Chairmanchuck
Member
It's not inconceivable to think of something like this happening. For example, the "Paint dry" game could have just as easily been set up as a Free to Play game with an exploitative payload. And they could have called it "Half Life 3" and given it convincing screenshots to the point that potentially millions of users could have been infected before Valve took action. They closed the hole already but in my opinion they got super lucky that it was discovered by a 16 year old kid with little malicious intent.
From what I've personally seen of the developer side of their pages, it doesn't look like they've been updated in ages, and I'd venture a guess that 90% of that code hasn't been touched in (perhaps) 10 years. I know for a fact that their APIs are a bit of a mess from a programming standpoint, and haven't been updated in several years either.
Valve has always had a "we'll fix something, but only once it breaks" attitude which is honestly a bit frightening given how big they've become in recent years.
And that is why I am sad they didnt take you...