Sign in with
Sign up | Sign in

AMD Site Leaked Millions of DiRT 3 Steam Keys

By - Source: Kotaku | B 25 comments

A missing .htaccess file granted clever surfers access to 1.7 million game keys for DiRT3 on Steam.

Oh snap. Someone will likely receive a scolding finger from AMD and Codemasters for leaving around 1.7 million reserved DiRT 3 keys wide open for savvy web surfers to find. Originally located here, the keys were listed in eight text files and reserved for gamers who purchased specific AMD graphics cards. But as of this report, the text files are gone and AMD has temporarily taken down the DiRT 3 promotional website until further notice.

At first, the blunder seemed to be totally on AMD's behalf: the promotional site lacked an .htaccess file which would have restricted access to specific areas on the server, including the directory where the keys resided. But once nosy visitors discovered that the directory doors were left unlocked, the keys were naturally scooped up and distributed across the Internet.

"Never put .sql database with game keys on webserver where simple missing .htaccess can leak it," said one developer from Bohemia Interactive on Steam's forums.

Yet despite leak, the catch was that the DiRT 3 keys were only usable on Valve's Stream platform. That said, Codemasters will likely send over the entire list to Valve so that the numbers can be blacklisted and the games quietly removed from user accounts. It's assumed that DiRT 3 keys already associated with registered AMD graphics cards via the promotion will not be affected.

After the initial news of the leak began to spread, Codemasters announced that it was investigating the situation and trying to "block" the codes. The publisher also conveyed its hopes that Valve would deactivate the stolen codes. "Despite what some sites are posting, it was not a Codemasters site or server on which the Dirt 3 codes in question were comprised, it was AMD's redemption site," the company explained.

AMD eventually came clean and said that the codes were hosted on a "third-party fulfillment website," and that neither AMD nor Codemasters servers were compromised in the incident. "AMD will continue to honor all valid game vouchers, however the current situation may result in a short delay before the vouchers can be redeemed," the company stated.

Display 25 Comments.
This thread is closed for comments
Top Comments
  • 22 Hide
    Anomalyx , September 6, 2011 10:01 PM
    iam2thecrowe"Yet despite leak, the catch was that the DiRT 3 keys were only usable on Valve's Stream platform" so you wont be able to use it right away anywaay. First you will have to reinstall steam 3 or 4 times, wait a few days for a server to become available, reinstall the game twice, update the game to even play it, decrypt some files then a few weeks later reinstall steam again when it stops working.


    Oh yeah, I've heard of that happening... I believe it's called an ID-10-T error.
  • 10 Hide
    kilo_17 , September 6, 2011 10:04 PM
    ^Lol man that was good!
Other Comments
  • -4 Hide
    SinisterSalad , September 6, 2011 9:34 PM
    I never did activate mine, yet. :/ 
  • -1 Hide
    AbdullahG , September 6, 2011 9:49 PM
    I activated mine when I got my Radeon HD card...never played it though.
  • 2 Hide
    11796pcs , September 6, 2011 9:53 PM
    Man, that's brutal- good luck AMD getting Codematers to partner with them for DiRT 4. I loved DiRT 2 but haven't been interested in DiRT 3 enough to pick it up. Plus it includes a Gymkhana mode that everyone seems to hate. Knowing Steam and Valve- the codes will definitely be deactivated (Steam strives for customer satisfaction).
  • 22 Hide
    Anomalyx , September 6, 2011 10:01 PM
    iam2thecrowe"Yet despite leak, the catch was that the DiRT 3 keys were only usable on Valve's Stream platform" so you wont be able to use it right away anywaay. First you will have to reinstall steam 3 or 4 times, wait a few days for a server to become available, reinstall the game twice, update the game to even play it, decrypt some files then a few weeks later reinstall steam again when it stops working.


