Special thanks to Displate for sponsoring the video! Discount code: SAVEWALLSFROMSADNESS Discount link: displate.com/f4mi This is a different video from my usual ones, a bit shorter, and it's a story I wanted to cover for a while. Hope you enjoy it! EDIT: small correction, when i say the txt was introduced with the sniper vs spy update talking about the keys i mean that USING IT FOR RANDOM ITEMS and not just weapons was introduced there, it was a small mistake on the script sorry for that, just want to make everything clear :)
Thank god Valve learned from their mistakes, surely they won't almost sink the economy again by, I don't know, pushing a bugged update that makes unusuals' drop rate 100%. That's never going to happen.
I remember when Gamemaster reached out to my friend at the time to ask what the method was, after the hats were given. At the time we knew that some properties used for some items could still be applied to other items i.e. the "unlimited" tag for the birthday noisemaker worked for any other noisemaker, making them unlimited too. We'd tampered with name tags and description tags and realised there was some interoperability but called it quits once we realised giftapults opened the crates. I felt at the time it was defeating the purpose of reporting the exploit to valve directly, to let someone else take comprehensive notes, and, later try to use it as a gold rush for further hats. We did let Valve know the potential for further exploits was present between other items that shared an item class in the initial report. Gamemaster's post felt like a mis-representation of him figuring it out by himself (he didn't credit my friend once, Errur was either the beams gibus or lament owner) but also went against the grain of reporting it to Valve to keep it secret and avoid these things getting into the wild. This will be entirely hearsay as I have no proof or receipts this many years later, but I do remember from DMs my friend shared that gamemasters attitude was generally that of someone frustrated and entitled, as he'd apparently been trying to figure out what could be done in the schema and we got there first, almost as if stolen valour. He was pretty adamant on trying to get the hat he felt he deserved and harboured an attitue of envy. My friend and I only figured it out because I presumed if the hosts file block + the custom items.txt with a file path redirect could be used to restore colour to photo badges (discovered by others), there was likely no server side authentication for certain values before any interaction was done with the server and certain properties were available against certain items even if hidden (the path property wasnt in the default schema iirc). I shared the theory with my friend and a few hours of us tinkering later he landed an 'oh shit' in chat when the giftapult with the key item class actually worked. In our report we did not ask for any items. We were asked by valve. Gamemaster's post felt like a bit of a tantrum, if you read it he hypothetically asks how someone with such an understanding of the schema hasn't been rewarded with his own hat but it is crammed with corrections because a lot of his information is regurgitated is from third parties rather than self discovery. He's a storyteller who is angry he didn't get the hero's ending and I don't feel anything he did was altruistic but more out of scorn. I can only imagine that if his approach was to say to valve "here's my exploit, please give me this hat" then it comes as no surprise that he is empty handed after it all. Publicly releasing the information was the nail in the coffin regardless.
yanis went into the position explicitly to refinance the debt, somehow managed to cancel a bunch of it without compromise and then immediately resigned lol
I am baffled that they apparently rely on client side checks for this. If I worked at valve and learnt people were modifying a txt file to unlock items I wouldn't try and lock down the file with checksums or redownloading on launch, I'd move those checks to the server where the players have no hope of modifying them. Any client side checks can be eventually bypassed since the players have control over the environment the client is running in.
@@XxZeldaxXXxLinkxX why would it do that? The check only needs to occur when crafting an item, which already requires being online. They can still have the file stored locally for offline play/client side prediction/etc, it just wouldn't be the authority on how items behave whenever a server is involved
@@XxZeldaxXXxLinkxX That's 100% NOT how it works. If a server is client sided and that .txt file is modified you have access to those said weapons/items. For example, if I were to modify the .txt file to include the Romevision cosmetics for the robots and I load up into my very own server I'd be able to equip those ON MY OWN SERVER. Same with the exclusive robot weapons like the Giant Heavy's Deflector which is it's own seperate mini-gun. But once I go into an online server that .txt file won't work, it'll check and communicate to you that it's a public server. It's how certain commands only work on your own local server with or without plugins modifying your game.
