Ubisoft Caught Installing Exploitable DRM Plug-in on Users' Machines
July 30, 2012 11:44 AM
comment(s) - last by
Assasin's Creed installs dangerous software -- can we say "class action lawsuit"?
Google, Inc. (
) engineer Tavis Ormandy has created a world of woe for French
software giant Ubisoft
Entertainment S.A. (
) after he
that the company was endangering customers by installing dangerous software that opened a back-door to their machines.
Ubisoft is well known for its
franchises, as well as a number of Tom Clancy titles (e.g. the
series). But according to Mr. Ormandy, Ubisoft's recent software comes with a dangerous attachment -- a browser plugin designed to support the company's secured Uplay service.
The browser plug-in acts as an accidental Trojan, allows arbitrary code execution via the opened "door" inside the affected browser. Ubisoft uses the plugin to check if the installed title is valid, allowing gamers access to online play and achievements. But according to Mr. Ormandy hackers could also exploit the open door in escalation of privileges attacks on the users' machine.
Hundreds of thousands of PC gamers are believed to be affected.
Ubisoft Uplay browser plugin allowed unauthorized acceess to users' machines.
[Image Source: Geek.com]
Affected titles include 5
games, as well as popular titles such as
Driver: San Francisco
. Mr. Ormandy first observed the exploitable plug-in while installing
Assassin's Creed: Revelations
The exploitable plug-in came with installs of Assassin's Creed titles. [Image Source: IGN]
Ubisoft had already upset customers with its DRM scheme, as many complained that they had legitimately purchased titles, but were being locked out of gameplay when their machines were offline. Ubisoft defended this policy.
Now it may be forced to defend itself in court against class action lawsuits for endangering its loyal customers.
The incident is eerily reminiscent to the rootkit discovered on Sony Corp. (
) music CDs several years ago. Sony was
subsequently sued and forced into an apology/settlement
for recklessly endangering its users.
As the plug-in does not mask its presence, in its current form it is closer to an exploitable plug-in aka. an accidental Trojan than a rootkit by definition, hence the text was changed to correct this.
This article is over a month old, voting and posting comments is disabled
RE: DRM should be illegal
7/31/2012 4:11:39 AM
Who is to put the value on what a creation is worth? Who is to say how much money someone should make from a certain creation before you deem that they have fully recouped their costs and have been fully and fairly compensated for the time/effort of creation? Do they release their song/game/movie/painting/book/etc. for say 6 months or 1 year and gather whatever revenue they can, then after that it becomes public domain? Who decides this? Some government body?
You make it sound like you'd prefer it if all creatives only got paid hourly for their work and that's it. (That's essentially what happens for the most part as the company that they work for, not the creatives themselves, usually gets all the earnings ad infinitum.)
No other industry works like this.
What are you talking about? Nearly every industry works like this. Just about everything that involves any sort of R&D works EXACTLY like this. You pay scientists, chemists, engineers, etc. to develop ideas which are evolved over time from product to product, generation to generation. Do you think it would even be possible to have the technology we have if they had to just start from the ground up every time they wanted to develop something? The only part you really HAVE to do over and over again is the manual labor of manufacturing and distribution and the parts themselves. You're looking this from purely labor perspective. Without the architecht, the pyramid workers would simply be moving stone around without reason.
Not everyone in the world is creative. And believe me, having been in the field, it can VERY taxing, frustrating, and all consuming 24/7. Its not easy. Your point of view devalues those people who create the art and ideas and breakthroughs and puts all the value only on the ones directly executing those ideas.
The chance for for potentially unlimited reward is the driving force beind most of the world's creative people who sacrifice everything over and over again in the hopes of "making it". Most will never achieve anything close to fantastic success, but a world without that possibility sounds horribly dismal. It reminds me of the movie Hudsucker Proxy.
"I want people to see my movies in the best formats possible. For [Paramount] to deny people who have Blu-ray sucks!" -- Movie Director Michael Bay
"Call of Juarez: The Cartel" Angers Critics, May be Banned in Mexico
February 22, 2011, 10:01 AM
Assassin's Creed II Stabs Its Way to Success With 1.6 Million Units Sold
November 26, 2009, 9:00 AM
The EFF Wants You to Know About Sony BMG Settlement
March 13, 2006, 2:17 AM
EA Set to Milk the Star Wars Cash Cow w/ Video Games
July 31, 2015, 12:36 PM
Windows 10 to Get New Features in October Service Release 2 (SR2)
July 30, 2015, 5:50 PM
Nintendo CEO Satoru Iwata's Passing Gives the Internet the Feels
July 14, 2015, 4:48 PM
German Xbox Fan Busted for Roofie-ing Girlfriend to Get More Gaming Time
July 8, 2015, 11:45 PM
Reports: Windows 10 RTM Build Will be Delivered by Friday
July 6, 2015, 1:01 PM
Windows XP, Vista Users Can Get Free Windows 10 Upgrade Thanks to Loophole
June 23, 2015, 2:23 PM
Most Popular Articles
Exclusive: If Intel and Micron's "Xpoint" is 3D Phase Change Memory, Boy Did They Patent It
July 29, 2015, 10:52 PM
Quick Note: Apple Watch to Get Brick and Mortar Boost From Best Buy
July 27, 2015, 3:00 PM
As iPad Sales Wane and Watch Flops, iPhone Saves Apple's Profit With Its Heroics
July 22, 2015, 6:13 PM
Editorial: Reddit Allows Itself to be Hijacked as a Hate Platform For Racist Bigots
July 21, 2015, 6:32 PM
Microsoft July 29 Windows 10 Launch: Freebies, Rollout, and What's Next
July 21, 2015, 2:40 PM
Latest Blog Posts
Sceptre Airs 27", 120 Hz. 1080p Monitor/HDTV w/ 5 ms Response Time for $220
Dec 3, 2014, 10:32 PM
Costco Gives Employees Thanksgiving Off; Wal-Mart Leads "Black Thursday" Charge
Oct 29, 2014, 9:57 PM
"Bear Selfies" Fad Could Turn Deadly, Warn Nevada Wildlife Officials
Oct 28, 2014, 12:00 PM
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
More Blog Posts
Copyright 2015 DailyTech LLC. -
Terms, Conditions & Privacy Information