The full GTA V source code has been leaked The leak contains GTA V source code and stuff from Bully 2 and GTA VI Leaked in a discord server by a random British guy in the 360 modding community known to get sued by Rockstar multiple times
“Now i am expecting a open source version of gta to arrive soon on linux natively . Tired of playing supertuxcart.”
Here is the source. Another one.
If you’re not aware, the hack was performed by Arion Kurtaj, an 18 year old, who has been put in
prisona psych ward in a uk prison. He hacked rockstar at a hotel, where he was left with no computers or phones, only to find that the TV had a chromecast, which he used to buy a phone and a keyboard (presumably by selling his monero).This kid deserves a 7-8 digits salary as a pentester, not prison; plenty of pentesting companies would hire him in a heartbeat.
Don’t get me wrong, he deserves a long and drawn out lesson on morals, but also a stellar salary where he can do what he’s doing for the right side.
EDIT: I have made a mistake in my original comment, which has been pointed out. My bad, he’s technically in a psych ward in a uk prison, because he’s aggressive and unstable. I still stand by what I said (and what I clarified in the comments below), but I wanted to correct the record
You have to convince him first it is what he wants to do. He seems very fixated on being a cyber criminal at this time and money is unlikely to sway him.
He can learn once he understands the repercussions of his actions. Remember that he’s an autistic teenager, he has a lot to learn about life and especially morality.
He’ll learn great lessons in jail! /S
That’s why he’s in a prison hospital instead. I think they are called psyche wards or mental institutes in some places.
And all he has to do to get out of there is calm down and lie.
The fact he can’t control himself enough to get through court without crowing on about his intent to do more crime speaks to a lack of self control, and for that reason alone, his skills are moot in any discussion of his future prospects.
Yep could easily turn coat and sell to highest bidder.
Not every country is like the us
Especially in Europe a lot of them try to better people instead of punishing them and many have special institutions for teenagers that are my like psychiatric wards than prisons
His career in white hat cybersecurity is shot to fuck. No one will trust him enough after this
Well, considering the UK is not interested in helping him, and you’re probably right, we should perhaps be more concerned with Russia or a similar country picking him up for state sponsored cyberattacks or some shit.
Kid seems to be in it for the chaos and notoriety. That could cause quite a bit of harm in the right state environment.
Mostly true in normal cases. If you’re really talented there is a market for you, always. Idk if he falls in the category, and most cyber criminals have no shot at white hat anything but given his age and his feats I think he might be an exception.
In this case, that market is the black market. In the regular market, no head of security wants to be responsible for a potential critical breach by hiring such a wild cannon.
His only possible path would have been to show remorse after the attacks. He shot that in the ass, or at least made his job much harder in that respect, by pulling another attack while in police custody.
Remember when a company’s head of security was fired and prosecuted for ordering a pentest against his own company, which is a normal thing that good heads of security do?
running unauthorised pentests does indeed get people fired. Along with getting their managers in hot water for letting their pentesters be loose cannons. And if they’re attacking someone else while on company time, the company can be in serious legal trouble too.
it is rather customary for heads to roll when critical data is leaked as part of an insider attack, especially when said attack was enabled by negligent practices.
Just incase you’ve forgotten that randomly attacking people and leaking data is this kid’s MO.
I think you’re vastly underestimating what a big stack of green can do for the morals of an 18 yo.
An 18 yo isn’t gonna get fat stacks of green as a pentester.
The suits that decide salaries have different priorities. Like certs that are out of the price range of a teenager and years of professional experience.
Yea, but the nerds that the suits put in charge of security will absolutely recognize this kids skills. The suits don’t run the security teams at most corpos. There would be no security that way. Management is pretty hands off with them, at least from my experience working at corpos.
They will also recognise how much of a potential threat he is.
The suits absolutely do run the security teams. Very indirectly, but they do. The suits are the ones security teams have to persuade to get any sort of funding and they can and will veto a hiring decision like this.
You are correct that in most places, the suits do not usually directly intervene. Usually there is a lead guy in the security team that handles the conversations with the suits.
In a well functioning security unit, there is some trust there but not nearly enough to hire a kid like this. A veto is seen as a politically risky manoeuvre for a suit but it would absolutely be pulled for the prospect of hiring this kid, with some frankly compelling justification that any team lead would find nearly impossible to get around.
I’ve worked in several corporations in several security teams in the past, some amazing, some god-awful with insane suit meddling.
deleted by creator
Yeah I don’t think anyone here disagrees with that; his actions are objectively wrong and as I said, he definitely needs to learn morals and ethics.
I mean, duh, the media can’t tell the difference between a computer and a toaster, but that’s besides the point
I didn’t know about this, thanks for sharing. Can I get a source?
