Rooker75 Posted July 30, 2012 Share Posted July 30, 2012 Remember when SonyBMG installed a rootkit trojan through music CDs? Someone at Ubisoft does and must have thought it was a great idea. Ubisoft “Uplay” DRM exposed as rootkit; dozens of popular games hackedFull Disclosure Mailing List: AxMan ActiveX fuzzing <== Memory Corruption PoC Crash Apparently it is a browser plug-in installed by Ubisoft's game installers. Go through your plug-in list and look for anything that shouldn't be there. Then consider looking up the phone number of your state's Attorney-General's office. Link to comment Share on other sites More sharing options...
JimboUK Posted July 30, 2012 Share Posted July 30, 2012 I like many others have stopped buying their games, the company treats paying customers in an appalling fashion, the presence of a rootkit wouldn't surprise me. Link to comment Share on other sites More sharing options...
Rooker75 Posted July 30, 2012 Author Share Posted July 30, 2012 The more I look at this, the less it looks like malicious behavior by Ubisoft and just shoddy, insecure programming on their part. It's going to depend on what their motive was in installing that browser plug-in, I guess. Whatever their motives, it certainly it opens a door for anyone else who does have malicious intentions. Anyway, Mozilla is already planning an update to block the plug-in for Firefox. I don't know what the other browser makers will do, but it seems like going through the list of browser plug-ins and deleting this one ought to fix the security hole. Link to comment Share on other sites More sharing options...
Rennn Posted July 30, 2012 Share Posted July 30, 2012 I'm glad I decided not to buy Assassin's Creed: Revelations... That would have been the first Ubisoft game on my PC. Link to comment Share on other sites More sharing options...
hoofhearted4 Posted July 30, 2012 Share Posted July 30, 2012 i only have Ubisoft games for my Ps3. so nothing on my PC thank god. also luckily, i was just messing with my plugins in firefox not too long ago, so i know whats there and what "on" and whatnot. Link to comment Share on other sites More sharing options...
Halororor Posted July 30, 2012 Share Posted July 30, 2012 Lucky for me, I don't buy games from companies who openly admit that they hate my guts for being a PC gamer. Link to comment Share on other sites More sharing options...
Ghogiel Posted July 31, 2012 Share Posted July 31, 2012 The more I look at this, the less it looks like malicious behavior by Ubisoft and just shoddy, insecure programming on their part. It's going to depend on what their motive was in installing that browser plug-in, I guess. Whatever their motives, it certainly it opens a door for anyone else who does have malicious intentions. What's worse stupid or cunning? I have to say piss off if either is true. IMO doing something stupid can land you in court or jail, and it's just not a defence for anything. Especially since I don't see Ubi going around trying to say they are indeed stupid, quite the opposite in fact, so in their case it isn't even a defence they can put forward. Letting things fly scot free on the stupidity plea is a bit silly when you get down to it. Link to comment Share on other sites More sharing options...
Vindekarr Posted July 31, 2012 Share Posted July 31, 2012 Why don't they just start making games for consoles only then? If they don't like PC gamers, alienating PC gamers and then asking them to buy your games doesn't seem very well thought out. Link to comment Share on other sites More sharing options...
lonewolfkai Posted July 31, 2012 Share Posted July 31, 2012 Thanks for the news. I was planning on buying Ghost Recon when the price was lowered. I guess I won't be trying that one out. :sad: Link to comment Share on other sites More sharing options...
Iv000 Posted July 31, 2012 Share Posted July 31, 2012 Ugh.I can't find a uplay plugin in my browser. I guess Avast got rid of it or something. http://pc.gamespy.com/articles/122/1225585p1.htmlUbi said they patched this thing as well, maybe that's why I can't find it. Either way. They lost my money.There's been way too much negativity around them and I just don't trust them anymore. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now