Three Million DiRT 3 Game Vouchers Stolen by Hackers

September 7, 2011 -

Codemasters and AMD have confirmed that over three million digital vouchers for Steam have been stolen for DiRT 3. According to a report from Industry Gamers (citing a Steam forum post), hackers used an .htaccess exploit that allowed them to gain access to an .sql database containing the codes. Those codes were meant to be used for a future AMD graphics card promotion.

"This past weekend, activation keys associated with free DiRT 3 game vouchers shipping with select AMD products were compromised," said AMD in a statement. "These activation keys were hosted on a third party fulfillment agency website, www.AMD4u.com, and did not reside on AMD's website. Neither the AMD nor Codemasters servers were involved."

"We are working closely with Steam, Codemasters, and our fulfillment agency to address the situation. AMD will continue to honor all valid game vouchers, however the current situation may result in a short delay before the vouchers can be redeemed."

The good news is that the huge batch of codes that were stolen can be traced, and Codemasters claims that they should be able to deactivate the codes in due time.

Source: Eurogamer by way of Industry Gamers


Comments

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Stolen? That's bit of a stretch given how the keys were made available for the whole world to see.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I disagree (though it's quite possible I've misunderstood exactly what happened here).  If someone takes my stuff without my permission, my stuff has been stolen.  It doesn't matter if I've left my front door wide open with my stuff neatly piled in the doorway.

That does make me stupid but it doesn't make my stuff any less stolen.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Taking your stuff against your will is stealing, but you're using that logic on something that doesn't apply. Stealing leaves the victim without what is theirs. Has anyone lost anything? No, they still have the codes, but the hackers (sic) have them too, which they can invalidate. So they might be able to acquire copies of Dirt3 without participating in the promotion, but Codemasters will not have fewer copies of the game as a result. That is, if they are digital downloads and not printed discs shipped in boxes. It might be applicable to accuse them of fraud if they attempt to redeem those vouchers, but stealing isn't. What they did would be more akin to eavesdropping, espionage,  or wiretapping.

Your definition of stealing is flawed, especially in the eyes of the law. That said, what happened was a deplorable act that resulted in an interruption of service for actual customers of AMD and Codemasters. It was rather pointless act as well since it's easier to acquire the DRM-free version from bittorrent. Given all that, it's a seriously dick move and they should stand to answer for the damage they did.

-Greevar

"Paste superficially profound, but utterly meaningless quotation here."

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Replace "stole" with "misappropriate" if it makes you happy.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

It's more like an infringement of privacy, similar to trespassing.

-Greevar

"Paste superficially profound, but utterly meaningless quotation here."

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Whatever, buddy.  I know you understand the specifics of what happened so I really don't care what you call it.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I believe this situation is more akin to leaving all of your stuff in the middle of a busy intersection and then claiming that it was stolen when you come back 3 days later to find it all missing.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Not unless those keys were posted in plain text on the front page of AMD4u's website or something similar.  Hell, even my "open front door" analogy isn't applicable.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

They were stored in plain text. All you basically had to do was add /keys to the end of the URL.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

"Not unless those keys were posted in plain text on the front page of AMD4u's website or something similar."

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I think it would be more apt to say you left your door unlocked. From an external perspective it would seem that your stuff was secure, but when more closely inspected the flaw is revealed.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

That seem a fairer analogy. But then, on the internet, you'd have to account for thousands of people that keep trying the lock every day... You can argue it's good or bad, but it most definitely is common enough to take into account.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

.htaccess exploit? I'd hardly call it an exploit. Hell, I wouldn't even call it a hack. The directories (plural. There was more than one: an SQL directory showing some keys in 3 sql files, and a keys directory showing ALL keys in plain text files) were WIDE OPEN (and continued to be such for hours after it was made public). A hack? More like a complete lack of security.

