Watch Out For This Source Engine Exploit

If for any reason you find yourself playing a multiplayer Source Engine game DO NOT accept any invites from strangers.

Secret Club are a not-for-profit reverse engineering group who’ve found a number of exploits with Valve’s software, which they explain in a series of posts on Twitter. Each of these exploits are remote code execution flaws, which Secret Club told me via email gives a hacker “full control over the victim’s system, which can be used to steal passwords, banking information, and more.”

If what is being reported in the article is true then Valve has been aware of this exploit for two years. This is a serious exploit to have open in the wild, and hopefully the exposure encourages them to get off their duffs to 86 it from their code! Be very careful when playing Source games until this gets resolved.

It’s ironic reading this a day after playing around in GMod with Yutram! Fortunately, it was just the both of us goofing around on maps that would probably be unappealing to twelve year olds Fortnite enthusiasts.

If you’re on Linux/Unix/Mac you might want to watch out for “ShellShock”

Friend of mine linked this in our mumble chat this morning. It’s an exploit found in nix systems that lets people remotely take control of your system using Bash.

The flaw has been found in a software component known as Bash, which is a part of many Linux systems as well as Apple’s Mac operating system.

The bug, dubbed Shellshock, can be used to remotely take control of almost any system using Bash, researchers said.

Experts said it was more serious than the Heartbleed bug discovered in April.

Keep an eye out for a patch on your distro of choice.