I honestly figured that _making the txt file read-only_ would be enough to prevent overwriting. But yeah, never trust the client at face value, seriously.
the issue with client-side hash checks is you can never trust the client! for example: hacked clients. would be easy to just mod out the item file checks. the only longterm solution is server-side patches which i assume is how they were actually fixing the bulk of the exploits. definitely justice for gamemaster and er, probably all of them because an untradeable cosmetic is not really fair compensation for what is essentially a bug bounty report
@@genericdevtexture3661 ruclips.net/video/jJj_ifz6OsI/видео.html Video from the man himself of a UGC grand finals match! I've known him for over a decade lmao
@@genericdevtexture3661 Err, I think links in comments might be automatically eaten by this channel so look up " UGC Grand Finals: John Madden vs Squirtle Squad Excerpt Commentary" Here on YT, you'll get a video from the man himself showcasing it! I've known him for over a decade, which is how I know (personal experience playing against his shenanigans) but this is actual video!
great video, very interesting community lore. I would however, suggest balancing the music to be more inline with the audio levels of your other segments. Like at 17:37 I literally jumped when the outro started playing lol.
hey! thank you! yes, for some reason normalizing hasn’t worked as planned for some audio tracks this time around, i will make sure that won’t happen again in the future
This was a throwback because I used the block the IPs with hosts method back in the day so I could wear two unusual items for Pyro: Burning Flames Flamboyant Flamenco + Hellfire Burning Bandana. These both are in hat item class. Bandana even would get hidden inside the flamenco really nicely. I had no idea you could use it for all these other things you mentioned in the video.
Funny part is that price you highlighted isn't the price it will cost you. It's what it cost you in the past when someone last verified their sale. The guy on th left actually wants $220 or so instead, not $176.
The file that is still used to this day in both S2 Dota and CS2 (tho they probably have internal item editors to add new items to it), and likely Deadlock too
I'm still lowkey sad they didn't give out a re-issue of the Cheater's Lament for people who didn't try to exploit the "crate depression" bug. I was too asleep to bother, but still. (If they were to actually change anything, they should make it so Tux is available whenever you are logged in on Linux. I think it would be fun.)
the real moral of the story here is that, if you try to do a good thing, even a "good" company like Valve will give you nothing in return, or even screw you over. so if you find an exploit that is against a corporation, USE IT
You would think that after two incidents, they would actually do something to protect the file, but noooo, you can't expect a massive company like Valve, who owns Steam, to do the minimum, like do a cheksum at every boot, or simply making the file read-only and refusing to boot if it was modified (which is easy to see in the medatada).
Maybe I'm stupid, but wouldn't the BEST way to fix this issue is by actually implementing server side checks? I don't know how TF2 works, but why did Valve insist on trying to add checks on the client side instead of just doing the right thing and fixing the issue on the server side? Considering that items are already stored on the server, and as far as I know the server that decides which item you'll get when opening a crate, then why the key validation is not done on the server too? Because if they just added a signature on the client side, couldn't someone bypass the signature check and keep abusing the bug? But I guess now, 10 years later, Valve (hopefully) has already implemented server side checks for the items...
with my half of a CS degree this sounds correct but i would like someone smarter to confirm or deny this. replying to boost visibility because i am genuinely curious
You are absolutely 10,000% correct, as someone who both writes and hacks multiplayer games (responsibly, I'm not enabling cheaters usually). If there's one thing I take away it's that Valve's games are immensely breakable and that they will not fix it even when told. It's legitimately insane that they shipped code which had so many checks missing.
yeah. first rule of networked systems is that you don't trust the client (or up to any of your peers, really). you want stuff done right, you use cryptography and methods that are correct by construction.
@@notpumkin It must have been clear that the system is not proper, but at first it worked, and then engineers moved on, and sometimes nothing is more permanent than the temporary. Prototypes done for testing ideas, where actual effort is not called for, often do leak into release implementation.
Spectacular video. I knew there were inventory exploits back in the day, but holy shit I didn't know the cause was ALWAYS THE SAME. The Source Spaghetti never ceases to impress me.
Nice video, here from ThePrimeTime. CS has basically everything from TF2 sometimes with different names. Loot boxes, keys, trade up contracts, stat trak weapons and transfer tool, etc. Probably suffers from the same issue. Their modification check of the txt can be patched around, id be shocked if they dont have full server side checks by now.
