3 Million Dirt 3 Steam Keys of AMD Radeon Promotion Leaked

[btarunr]

In a major embarrassment to the people behind the AMD Radeon Dirt 3 promotion, as many as 3 million Steam product redeem codes of Dirt 3, the new rally simulator game, were leaked to the internet, according to a post on Steam forums by a Bohemia Interactive representative. AMD is running a promotion where select models of Radeon graphics cards across various AIB partners and AMD's own A-Series APUs, come with free Dirt 3 keys that can be redeemed in Steam for a copy of the game.

According to the representative, those millions of keys were stored in an SQL database that could have been easily accessed by a simple missing .htaccess exploit. Steam might blacklist all those keys, and ask users with valid codes to re-register their products with AIB partners for fresh keys. Steam users reported a "Steam Key Giveaway" running on an infamous imageboard, to which the Bohemia Interactive representative responded.





Update 09/06
AMD made the following statement in this regard.

You may have heard this weekend, activation keys for free Dirt 3 game vouchers shipping with a few AMD products were compromised. The keys were hosted on a third-party fulfillment agency website, AMD4u.com, and were not on AMD's website. Neither AMD nor Codemasters servers were involved.

We're working closely with everyone to address the situation. AMD will honor all valid game vouchers, but just a heads up, the current situation may result in a short delay before the vouchers can be redeemed.

View at TechPowerUp Main Site

 

[btarunr]

No, you may not talk about where to get those keys from.

 

[BrooksyX]

Grr. Looks like I accidentally bought one of these bad codes earlier tonight on ebay. Hope my steam account doesnt get banned or something.

 

[JrRacinFan]

Grr. Looks like I accidentally bought one of these bad codes earlier tonight on ebay. Hope my steam account doesnt get banned or something.

Highly doubt that will hapen if you were able to redeem it. Wouldn't take much to prove your ownership.

do you have physical possession of the coupon ?

 

[btarunr]

Grr. Looks like I accidentally bought one of these bad codes earlier tonight on ebay. Hope my steam account doesnt get banned or something.

How much did you buy it for?

Steam will most probably block that key (the game will go from "ready to play" to "purchase" in your list).

It will then ask those with valid Dirt 3 coupons to get fresh keys from their graphics card vendors. They will be asked to enter the proof of purchase and serial of their graphics card for that.

 

[BrooksyX]

Highly doubt that will hapen if you were able to redeem it. Wouldn't take much to prove your ownership.

do you have physical possession of the coupon ?

no but maybe i can get possession of it. its probably a bad key though, oh well I only paid $4.50 for it. I opened a paypal dispute just in case.

 

[NC37]

So is the Dirt 3 promo with the APU good for any vendor? Cause I got from Amazon and I didn't get any key, just $10 in mp3s.

 

[Widjaja]

Wonder if this is linked to the incident after CM lost online play for Race Driver GRiD.

 

[erixx]

And what has Bohemia to do with this ?!

 

[Lionheart]

Some douche from Intel did it I bet...^_^..lol

 

[btarunr]

Some douche from Intel did it I bet...^_^..lol

The extra profit AMD gets from this promotion won't even pay for a day's coffee bill at Intel.

 

[buggalugs]

no but maybe i can get possession of it. its probably a bad key though, oh well I only paid $4.50 for it. I opened a paypal dispute just in case.

Haha If you paid $4.50 that might be a clue that its not legit.

 

[FordGT90Concept]

And what has Bohemia to do with this ?!

Good question and I don't have an answer for you.

 

[silkstone]

i can't imagine steam accounts getting banned over this. What i would anticipate is that people who registered their copy of Dirt 3 after the date of the leak to have to re-verify somehow.

 

[assaulter_99]

And what has Bohemia to do with this ?!

Something tells me its a jibe at Codemasters, since they parted on bad terms (Operation Flashpoint - Codemasters had the rights for the name, hence Operation Flashpoint - Dragon Rising. Arma - BI were forced to abandon the name for their creation and name it Arma) No wonder the leaked info comes from them! My take on this? Retribution (bad publicity) after lost battles in court!

 

[wiak]

No, you may not talk about where to get those keys from.

pretty sure everyone knows by now hehe, anyway its kinda funky to leak 3 million keys

 

[INSTG8R]

This SUCKS! I am building my Ex-wife a new PC RIGHT NOW as we speak. Well her 6850 came with the DiRT3 coupon and well she is definitely not gonna use it. But over this fiasco I now can't claim it.
I was looking forward to going home after I was finished it and giving it a spin...

 

[BrooksyX]

Haha If you paid $4.50 that might be a clue that its not legit.

Why? I have seen it go for cheaper the last couple weeks on eBay

 

[Easy Rhino]

those millions of keys were stored in an SQL database that could have been easily accessed by a simple missing .htaccess exploit.

wow that is just beyond dumb.

 

[btarunr]

Updated with statement from AMD.

 

[Easy Rhino]

im trying to work this out in my head. has anyone used amd4u before? do you get access to the promo key through the website after you are given some sort of voucher? or is the key itself delivered via email? seems to me they have an SQL database with all the keys on it and the website has an application that pulls the keys from the database and displays it on the screen. whats confusing is htaccess is for limiting webpage access through authorization...

 

[CrackerJack]

I'm clueless to Easy Rhino... But then again...

 

[Sasqui]

No, you may not talk about where to get those keys from.

Shit, I was just going to write "YGPM"

This is what www.amd4u.com is currently displaying:

 

[[H]@RD5TUFF]

Wow shitty

 

[Dwarden]

Something tells me its a jibe at Codemasters, since they parted on bad terms (Operation Flashpoint - Codemasters had the rights for the name, hence Operation Flashpoint - Dragon Rising. Arma - BI were forced to abandon the name for their creation and name it Arma) No wonder the leaked info comes from them! My take on this? Retribution (bad publicity) after lost battles in court!

it has nothing with us ...

we not hacked nor were hacked or involved in any way with this incident ...

i simply stated (as individual) that database with ~3 millions keys of Dirt 3 was leaked to internet

and IMHO that it was done by simple hosting mistake when setting up the webserver

that's all ... whoever reads something more into it has too wild imagination ...