Security exploit found in Ubisoft DRM

[Phynaz]

Article:
http://arstechnica.com/gaming/2012/07/ubisoft-drm-exploit-opens-pcs-to-security-risk/

Affected games:
http://en.wikipedia.org/wiki/Ubisoft#Uplay

Make sure you remove the Uplay browser.

 

[Dankk]

inb4 Ubisoft hate-fest. It's already been patched.

 

[Barfo]

inb4 Ubisoft hate-fest. It's already been patched.

Party Pooper!

 

[Aikouka]

How does this update download? Do I have to launch a game with uPlay to get it to update or if I hit a webpage with the malicious script, will it automatically update before attempting to load the bad plugin?

 

[mindcycle]

Glad I don't buy Ubishit games..

 

[The_Golden_Man]

Ubisoft are scaring away honest buyers. Just like MS does with GFWL.

When it is easier to just use a pirated copy, then I feel something is very wrong. I appreciate buying games on Steam, have automatic updates and everything just works smooth. But companies like Ubisoft and Microsoft are really ruining everything.

 

[Pr0d1gy]

Ubisoft are scaring away honest buyers. Just like MS does with GFWL.

When it is easier to just use a pirated copy, then I feel something is very wrong. I appreciate buying games on Steam, have automatic updates and everything just works smooth. But companies like Ubisoft and Microsoft are really ruining everything.

Pirated copies are the only entertainment media worth putting in the tray anymore. Movies have 20 minutes of FBI warnings and trailers loaded on the front of them and games are, well, worse.

 

[ViRGE]

*facepalm*

That's an incredibly stupid bug. Monumentally stupid. I hope someone got sacked for that, as there's no excuse for that happening.

And of course this is why you shouldn't be using web browsers as your game interface. The plugins that uPlay and BF3's battlelog (ESN) increase your exposure to attacks since it's usually possible for other websites to try to interact with them.

 

[Ferzerp]

It is so sad that the un-licensed version of games and movies provides a better experience than the licensed version of them so many times. I miss out on so many games because of stupid stuff like this. (I don't buy things that need to touch any part of the system beyond the game itself or a network connection).

 

[The_Golden_Man]

It is so sad that the un-licensed version of games and movies provides a better experience than the licensed version of them so many times. I miss out on so many games because of stupid stuff like this. (I don't buy things that need to touch any part of the system beyond the game itself or a network connection).

I cannot understand why they don't see they are loosing customers and money with all this DRM shit.

This is just like with Windows. Some users have reported that changing a harddrive disabled the activation of Windows, so they had to call MS to activate it again. And this is what people get for actually buying legal. Whilst the pirates can run activated and genuine and getting away from all this nonsence.

It's a sick world we live in!

 

[Grooveriding]

*facepalm*

That's an incredibly stupid bug. Monumentally stupid. I hope someone got sacked for that, as there's no excuse for that happening.

And of course this is why you shouldn't be using web browsers as your game interface. The plugins that uPlay and BF3's battlelog (ESN) increase your exposure to attacks since it's usually possible for other websites to try to interact with them.

This bug doesn't hold a candle to Blizzard's RMAH in Diablo 3. Where auction timers were initially based off the client side windows time of the player or where players can still swap the bid/buyout price on their RMAH and buyout items for the lower price.

This is bad though. Glad I don't buy Ubisoft games any more, or Blizzard's for that matter.