Just spotted this bit of news over at Security Focus.

The worst thing of this SDK ( that Gamespy gives/sells to games developers to implement the online management and validation of games cd-keys. ) is that it uses simples "security through obscurity" methods to hide informations to the same users who use these vulnerable games (any existent type of demo, retail and dedicated server) so this advisory will also clarify these shameful methods avoiding that these users like me continue to be joked.