The full GTA V source code has been leaked The leak contains GTA V source code and stuff from Bully 2 and GTA VI Leaked in a discord server by a random British guy in the 360 modding community known to get sued by Rockstar multiple times
“Now i am expecting a open source version of gta to arrive soon on linux natively . Tired of playing supertuxcart.”
If you’re not aware, the hack was performed by Arion Kurtaj, an 18 year old, who has been put in prison a psych ward in a uk prison. He hacked rockstar at a hotel, where he was left with no computers or phones, only to find that the TV had a chromecast, which he used to buy a phone and a keyboard (presumably by selling his monero).
He hacked into all major uk telcom providers: EE, BT and Orange.
He hacked into nvidia
This kid deserves a 7-8 digits salary as a pentester, not prison; plenty of pentesting companies would hire him in a heartbeat.
Don’t get me wrong, he deserves a long and drawn out lesson on morals, but also a stellar salary where he can do what he’s doing for the right side.
EDIT: I have made a mistake in my original comment, which has been pointed out. My bad, he’s technically in a psych ward in a uk prison, because he’s aggressive and unstable. I still stand by what I said (and what I clarified in the comments below), but I wanted to correct the record
He’s not a giant asshole, he just doesn’t sugar-coat everything he says.
It’s sort of a defining trait in people where he is from. If we say something we tend to say it straight. He might be a more extreme example than most, but I had a good friend from the same neighborhood and he was the same.
We grew up a few years later when he had already moved to the US, but we used to sneak smokes in the park right outside where he first made Linux. My friend lived in the same building as he had done, but he was so computer illiterate that he had no idea who Linus was. I did, though, because Linus described that place pretty well in what I believe was his first book.
He’s not in prison, he’s in a mental institution getting therapy because he has issues and was violent. He straight up told the judge he intends to commit more crimes.
I have zero love for Rockstar’s bs and I do have admiration of this young man’s skills, but he clearly presented himself as someone who can’t just be free without any further intervention.
They should have seen those returns by now tbh, as it’s for GTA V not VI, but most of the money sent to not the many talented people who made it but the people who paid them a little money (comparatively) upfront to work for them.
Unless his attitude and stance changes, there’s not a single red team that I could see taking him. You can’t just throw someone who wants to be a criminal into pentesting and think it’ll go well
Not every black hat, even autistic ones, lack an understanding of their actions. Some know perfectly fucking well what they are doing.
This guy rigged up hardware to pull off a massive attack while in police custody. Bro knew full well by that point what the consequences were, he pulled off another attack in the middle of dealing with said consequences
No. He wants to perform crimes because he fell into the wrong crowd and developed a massive ego.
His acute autism doesn’t predisposed him towards criminal actions.
They aren't talking about his autism. They're talking about his compulsion to do these acts. People, even autistics, don't go as far as he did to hack things while already under surveillance. That isn't an autism thing, something else is there.
Like what? If it’s not something he’s publicly diagnosed with, then how do you know it’s not just main character syndrome? Remember, he’s not a solo act; he’s apart of Lapsus$ and there’s no doubt they helped create his twisted personality.
It could be something as simple as needing to feel powerful in their space. That's something a lot of people, autistic or not, can fall prey to, but it is more prevalent in introverts without a wide range of healthy social circles.
Think about it, how ballsy do you have to be to do an attack while in police custody? You pull that off, you're going down as a fucking legend in black hat circles.
Exactly what I’m saying. It has nothing to do with his mental disorders, it’s purely social influence from the cybercriminal ring and egotism.
He desires to be seen as a legend and the members of Lapsus$ are no doubt going to be praising the hell out of him for pulling off something so audacious.
OP is making it out to be like he has psychopathy or ASPD or some shit, which is not a diagnosis that’s publicly known at this time even if that were the case. I’d rather not make massive generalizations of someone based on something that has 0 backing too.
