Ubisoft Caught Installing Exploitable DRM Plug-in on Users' Machines
July 30, 2012 11:44 AM
comment(s) - last by
Assasin's Creed installs dangerous software -- can we say "class action lawsuit"?
Google, Inc. (
) engineer Tavis Ormandy has created a world of woe for French
software giant Ubisoft
Entertainment S.A. (
) after he
that the company was endangering customers by installing dangerous software that opened a back-door to their machines.
Ubisoft is well known for its
franchises, as well as a number of Tom Clancy titles (e.g. the
series). But according to Mr. Ormandy, Ubisoft's recent software comes with a dangerous attachment -- a browser plugin designed to support the company's secured Uplay service.
The browser plug-in acts as an accidental Trojan, allows arbitrary code execution via the opened "door" inside the affected browser. Ubisoft uses the plugin to check if the installed title is valid, allowing gamers access to online play and achievements. But according to Mr. Ormandy hackers could also exploit the open door in escalation of privileges attacks on the users' machine.
Hundreds of thousands of PC gamers are believed to be affected.
Ubisoft Uplay browser plugin allowed unauthorized acceess to users' machines.
[Image Source: Geek.com]
Affected titles include 5
games, as well as popular titles such as
Driver: San Francisco
. Mr. Ormandy first observed the exploitable plug-in while installing
Assassin's Creed: Revelations
The exploitable plug-in came with installs of Assassin's Creed titles. [Image Source: IGN]
Ubisoft had already upset customers with its DRM scheme, as many complained that they had legitimately purchased titles, but were being locked out of gameplay when their machines were offline. Ubisoft defended this policy.
Now it may be forced to defend itself in court against class action lawsuits for endangering its loyal customers.
The incident is eerily reminiscent to the rootkit discovered on Sony Corp. (
) music CDs several years ago. Sony was
subsequently sued and forced into an apology/settlement
for recklessly endangering its users.
As the plug-in does not mask its presence, in its current form it is closer to an exploitable plug-in aka. an accidental Trojan than a rootkit by definition, hence the text was changed to correct this.
This article is over a month old, voting and posting comments is disabled
RE: DRM should be illegal
7/31/2012 4:11:39 AM
Who is to put the value on what a creation is worth? Who is to say how much money someone should make from a certain creation before you deem that they have fully recouped their costs and have been fully and fairly compensated for the time/effort of creation? Do they release their song/game/movie/painting/book/etc. for say 6 months or 1 year and gather whatever revenue they can, then after that it becomes public domain? Who decides this? Some government body?
You make it sound like you'd prefer it if all creatives only got paid hourly for their work and that's it. (That's essentially what happens for the most part as the company that they work for, not the creatives themselves, usually gets all the earnings ad infinitum.)
No other industry works like this.
What are you talking about? Nearly every industry works like this. Just about everything that involves any sort of R&D works EXACTLY like this. You pay scientists, chemists, engineers, etc. to develop ideas which are evolved over time from product to product, generation to generation. Do you think it would even be possible to have the technology we have if they had to just start from the ground up every time they wanted to develop something? The only part you really HAVE to do over and over again is the manual labor of manufacturing and distribution and the parts themselves. You're looking this from purely labor perspective. Without the architecht, the pyramid workers would simply be moving stone around without reason.
Not everyone in the world is creative. And believe me, having been in the field, it can VERY taxing, frustrating, and all consuming 24/7. Its not easy. Your point of view devalues those people who create the art and ideas and breakthroughs and puts all the value only on the ones directly executing those ideas.
The chance for for potentially unlimited reward is the driving force beind most of the world's creative people who sacrifice everything over and over again in the hopes of "making it". Most will never achieve anything close to fantastic success, but a world without that possibility sounds horribly dismal. It reminds me of the movie Hudsucker Proxy.
"Spreading the rumors, it's very easy because the people who write about Apple want that story, and you can claim its credible because you spoke to someone at Apple." -- Investment guru Jim Cramer
"Call of Juarez: The Cartel" Angers Critics, May be Banned in Mexico
February 22, 2011, 10:01 AM
Assassin's Creed II Stabs Its Way to Success With 1.6 Million Units Sold
November 26, 2009, 9:00 AM
The EFF Wants You to Know About Sony BMG Settlement
March 13, 2006, 2:17 AM
Microsoft Axes 1,500 Misleading Windows Apps, Crackdown Ongoing
August 28, 2014, 11:56 AM
Dropbox Bows to Competitive Pressure, Provides 1TB of Storage for $10/Month
August 27, 2014, 11:17 AM
Microsoft: Roughly 25,000 Win8.x Users See Blue Screens After Botched Patch
August 25, 2014, 12:50 AM
Report: Microsoft to Announce Windows 9 on September 30
August 21, 2014, 11:20 AM
HP Just Can’t Quit Windows 7; Offers Customers $170 Discounts on Windows 7 Laptops
August 21, 2014, 8:40 AM
Microsoft Wants Windows 8.1 Inside Children's Toys, Appliances
August 20, 2014, 3:20 PM
Most Popular Articles
Numerous Leaks Detail 4.7" iPhone 6 Processor, RAM, Cellular and NFC Capabilities
August 29, 2014, 10:37 PM
Windows 9: "Upgrade Now" Button Coming for Enterprise Updates, ARM Preview in H1 2015
August 26, 2014, 8:00 PM
L.A. Unified School District’s Apple iPad Contract Canceled Following Heavy Criticism
August 26, 2014, 12:37 PM
Apple Builds Not-So-Secret Secret 3-Story Tower for iPhone 6/iWatch Unveil
August 28, 2014, 3:41 PM
Netflix Accuses Comcast of Ripping Off Customers, Files to Block Merger
August 26, 2014, 5:49 PM
Latest Blog Posts
Space Terrorism is a Looming Threat For the United States
Apr 23, 2014, 7:47 PM
Facebook Aims to Provide Internet to "Every Person in the World" with Drones, Satellites
Apr 1, 2014, 10:20 AM
Retail Mobile Sites Experience Outages in Light of Simplexity's Bankruptcy
Mar 14, 2014, 8:48 AM
Tesla vs. BMW: Who Has the Safer EV?
Feb 1, 2014, 2:56 PM
Justice Leaks Details of Next HTC One Two Flagship Phone
Dec 5, 2013, 4:04 PM
More Blog Posts
Copyright 2014 DailyTech LLC. -
Terms, Conditions & Privacy Information