This post originated from an RSS feed registered with .NET Buzz
by Doug Thews.
Original Post: Theft of HL-2 Source Code
Feed Title: IlluminatiLand
Feed URL: http://apps5.oingo.com/apps/domainpark/domainpark.cgi?client=netw8744&s=JETBRAINS.COM
Feed Description: A technology blog for people enlightened enough to think for themselves
I've been keeping up with the developing story about the theft of the Half-Life 2 source code from VU's source code repository. Apparently, the hacker infiltrated using user id's and passwords obtained via the installation of a keystroke recorder on one of the participant's machines (through an infected Outlook attachment of course).
What startles me is that nobody is talking about the fact that the source code server had to be accessible from the Internet. I'm very surprised that anyone would allow access to a source code server from anything other than a specific internal set of IP's (i.e. just developers and testers). I would even go so far as to block any VPN access to the server as well.
Not a well thought out development infrastructure in my opinion.
Previous Topic