The only disorder we know he’s diagnosed with is acute autism and nothing else, which just as you said :
It could be something as simple as needing to feel powerful in their space. That’s something a lot of people, autistic or not, can fall prey to
Haha I’m glad that he switched sides honestly, but after listening him talk about his childhood in an interview I’m not even surprised that he did what he did
Fuck, didn’t know Mitnick died. Just married and with a child on the way, too.
He was arguably at his best at social engineering, too. Don’t know if it’s a real quote, but I remember reading about him saying it can bypass all your electronics, firewalls included.
I used to work as a pentester. It’s an open secret that like a good chunk of people in the industry are former criminals. But former is kind of the keyword. Not only is he doing crime after being arrested and still under surveillance, but he can’t even lie and say he won’t do it again. The kid is unhireable, at least not until he can get his compulsions under control.
that’s exactly my point tho, he needs to understand why what he did was objectively wrong, and needs to understand that actions have consequences, but he’s still a teenager, and one with autism at that, there is plenty of time for him to change sides
My GF works with autistic individuals and for a majority of them they simply cannot lie, at least not big lies. He may not even see it as being that wrong (probably does know to some extent that it is wrong), especially with all the (correct) rhetoric that companies are scum bastards obscuring the truth. The kid is indeed unhireable for the time being but he could be helped to understand the morals, ethics and laws surrounding his interests to integrate him into the capitalistic world he finds himself in.
I certainly didn’t mean to make any moral judgments about the kid. I’m not even sure that I think it’s morally wrong (unwise and legally wrong, no doubt, I just don’t think his actions hurt any person and I don’t care if an action hurts a corporation). The kid is clearly talented and I hope he gets the treatment he needs. I sure hope he can eventually make a living with his talents and perhaps eventually use his talents towards positive change.
Almost all blackhats are part of a group, and even social engineering tactics can require talent to pull off, especially when it is guarding billions of dollars worth of trade secrets.
The dude carried out an attack with a fucking Amazon Fire stick and a phone. While in police custody. That is an insane level of preparation and knowledge of your tools
Not just prison, life imprisonment under the oversight of medical professionals, until he can be deemed to not be a danger to others.
From a security perspective, what he’s done is very impressive. It sounds like he has a lot of troubles, though, and if anything this act has probably pushed the authorities to give him the medical help he probably needed.
It’s more unfortunate that someone who is talented uses their skills to cause damage to society. The only thing he deserves is a lesson on morality and ethics.
He’s the type of person that should be removed from society. If that means a prison cell then so be it.
The real criminals in this world are the billionaires, the CEOs, the bankers, the landlords, bosses, and cops who enforce a capitalistic society on all of us and engineer the destruction of our environment and ensure our continued wage slavery and inevitable annihilation.
Communism is a moneyless, classless, stateless society.
Neither China nor Cuba are communist.
The only “luxuries” capitalism provides are extreme disparity, environmental destruction, wage slavery, an inefficient and wasteful distribution of resources, and the assured extinction of humanity - but I guess it does provide countless variations of similar sugar water, mobile phones, and branded clothing.
And these variations spark competition, which leads to faster development and price competitions. If no one was competing with one another there would be need to inovate, so things like phones would most likely not exist yet let alone ever exist.
And your “he damaged a corporation so he needs to be removed from society” is not capitalist propaganda?
If you hate communism so much, move to a corporate housing building and break your back working in an amazon warehouse for 16 hours a day. Go piss in a bottle and donate a little extra of your paycheck to your boss so he lets you use a bathroom once a week. It’s easy to support capitalism while having the luxuries of an open source community driven platform loaded with leftists.
And your “he damaged a corporation so he needs to be removed from society” is not capitalist propaganda?
That's not propaganda, it's the current law. You might not agree with it, I also don't agree with all laws. But this is pretty basic and unbiased, you repeatedly steal from someone so you should be removed
I don't love capitalism but it's the best we got and we indeed need some leftist to stop that Amazon scenario from happening. But what is going on now is just ridiculous.
Also you said that it is easy to say something like this on a open source community driven platform. I actually don't care if it's open or closed source. As long as it's not biased towards one side.