    Oh yeah, I've heard of that happening... I believe it's called an ID-10-T error.
  • 10 Hide
    kilo_17 , September 6, 2011 10:04 PM
    ^Lol man that was good!
  • 9 Hide
    webbwbb , September 6, 2011 10:15 PM
    This is something that, if it were not illegal, could make for a pretty fun project. I have wondered about the possibility to use a large sample of software keys to detect patterns in them and reverse engineer the key assignment program. This is certainly a large enough sample to make that possible. Now, I am aware that pirates do make keygens for games but, from my understanding, they either do it by analyzing memory addresses during key entry, or they simply make a program that has several keys in a list and it randomly spits one out. It coul be rather problematic for Code Masters if someone was able to make a real keygen from this.
  • -1 Hide
    CosmicTwister , September 6, 2011 10:27 PM
    Nothing like an open door policy. Happy they found someone to correct the id-10-t Code in their config.sys file
  • 1 Hide
    cookoy , September 6, 2011 10:33 PM
    more likely someone will be receiving a kick in the butt than just a scolding finger
  • -1 Hide
    lp231 , September 6, 2011 10:38 PM
    Got Dirt 2 for free, played a few times then stopped after I reinstalled my OS. Not going to bother downloading it again, just to drive around in some off road track.
  • -4 Hide
    Anonymous , September 7, 2011 3:11 AM
    When will amd do thing right?
  • -7 Hide
    melvis72 , September 7, 2011 4:17 AM
    soldier37Meh played it yesterday with a modded racing PC setup in 3D, it was cool but not something i have to install. Not worth the space it would take up on my SSD drive.


    So how are you playing it in 3D on your AMD system, being your the AMD troll fanboy who's always talking how great your stuff is over everyone else's system
  • 2 Hide
    johnsmithhatesVLC , September 7, 2011 5:20 AM
    melvis72So how are you playing it in 3D on your AMD system, being your the AMD troll fanboy who's always talking how great your stuff is over everyone else's system

    AMD can do 3D.
  • -3 Hide
    iam2thecrowe , September 7, 2011 10:45 AM
    AnomalyxOh yeah, I've heard of that happening... I believe it's called an ID-10-T error.

    yeah i have heard of that error, its a bit like you are sofa king we tar dead that you copied it from someone else, you clever little teenie bopper. But seriously, I can't believe anyone here hasnt had to reinstall Steam multile times and have it stuff you round???
  • 2 Hide
    dan117 , September 7, 2011 1:20 PM
    iam2thecroweI can't believe anyone here hasnt had to reinstall Steam multile times and have it stuff you round???

    Works perfectly for me on Win7 64 bit version...
    I installed Steam 6 years ago on the D:\ partition and never had to reinstall it ever, even when I formatted C:\ to install Win7.
    Also, I prefer Steam to retail because it's faster and more convenient. All the games download/install with 6-7 MB/s.
  • -1 Hide
    Anonymous , September 7, 2011 3:30 PM
    @iam2thecrowe

    so let me get this right... after the second reinstall you never thought to check to see if something else was causing the problem cause you know reinstalling is going fix everything, you dont by any chance repeatedly press the F5 key when you get a 404 error ??
  • -2 Hide
    shannon78 , September 7, 2011 3:34 PM
    AnomalyxOh yeah, I've heard of that happening... I believe it's called an ID-10-T error.



    More accurate would be the EBKAC error
  • -1 Hide
    Anonymous , September 7, 2011 3:39 PM
    I've been running Steam for years, though only in the last year or so with any games on it (I think they changed it after I got it so that only people with paid games could add friends, but there was a way around that for a time, at least, so I just used it for IMing) on Win XP and Win 7. I've only had to do one reinstall that was not part of a Windows reinstall, and that was due to the game directory getting so large I could no longer add games without filling up the hard drive - so I had to move it all to a larger drive. I did have some minor stability issues with the client at this point, but then again, I was trying to download about 100 games, so I'll cut it some slack, since that was stressing the software quite a bit.

    The last reinstall I did (after my Windows bootloader borked due to the system crashing while a lot of data was being written to the disk) it actually kept all my games without having to redownload a single one.
  • -2 Hide
    internetlad , September 7, 2011 3:42 PM
    my "freind" (rethinking that though) gave me one of these keys, seeing as I just gifted him a copy of Nuclear Dawn out of a 4 pack and he didn't tell me what it was for, i put it on my steam account, later on in the day i see this article.

    I am disappoint.

    But if AMD throws a big bitchfit and bans my steam account (I doubt they will, as the guys as Valve don't seem to care too much.) I'm switching to Nvidia cards (I've been a ATI loyal for years) and bulldozer can suck it despite performance. If they want to lose customers over a 50 dollar crappy driving game this is the way to do it.

    I've sent a ticket to Steam support with my account and the key asking them to remove it so hopefully that rectifys the situation.
  • -1 Hide
    eddieroolz , September 7, 2011 4:18 PM
    Lucky for AMD that it was all on Steam, eh. If it was traditional CD keys they'd be out of a million sales.
Display more comments