| Author |
Message |
Lord Sinister
|
Post subject: Potential Ubisoft UPlay exploit issue Posted: Mon Jul 30, 2012 5:56 am |
|
Joined: Fri Aug 20, 2010 6:01 pm Location: UK
Reputation: -/+
|
I feel it's worth posting this here in case it affects anyone on this forum: http://www.rockpapershotgun.com/2012/07/30/psa-possible-security-risk-in-some-ubisoft-pc-games/Basically it seems some sort of exploit Ubisoft's DRM utility Uplay. Looks like it's actually in a browser plugin it silently installs with the utility, but the article recommends removing Uplay entirely until things have been cleared up. EDIT: The article's been updated saying that you only need to remove the browser plugin as that is the thing at fault, apparently.
__________________ Feel free to PM me about almost anything and I'll do my best to answer. 
"Beware of what you ask for, for it may come to pass..."
|
|
| Top |
|
 |
The Hamburglar
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Mon Jul 30, 2012 6:22 pm |
|
Joined: Mon Apr 18, 2011 7:25 pm Location: A House
Reputation: -/+
|
|
I would uninstall it anyways, and not give Ubisoft any more support. That's unnecessary bullshit on their part.
__________________ R.I.P Stephen "Anti-Social Fatman" Bray http://ascrew.bandcamp.com/ shameless plug of my music
|
|
| Top |
|
 |
Lord Sinister
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Tue Jul 31, 2012 10:11 am |
|
Joined: Fri Aug 20, 2010 6:01 pm Location: UK
Reputation: -/+
|
__________________ Feel free to PM me about almost anything and I'll do my best to answer. 
"Beware of what you ask for, for it may come to pass..."
|
|
| Top |
|
 |
Obsidian
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Wed Aug 01, 2012 12:37 am |
|
Joined: Sun Oct 09, 2011 6:18 pm
Reputation: -/+
|
|
This news just made me realize that I don't own any ubisoft games for the PC, and actually only own the Prince of Persia PS2 games. It's a shame this exploit was possible in the first place, however at least Ubisoft fixed it rather quickly. Other companies would take longer if they tried fixing a similar issue, assuming they'd bother trying in the first place.
__________________ If you became sexually aroused after reading this post, please, message me to tell me how sick it was.
|
|
| Top |
|
 |
The Hamburglar
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Wed Aug 01, 2012 5:05 am |
|
Joined: Mon Apr 18, 2011 7:25 pm Location: A House
Reputation: -/+
|
Obsidian wrote: This news just made me realize that I don't own any ubisoft games for the PC, and actually only own the Prince of Persia PS2 games. It's a shame this exploit was possible in the first place, however at least Ubisoft fixed it rather quickly. Other companies would take longer if they tried fixing a similar issue, assuming they'd bother trying in the first place. EA would probably enforce it if they did something like it.
__________________ R.I.P Stephen "Anti-Social Fatman" Bray http://ascrew.bandcamp.com/ shameless plug of my music
|
|
| Top |
|
 |
Bjossi
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Sat Aug 04, 2012 2:01 pm |
|
Joined: Tue Sep 21, 2010 8:22 pm Location: Iceland
Reputation: -/+
|
Obsidian wrote: however at least Ubisoft fixed it rather quickly. Other companies would take longer if they tried fixing a similar issue, assuming they'd bother trying in the first place. The only reason Ubisoft fixed it so promptly was because the vulnerability was made public. Had it been reported to them privately it would probably have taken Ubi's programmers weeks or even months to get around to fixing it. For the sake of publicity they had to act right away since all the major game sites had already reported on this. Supposedly the vulnerability was limited to a Uplay browser plugin which Uplay secretly installs into people's browsers without their knowledge or consent. That sort of secrecy is a pretty prominent theme of spyware malware digital rights management.
|
|
| Top |
|
 |
Obsidian
|
Post subject: Re: Potential Ubisoft UPlay exploit issue Posted: Mon Aug 06, 2012 2:54 am |
|
Joined: Sun Oct 09, 2011 6:18 pm
Reputation: -/+
|
Bjossi wrote: Obsidian wrote: however at least Ubisoft fixed it rather quickly. Other companies would take longer if they tried fixing a similar issue, assuming they'd bother trying in the first place. The only reason Ubisoft fixed it so promptly was because the vulnerability was made public. Had it been reported to them privately it would probably have taken Ubi's programmers weeks or even months to get around to fixing it. For the sake of publicity they had to act right away since all the major game sites had already reported on this. Supposedly the vulnerability was limited to a Uplay browser plugin which Uplay secretly installs into people's browsers without their knowledge or consent. That sort of secrecy is a pretty prominent theme of spyware malware digital rights management. See: securom (which, if I recall, is another marvelous Sony creation). And don't get me wrong, my comment wasn't praising ubisoft in the least (the beginning of my statement you quoted mentioned that this exploit shouldn't have been an issue in the first place). I agree that a leading reason the issue got fixed so quickly was because it was publicized. To take an example from Sony again, the PSN outage lasted much longer than the time between this exploit was discovered to the time it was supposedly remedied.
__________________ If you became sexually aroused after reading this post, please, message me to tell me how sick it was.
|
|
| Top |
|
 |