I can't think of anything LESS secure than a TXT file. Sure you could add a checksum, or force a persistent internet connection to validate it, or even hide it in a zipped folder that's encrypted, but it's still a bloody TXT file. Anyone can open it on anything anywhere WITH anything!
In Portal 2, at the beginning, there was a way to complete the level in 0 seconds and then get your name on the leaderboards. I found out how they did it (it was some console command that enabled saving, and then you'd just reload the save and it would restart the timer, while keeping your position), reported it to ValvE, they fixed it within a week.. and I got nothing too. Well, I got a "thank you for reporting the problem".. that was it.
i knew it before this video, but even then the fact that Yanis Varoufakis worked for Valve to manage the TF2 economy sounds fake. It's like if Slavoj Zizek got hired to write Runescape quests
How does a large company make such colossal and elementary mistakes? Did they just get a 16 year old work experience kid to secure their RCE game? It boggles the mind, these are security 101 issues. How did any of this pass QA? When they found the first issue, how did they not audit and secure the rest of the system? I could've done a better job as a teenager that's for damn sure. There are other RCE games dating back to 2003 that have handled this stuff far better (and with much more expensive items).
That's not how QA works, it wouldn't have caught it. It needs to be caught in engineering. Sounds like a prototype implementation that was made for testing things out on the quick, then it was suddenly called "release" to everyone's surprise, because QA critical ticket count fell near zero, and then people moved on since they were needed elsewhere, and the project got stuck with an overworked skeleton crew (aka one code janitor) who didn't know their way around the codebase and how everything works and way too many more pressing gremlins to hunt, and the persons who were originally responsible probably soon left the company anyway. The janitors possibly didn't stick around long enough to gain institutional memory of the txt file, since it's not a very desirable job, there was possibly a new janitor every few months, nor did they have direct connection to any oldbies who would have known. At least a hypothesis for you to ponder. You treat the company as one entity, while in reality it's, over years, thousands of individuals who have each very niche, deep rather than broad, and fragmentary product knowledge and individually minimal influence, while likely being fundamentally good at their profession.
16:38 I wonder how they are doing the checks, and if they are using MD5, there might be a way to modify it using MD5 collision if the file is usable when there are some junk data in it
Was driving along listening and then I heard bringus voice pop up. Had to check my phone to see if the video somehow switched on accident but nope. What a nice surprise to hear him in a f4mi video xD
Amazing how much they are seemingly committed to just not making things server side, but then I guess the cost to them of not fixing these holistically is minting out a new unusual as a bug bounty sooo
Special thanks to Displate for sponsoring the video!
Discount code: SAVEWALLSFROMSADNESS
Discount link: displate.com/f4mi
This is a different video from my usual ones, a bit shorter, and it's a story I wanted to cover for a while.
Hope you enjoy it!
EDIT: small correction, when i say the txt was introduced with the sniper vs spy update talking about the keys i mean that USING IT FOR RANDOM ITEMS and not just weapons was introduced there, it was a small mistake on the script sorry for that, just want to make everything clear :)
yay
thank you f4mine that was a good video i liked it
evil sponsor :(
No thanks
The video is cool and all but now im more focused on this banger song 10:15 what's the song?
Thank god Valve learned from their mistakes, surely they won't almost sink the economy again by, I don't know, pushing a bugged update that makes unusuals' drop rate 100%. That's never going to happen.
🚬
Foreshadowing
That would be bad
reminds me of crowdstrike
what they should have done is only let people keep the first unusual they got during that period and refund any other keys spent.
I love that this video is 4:3.
I love 4:3 🥰
It's so dramatic I thought it's 5:4 until checking.
Next video has to be ultimate 21:9 to compensate
Same. Im on a 4:3 screen so its great
Anyone watching it on a 4:3 crt as intended?
i was fully expecting the person who didn't get the reward to turn evil and start using tf2 item exploits to get money
itchylol spotted
@@Zuudo zudo spotted
Me spotted
Ditto, anybody would turn evil after something like that
And you, the reader, spotted
I remember when Gamemaster reached out to my friend at the time to ask what the method was, after the hats were given.
At the time we knew that some properties used for some items could still be applied to other items i.e. the "unlimited" tag for the birthday noisemaker worked for any other noisemaker, making them unlimited too.