----
Papa Midnight

 
Forgot your password?
Username :
Password :

Poll

Best decade for video games?:

Shout box

You're not permitted to post shouts.
Matthew WilsonI know most of my friends first saw robotech when it was on Toonami in the mid 90s, but it is possible that a fan who watched it in the 80s are in a position to do it.03/27/2015 - 1:04pm
Andrew EisenRobotech was mid 80s. Fans of the show (who were kids when it aired) are my age and older.03/27/2015 - 1:01pm
Matthew Wilsontiming. anime only really became widely known in the US in the mid 90s. if we assume it was mostly kids watching it, they still wouldnt be high enough in managment to be given full creative control yet. it would still be another 5 to 10 years for that.03/27/2015 - 12:59pm
Andrew EisenI agree. Now what makes you think that there is no one in power who cares about (or has the ability to) make a good adaptation?03/27/2015 - 12:47pm
Matthew Wilsonits not about pratice, it is about people who understand it getting in to positions of power.03/27/2015 - 12:34pm
Matthew Wilsonallot of the comic book characters that have been turned in to good movies started in the 70s or earlier.03/27/2015 - 12:32pm
Andrew EisenWell, if it really does take two generations of practice to get it right, we'll never get good live action adaptations of anime if no one starts making them.03/27/2015 - 12:31pm
Andrew EisenWhat have you seen that would make you say that?03/27/2015 - 12:30pm
Matthew WilsonIt took 2 genarations of comic book reader before we got good comic book movies. I imagine that will be the case for anime as well.03/27/2015 - 12:28pm
Matthew Wilson@AE yes if they have people that understand the content give it a shot, but as far as I can tell that does not look like it is happening in this case.03/27/2015 - 12:26pm
Andrew EisenI understand the skepticism but I don't think "this will never work" and "no one should even bother" are very healthy attitudes.03/27/2015 - 12:11pm
Andrew EisenWhy would you doubt that? A lot of writers are my age and older, the perfect age to be fans of the content. All I'm saying is it's not impossible to get a good Robotech movie. In fact, it's more likely today than any other time.03/27/2015 - 12:11pm
Matthew Wilson@AE the difference is in the case of marvel the writers and directors clearly understand the source content. I doubt many of any of them are that way with robotech, or any anime for that matter.03/27/2015 - 11:10am
MaskedPixelantehttp://www.playstationtrophies.org/news/news-15838-Sony-Cuts-the-Price-of-PlayStation-TV-Today.html Sony cuts the price of the Vita TV in the UK, still wont force developers to make their stuff compatible with it.03/27/2015 - 10:49am
Andrew EisenMechaCrash - It's true, there are a lot of examples of crap adaptations. But there are increasing numbers of great adaptations such as the Marvel movies. That said, it's certainly going to be an uphill battle at Sony, especially with Tom Rothman around.03/27/2015 - 10:45am
ZippyDSMleeOh live action crap...I dunno with hollywood being stuck in the 90s grimdarkblack mode I can not see how anything would work well other than SNK or Akira.. then again Akira is a bit of head trip...03/27/2015 - 10:11am
MechaCrashI meant Hollywood in general. If they did a Robotech movie, it'd just be a slightly tweaked Macross, because usually when people talk about Robotech, they just mean the first third. Nobody cares about the Masters/Southern Cross or Invid/MOSPAEDA stuff.03/27/2015 - 9:36am
ZippyDSMleeYes Macross is good..... robotech....not so much..... Now Pizza Cats that's the definitive TV dub, if not best dub ever I'd put it up there with COwboy Bebop just becuse the Pizza Cats dub is fun as heck and crazy,Medabots and Fighting Foodons are decent.03/27/2015 - 9:20am
InfophileAged well plot-wise, I mean. The animation is showing its age, but if you don't mind that, the plot holds up quite well03/27/2015 - 6:52am
InfophileRobotech may be 30 years old, but it's actually aged pretty well. Plus, one of the three Japanese franchises that went into making it, Macross, is coming out with a new series soon. So it's far from forgotten or out-of-date03/27/2015 - 6:50am
 

Be Heard - Contact Your Politician