I’m a firm believer in meritocracy and the importance of rewarding skills. He should still pay a hefty price for his crimes, including jail time, where he will hopefully learn to change his ways, but once he gets out, if he’s truly remorseful for his actions and he’s willing to have others monitor his device usage activities, I don’t see why he shouldn’t be hired by a red team
https://www.bbc.com/news/technology-67663128
The thing is, people who are highly skilled at computers and pentesting aren’t that rare. Working in the industry also requires trustworthiness, reliability, communication skills, the ability to work well with others, and many other things - those are all key “merits”, too.
It doesn’t matter how good he is at typing rapidly and then saying “I’m in!” if he’s too unreliable and untrustworthy to actually get work done, or if his communication skills suck to the point where he can’t / won’t convey the problems he finds and how to fix them.
So do the executives of rockstar and every major game studio.
It’s a DLC, still to be released
I keep hearing this.
Find me any company that will hire someone so unstable and destructive, and I’ll show you a company with bad hiring practices.
This is someone you can never count on to do anything they don’t want to do. Someone who will destroy things if they don’t get their way. Triple letters won’t touch him.
Also, let’s be clear, a lot of this was social engineering. He didn’t do anything impressive, he just did things others wouldn’t be brazen enough to do because they didn’t want to get caught.
definitely, but people can change
people always have a high and mighty mentality when talking about social engineering, most attacks today use some form of social engineering and have for a long time, if not always.
Sure, but from what I have read that hasn’t happened and he doesn’t want to change. He straight up said he will continue to hack if released. He has even hacked in custody.
He can change if he gets the right treatment or he has a moment of reflection. It’s unreasonable to expect a normal person to be the same person 3 years later and even more unreasonable to expect a mentally unstable person to be the same n years later.
Isn’t that exactly what is happening?
It’s not the right treatment if it doesn’t work, and if it does work, it could still take ages for it to have a good enough effect.
So yes, but also no. Psychology and psychiatry are difficult because they require trial and error.
He did get sent to a psych ward instead of prison with that exact hope. IIRC the biggest issue wasn’t just the hacks, but that he was extremely violent and showed no remorse whatsoever as well.
Social engineering, arguably, is one of the harder things to learn.
It’s a collection of soft skills, and if you’ve been paying attention to rank and file tech jobs, places are looking for people with soft skills because they’re so impractical to train.
This goes down to your basic help desk tech.
Anyone with an interest in computers can sit down and learn how to analyze and exploit weakness in code. In fact, it’s a fun puzzle. Dealing with other people, let alone establishing oneself as another person and fucking SELLING that character enough to get what you need?
People write off social engineering far too quickly. It’s quick, it’s effective, and if done well, the person you exploited doesn’t even realize they’ve been tricked.
Social engineering is a major part of pen-testing and of hacking. It’s still impressive despite any carelessness.
This wasn’t carelessness. This was a deliberate.
I have a buddy that I grew up with that does penetration testing. Like I live in a city a whole continent away from home, and I run into him here or there, looking like a random smoking a cigarette outside an office tower or whatever. And thats what he’s doing, he’s on assignment trying to social engineer someone to give him access.
As they say, a chain is only as strong as its weakest link. Why try to hack the door lock when you can exploit people’s instincts to let them hold the door for you?
Are you kidding me? Aggressive, unstable and destructive seem to be core tenants for the CEOs of many large scale blue chip firms.
If you want actual penetration defense, you absolutely hire the unstable person. I’m not saying you put him or her in the centre desk on the main floor, let him or her work from an environment where they are most comfortable, and one that supports them best.
If you want window dressing, hire the neat and tidy person, who couldn’t actually penetrate an Excel sheet.
Or you hire an intelligent, capable, and professional pen tester. They’ll find the same holes that the nutcase will, they’ll document them, and they’ll do it without breaking things.
If you don’t think MI6 have their grubby hands all over this deciding what to do with the boy you should think again.
He’s too risky
You’re forgetting a vitally important part of being a pentester.
Namely that they need to be trusted not to leak billions of dollars worth of trade secrets.
This kid is a prodigy as a black hat, but he’d be an embarrassment as a pentester.
I agree with you in principle, you are definitely objectively correct, however people can redeem themselves.
To name two:
I used to work as a pentester. It’s an open secret that like a good chunk of people in the industry are former criminals. But former is kind of the keyword. Not only is he doing crime after being arrested and still under surveillance, but he can’t even lie and say he won’t do it again. The kid is unhireable, at least not until he can get his compulsions under control.
that’s exactly my point tho, he needs to understand why what he did was objectively wrong, and needs to understand that actions have consequences, but he’s still a teenager, and one with autism at that, there is plenty of time for him to change sides
What did he do that was wrong?
