• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

STEAM | April 2016 - HL3 releasing today. Left 4 Dead 3 and Persona 5 this summer

Status
Not open for further replies.
It's not inconceivable to think of something like this happening. For example, the "Paint dry" game could have just as easily been set up as a Free to Play game with an exploitative payload. And they could have called it "Half Life 3" and given it convincing screenshots to the point that potentially millions of users could have been infected before Valve took action. They closed the hole already but in my opinion they got super lucky that it was discovered by a 16 year old kid with little malicious intent.

From what I've personally seen of the developer side of their pages, it doesn't look like they've been updated in ages, and I'd venture a guess that 90% of that code hasn't been touched in (perhaps) 10 years. I know for a fact that their APIs are a bit of a mess from a programming standpoint, and haven't been updated in several years either.

Valve has always had a "we'll fix something, but only once it breaks" attitude which is honestly a bit frightening given how big they've become in recent years.

And that is why I am sad they didnt take you...
 

JaseC

gave away the keys to the kingdom.
It's not inconceivable to think of something like this happening. For example, the "Paint dry" game could have just as easily been set up as a Free to Play game with an exploitative payload. And they could have called it "Half Life 3" and given it convincing screenshots to the point that potentially millions of users could have been infected before Valve took action. They closed the hole already but in my opinion they got super lucky that it was discovered by a 16 year old kid with little malicious intent.

From what I've personally seen of the developer side of their pages, it doesn't look like they've been updated in ages, and I'd venture a guess that 90% of that code hasn't been touched in (perhaps) 10 years. I know for a fact that their APIs are a bit of a mess from a programming standpoint, and haven't been updated in several years either.

Valve has always had a "we'll fix something, but only once it breaks" attitude which is honestly a bit frightening given how big they've become in recent years.

Steam's backend scans uploaded data for malware. Obviously no scanner definition is a 100% complete catalogue, but it does make publishing a game on Steam that's actually, say, a keylogger rather difficult.
 
For the new thread and new faces.

ModBot said:
I am giving away a Steam key. To enter this giveaway, send a PM to ModBot with any subject line. In the body, copy and paste the entire line from the message below containing the game you want to enter for. Confused? Watch this GIF tutorial or ask for help.
Want to make your own ModBot giveaway? Click here for a quick tutorial thread. Please give generously.

ModBot Basics:
- This giveaway has a manual blocklist. The giver has identified members who abuse giveaways and restricted them from participating.
- I really appreciate thank you messages, but please send them to me (FiveElementNinja, not ModBot!) via PM instead of in thread.
- Do not trade keys you win off-site to enrich yourself. Don't try to claim games you have no interest in collecting or playing. Don't claim games to give them to friends off-site.
- If the key is already taken you will not receive a reply. Replies may take a minute or two.

Rules for this Giveaway:
- This giveaway is a LIGHTNING raffle. The winners will be selected by random draw 15 minutes after the draw was created. Any games not claimed after that point will be given away first come first serve.

TROV0gN.jpg

Rad Bats -- MB-C6BDC57E9646791E - Taken by Oreoleo. 5 entrants total. - Taken by InfiniteNine. 3 entrants total.


t1459552063z1.png
 

jshackles

Gentlemen, we can rebuild it. We have the capability to make the world's first enhanced store. Steam will be that store. Better than it was before.
Steam's backend scans uploaded data for malware. Obviously no scanner definition is a 100% complete catalogue, but it does make publishing a game on Steam that's actually, say, a keylogger rather difficult.

True, but in this case the hacker was able to bypass Valve's system of their usual manual review process, and I'd wager one of those checkmarks is "has been scanned for malware". We would assume that the virus scanning happens automatically (say, as the file is uploaded) but that may or may not be the case. There may have also been a way for the hacker to specify an override or automatically import the files in a "has already been scanned" status.

Obviously I'm just spitballing here, but just because they "already have a process in place" doesn't mean that process is 100% secure. Of course, this is all hypothetical.
 

