CD Projekt RED has been hacked, hacker threatens to release CP2077 and Witcher 3 source code

[Gerrard]

Either that, or the hacker was born somewhere in the mid-18th century.

What DO hackers demand these days? Pictures of female managers feet?

 

[Lambach]

So you are saying that they faked that ? Because if so lolololol.

I'm just saying my bullshit alarms are firing off. The timing of this alleged hack is awfully convenient, and their attitude in terms of handling it stinks to high heavens. Far as I know, companies that actually do suffer from this type of attack want to keep it either completely hush-hush or at least keep it as low-key as possible while paying the ransom, not blast it publicly on Twitter, insist that they will "not negotiate with the terrorists" and even post an alleged ransom note that looks like it was written by someone who spent a month on 2007 4chan and got his EPIC l33t lingo from there.

 

[SlamDunk]

"Your have been EPICALLY pwned!!!"

Faker than the Holocaust.

Eh, it's just someone who is not a native English speaker.

 

[Perkel]

Far as I know, companies that actually do suffer from this type of attack want to keep it either completely hush-hush or at least keep it as low-key as possible

Not in EU.

If they had hack they are required to inform police as there are GDPR rules for user information stored by them. If they don't do that they will be fined some % of their revenue (not profits) which in case of CDPR that would be 10s of milions of €

 

[just]

"Your have been EPICALLY pwned!!!"

Faker than the Holocaust.

Eh, it's just someone who is not a native English speaker.

yes, some pole from cdpr pr department

 

[ERYFKRAD]

"Your have been EPICALLY pwned!!!"

Faker than the Holocaust.

Eh, it's just someone who is not a native English speaker.

They could have just posted in Polish.

 

[Tyrr]

I don't think it's fake. A fake hacker wouldn't sound like a child.
Why would you embarrass yourself this much?

 

[just]

hacker wrote contact us in 48h but didn't say how. missed opportunity
cdpr trying to reach him over twitter tho

 

[Azdul]

Here's hoping hackerman actually dumped the source code. Maybe then modders can actually fix this mess of a game.

Cyberpunk or Witcher are not some Nintendo game sources from 90s. No one competent is going to touch it, knowing that it will take many months to get familiar with the code, while CDPR will be shutting down any publicly available source repositories.

Both games are available as DRM-free GOG releases, so there isn't anything to 'crack' in the code. Creating 'hacks' for single player game also does not make sense.

Hacking CDPR to get source code is like hacking Feargus Urquhart phone to get his naked photos. Maybe slightly embarassing for the 'victim', but mostly pointless.

 

[thesheeep]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

 

[Haba]

So you are saying that they faked that ? Because if so lolololol.

I'm just saying my bullshit alarms are firing off. The timing of this alleged hack is awfully convenient, and their attitude in terms of handling it stinks to high heavens. Far as I know, companies that actually do suffer from this type of attack want to keep it either completely hush-hush or at least keep it as low-key as possible while paying the ransom

Nice idea in theory, but that is not how it works in practice.

In the case of a personal data breach, the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority competent in accordance with Article 55

CDPR is worried about GDPR, so even though personal data breach did not occur, they can say that they have followed the notification procedure for that as well.

The whole "hacking" is most probably work of a disgruntled employee. Or at least facilitated by one.

 

[Tacgnol]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

Perforce is apparently still quite common with games devs.

I guess they are reluctant to embrace change/newer products.

 

[Perkel]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

From what i know Perforce is better for stuff with actual heavy amount of data like games. Git is better for code itself. If i remember correctly you can setup Perforce in way that you don't need to copy data to work on stuff where GIT does require that. Never had to interact with Perforce though myself.

Also games you get to download as release versions are not the same as in dev. Before compilation AAA games go into Terrabytes of data not just mare 50GB or 100GB.

 

[thesheeep]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

From what i know Perforce is better for stuff with actual heavy amount of data like games. Git is better for code itself. If i remember correctly you can setup Perforce in way that you don't need to copy data to work on stuff where GIT does require that. Never had to interact with Perforce though myself.

Well, sure, but it also costs money. A lot of money.
You know what is also much better with large amounts of data and free (or very cheap if you want some premium features)? Git LFS.
One repo for code, X repos for binary files, one repo to rule them all for building. Done.

But it is true that large companies are much less flexible in adapting new pipelines, even if they were better.
Their entire team has probably been using Perforce for years so that's what they know.

 

[IDtenT]

your have been epically pwned!!

how old is this hacker, 70?

The more I think about it, the more this sounds like a false flag operation by CD-Project. "Oh no we've been hacked. Looks like we won't be able to fix Cyberpunk this year after all..."
This message reads like how Karen from HR thinks a hacker sounds like.

What if it's a ploy to release the source code so mods can fix it?

 

[IDtenT]

I think it's fake, but really hope that it isn't and the hackz0rz carries through.

God knows CDProject needs to be knocked off their golden boy pedestal.

Hackers rarely seem to deliver in these situations. Often they exaggerate what they got away with, and others are too pussy to actually go ahead with their threats.

So Haxz0rz are like politicians?

 

[Azdul]

From what i know Perforce is better for stuff with actual heavy amount of data like games. Git is better for code itself.

Perforce tools can do distributed compilation of C++ code.

Programmer can do a local build using every machine with Perforce agent within the network. Full rebuild of large game can last many hours, so without Perforce small change in some important file could shut down the company for a day.

Perforce also calculates a hash of source code, and if someone compiled the same source before - Perforce downloads compiled .obj or library immediately from the repository.

It's a very nice tool that also integrates nicely with Visual Studio. Probably CDPR is not the only video game company that uses it.

Edit: Oops, I was wrong. Perforce integrates easily with Incredibuild, but you need both Perforce and Incredibuild licenses to do all tricks described above.

 

[Roguey]

"unreleased version of Witcher 3" - huh. The game was probably rebooted several times just like Cyberpunk 77.

I'd be more interested in the unreleased version of Witcher 2, the one that still used Aurora.

 

[Gerrard]

hacker wrote contact us in 48h but didn't say how. missed opportunity
cdpr trying to reach him over twitter tho

I thought that at first but I gave them the benefit of the doubt that they just omitted the rest of the file that was below.

 

[just]

protect hacker's personal data
good guys till the very end not some fuckin twitter doxxers

 

[tritosine2k]

Here's hoping hackerman actually dumped the source code. Maybe then modders can actually fix this mess of a game.

...

Both games are available as DRM-free GOG releases, so there isn't anything to 'crack' in the code. Creating 'hacks' for single player game also does not make sense.
...

Creating 'hacks' for single player game also does not make sense.

neither 33.3 ms as "framebudget" or "studio reference" sound is nearly good enough , or "TAA" , or ...

 

[JarlFrank]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

What's bad about Perforce?

 

[just]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

What's bad about Perforce?

my first guess would be security

 

[Eastwood]

hacker wrote contact us in 48h but didn't say how. missed opportunity
cdpr trying to reach him over twitter tho

Assuming this thing isn't a hoax, I think CD-Project just removed that part of the message. Wouldn't want any anons to outbid them on the source code.

 

[ERYFKRAD]

The most shocking thing about this is that they are still using Perforce.

That was also quite shocking to me.
Like... wtf?

What's bad about Perforce?

my first guess would be security

One must, perforce, surmise as much.