Just to be clear? Are you guys defending someone who stole data from the rightful owner without their permission.
Do you guys also seriously think that this guy can be let go and not do major damage to society?
He’s talented, but the problem is jobs like pen testing require a LOT of trust to work in. So far this guy has said and shown that he intents on staying in cybercrime rather than doing legitimate work.
As it stands, given how he’s acted, I can’t see a single company that would let him pen test their systems or a red team that would take that risk to their reputation.
Exactly, all these redditors and lemmyers (lemmings??) keep saying “oh he should be working for MI5 or a cyber security firm, not getting court-ordered mental support!”
And it makes me want to bang my head against the wall. Even if we ignore him purposely breaking the law while on curfew from breaking the law previously, has been violent, and straight up said he wants to commit more crime, even if all of that is ignored, no company would trust him.
His application would be thrown straight into the bin in my company, and we don’t even deal with stuff that’s that sensitive.
Like seriously, have these people ever heard of the concept of insider threats?
Not even that he wants to do cyber crime, just that he’s unstable and violent, and is absolutely the kind of person who will refuse or even undermine certain tasks if they don’t feel like doing them.
You have to convince him first it is what he wants to do. He seems very fixated on being a cyber criminal at this time and money is unlikely to sway him.
An 18 yo isn't gonna get fat stacks of green as a pentester.
The suits that decide salaries have different priorities. Like certs that are out of the price range of a teenager and years of professional experience.
Yea, but the nerds that the suits put in charge of security will absolutely recognize this kids skills. The suits don’t run the security teams at most corpos. There would be no security that way. Management is pretty hands off with them, at least from my experience working at corpos.
Yea, but the nerds that the suits put in charge of security will absolutely recognize this kids skills.
They will also recognise how much of a potential threat he is.
The suits don’t run the security teams at most corpos.
The suits absolutely do run the security teams. Very indirectly, but they do. The suits are the ones security teams have to persuade to get any sort of funding and they can and will veto a hiring decision like this.
You are correct that in most places, the suits do not usually directly intervene. Usually there is a lead guy in the security team that handles the conversations with the suits.
In a well functioning security unit, there is some trust there but not nearly enough to hire a kid like this. A veto is seen as a politically risky manoeuvre for a suit but it would absolutely be pulled for the prospect of hiring this kid, with some frankly compelling justification that any team lead would find nearly impossible to get around.
I've worked in several corporations in several security teams in the past, some amazing, some god-awful with insane suit meddling.
He can learn once he understands the repercussions of his actions. Remember that he’s an autistic teenager, he has a lot to learn about life and especially morality.
Mostly true in normal cases. If you’re really talented there is a market for you, always. Idk if he falls in the category, and most cyber criminals have no shot at white hat anything but given his age and his feats I think he might be an exception.
Mostly true in normal cases. If you’re really talented there is a market for you, always.
In this case, that market is the black market. In the regular market, no head of security wants to be responsible for a potential critical breach by hiring such a wild cannon.
His only possible path would have been to show remorse after the attacks. He shot that in the ass, or at least made his job much harder in that respect, by pulling another attack while in police custody.
In the regular market, no head of security wants to be responsible for a potential critical breach by hiring such a wild cannon.
Remember when a company’s head of security was fired and prosecuted for ordering a pentest against his own company, which is a normal thing that good heads of security do?
running unauthorised pentests does indeed get people fired. Along with getting their managers in hot water for letting their pentesters be loose cannons. And if they're attacking someone else while on company time, the company can be in serious legal trouble too.
it is rather customary for heads to roll when critical data is leaked as part of an insider attack, especially when said attack was enabled by negligent practices.
Just incase you've forgotten that randomly attacking people and leaking data is this kid's MO.
Well, considering the UK is not interested in helping him, and you’re probably right, we should perhaps be more concerned with Russia or a similar country picking him up for state sponsored cyberattacks or some shit.
