Doesn't work for me in either IE or Chrome, and I have AssCreed II, AssBro, AssRev, and Forgotten Sands all installed. There is also no uPlay plugin to be found in either browser. I suspect this only applies to certain versions of uPlay; whether newer or older than the version I have installed, I have no idea.
Ubisoft "Uplay" DRM exposed as rootkit
111–120 of 148 posts
Re: Ubisoft "Uplay" DRM exposed as rootkit
#112Earlier quoted context omitted.
Short of doing extensive background research on a title, Steam has no indication of a game's dependence on some third party launcher or cloud service, so every time I run a new game for the first time I have to clench and pray the Windows Live overlay doesn't drop down. Meaning: I feel your pain, brother.
Couldn't Steam pull the game from their shop? Prevent new people from buying it and remotely de-activate/remove existing installs of the game? Proponants of the walled garden 'App Store' model point out how it's good for users, since it's more secure. Well, is this a case for that? Will the closed app store model step up to the plate now? Or is the walled garden no better for users, but much better for the sellers of…
I just wish there was some option that would let Steam warn me if something like this was going to happen.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#113I'm not sure if that's what the OP implied, but I'm not sure this was done on purpose. "Never attribute to malice that which is adequately explained by stupidity". Ubisoft is well know for their aggressive anti-pirating practices (cloud saves for instance), but that's just too idiotic. Here's taviso's mail on seclists: http://seclists.org/fulldisclosure/2012/Jul/375 I hope ubisoft reacts quickly.
When trying to understand how this happened and what Ubisoft will do about it I agree that it probably was stupidity rather than malice. But when considering whether to do business with Ubisoft in the future remember Grey's Law: "Any sufficiently advanced stupidity is indistinguishable from evil".
Re: Ubisoft "Uplay" DRM exposed as rootkit
#114This is an simple, obvious and extremely dangerous error, that anyone with experience or appropriate education would have avoided.
There's an evident frivolous attitude towards technical quality control present here, and everyone should avoid installing games requiring uPlay for the time being.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#115Even though the original vulnerability was quite lame and violated the first rule of writing an ActiveX plugin (site-locking and making it only available over HTTPS otherwise it's still vulnerable to code execution via MITM).
It's impressive that they already updated Uplay to address this problem (not sure whether the fix is actually working or not though).
Re: Ubisoft "Uplay" DRM exposed as rootkit
#116Earlier quoted context omitted.
Oh please, I know you're being light hearted, and repeating common cultual memes, but please keep the "recieving anal is submission" to your self. It's often used as an excuse to call gay men "not real men" or effeminit. People (of all genders & sexualities) who like fisting are not evil either.
And should we also stop saying we've gotten "fucked" for similar reasons? Since you are the curator and sole arbiter of allowable phrases, I'd like to get it all clear while I've got your ear.
And should we also stop saying we've gotten "fucked" for similar reasons?
Sorta. Tis roughly the similar overtones of 'people-who-take-it-are-bad' (i.e. everyone who isn't a straight cis male), however it's not as graphic and not as tied to the actual imagery of receptive sex as the previous example.
Since you are the curator and sole arbiter of allowable phrases
What? No I'm not. Who said I was? Not me. Just because I call someone on something doesn't mean I'm the sole arbiter of things. How many articles on this site will lambaste some technology? Lots. Do we reply with "Shut up! you're not the sole arbiter of programming languages"? No that's not what happens here. One should talk about the merits of the complaint, rather than try some little deflection tactic.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#117Earlier quoted context omitted.
The full disclosure debate goes back a long time. I recommend doing some light Googling to understand some of the counterpoints. http://en.wikipedia.org/wiki/Full_disclosure As for your "raging hacker who ...," dig, consider the idea that malware authors already knew about the vulnerability and have been using it.
consider the idea that malware authors already knew about the vulnerability and have been using it. Do you have any evidence that is the case? The original post didn't mention it. Otherwise it just sounds like excusing irresponsible disclosure.
The term you are looking for is Coordinated Disclosure.
http://www.theregister.co.uk/2010/07/22/microsoft_coordinate...
Many believe it is irresponsible to delay informing users that they have a major backdoor exposing them.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#118Because of people like this (the straw was Growl installing itself for the third time), I've had to completely change the permissions on particularly vulnerable folders in OS X. Anyone creating software, if you are not already aware of this: installing anything that is not completely and clearly explained beforehand makes you a despicable wretch.
FWIW growl doesn't install itself, applications that use it are _supposed_ to offer to install growl for you, but there's been a few that don't and just force it on you.
The growl devs really really hate those applications - http://growl.info/thirdpartyinstallations.php has more info.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#119It might give an extra layer of protection if a browser actually bothered to ask the user if they wanted to enable the plugin if they didn't explicitly ask to install it themselves.
Re: Ubisoft "Uplay" DRM exposed as rootkit
#120Just because it is a security hole, doesn't make it a root kit. This is just a dumb security hole.