Linus Tech Tips Discussion

onfirmed something even more dangerous while working on alternative front end for IGRS: IGRS submission and email system were a total cybersecurity fail. Not only that the IGRS site is very slow to open, submission were uploaded to Google Drive without any kind of viewing access restriction - which even Google Drive itself for rating system like this is definitely one hell of a choice, the API of the website were accessible to public, leading to numerous conversations between gamedevs and IGRS, along with various gameplay footage of unreleased games, being easily leaked. Some of the titles that had the gameplay footage leaked was 007 First Light, Echoes of Aincrad and Assassin's Creed Black Flag Resynced. While it has been patched since 13th, the situation got even worse: Me_Finity claiming Bandai Namco has been in contact with them to confirm whether the leaked materials and links has been taken down, along with contacting the acting Komdigi minister for further details. Nic McConnell of Riot even went as far as explaining that the process of IGRS rating submission is heavily manual and confirmed the use of Google Drive for the submission, and there's lack of context on the documentation, the IGRS was described as 'too small and being given a huge task without real resources' to the point where meetings were hard to come by and only a small amount of good people are willing to talk, and even that took a lot of screaming into IGRS. Indonesians rallied on the IGN and VGC Twitter post demanding every single developer to sue Komdigi for all of their incompetence, some even demand to sue Indonesia government.   Quotes Quote Initial findings (IDNTimes, ENG) [...]MeFinity, designer of the alternative FrontEnd IGRS called IGRSDB (https://igrs.madeby.my.id ) discovered a problem in the backend of the IGRS.ID game site as of April 6 2026 while working on IGRSDB, where the site's Application Programming Interface Response (API Response) backend presents sensitive data showing video URLs and ingame URLs referring to video asset pages and images presented by each game developer/publisher. We succeeded in confirming with Me_Finity that the asset link is an asset link submitted by gamedevs and publishers who are required to be sent as a submission to IGRS before filling in the self-assessment form for further IGRS verification. "API Response is reply data sent by the IGRS (Backend) internal system to its Site (Frontend), in which case the system mistakenly sends additional fields that have a violation of the content link, resulting in end-users being able to access data that should not be public," said Me_Finity to duniaku.com on April 13.   LEAKS HAPPENED (Insider Gaming) [...]A report from VGC highlights a security issue at the Indonesian Game Rating System that has resulted in several games being leaked, including “007 First Light.” In pa