Kid seems to be in it for the chaos and notoriety. That could cause quite a bit of harm in the right state environment.
And all he has to do to get out of there is calm down and lie.
The fact he can’t control himself enough to get through court without crowing on about his intent to do more crime speaks to a lack of self control, and for that reason alone, his skills are moot in any discussion of his future prospects.
Especially in Europe a lot of them try to better people instead of punishing them and many have special institutions for teenagers that are my like psychiatric wards than prisons
He deserved (past tense) all that opportunity before he proved his willingness to use it to do damage. Given his dedication to committing crime, I can’t imagine who would ever trust him enough to want his talents.
This kid deserves a 7-8 digits salary as a pentester, not prison; plenty of pentesting companies would hire him in a heartbeat.
I keep hearing this.
Find me any company that will hire someone so unstable and destructive, and I’ll show you a company with bad hiring practices.
This is someone you can never count on to do anything they don’t want to do. Someone who will destroy things if they don’t get their way. Triple letters won’t touch him.
Also, let’s be clear, a lot of this was social engineering. He didn’t do anything impressive, he just did things others wouldn’t be brazen enough to do because they didn’t want to get caught.
I have a buddy that I grew up with that does penetration testing. Like I live in a city a whole continent away from home, and I run into him here or there, looking like a random smoking a cigarette outside an office tower or whatever. And thats what he’s doing, he’s on assignment trying to social engineer someone to give him access.
This is someone you can never count on to do anything they don’t want to do. Someone who will destroy things if they don’t get their way. Triple letters won’t touch him.
definitely, but people can change
a lot of this was social engineering
people always have a high and mighty mentality when talking about social engineering, most attacks today use some form of social engineering and have for a long time, if not always.
He did get sent to a psych ward instead of prison with that exact hope. IIRC the biggest issue wasn’t just the hacks, but that he was extremely violent and showed no remorse whatsoever as well.
Sure, but from what I have read that hasn’t happened and he doesn’t want to change. He straight up said he will continue to hack if released. He has even hacked in custody.
He can change if he gets the right treatment or he has a moment of reflection. It’s unreasonable to expect a normal person to be the same person 3 years later and even more unreasonable to expect a mentally unstable person to be the same n years later.
Are you kidding me? Aggressive, unstable and destructive seem to be core tenants for the CEOs of many large scale blue chip firms.
If you want actual penetration defense, you absolutely hire the unstable person. I’m not saying you put him or her in the centre desk on the main floor, let him or her work from an environment where they are most comfortable, and one that supports them best.
If you want window dressing, hire the neat and tidy person, who couldn’t actually penetrate an Excel sheet.
Social engineering, arguably, is one of the harder things to learn.
It’s a collection of soft skills, and if you’ve been paying attention to rank and file tech jobs, places are looking for people with soft skills because they’re so impractical to train.
This goes down to your basic help desk tech.
Anyone with an interest in computers can sit down and learn how to analyze and exploit weakness in code. In fact, it’s a fun puzzle. Dealing with other people, let alone establishing oneself as another person and fucking SELLING that character enough to get what you need?
People write off social engineering far too quickly. It’s quick, it’s effective, and if done well, the person you exploited doesn’t even realize they’ve been tricked.
As far as I recall he actively seeks to commit cybercrimes and even says so himself.
It’s not the first young hacker on the spectrum that has urges to hack stuff.
It’s a whole different question when someone is conscious he is doing something illegal and actively seeks to do it.
This is not another Aaron Swartz story imo. It’s an autistic individual that doesn’t hack out of curiosity but in order to damage businesses, and people or benefit himself.
Yea, I mean he’s an 18 year old autistic kid. He’s going to be a bit slower than his peers to develop adult skills and fit in to society. People in here are talking as if he’s unredeemable. He’s still just a kid who has some maturing to do.
The kid was an idiot and a dickhead. He extorted companies and sim swapped people for his private gain, and was stupid enough to continue his hacking spree while he was on bail for another hack.