JaseC

gave away the keys to the kingdom.
True, but in this case the hacker was able to bypass Valve's system of their usual manual review process, and I'd wager one of those checkmarks is "has been scanned for malware". We would assume that the virus scanning happens automatically (say, as the file is uploaded) but that may or may not be the case. There may have also been a way for the hacker to specify an override or automatically import the files in a "has already been scanned" status.

Obviously I'm just spitballing here, but just because they "already have a process in place" doesn't mean that process is 100% secure. Of course, this is all hypothetical.

The scan is automatic and done every time a depot is updated/published, as I understand it. It just being part of the build review process when releasing an app would be effectively pointless as then somebody could just push through a virus-laden patch.
 

oipic

Member
Modbot does it.

ModBot's period of rampant independence after the shunning of his father figure has clearly messed with his timezone data - for much of our world's population, it has been April 2nd for some time now. These shenanigans need to stop.

Thread name needs changing too, please ModBot.
 

Teggy

Member
How is Fallout 4 still broken so badly? I tried transferring some items from one Power Armor into another, but instead my Power Armor wearing self tried to enter the other Power Armor and got stuck humping it endlessly from the front.

Now I have to beat some ridiculously powerful robot that I just barely beat, again because there was also no save when I traveled. Sigh.
 
What's the likelihood of GMG having a better deal on Dark Souls 3 than they currently have (%11-12 off, coupon doesn't work) leading up to launch ?
 

Regginator

Member
What's the likelihood of GMG having a better deal on Dark Souls 3 than they currently have (%11-12 off, coupon doesn't work) leading up to launch ?

high. i suppose the coupon doesn't stack with the current 11% discount, so whenever that one passes, you should be able to use the 20% one on the regular 60$ price.

not a huge difference, but still.
 

zkylon

zkylewd
you know what's not awesome

walking stairs with an ankle sprain in this shitty city of broken up streets while rain's pouring like crazy. i almost fell like 8 times and i got home and my potato foot was like on fire

seriously fuck this city sometimes

i'm a bell bro :(. I don't even gank :(
you're either with us or them

no middle ground

Pray to RNG. That's how you play.
hmm i c

but im bad at rng, im into league not doto
 

Knurek

Member
Steam's backend scans uploaded data for malware. Obviously no scanner definition is a 100% complete catalogue, but it does make publishing a game on Steam that's actually, say, a keylogger rather difficult.

You really think Valve's scanner would pick up something like Stuxnet or Flame?
 
*enters Dark Souls giveaway*

I hope that's not an April Fool's Day thing.

*doesn't win*

I hope that was an April Fool's Day thing.

;)
 

JaseC

gave away the keys to the kingdom.
The weirdest thing about "Watch Paint Dry-gate" is that Valve hasn't revoked his Steamworks Partner access.
 

Endruen

Member
I'm at work and I just logged in to check GAF really quick... OMG, I can't believe I won!

Aouil.gif


My heart started racing as soon as I saw the 1 unread message notification. I'm so stoked!

Congratulations! Now open the link that comes with the PM.

Huehuehuehuehue
 
Congratulations! Now open the link that comes with the PM.

Huehuehuehuehue

For those of you wondering:


I have no idea how I didn't see that coming. And I had just gotten done bragging to a coworker about winning DS3 in a raffle too... lol.

But I still won a raffle out of 157 people. So I got that going for me, which is nice.

qERX2.gif
 

def sim

Member
I remember winning Bioshock Infinite when it was still new, in a modbot giveaway, and it turned out to be Bad Rats. It wasn't even April Fools. ;_;

I played Bad Rats and it wasn't as bad as I expected it to be so whatever.
 

Ozium

Member
IdleMaster just stopped working.. like it's connected to steam, steam client is open.. but when it says I'm in a game on idlemaster, I'm not in a game in steam.. I just idled something for 3 hours and it has 0 hours on record..

I signed out of idlemaster and back in and it's still doing it..

wtf?
 

mp1990

Banned
I remember winning Bioshock Infinite when it was still new, in a modbot giveaway, and it turned out to be Bad Rats. It wasn't even April Fools. ;_;

I played Bad Rats and it wasn't as bad as I expected it to be so whatever.
Truly, a man (or a woman) who can see an opportunity in every calamity.
 
Status
Not open for further replies.
Top Bottom