• Excite Bike

  Browsing through the titles, I was hit by nostalgia for the excite bike theme tune. Turns out the game is not very exciting. Don’t think I played it much to begin with. Waste of credits.

  

• Megaman

  I couldn’t believe it – I beat Megaman from start to finish in under 2 hours. How could I have spent weeks (months?) struggling with this game as a nine year old. Today I beat Iceman without losing a life! I always assumed that kids were as good if not better than adults at console games, but I must have spent every waking hour playing the NES in 1988-1991 and still I would die time after time trying to get past the first part of Gutsman’s level. I confess, I did cheat twice in the final stages just like in the old days (keep pausing and unpausing really quickly to do extra damage), just to save a bit of time.

  

• Punchout

  What a classic – I was disappointed that they didn’t have Super Punchout in the Wii store, since that is even better than the original. Can’t believe I lost to Piston Honda…

  

• Ice Hockey

  I think back to all the fun I had playing this at my friends house. Choosing your team – a mixture of fat guys for strength and skinny guys for speed. Not quite as good as I remembered.

  

• Zelda II

  Still one of the greatest games of all time. Can’t wait to get back into this one. Didn’t have time to play it today, because Zelda always requires commitment. Maybe, like Megaman, the game will be much easier this time around. It feels a bit weird playing Zelda II on the Wii when I never even made it out of the village in the current Wii version.

  

And so Blizzard have played the Shatner card as part of their latest advertising campaign for World of Warcraft. [via]

Following in Shatner’s footsteps on the slippery slope of embarrassing self-parody is Mr. “Snickers: Get some Nuts!” T.

Blizzard missed out on the grand slam, because they were unable to land Chuck Norris for this campaign, allegedly because he already beat the game. Either that or he’s too busy endorsing Mike Huckabee and making ads for Mountain Dew:

What do you think of this:

To promote the event, the organisers posted some pictures from the previous year on their website. One of them showed idle.ee, the Estonian team who won Enemy Territory competition, on stage holding their cheque.

This caused a buzz on some of the gaming community sites (eSReality, xfire) for the wrong reasons. It turns out that someone, probably the QuakeCon webmaster, didn’t think that the original photo projected the right image for Quakecon:

Eventually, the Photoshopped image was removed from the front page, and the original was put in its place, without any explanation from the Quakecon staff. Apparently, the guy who was removed is a German Enemy Territory player called Urtier. I think he has a right to be fairly pissed off.

The gameplay revolves around two core principles:

• Tilt your macbook from side to side to move paddle
• Scream at your macbook to increase paddle size

This has to be the greatest invention since the seed drill, and it is open source.

Most gamers will remember the bit of trouble that Valve had a couple of years ago, when a German hacker known as Axel G, or “Osama Bin Leaker” when he’s in a particularly powerful mood, snuck into their network. Internal emails were leaked, demos were leaked, and ultimately the source code was to Half-life 2 was put on the internet. Valve burst into action like a coiled spring – instantly assembling a dynamic and energetic tiger team:

The fiasco resulted in a lot of hassle for the company, but they got some consolation in the end when they caught the perpetrators by pulling the oldest trick in the book – offering to hire Axel G as an in-house security auditor. Beaming with pride as he headed for the plane, ready to start his new life in America working on the game he loves, the poor boy had no idea that the FBI were laughing their asses off at the airport, doing Axel G impressions as they waited for him to arrive.

Axel G – a misguided enthusiast, suffering from classic notions of teenage hackers convinced himself that he was working for the greater good. He claimed that the motive behind the source code leak was to expose Valve for lying to the public about the state of the game, which was far from finished, implying that they demoed a fake version of the game at E3.

This latest haxor, MaddoxX, displays the same symptoms of a glorified self-image, probably seeing himself as half Robin Hood, half Darth Vader and half Zerocool. However, by comparing the number of x’s in their names, we can assume that MaddoxX is at least twice as l33t as Axel G, and thus less likely to fall for the “hey, you’re good! Come and work for us” trick. I would remind Valve of the old Chinese proverb that is strangely apt here: “Blind eagles soar with wings, but do not mess with psycho Russian hackers because you’ll get pwned”.

The Daily Tech article quotes MaddoxX, who outlines his motives:

In fact, MaddoxX says that he’s been tooling around on the Steam server’s back door since January. “I did try [to] contact them several months ago. At the time, I didn’t do anything harmful — just got [a few free copies of games] but never heard anything from them,” he says. “Later,” the steamed hacker adds, “I tried to warn them to fix bugs…but as usual, they don’t listen.” He recounts that he allegedly tried e-mailing Valve employees on several occasions without a reply. When a friend of his called attention to the potential security breaches on Valve forums, every trace of each thread got shut down. “They don’t even warn or reply to their Café customers that private information is leaked,” he says.

And here we come to the issue that is bothering me: MaddoxX is dead right in what he says. When you take confidential information from your customers – be it credit card details, home phone numbers, or their dog’s middle name, you take on a degree of responsibility. My guess is that Valve’s IT guys are still sitting around eating sandwiches in front of an empty whiteboard. The director of marketing at Valve, Doug Lombardi, just recently confirmed the security breach and released this statement:

There has been no security breach of Steam. The alleged hacker gained access to a third-party site that Valve uses to manage the commercial partners in its Cyber Café program. This Cyber Café billing system is not connected to Steam.

The Daily Tech refers to a very reasonable Californian Law which says that you are required by law to disclose any breach of security (to any resident whose unencrypted data is believed to have been disclosed). I’m not a lawyer, so I don’t know if Valve are bound by this, but I am aware of a general rule of thumb: if you discover a security breach, you snap to it and do something about it. You don’t hum and haw and mumble some comment a week later about an “alleged hacker” who broke into the system. If the guy has got:

• Screenshots of internal Valve web pages
• A portion of Valve’s Cafe directory
• Error logs
• Credit card information of customers
• Financial information on Valve

…then I think its safe to put your hands up and acknowledge this. Funnily enough, the Cork gaming cafe Area 51 even makes an appearence on one of MaddoxX’s screenshots. I wonder if they know that their credit card details could be compromised? Perhaps I’m being unfair, and all of the affected customers have been contacted and informed, but judging by the concerned cafe account owners on the steam forums and elsewhere, this does not seem to be the case. This only serves to validate what MaddoxX is saying, and highlights a gross lack of responsibility on Valve’s part. I believe the guy when he says he has contacted them many times about exploits and bugs and never got a reply. They sound like an absolute disaster.

Security breaches happen occasionally, and that is inevitable. I won’t dwell on the fact that it seems to be a recurring event for this particular company, I’m more concerned about the reaction when something does go wrong. Read this example of how it should be done, from WordPress. A responsible, well worded, concise account of what happened, when it happened, who is affected, and what to do if you are affected.

What would you have said if Automattic had come out with drivel like this: “There is no security breach at Akismet. I repeat, AKISMET IS SECURE AND SAFE. oh, by the way, WordPress got allegedly hacked.” Doug Lombardi: the issue is not “There has been no security breach of Steam”; the issue is: “THERE HAS BEEN A SECURITY BREACH“.