Jesus shit
To be fair to those two:
Mitnick did much what he did before hacking was even a crime, and almost all of it before offensive cybersecurity was even a viable career option.
the damage caused by the entirety of ShadowCrew (4000 odd members) was a drop in the bucket compared to that caused by this single kid
neither of them had compulsion issues that would cause them to attempt to hack even while under surveillance.
Fuck, didn’t know Mitnick died. Just married and with a child on the way, too.
He was arguably at his best at social engineering, too. Don’t know if it’s a real quote, but I remember reading about him saying it can bypass all your electronics, firewalls included.
I’m listening to an interview with Gollumfun as I’m reading this, what are the chances?
Haha I’m glad that he switched sides honestly, but after listening him talk about his childhood in an interview I’m not even surprised that he did what he did
How about the good old Danny Trejo?
I don’t even see how he’s a prodigy. He’s part of a larger group, and used a lot of social engineering tactics.
Almost all blackhats are part of a group, and even social engineering tactics can require talent to pull off, especially when it is guarding billions of dollars worth of trade secrets.
The dude carried out an attack with a fucking Amazon Fire stick and a phone. While in police custody. That is an insane level of preparation and knowledge of your tools
He’s talented, but the problem is jobs like pen testing require a LOT of trust to work in. So far this guy has said and shown that he intents on staying in cybercrime rather than doing legitimate work.
As it stands, given how he’s acted, I can’t see a single company that would let him pen test their systems or a red team that would take that risk to their reputation.
Exactly, all these redditors and lemmyers (lemmings??) keep saying “oh he should be working for MI5 or a cyber security firm, not getting court-ordered mental support!”
And it makes me want to bang my head against the wall. Even if we ignore him purposely breaking the law while on curfew from breaking the law previously, has been violent, and straight up said he wants to commit more crime, even if all of that is ignored, no company would trust him.
His application would be thrown straight into the bin in my company, and we don’t even deal with stuff that’s that sensitive.
Like seriously, have these people ever heard of the concept of insider threats?
Not even that he wants to do cyber crime, just that he’s unstable and violent, and is absolutely the kind of person who will refuse or even undermine certain tasks if they don’t feel like doing them.
I want to bet this dude is a giant asshole. Not sure why people keep making a hero out of him, he sounds like an awful person.
Maybe, I’ve never met him, but that changes nothing.
Linus Torvalds is a giant asshole and he doesn’t know how to talk to people, he’s still one of the most important people in tech.
Torvalds isn’t an asshole because of a nonexistent moral compass. He just has strong opinions, and he’s usually right, anyway.
Absolutely, didn’t mean to imply otherwise
deleted by creator
He’s not a giant asshole, he just doesn’t sugar-coat everything he says.
It’s sort of a defining trait in people where he is from. If we say something we tend to say it straight. He might be a more extreme example than most, but I had a good friend from the same neighborhood and he was the same.
We grew up a few years later when he had already moved to the US, but we used to sneak smokes in the park right outside where he first made Linux. My friend lived in the same building as he had done, but he was so computer illiterate that he had no idea who Linus was. I did, though, because Linus described that place pretty well in what I believe was his first book.
Removed by mod
That… Sounds exactly like how every smart asshole describes themselves. Don’t know anything about Linus, just basing that off your description.
Being right and being an asshole aren’t mutually exclusive. One is what you’re saying, the other is how you’re saying it.
And people keep making up bullshit about him.
He’s not in prison, he’s in a mental institution getting therapy because he has issues and was violent. He straight up told the judge he intends to commit more crimes.
I have zero love for Rockstar’s bs and I do have admiration of this young man’s skills, but he clearly presented himself as someone who can’t just be free without any further intervention.
As far as I recall he actively seeks to commit cybercrimes and even says so himself.
It’s not the first young hacker on the spectrum that has urges to hack stuff.
It’s a whole different question when someone is conscious he is doing something illegal and actively seeks to do it.
This is not another Aaron Swartz story imo. It’s an autistic individual that doesn’t hack out of curiosity but in order to damage businesses, and people or benefit himself.
In 5-10 years he would change his mind. As of now - kid had no idea about life.
Yea, I mean he’s an 18 year old autistic kid. He’s going to be a bit slower than his peers to develop adult skills and fit in to society. People in here are talking as if he’s unredeemable. He’s still just a kid who has some maturing to do.
Penetrating is legal cybercrimes.
Call me a model citizen then
He deserved (past tense) all that opportunity before he proved his willingness to use it to do damage. Given his dedication to committing crime, I can’t imagine who would ever trust him enough to want his talents.
Unfortunate that society punishes those that can do things that a lot of people don’t understand
deleted by creator
It’s more unfortunate that someone who is talented uses their skills to cause damage to society. The only thing he deserves is a lesson on morality and ethics.
He’s the type of person that should be removed from society. If that means a prison cell then so be it.