We'd tampered with name tags and description tags and realised there was some interoperability but called it quits once we realised giftapults opened the crates.
I felt at the time it was defeating the purpose of reporting the exploit to valve directly, to let someone else take comprehensive notes, and, later try to use it as a gold rush for further hats.
We did let Valve know the potential for further exploits was present between other items that shared an item class in the initial report.
Gamemaster's post felt like a mis-representation of him figuring it out by himself (he didn't credit my friend once, Errur was either the beams gibus or lament owner) but also went against the grain of reporting it to Valve to keep it secret and avoid these things getting into the wild.
This will be entirely hearsay as I have no proof or receipts this many years later, but I do remember from DMs my friend shared that gamemasters attitude was generally that of someone frustrated and entitled, as he'd apparently been trying to figure out what could be done in the schema and we got there first, almost as if stolen valour. He was pretty adamant on trying to get the hat he felt he deserved and harboured an attitue of envy.
My friend and I only figured it out because I presumed if the hosts file block + the custom items.txt with a file path redirect could be used to restore colour to photo badges (discovered by others), there was likely no server side authentication for certain values before any interaction was done with the server and certain properties were available against certain items even if hidden (the path property wasnt in the default schema iirc).
I shared the theory with my friend and a few hours of us tinkering later he landed an 'oh shit' in chat when the giftapult with the key item class actually worked. In our report we did not ask for any items. We were asked by valve.
Gamemaster's post felt like a bit of a tantrum, if you read it he hypothetically asks how someone with such an understanding of the schema hasn't been rewarded with his own hat but it is crammed with corrections because a lot of his information is regurgitated is from third parties rather than self discovery.
He's a storyteller who is angry he didn't get the hero's ending and I don't feel anything he did was altruistic but more out of scorn. I can only imagine that if his approach was to say to valve "here's my exploit, please give me this hat" then it comes as no surprise that he is empty handed after it all. Publicly releasing the information was the nail in the coffin regardless.
Greece is probably the worst place to be minister of finance, lmaoo
HARD MODE
yanis went into the position explicitly to refinance the debt, somehow managed to cancel a bunch of it without compromise and then immediately resigned lol
@@aarvlo Smart move
@@aarvlo main character vibes
@@aarvlo gigachad
I am baffled that they apparently rely on client side checks for this. If I worked at valve and learnt people were modifying a txt file to unlock items I wouldn't try and lock down the file with checksums or redownloading on launch, I'd move those checks to the server where the players have no hope of modifying them. Any client side checks can be eventually bypassed since the players have control over the environment the client is running in.
But that would prevent the player from launching the game in an offline state to play with bots or whatever. So...
@@XxZeldaxXXxLinkxX why would it do that? The check only needs to occur when crafting an item, which already requires being online. They can still have the file stored locally for offline play/client side prediction/etc, it just wouldn't be the authority on how items behave whenever a server is involved
@@XxZeldaxXXxLinkxX That's 100% NOT how it works. If a server is client sided and that .txt file is modified you have access to those said weapons/items. For example, if I were to modify the .txt file to include the Romevision cosmetics for the robots and I load up into my very own server I'd be able to equip those ON MY OWN SERVER. Same with the exclusive robot weapons like the Giant Heavy's Deflector which is it's own seperate mini-gun. But once I go into an online server that .txt file won't work, it'll check and communicate to you that it's a public server. It's how certain commands only work on your own local server with or without plugins modifying your game.
I honestly figured that _making the txt file read-only_ would be enough to prevent overwriting. But yeah, never trust the client at face value, seriously.
I never realized how far does this lore go with just a single text file, great video
holy shit its the real jameskii
holy shit its the fake jameskii
That's just a fan account DW about it @@Thispersonisreal
holy shit its the real jameskii
ai comment
the issue with client-side hash checks is you can never trust the client! for example: hacked clients. would be easy to just mod out the item file checks. the only longterm solution is server-side patches which i assume is how they were actually fixing the bulk of the exploits.
definitely justice for gamemaster and er, probably all of them because an untradeable cosmetic is not really fair compensation for what is essentially a bug bounty report
Indeed.
holy crap bringus cameo!
