Enlarge / Are we certain this famous Valve promo image wasn't generated by an AI? (credit: Valve)

Last week, we shared an anonymous report that Valve was blocking from Steam at least some games that make use of AI-generated artwork. Over the weekend, Valve confirmed that report, telling Ars in an e-mailed statement that the company is blocking games that use AI-generated content unless developers can prove those AI models were trained with data that does not "infringe on existing copyrights."

"The introduction of AI can sometimes make it harder to show that a developer has sufficient rights in using AI to create assets, including images, text, and music," Valve spokesperson Kaci Boyle told Ars. "In particular, there is some legal uncertainty relating to data used to train AI models. It is the developer's responsibility to make sure they have the appropriate rights to ship their game."

Boyle stressed in the statement that Valve's "goal is not to discourage the use of [AI-generated content] on Steam" and that the company's "priority, as always, is to try to ship as many of the titles we receive as we can." Generative AI is "bound to create new and exciting experiences in gaming," Valve continued.

(credit: Valve)

Researchers have unearthed four game modes that could successfully exploit a critical vulnerability that remained unpatched in the popular Dota 2 video game for 15 months after a fix had become available.

The vulnerability, tracked as CVE-2021-38003, resided in the open source JavaScript engine from Google known as V8, which is incorporated into Dota 2. Although Google patched the vulnerability in October 2021, Dota 2 developer Valve didn’t update its software to use the patched V8 engine until last month after researchers privately alerted the company that the critical vulnerability was being targeted.

Unclear intentions

A hacker took advantage of the delay by publishing a custom game mode last March that exploited the vulnerability, researchers from security firm Avast said. That same month, the same hacker published three additional game modes that very likely also exploited the vulnerability. Besides patching the vulnerability last month, Valve also removed all four modes.