Half-Life 2 Source Code Leaked, Seriously


So I know what you're thinking. "Yeah right Pyro, it's really just more surprise gay porn" but its the real deal.  The source code for Valve's Half-Life 2 has been leaked to the net.  An anonymous GWJ reader has verified this is real.

I can confirm that this is indeed no fake ... The thing is available as a torrent download on the net. I don't know how much action they will take against people downloading this. ... The last edits are from a month ago (in the files).  If this is fake, it is a damn good one. It looks very coherent.  Over 100 megs unpacked source

There's still no official word from Valve and I haven't seen any other sites pick it up.  There isn't any word on who leaked it either and from what I have heard the source doesn't give it away.  Hopefully when this gets out in the open Valve can work with its partners to figure out who did this.  Let's also hope it doesn't delay Half-Life 2 any further.

One things for sure, this can't be ignored.  Those in the know already have it and they're probably working on their first cheat right now.  Legitimate customers are the ones who need to know about this as they are the ones that will get their machine potentially broken into when they go online.  You can't warez with month old source code, all it's good for is exploiting others in multiplayer and allowing crackers to make better cracks. Customers need to know that there are cheaters out there right now with the full Half Life 2 source code, if this is true.

*UPDATED* Yes, Slashdot has put us over the barrel today, we apologize for the site outage. Read more for Gabe Newell's response to the leaked code and a plea to the community to help track down the hackers responsible.

Since you're gobbling up our bandwidth anyways check out Sway's weekly Infinite Lives comics which he updates every Friday!


Ever have one of those weeks? This has just not been the best couple of days for me or for Valve.

Yes, the source code that has been posted is the HL-2 source code.

Here is what we know:

1) Starting around 9/11 of this year, someone other than me was accessing my email account. This has been determined by looking at traffic on our email server versus my travel schedule.

2) Shortly afterwards my machine started acting weird (right-clicking on executables would crash explorer). I was unable to find a virus or trojan on my machine, I reformatted my hard drive, and reinstalled.

3) For the next week, there appears to have been suspicious activity on my webmail account.

4) Around 9/19 someone made a copy of the HL-2 source tree.

5) At some point, keystroke recorders got installed on several machines at Valve. Our speculation is that these were done via a buffer overflow in Outlook's preview pane. This recorder is apparently a customized version of RemoteAnywhere created to infect Valve (at least it hasn't been seen anywhere else, and isn't detected by normal virus scanning tools).

6) Periodically for the last year we've been the subject of a variety of denial of service attacks targetted at our webservers and at Steam. We don't know if these are related or independent.

Well, this sucks.

What I'd appreciate is the assistance of the community in tracking this down. I have a special email address for people to send information to, [email protected]. If you have information about the denial of service attacks or the infiltration of our network, please send the details. There are some pretty obvious places to start with the posts and records in IRC, so if you can point us in the right direction, that would be great.

We at Valve have always thought of ourselves as being part of a community, and I can't imagine a better group of people to help us take care of these problems than this community.



I've seen this torrent around (not downloaded), but it's always listed as a partial source, not the full monty. So maybe it will only, hopefully, have a limited impact.


Holy Slashdotting, Batman!

Well the good part may be the extra attention GWJ gets. /.ing sucks though.

Wow, that's kinda scary stuff Gabe posted.  I wonder why someone would do that?  Rival corporation or independent cracker?  I'm very interested to see if Valve finds them.

I rarely post anymore, but I must say "good find", guys.

Someone that knows a thing or two about PCs could use the source code to make a program against cheating, couldnt they??


i dont know anything about PCs(would like to start got any good websites on it) but all i know is if some GOOD citizen decided to take this into his own hands and make something good out of it, it wouldnt be a bad thing... but no one will and im talking out of my ass go along...

No, that's not obvious spam at all.

What in the world made this show up in RSS?


lol, we now have Thread Necromancer Spammers.