Stories
Slash Boxes
Comments

SoylentNews is people

posted by Dopefish on Tuesday February 18 2014, @05:00AM   Printer-friendly
from the move-along-nothing-to-see-here dept.

Lagg writes:

"We're in a climate where it's easy to accuse a company of spying on you by various means with a distinct possibility that you could be right, but sometimes a reality check is needed. A Reddit user recently posted a thread accusing Valve of writing code for VAC that iterates your DNS cache and sends the hashed entries to their server. The proof provided of this was a prettied disassembly (that was not easily reproducible due to how VAC loads symbols) that showed only that VAC was indeed iterating the DNS cache, which any knowledgeable programmer understands is not exactly an uncommon thing to do, as no socket code was to be seen. Today, Gabe Newell responded to these allegations by confirming that no they do not in fact snoop your cache entries.

There are probably a few things to learn from this, including not trusting a screenshot of code that looks complex without actually understanding what it's doing. A lack of any level-headed investigation is a bad idea and it's important to handle these situations before they snowball into a mob (as Redditors are bound to do)."

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1) by Lagg on Tuesday February 18 2014, @06:13AM

    by Lagg (105) on Tuesday February 18 2014, @06:13AM (#1439) Homepage Journal
    It's less "it's okay because I'm a programmer" and more "this is a pretty common micro-optimization". Meaning that it doesn't necessarily equate to malicious code, just that by itself it cannot be used to come to the conclusion that it's snooping. Personally I think rolling one's own hasher is kind of silly, except for on embedded stuff maybe.
    --
    http://lagg.me [lagg.me] 🗿