Yeah I don’t think anyone here disagrees with that; his actions are objectively wrong and as I said, he definitely needs to learn morals and ethics.
Samsung Dex over Miracast (which the news liked to present as some kind of amazing hacking feat)
I mean, duh, the media can’t tell the difference between a computer and a toaster, but that’s besides the point
He’s violent, damaging property and injuring staff.
I didn’t know about this, thanks for sharing. Can I get a source?
I don’t get what this “he deserves a stellar salary” mentality comes from
I’m a firm believer in meritocracy and the importance of rewarding skills. He should still pay a hefty price for his crimes, including jail time, where he will hopefully learn to change his ways, but once he gets out, if he’s truly remorseful for his actions and he’s willing to have others monitor his device usage activities, I don’t see why he shouldn’t be hired by a red team
I’m a firm believer in meritocracy and the importance of rewarding skills. He should still pay a hefty price for his crimes, including jail time, where he will hopefully learn to change his ways, but once he gets out, if he’s truly remorseful for his actions and he’s willing to have others monitor his device usage activities, I don’t see why he shouldn’t be hired by a red team
The thing is, people who are highly skilled at computers and pentesting aren’t that rare. Working in the industry also requires trustworthiness, reliability, communication skills, the ability to work well with others, and many other things - those are all key “merits”, too.
It doesn’t matter how good he is at typing rapidly and then saying “I’m in!” if he’s too unreliable and untrustworthy to actually get work done, or if his communication skills suck to the point where he can’t / won’t convey the problems he finds and how to fix them.
As a release engineer for Electronic Arts for 13 years, this looks like to me a copy of either the source folder from Perforce, a devs machine that had synced a stream, or the same from a build machine. It’s not uncommon to use batch files and python scripts to reconfigure a workspace to switch workspaces. I see a solution file in there.
I would bet that particular file is an automation script to configure a machine for development.
It’s probably just the code without any assets (textures, 3d models, etc.). Code really doesn’t take much space. You’d have a hard time actually building it to something playable as is, but this is still useful to modders.
4.3 gb for source code only seems like a lot though, doesn’t it? (I am just a data scientist/civil engineer/hydrologolist though, no software developer, so I might be wrong I guess).
I’m confused. This kid was arrested for hacking Rockstar and downloading and sharing 90 video clips of the unreleased GTA6, but this source code leak is GTA5, and the full leak is 1TB in size. He was in police custody in a hotel during the time of his 90 clip GTA6 hack. That’s a lot of space for a smartphone and fire stick.
There are 3 leaks in circulation:
3.3 gigs, src only
17 gigs, src + partial assets
1 TB, src + full assets
How are we certain this kid was behind the GTA5 source leak, because these sources don’t claim that. It’s possible that he passed the info on to Lapsu$ members but unless you have another source, this kid wasn’t the leaker of the GTA5 leak.
you know that’s a really great point. I had assumed they would make sure he didn’t have a credit card or monitor it etc but you can buy whatever amount of VPS or dedi storage you want with crypto. I’m sure he had knowledge of DNS exfiltration etc to get past any Wi-Fi blocks, or just crack the password for any nearby hotspots if he wasn’t allowed internet access per his detainment.
My thought was he probably gave the initial foothold info to other lapsus members and they took it from there but you’re right he absolutely could have.
you know that’s a really great point. I had assumed they would make sure he didn’t have a credit card or monitor it etc but you can buy whatever amount of VPS or dedi storage you want with crypto. I’m sure he had knowledge of DNS exfil paid hotspot bypass etc to get past any Wi-Fi blocks, or just crack the password for any nearby hotel occupant hotspots if he wasn’t allowed internet access per his detainment.
My thought was he probably gave the initial foothold info to other lapsus members and they took it from there but you’re right he absolutely could have done at all himself.
The full source with assets included is what was leaked, that was my point. It’s 1TB. The leaker also made 2 other versions for people who don’t want to download 1TB since a lot of people don’t have that much spare space lying around for a copy of a games source.
Add comment