The real criminals in this world are the billionaires, the CEOs, the bankers, the landlords, bosses, and cops who enforce a capitalistic society on all of us and engineer the destruction of our environment and ensure our continued wage slavery and inevitable annihilation.
From what I’ve read the kid is a genius but also has mental issues that makes him want to perform criminal acts all the time
No. He wants to perform crimes because he fell into the wrong crowd and developed a massive ego.
His acute autism doesn’t predisposed him towards criminal actions.
They aren’t talking about his autism. They’re talking about his compulsion to do these acts. People, even autistics, don’t go as far as he did to hack things while already under surveillance. That isn’t an autism thing, something else is there.
Like what? If it’s not something he’s publicly diagnosed with, then how do you know it’s not just main character syndrome? Remember, he’s not a solo act; he’s apart of Lapsus$ and there’s no doubt they helped create his twisted personality.
It could be something as simple as needing to feel powerful in their space. That’s something a lot of people, autistic or not, can fall prey to, but it is more prevalent in introverts without a wide range of healthy social circles.
Think about it, how ballsy do you have to be to do an attack while in police custody? You pull that off, you’re going down as a fucking legend in black hat circles.
Exactly what I’m saying. It has nothing to do with his mental disorders, it’s purely social influence from the cybercriminal ring and egotism.
He desires to be seen as a legend and the members of Lapsus$ are no doubt going to be praising the hell out of him for pulling off something so audacious.
OP is making it out to be like he has psychopathy or ASPD or some shit, which is not a diagnosis that’s publicly known at this time even if that were the case. I’d rather not make massive generalizations of someone based on something that has 0 backing too.
The only disorder we know he’s diagnosed with is acute autism and nothing else, which just as you said :
Which is exactly the point I’m making.
Fuck that. His morals are completely correct.
he is not obedient enough for these corporations as is.
so throw away his talent it is.
Not just prison, life imprisonment under the oversight of medical professionals, until he can be deemed to not be a danger to others.
From a security perspective, what he’s done is very impressive. It sounds like he has a lot of troubles, though, and if anything this act has probably pushed the authorities to give him the medical help he probably needed.
Fuck it, if it’s hackable, it’s the company’s fault.
Bless the guy who leaked the HL2 beta.
You sure are making a lot of assumptions here and have some very interesting takes. Can you tell me how this would be done without a way to modify the Chromecast?
I have not made any assumptions, this has been shared multiple times in different articles which I did not write. As for the Chromecast, I misremembered, it was an Amazon Firestick.
https://www.wired.com/2005/07/a-hacker-games-the-hotel/
This is from 2005.
Why link an irrelevant article from 2005 about IR?
A true agent of chaos
He’s essentially the next Kevin Mitnick.
I agree, this kid would be a great pentester.
Not possible if he can do that but not wipe his own ass…
An hero
He’s essentially the next Kevin Mitnick.
He’s essentially the next Kevin Mitnick.
This guy defends criminal. What an idiot.
Please look into penetration testing.
Unless his attitude and stance changes, there’s not a single red team that I could see taking him. You can’t just throw someone who wants to be a criminal into pentesting and think it’ll go well
No disagreements here, but this is all something that can change easily, he just need to understand the repercussions of his actions
Not every black hat, even autistic ones, lack an understanding of their actions. Some know perfectly fucking well what they are doing.
This guy rigged up hardware to pull off a massive attack while in police custody. Bro knew full well by that point what the consequences were, he pulled off another attack in the middle of dealing with said consequences
Please stop saying that morally bankrupt teens deserve a career in security.
They don’t. Full stop. I don’t give a fuck how talented you are, if I can’t trust you then I’m not letting you near my systems. End of story.
Am a professional pentester/red teamer. You hit the nail on the head.
Pentesting is not all about the shit you can hack. A big part of it is presenting a professional face that suits can trust.
That is fundamentally incompatible with compulsively attacking and leaking billions of dollars worth of shit
Am a threat intel guy. It’s a pet peeve of mine to study criminals only to find SocMed presenting them as some kind of lovable anti-hero.
Like I get it, the guy’s got talent, and he stuck it to the man…
Except what he’s actually done is leaked decades of hard work by many talented people that do deserve to see a return on their efforts.
You can point to wages and working conditions but shit like this don’t solve those problems
They should have seen those returns by now tbh, as it’s for GTA V not VI, but most of the money sent to not the many talented people who made it but the people who paid them a little money (comparatively) upfront to work for them.
I agree with your point otherwise
If it’s malicious, it’s not penetration testing. It’s just malicious.
Just what the “security” industry needs. It’s all either talentless hacks, or skilled assholes.
Edit: lol ok, I’ve only been working near these people for a decade.
I bet you think John Brown deserved to die, don’t you?