Comment Re:How does something like that happen? (Score 1) 18
This is videogame development. You almost never have a "main" where all your games are made from - a game is a self-contained app.
Typically development starts by cloning a copy of the game engine to where you will do your development. This will go into a new tree because after the game is released, other than updates, it will never be used again. Even though you have say, Call of Duty 1 and Call of Duty 2, they are about as same as Microsoft Word and Microsoft Excel.
Yeah, but the summary says "The Microsoft Store and Game Pass versions contained an unpatched security flaw that had been fixed in other versions of the game." Not other games based on the same engine. Other versions of the same game. I assume that they have one product manager that oversees Call of Duty: WWII, and that this person should be aware of what's happening on every platform.
So it's likely it was discovered and fixed for one game, but that fix was not propagated to other trees because well, they're pretty much all independent and to do so would require manually applying the patch.
This is why real software companies have "one version" policies, where you aren't allowed to check in a single project into source control in more than one place. Copies of the engine should be checked out from a shared repository, and changes should get pushed back to that shared repository. And there should be build bots that throw a fit if it doesn't build on every platform, forcing you to stop what you're doing and fix it.
What you're describing barely qualifies as software engineering. It reminds me of how some hardware vendors handle firmware updates. It guarantees that their systems are in a perpetual state of being barely working.
Oh, and game developers are had pressed to churn out stuff. There almost is no time to simply go and apply random patches for security issues found in other games. It might have been on someone's to-do list but completely forgotten about because they're busy churning out code for the product.
If that's true, then their products should be banned from every platform ASAP, and not just their old titles. Part of the software release cycle is maintenance, and if you aren't doing maintenance — particularly for security updates — then users should not trust your software as far as they can throw it. I have zero respect for companies that play games like that. Real software development doesn't end when the first build ships. It ends when you declare it EOL. And until that date, if you aren't providing security updates, then your company is a threat to the entire computing world.
After seeing this, I won't touch Activision software with a ten-meter pole for at least the next decade, and nobody else in their right minds should, either.