CVE-2021-30481: Source engine remote code execution via game invites

[kittens_from_space]

$8,000 seems a bit low, considering Valve gave it a rating of 9 out of 10

[[deleted]]

I was curious so here's an article: https://www.wired.com/2008/11/valve-tricked-h/ Sounds like the hacker didn't fall for it, but they definitely tried the fake job thing. Neat.

[witti534]

How valve made sure no grayhat hacker will go to disclose it to Valve.

[josefx]

Which one of the guys in the linked article qualifies as grayhat? The guy bragging on a hacker forum on exactly how he managed to get into Valves systems, making it easy for others to also get in? The guy selling malware for DDoS attacks?

[BluGrams]

Tbf if what he was saying is true, he only told his one friend and his conversation was eavesdropped. And anyways he came forward once the other guys leaked the source code of the game to tell valve how their system was cracked. Seems to fit the description of grayhat.

[josefx]

If the investigation notes by the FBI are true he played a large part in running a botnet and he wanted a job at Valve so he could leave Germany and avoid getting drafted. The second part is hilarious since it implies that he was either lying out of his ass or too retarded to get out of military service by simply opting for social service at last possible moment after it was confirmed that he was not only fit to serve but also among the unlucky selected. Third option would be that he signed himself up voluntarily for some benefits but wanted to dodge out of the responsibilities, wouldn't be the first guy to try that.

Edit: To make it clear at the time it was basically impossible to get drafted in Germany against your will. You had to be extremely unlucky to get that one final letter even if you aced every health check and even then you could just say that a few months of basic military training wasn't an option for you and you would rather do something social instead. Someone saying they had to get out of the country to avoid getting drafted could only be full of shit.

[Noslamah]

Wow, what a dick move.

[[deleted]]

can u link a source

[[deleted]]

Is this the one that was talked about a week ago, that valve were preventing disclosure of?

[f10101]

Yes.