Here at Ars, we’re intimately acquainted with information leaks surrounding Valve’s video games, {hardware}, and the workings of Steam itself. But nothing might have ready us for this weekend’s “terarelease” encompassing greater than 12TB of content material associated to seemingly each title accessible on Steam between 2003 to 2013.
What’s being offered as an “as-complete-as-possible … content server dump” of Steam’s defunct “Steam2” server structure from that point interval is now circulating round by way of a BitTorrent tracker that Valve appears unlikely to ever fully purge from the Internet. The large assortment consists of thousands of “depots” representing what appears to be each model of each recreation uploaded to these previous Steam2 servers. That consists of public launch builds, in fact, however in lots of circumstances additionally covers beforehand unseen pre-release, prototype, and playtest variations of widespread titles revealed by Valve and third-party Steam publishers.
Steam2: Electric Boogaloo
The cause this weekend’s leaked content material cuts off abruptly in 2013 is as a result of that’s when Valve updated its content distribution system from “Steam2” to the current SteamPipe system. In transferring from a proprietary file distribution format to straightforward HTTP file timber, the brand new system removed various update approval bottlenecks on Valve’s finish and streamlined replace and patch downloads in order that they solely mirrored file differentials.
Publicly accessible early variations of some video games launched earlier than this SteamPipe transition had been considered lost content by archivists, not accessible from Valve itself and dwelling on solely as native downloads on growing older machines. Apparently all that content material wasn’t as misplaced as many thought, although. Longtime Valve watcher and information miner Gabe Follower (beforehand) wrote on social media this weekend that he had “verified that everything in Steam2 Teraleak was obtained via a publicly accessible [API] endpoint. It’s Valve’s fault…”
Spanish-language Valve streamer and analyst Scolcer also said on social media (by way of machine translation) that the teraleak was “obtained from a site that was 100% accessible to the public. It was there for everyone to download. No passwords. Nothing. Hidden in plain sight, but with no protection whatsoever.”