked code and believe it to be a reposting of a limited CS:GO engine code depot released to partners in late 2017, and originally leaked in 2018. From this review, we have not found any reason for players to be alarmed or avoid the current builds."
"As always, playing on the official servers is recommended for greatest security."
"We will continue to investigate the situation and will update news outlets and players if we find anything to prove otherwise. In the meantime, if anyone has more information about the leak, the Valve security page (next tweet)* describes how best to report that information." *Valve Security Info
From additional info sent out from Valve, they did also confirm in these emails that the leak contained TF2 code too. Update: Valve also now confirmed the TF2 leak on the official Twitter.
Not a situation any game developer wants to be in, while nothing may have come out of it just yet that's not to say it won't cause issues later as more people seek to get a copy of it. That's part of why Valve has a Bug Bounty program, where they pay people who find valid issues.
Article taken from GamingOnLinux.com.
From additional info sent out from Valve, they did also confirm in these emailsDid you email them personally to confirm this?
Yes. They have now said so about TF2 in public. Added the link.From additional info sent out from Valve, they did also confirm in these emailsDid you email them personally to confirm this?
There is no better prevention to leak, than having the code open. :-)
That's some fortune cookie wisdom from enlightened open-source gurus :D
What about the remote code execution found in Team Fortress 2?
What about the remote code execution found in Team Fortress 2?Valve said it's not an issue. The code is older. Some of the twitter posts that originally claimed that one exists have been deleted.
Philadelphus 23 Apr 2020
What about the remote code execution found in Team Fortress 2?I've seen this debunked on a few sites now, though I'm sure Liam can get us an authoritative quote better than my "I read it on the Internet". :)
Valve have already clearly said there's no current issue in their tweets from both the CS:GO and TF2 accounts, as linked in the article. Don't trust random twitter accounts on old leaked code.What about the remote code execution found in Team Fortress 2?I've seen this debunked on a few sites now, though I'm sure Liam can get us an authoritative quote better than my "I read it on the Internet". :)
I'll see myself out...
Missed opportunity, you should have checked yourself out. :P
While I get your point, it seems to me that taken too far that approach could lead to a lot of NIH syndrome and (poor) wheel reinvention.Certainly not condoning the leakage, but maybe studying the code will aid those students wishing to become coders in the future.
Studying code is one of the most useless things a student can do in order to become a coder.
WRITING code is what matters. It doesn't have to be perfect. But you do have to use your own brain matter. You can keep studying code others wrote all day, it won't make you better because you can only become a real developer by actually writing your own code. In that way the knowledge of why code has to be written in such and such a manner
will become your property. You will develop your own style and will understand why a problem has to be solved in a certain way. It is the procedure that matters, not the end result.
Source: i am a developer.
Patreon
PayPal
How to install GE-Proton on Steam Deck, SteamOS, Linux
An idiots guide to setting up Minecraft on Steam Deck / SteamOS with controller support
See more from me