Seems the steampipes sprung a bit of a leak recently, as it's been confirmed that both Counter-Strike: Global Offensive and Team Fortress 2 had their source code put up online.
The popular but unofficial website SteamDB confirmed it on Twitter, with Valve following up from the CS:GO Twitter account later to also confirm it. There seemed to be some panic, with a claim of an exploit out in the wild although that doesn't appear to be true. Valve said:
"We have reviewed the leaked code and believe it to be a reposting of a limited CS:GO engine code depot released to partners in late 2017, and originally leaked in 2018. From this review, we have not found any reason for players to be alarmed or avoid the current builds."
"As always, playing on the official servers is recommended for greatest security."
"We will continue to investigate the situation and will update news outlets and players if we find anything to prove otherwise. In the meantime, if anyone has more information about the leak, the Valve security page (next tweet)* describes how best to report that information." *Valve Security Info
From additional info sent out from Valve, they did also confirm in these emails that the leak contained TF2 code too. Update: Valve also now confirmed the TF2 leak on the official Twitter.
Not a situation any game developer wants to be in, while nothing may have come out of it just yet that's not to say it won't cause issues later as more people seek to get a copy of it. That's part of why Valve has a Bug Bounty program, where they pay people who find valid issues.
Article taken from GamingOnLinux.com.
QuoteFrom additional info sent out from Valve, they did also confirm in these emailsDid you email them personally to confirm this?
Quoting: Mar2ckYes. They have now said so about TF2 in public. Added the link.QuoteFrom additional info sent out from Valve, they did also confirm in these emailsDid you email them personally to confirm this?
Quoting: ZlopezThere is no better prevention to leak, than having the code open. :-)
That's some fortune cookie wisdom from enlightened open-source gurus :D
Quoting: PatolaWhat about the remote code execution found in Team Fortress 2?
Quoting: PatolaWhat about the remote code execution found in Team Fortress 2?Valve said it's not an issue. The code is older. Some of the twitter posts that originally claimed that one exists have been deleted.
Philadelphus Apr 23, 2020
Quoting: PatolaWhat about the remote code execution found in Team Fortress 2?I've seen this debunked on a few sites now, though I'm sure Liam can get us an authoritative quote better than my "I read it on the Internet". :)
Quoting: PhiladelphusValve have already clearly said there's no current issue in their tweets from both the CS:GO and TF2 accounts, as linked in the article. Don't trust random twitter accounts on old leaked code.Quoting: PatolaWhat about the remote code execution found in Team Fortress 2?I've seen this debunked on a few sites now, though I'm sure Liam can get us an authoritative quote better than my "I read it on the Internet". :)
Patreon
PayPal
See more from me