Three Million DiRT 3 Game Vouchers Stolen by Hackers

September 7, 2011 -

Codemasters and AMD have confirmed that over three million digital vouchers for Steam have been stolen for DiRT 3. According to a report from Industry Gamers (citing a Steam forum post), hackers used an .htaccess exploit that allowed them to gain access to an .sql database containing the codes. Those codes were meant to be used for a future AMD graphics card promotion.

"This past weekend, activation keys associated with free DiRT 3 game vouchers shipping with select AMD products were compromised," said AMD in a statement. "These activation keys were hosted on a third party fulfillment agency website, www.AMD4u.com, and did not reside on AMD's website. Neither the AMD nor Codemasters servers were involved."

"We are working closely with Steam, Codemasters, and our fulfillment agency to address the situation. AMD will continue to honor all valid game vouchers, however the current situation may result in a short delay before the vouchers can be redeemed."

The good news is that the huge batch of codes that were stolen can be traced, and Codemasters claims that they should be able to deactivate the codes in due time.

Source: Eurogamer by way of Industry Gamers


Comments

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Stolen? That's bit of a stretch given how the keys were made available for the whole world to see.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I disagree (though it's quite possible I've misunderstood exactly what happened here).  If someone takes my stuff without my permission, my stuff has been stolen.  It doesn't matter if I've left my front door wide open with my stuff neatly piled in the doorway.

That does make me stupid but it doesn't make my stuff any less stolen.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Taking your stuff against your will is stealing, but you're using that logic on something that doesn't apply. Stealing leaves the victim without what is theirs. Has anyone lost anything? No, they still have the codes, but the hackers (sic) have them too, which they can invalidate. So they might be able to acquire copies of Dirt3 without participating in the promotion, but Codemasters will not have fewer copies of the game as a result. That is, if they are digital downloads and not printed discs shipped in boxes. It might be applicable to accuse them of fraud if they attempt to redeem those vouchers, but stealing isn't. What they did would be more akin to eavesdropping, espionage,  or wiretapping.

Your definition of stealing is flawed, especially in the eyes of the law. That said, what happened was a deplorable act that resulted in an interruption of service for actual customers of AMD and Codemasters. It was rather pointless act as well since it's easier to acquire the DRM-free version from bittorrent. Given all that, it's a seriously dick move and they should stand to answer for the damage they did.

-Greevar

"Paste superficially profound, but utterly meaningless quotation here."

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Replace "stole" with "misappropriate" if it makes you happy.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

It's more like an infringement of privacy, similar to trespassing.

-Greevar

"Paste superficially profound, but utterly meaningless quotation here."

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Whatever, buddy.  I know you understand the specifics of what happened so I really don't care what you call it.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I believe this situation is more akin to leaving all of your stuff in the middle of a busy intersection and then claiming that it was stolen when you come back 3 days later to find it all missing.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

Not unless those keys were posted in plain text on the front page of AMD4u's website or something similar.  Hell, even my "open front door" analogy isn't applicable.

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

They were stored in plain text. All you basically had to do was add /keys to the end of the URL.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

"Not unless those keys were posted in plain text on the front page of AMD4u's website or something similar."

 

Andrew Eisen

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

I think it would be more apt to say you left your door unlocked. From an external perspective it would seem that your stuff was secure, but when more closely inspected the flaw is revealed.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

That seem a fairer analogy. But then, on the internet, you'd have to account for thousands of people that keep trying the lock every day... You can argue it's good or bad, but it most definitely is common enough to take into account.

Re: Three Million DiRT 3 Game Vouchers Stolen by Hackers

.htaccess exploit? I'd hardly call it an exploit. Hell, I wouldn't even call it a hack. The directories (plural. There was more than one: an SQL directory showing some keys in 3 sql files, and a keys directory showing ALL keys in plain text files) were WIDE OPEN (and continued to be such for hours after it was made public). A hack? More like a complete lack of security.

----
Papa Midnight

 
Forgot your password?
Username :
Password :

Poll

Which group is more ethically challenged?:

Shout box

You're not permitted to post shouts.
Goth_SkunkThere's no point in reading the article further. Unless it's a poorly written article, it will focus on trying to justify the argument it put forward. As I believe there is no justification, there is no reason for me to continue reading.07/01/2015 - 3:05pm
Andrew EisenEspecially if you refuse to listen to what they have to say. As an example, had you read the article (and you're under no obligation to do so, mind), you'd learn that she isn't saying a scene is bad simply because it depicts or describes rape.07/01/2015 - 3:02pm
Goth_SkunkI never said their position was less valid than mine. I'm just saying they will never convince me away from my stance, so there's no point in trying.07/01/2015 - 2:57pm
Matthew Wilsonhttp://blog.twitch.tv/2015/06/html5-chat-is-live/ now only if we could get videos as html 5 instead of crappy flash.07/01/2015 - 2:55pm
james_fudgeSee what i'm saying?07/01/2015 - 2:48pm
james_fudgeI also am not a PoC and don't understand how a word with hundreds of years of history behind it affects them.07/01/2015 - 2:48pm
james_fudgeWe should also stop pretending that we understand someone else's perspective. I am not a woman nor a rape survivor and I have no idea how this stuff affects them.07/01/2015 - 2:48pm
james_fudgeThe trick is - can people talk about these things without losing their cool?07/01/2015 - 2:46pm
james_fudgetheir position is just as valid as yours07/01/2015 - 2:46pm
Goth_SkunkAs far as I'm concerned, there is no justification for such a stance.07/01/2015 - 2:45pm
Goth_SkunkThe theme of the writer's article is "People shouldn't write rape scenes in their creative works, even though they can." I disagree with the premise on its face, and don't care how one tries to justify it.07/01/2015 - 2:44pm
Goth_Skunk@eZeek: Last I checked, rape was supposed to be offensive. I don't see how it could be anything else. But to call a scene 'bad' just for having implicit or explicit rape in it is ridiculous.07/01/2015 - 2:42pm
TechnogeekThe constant conflation of "you shouldn't do this" as a personal guideline and "you shouldn't do this" as something with the force of law is really getting tiresome. Lawful Neutral was garbage in D&D, and it's garbage in real life.07/01/2015 - 12:24pm
PHX Corphttp://kotaku.com/sources-warner-bros-knew-that-arkham-knight-pc-was-a-1714915219 Sources: Warner Bros. Knew That Arkham Knight PC Was A Mess For Months07/01/2015 - 11:49am
Andrew EisenIf you do, I hope you can provide some examples of people (again, other than random no-name numbnuts on Twitter) who are genuinely trying to dictate what should and should not be allowed so far as themes, topics, language, plot devices, etc. go.07/01/2015 - 9:43am
MattsworknameI'd go into why I think it's a bigger problem then most realize, but nows not the time really. I'll catch up with everyone later07/01/2015 - 9:42am
Andrew EisenThat's the thing though, rarely is anyone (again, other than random numbnuts on Twitter) attempting to dictate what can and cannot be said or done.07/01/2015 - 9:39am
Andrew Eisen"Don't write rape scenes" is being offered as advice (along with reasons for that advice) not a mandate.07/01/2015 - 9:37am
MattsworknameOh, on that last one andrew I wasn't talking about the article, I was being more general, lately it seems like all the news and media is trying to decide what is and isn't proper to say. Thats what i was refering to.07/01/2015 - 9:37am
Andrew EisenPerhaps you should consider reading the entire article. Despite quotes you can pull from the intro and conclusion, the author isn't arguing that you can't or shouldn't be allowed to cover a certain topic.07/01/2015 - 9:35am
 

Be Heard - Contact Your Politician