Eve Online Client Source Code Leaked

[medicnick83]

The game client source code for the popular MMO, Eve Online, has been leaked via torrent.

In addition to the source code the user also posted a lengthy chat transcript with someone from CCP customer support.

While the end goal may have been to call attention to the continuing security issues within Eve (and ultimately themselves), there are probably better ways of getting through to support.

Unfortunately, CCP seems to be responding with the usual knee-jerk reaction of banning everyone breathing a whisper of this incident:

[20:44] <Abuser> Could you certainly say me what your programmers did to secure clientside from exploiting Eve?
[20:44] <Abuser> what’s certainly
[20:45] <Abuser> I don’t have anything against content makers - their ideas are good, really good
[20:45] <Abuser> I have full eve sourcecode, so you know what’s did, and what’s not
[20:46] <Abuser> From all security i saw - were ROLE permissions for logins with priviliges higher than usual player, and some minor things in relation to prevent some remote service calls (some with potentially bad payload)
[20:46] <Abuser> nothing else
[20:47] <Abuser> is that called “programmers working on security”?
[20:47] <[IA]Morpheus> Are you cruising for a job or something?
[20:47] <Abuser> Nah
[20:47] <Abuser> neither job, neither anything else
[20:47] <Abuser> you may think of in such direction
[20:48] <Abuser> Digging the situation to uncover the truth
[20:49] <Abuser> You may compare me to fox mulder from x-files series
[20:49] <Abuser> it’s the best description of why i do this
[20:49] <[IA]Morpheus> Ah, well, nice to meet you Mr Mulder.
[20:50] <Abuser> So… would you like to answer what AWESOME ccp programmers did in relation to client/server security (at least for client?)
[20:51] <[IA]Morpheus> No, we won’t respond to blackmail. If you think we don’t care or aren’t working on improving security you are sadly mistaken

Buzz on the forums surrounding the incident report that in reaction CCP is strictly censoring its online forum from references related to the code leak. In addition, reports are being posted that CCP is seeding most of the torrent themselves, then using the IP addresses of those who download the client’s source code to ban Eve Online accounts.

No public recognition of this source code leak has yet been offered from CCP.

 

[AntiThesis]

Very interesting if true. But I doubt it'll make much difference to a lot of people.

Ability to host own EVE server would be interesting but nobody has the hardware for that

 

[Oculate]

Ability to host own EVE server would be interesting but nobody has the hardware for that

Very true... EVE 'game engine' is nothing compared to Warcrafts

CCP server specs are insane

 

[Darksun]

And i have yet to to see any other MMO out there run 40k people on one World Server.
Sure the eve world is made up of many sevrers etc. but Eve is the only pvp and pve world all in one.

Where as Warcraft et etc all have instanced places etc.

 

[Gory51]

From CCP themselves

"VE client source code
reported by: CCP Wrangler | 2008.04.15 17:09:53

We are aware that an individual claims to have access to the source code of the EVE client, but this access is not a security risk to CCP or our customers in any way. The Python scripting language that is used by the client can be easily decompiled to generate readable code, and we have designed our server-side systems with that understanding. Therefore, there is no reason to believe that the code was leaked by an employee and our internal investigations confirm that.

Access to the source code for the EVE client exposes no security vulnerabilities, has no privacy protection issues, and poses no threat to our customers billing information. The server-side interface used by the client is carefully protected to ensure that no abusive or unwanted information is transmitted to or from the EVE system.


Nothing the EVE client can do can affect the game state, a manipulated EVE client cannot affect the server, no advantageous or disadvantageous information can be transmitted to other EVE users by altering the EVE client. The EVE client is signed with a security certificate registered to CCP. Hashes are available on our web site for those who wish to ensure the integrity of EVE client download files they may have received from a source other than direct download from CCP’s web site.


Finally, there have been no mass bannings, as reported in some news articles, though we do remove all message board posts regarding violations of our EULA and Terms of Service as per standard policy and procedures. We consider any alterations of the client software, including decompilation, or discussions thereof, to represent such a violation.! "


Saw that when i logged in

 

[Lydon]

And i have yet to to see any other MMO out there run 40k people on one World Server.
Sure the eve world is made up of many sevrers etc. but Eve is the only pvp and pve world all in one.

Where as Warcraft et etc all have instanced places etc.

What about Deadspace in Eve? Aren't those instances?

 

[Darksun]

nope as you can be probed out and killed
there are no instances in eve.

 

[Oculate]

Hmm, in Warcraft each realm can hold 30k players?

Darksun is correct in saying its not entirely 30k players, Raiding instances are on other servers (recently been getting "Instance server down" or "World server down")

Eve is the biggest, how many galaxies are there now? (last i checked it was something like 5000)

 

[Gory51]

Yup wherever you go in eve, ANYone can get you......or u can get them

 

[Oculate]

I hate those dam gate campers -.- got hit as i popped thru from 150km away (while lagging on 3g)

And pod'd