Valve patches ‘Team Fortress 2’ bug that could install a trojan when you died

Team Fortress 2
Dying in a first-person shooter is not usually as big a deal as in other genres, but in one case researchers found it could be very detrimental to your PC. Valve has now fixed a bug brought to its attention, which in Team Fortress 2 and various other Source titles, allowed hackers to remotely install trojans and other malware upon a player’s death.

Described by researchers as a “buffer overflow vulnerability,” the exploit was one that had to be loaded onto a victim’s machine through a custom map file. There, the researchers were able to install a custom ragdoll model file, which would, in turn, be loaded up when a player died. But instead of displaying a realistic or comical figure during death, that file executed malicious code.

Discovered by One Up Security, the bug has now been patched by Valve for all affected Source games, including Counterstrike: Global Offensive, TF2, Half-Life 2 Death Match, Portal 2, and Left 4 Dead 2. However, they do suggest that Source mod makers update their mods with the patch linked. One Up Security also provides guidelines and advice for mod makers to help them avoid the potential problems caused by this sort of exploit.

However, users can also take steps to protect themselves from exploits through games. For starters, One Security’s Justin Taft suggests that games should not be installed on work machines. He suggests that gameplay should be maintained on an entirely separate network to business-related functions.

He highlights in his discussion of the bug that this unlikely to be common place, as games are quite a common sight in break rooms and on the home computers of employees — but recommends as much separation as possible to avoid this kind of exploit from affecting corporate interests.

For average gamers who want to add some extra security to their own setup to avoid any potential future exploits that leverage Valve’s popular Source titles, he recommends disabling third-party content with a specific console command. That will leave you unable to enjoy some of the wider variety of custom maps and mods out there, but if security is more important to you than gameplay, it may be worth considering.

Product Review

The Black Shark gaming phone takes a big bite out of your free time, but the software sinks it

The world is being treated to an ever-increasing number of high-powered gaming phones. With so many great options already out, is there room for another? The Black Shark thinks so. But is it any good? We find out.
Mobile

How to switch from iPhone to Android: The ultimate guide

If you've decided to bridge the great tech divide and leave Apple's walled garden for the unknown shores of Android, then you'll find all the tips and advice you need to begin switching from an iPhone to an Android device.
Computing

Turn your Raspberry Pi into a Steam streaming hub with Valve’s Steam Link app

Valve's Steam Link app is now fully supported by Raspberry PI hardware, meaning that just about anyone with a few dollars to spare can build their own Steam streaming box in a matter of minutes.
Gaming

Apple Mac users should take a bite out of these awesome games

Contrary to popular belief, there exists a bevy of popular A-list games compatible for Mac computers. Take a look at our picks for the best Mac games available for Apple fans.
Gaming

Where we droppin’ (presents)? Perfect ‘Fortnite’ gifts for the fans in your life

Chances are someone on your holiday shopping list is a fan of Fortnite. As the most popular game on the planet, there are plenty of Fortnite-themed gift options available for purchase in stores and online. Here are the best ones we found.
Gaming

Have a spooky dance party at an abandoned mansion with Fortnite's new challenges

The Fortnite season 7, week 2 challenges have arrived in Battle Royale. From searching for chests to dancing off at an abandoned mansion, here's how to do them and the rewards you get for completing them.
Gaming

Sega Genesis classics now playable on Amazon Fire TV, no retro console required

Sega released the SEGA Classics app for Amazon Fire TV devices, allowing gamers to play Sega Genesis classics without having to buy a retro console. The $15 app contains 25 games, including three remastered Sonic titles.
Deals

The Super NES Classic is the perfect holiday gift for Nintendo lovers

Whether you're a long-time Nintendo fan looking to relive the 16-bit glory days or just doing some holiday shopping, the SNES Classic -- now in stock at multiple retailers for $80 -- might just be the perfect Christmas gift for gamers of…
Gaming

Nintendo pulls the plug on making more SNES Classic, NES Classic systems

Nintendo extended production of the NES Classic and SNES Classic into 2018, but once the current supply of consoles is gone, the company won't be making more. Instead, you'll have to use Nintendo Switch Online.
Gaming

Fancy ‘Kingdom Hearts III’ PlayStation 4 Pro launches alongside game in January

A limited edition PlayStation 4 Pro bundle for Kingdom Hearts III will launch alongside the game in January. The system included has a special design on the side, as does the controller.
Gaming

Want to share your Xbox One games? Here's how to do it

Sharing games on modern consoles is possible, but it takes a few steps. Here's how to start sharing games on your Xbox One console, so friends and family can easily access your library.
Gaming

Here's where Xur is and what he has for wares this week in 'Destiny 2: Forsaken'

The weekly vendor in Destiny 2: Forsaken always brings Exotic weapons and armor, some of the toughest loot to find in the game. Here's everything you need to know to track down Xur: Where he is, when he shows up, and what he's stocking.
Gaming

‘Fortnite’ removes the Infinity Blade weapon after player backlash

Following player backlash over the Infinity Blade weapon's inclusion in Fortnite's battle royale mode, Epic Games decided to remove the weapon from the game completely. It was not limited to a special mode.
Gaming

Want every suit in 'Marvel's Spider-Man' for PS4? Here's how to get them all

Marvel's Spider-Man features a whopping 33 different suits for Peter Parker to wear as he swings across New York City knocking out baddies. Here are all the suits and how to unlock them.