3 ms·
There's no point in looking at any updates. It is my understanding that even though it was found that malicious actors had commit access during development, no
by Suzuran 3y ago
There's no point in looking at any updates. It is my understanding that even though it was found that malicious actors had commit access during development, no source code audit was conducted. Since it can't be proven that said malicious actors didn't commit malware prior to release, it must be assumed the game contains malware and therefore cannot be safely installed or played.
- red-iron-pine 3y ago> It is my understanding that even though it was found that malicious actors had commit access during development, no source code audit was conducted. Since it can't be proven that said malicious actors didn't commit malware prior to release, it must be assumed the game contains malware and therefore cannot be safely installed or played Extraordinary claims require extraordinary evidence. Source me plz.
- Suzuran 3y agoThis is not an extraordinary claim - It was widely covered in the press. Even cursory google searching should find plenty of stories - Here's one picked randomly: https://kotaku.com/cd-projekt-red-confess-hack-severity-while-everyones-di-1847074826 https://kotaku.com/cd-projekt-red-confess-hack-severity-whil... The attackers had full access to version control servers and therefore the ability to directly modify the versioned code without going through a normal commit process, giving them effectively unrestricted commit access. The source code for many CDPR properties was later sold by the attackers.