i started actually jumping when i heard jons smooth sexy voice
I was like, can it be, then he said the thing and I was like, YES IT IS
My boy bringus ❤❤❤❤
f4mi is just blessing us with these uploads, and i’m not complaining
wtf TWO long format f4mi videos in the same month already??? goated month for the f4mi fan base ╭( ͡°͡° ͜ʖ ͡°͡°)╮
f4mi-sisters stay winning
we are feasting this month
TWO POSTS ONE MONTH F4MI PASS ME THE BLUNT /ref
Definitely not famished
@@rami-23hrhoife f4mished
the double fake out at 11:18 is so funny. genuinely a smart and hilarious editing bit, full praise
Fun fact, game master was also a driving force behind people in comp realizing how fucked up some of the stuff engie can do is
Source??
Not that I'm doubting you but I want to see what he did
@@genericdevtexture3661 ruclips.net/video/jJj_ifz6OsI/видео.html Video from the man himself of a UGC grand finals match! I've known him for over a decade lmao
@@genericdevtexture3661 Err, I think links in comments might be automatically eaten by this channel so look up "
UGC Grand Finals: John Madden vs Squirtle Squad Excerpt Commentary" Here on YT, you'll get a video from the man himself showcasing it! I've known him for over a decade, which is how I know (personal experience playing against his shenanigans) but this is actual video!
I second Generic
great video, very interesting community lore. I would however, suggest balancing the music to be more inline with the audio levels of your other segments. Like at 17:37 I literally jumped when the outro started playing lol.
hey! thank you! yes, for some reason normalizing hasn’t worked as planned for some audio tracks this time around, i will make sure that won’t happen again in the future
@@f4micom Nah let it happen, keep viewers on edge a little.
@@SianaGearz make them shiver
JUSTICE FOR GAMEMASTER! GIVE HIM HIS BUGFIX HAT!
seems like he didn't actually find it, though?
This was a throwback because I used the block the IPs with hosts method back in the day so I could wear two unusual items for Pyro: Burning Flames Flamboyant Flamenco + Hellfire Burning Bandana. These both are in hat item class. Bandana even would get hidden inside the flamenco really nicely.
I had no idea you could use it for all these other things you mentioned in the video.
having attemped to recreate the tf2 item system in gmod on multiple occasions finally having someone talk about it feels like a breath of fresh air
Yaaay f4mi did another Valve vid. Love the Bringus voice
Funny part is that price you highlighted isn't the price it will cost you. It's what it cost you in the past when someone last verified their sale. The guy on th left actually wants $220 or so instead, not $176.
Realized i shouldve included a timestamp, its 5:36
GLORIOUS 4:3
The file that is still used to this day in both S2 Dota and CS2 (tho they probably have internal item editors to add new items to it), and likely Deadlock too
4:52 That explains a lot
I'm still lowkey sad they didn't give out a re-issue of the Cheater's Lament for people who didn't try to exploit the "crate depression" bug.
I was too asleep to bother, but still.
(If they were to actually change anything, they should make it so Tux is available whenever you are logged in on Linux. I think it would be fun.)
I was just thinking bringus and f4mi should collab it'd be perfect
the real moral of the story here is that, if you try to do a good thing, even a "good" company like Valve will give you nothing in return, or even screw you over.
so if you find an exploit that is against a corporation, USE IT
You would think that after two incidents, they would actually do something to protect the file, but noooo, you can't expect a massive company like Valve, who owns Steam, to do the minimum, like do a cheksum at every boot, or simply making the file read-only and refusing to boot if it was modified (which is easy to see in the medatada).
Maybe I'm stupid, but wouldn't the BEST way to fix this issue is by actually implementing server side checks? I don't know how TF2 works, but why did Valve insist on trying to add checks on the client side instead of just doing the right thing and fixing the issue on the server side? Considering that items are already stored on the server, and as far as I know the server that decides which item you'll get when opening a crate, then why the key validation is not done on the server too?
Because if they just added a signature on the client side, couldn't someone bypass the signature check and keep abusing the bug? But I guess now, 10 years later, Valve (hopefully) has already implemented server side checks for the items...
with my half of a CS degree this sounds correct but i would like someone smarter to confirm or deny this. replying to boost visibility because i am genuinely curious
You are absolutely 10,000% correct, as someone who both writes and hacks multiplayer games (responsibly, I'm not enabling cheaters usually).
If there's one thing I take away it's that Valve's games are immensely breakable and that they will not fix it even when told.
It's legitimately insane that they shipped code which had so many checks missing.
yeah. first rule of networked systems is that you don't trust the client (or up to any of your peers, really). you want stuff done right, you use cryptography and methods that are correct by construction.
Honestly it feels like some intern designed some of these systems considering how basic these mistakes were.
@@notpumkin It must have been clear that the system is not proper, but at first it worked, and then engineers moved on, and sometimes nothing is more permanent than the temporary. Prototypes done for testing ideas, where actual effort is not called for, often do leak into release implementation.
Spectacular video.
I knew there were inventory exploits back in the day, but holy shit I didn't know the cause was ALWAYS THE SAME.
The Source Spaghetti never ceases to impress me.
Nice video, here from ThePrimeTime. CS has basically everything from TF2 sometimes with different names. Loot boxes, keys, trade up contracts, stat trak weapons and transfer tool, etc. Probably suffers from the same issue. Their modification check of the txt can be patched around, id be shocked if they dont have full server side checks by now.
I can't think of anything LESS secure than a TXT file. Sure you could add a checksum, or force a persistent internet connection to validate it, or even hide it in a zipped folder that's encrypted, but it's still a bloody TXT file. Anyone can open it on anything anywhere WITH anything!
In Portal 2, at the beginning, there was a way to complete the level in 0 seconds and then get your name on the leaderboards.
I found out how they did it (it was some console command that enabled saving, and then you'd just reload the save and it would restart the timer, while keeping your position), reported it to ValvE, they fixed it within a week.. and I got nothing too.
Well, I got a "thank you for reporting the problem".. that was it.
7:49 bringus jumpscare
the one thing i wouldn’t expect from a f4mi video is a bringus studios collab, and we still got it🔥🗣️
Here from ThePrimeagen. Amazing editing! Subbed!
i knew it before this video, but even then the fact that Yanis Varoufakis worked for Valve to manage the TF2 economy sounds fake. It's like if Slavoj Zizek got hired to write Runescape quests
2:41 ad skip
IS THAT BRINGUS STUDIO AT 8:11???
IT'S HIM
Yep, it is.
no way
No
How does a large company make such colossal and elementary mistakes? Did they just get a 16 year old work experience kid to secure their RCE game? It boggles the mind, these are security 101 issues. How did any of this pass QA? When they found the first issue, how did they not audit and secure the rest of the system? I could've done a better job as a teenager that's for damn sure. There are other RCE games dating back to 2003 that have handled this stuff far better (and with much more expensive items).
That's not how QA works, it wouldn't have caught it. It needs to be caught in engineering. Sounds like a prototype implementation that was made for testing things out on the quick, then it was suddenly called "release" to everyone's surprise, because QA critical ticket count fell near zero, and then people moved on since they were needed elsewhere, and the project got stuck with an overworked skeleton crew (aka one code janitor) who didn't know their way around the codebase and how everything works and way too many more pressing gremlins to hunt, and the persons who were originally responsible probably soon left the company anyway. The janitors possibly didn't stick around long enough to gain institutional memory of the txt file, since it's not a very desirable job, there was possibly a new janitor every few months, nor did they have direct connection to any oldbies who would have known.
At least a hypothesis for you to ponder. You treat the company as one entity, while in reality it's, over years, thousands of individuals who have each very niche, deep rather than broad, and fragmentary product knowledge and individually minimal influence, while likely being fundamentally good at their profession.
Happy to see you getting sponsorships, it's well deserved with this level of quality and editing. I love how niche this channel is
16:38 I wonder how they are doing the checks, and if they are using MD5, there might be a way to modify it using MD5 collision if the file is usable when there are some junk data in it
This channel being so underrated is criminal. Absolute loved the video, edition and narrative. Props to you!!!
Gotta love every time there's a Cameo on your videos, always great to hear my favorite creators together
I have never heard of f4mi before, but I have now subbed - this editing was insanely great - and from a 10+ year TF2 player!
Dang f4mi is knocking it out of the park with the production on these videos, this is rad
Was driving along listening and then I heard bringus voice pop up. Had to check my phone to see if the video somehow switched on accident but nope. What a nice surprise to hear him in a f4mi video xD
I KNEW Bringus was gonna show up somehow. Love both of your channels
Justice for Gamemaster :0
GAWD DAYUM, the editing, the style, the scenery are just astonishing, gal. Have a heart-flaming subscribe and keep doing what ya doing!
16:48
User was "Burpman"
Source: I was on ToyFort with him when he did it lol
12 second old f4mi video :)
and IS THAT BRINGUS STUDIOS
Another f4mi masterpiece 🙏 the transitions between chapters are literally art
two uploads in a month? we eatin' good lads
the music in here is cool f4mi! im liking the new editing style too
Beautifully edited.
Fantastic video, keep it up!
4:3 screen giving so nostalgia effect
Nobody expects the Bringus inquisition
there are thousand of ways to handle this information properly and safe from the user, but valve decided to just use a stupid txt file
I love the cheeky implication that "The Orange Box" was the literal beginning, especially because it was my first exposure to Valve's games.
Jeffiot AND f4mi upload? Blessed
never played TF2 but this was a very interesting video, looking forward to the sequel of an 18-minute video about an md file
Your videos are awesome, keep up the great work!
This channel deserves more views.
Babe wake up new F4mi upload
You're legit me favorite RUclipsr now. Excellent work, just make sure you don't get any burnout.
2 videos in the same month? Hell yeah!
hunans invented 16:9 for decades at this point
but there's still some humans who don't know what it is
Thank you for the video!
Ayyy, I'm so hyped hearing Bringus in this video. Always happy to see that my niche YT creators overlap 🥰
That is cooked send a email to gabe with this video justice for Gamemaster!
Wow I wasn't expecting another video so soon!
*extremely* inspired music choice with sam & dave there. yet another f4mi banger
I always enjoy when you upload, thanks for all the effort you put into these.
Wow just wow :O A new video and also an interesting topic :D Well done :) And I like the 4:3 aspect ratio.
Music 10:10 if someone is looking for a song name and signer it's Petula Clark ~ Downtown (1964)
She got sponsored by Displate
Not the worst sponsor.
my favorite youtuber...... sponsored by a common youtube scam sponsorship :(
@@KroboProductionshow are they a scam? I’m curious
@@Madkalibyrunfortunately a lot of ai art garbage flooded the site, the posters themselves are very expensive too
@@Madkalibyrthe products from displate are cheap quality and aren’t worth the money at all considering other poster options out there
So like... did you just get tired of making the hdDVD video after a while and started working on this one? Because this is a dam quick turnaround.
back to back f4mi uploads lets gooooooo!!!
Absolutely love the 4:3 aspect ratio, it fits perfectly on my monitor
thank you f4mi for bringing us another vid about some oddity in the Source Engine 🙏
I love you f4mi, thanks for keeping up content at the best moments 🙏💙🗣‼️🇨🇱🇨🇱🇨🇱
This video was the last one I'd had expected to hear about Yanis Varoufakis and it's not even about Greece economy
I am surprised to see anyone remembers and talks about this. Nonetheless, thank you for the acknowledgement, f4mi.
Hell yea my 2 favorite utubers. SteamOS man and accent woman!
Awesome production quality
shoutout to both f4mi and red bard for being better economics teachers than my school could ever have
The 3D animations are pure eye candy and add a lot to the production value
Love the blue hair, keep it up, the research must have been hard, great work
JUSTICE FOR GAMEMASTER
2 Videos from the Legend in such a short time?
Daammnn dat shits goood!
Nothing better than a Bringus appearing out of nowhere.
nice video. You should cover about another tf2 topic like how when tf2 was first announced many team fortress playerbase hated it
i didn’t expect a bringus studios crossover in the video tbh 😂
Him being a future Greek finance minister is hilarious
I did enjoy the story
Surely no one would ever patch out the signature check on the txt file right ?
Amazing how much they are seemingly committed to just not making things server side, but then I guess the cost to them of not fixing these holistically is minting out a new unusual as a bug bounty sooo
Omg I found your channel again I watched your homebrew channel video and couldn't find you after
Great video. Thanks for sharing and great style.
more videos on old tech please! these videos are also good but old tech also please thank you very much f4micom !
Love your videos, so cozy