« previous next »
Pages: 1 [2] 3   Go Down

Author Topic: Ubisoft UPlay DRM Security Hole  (Read 6752 times)

Offline keith.lamothe

  • Arcen Games Staff
  • Arcen Staff
  • Zenith Council Member Mark III
  • *****
  • Posts: 19,505
Re: Ubisoft UPlay DRM Security Hole
« Reply #15 on: July 30, 2012, 03:58:22 pm »
Quote from: Volatar on July 30, 2012, 03:38:29 pm
Chrome did not have the addon installed.
I've heard of others finding it on firefox and not on chrome, but on both machines in my house that had uplay, both firefox and chrome had the plugins (chrome having 1, firefox having 2).
Logged
Have ideas or bug reports for one of our games? Mantis for Suggestions and Bug Reports. Thanks for helping to make our games better!

Offline Volatar

  • Hero Member Mark III
  • *****
  • Posts: 1,055
  • Patient as a rock
Re: Ubisoft UPlay DRM Security Hole
« Reply #16 on: July 30, 2012, 04:57:13 pm »
Quote from: keith.lamothe on July 30, 2012, 03:58:22 pm
Quote from: Volatar on July 30, 2012, 03:38:29 pm
Chrome did not have the addon installed.
I've heard of others finding it on firefox and not on chrome, but on both machines in my house that had uplay, both firefox and chrome had the plugins (chrome having 1, firefox having 2).

Maybe it won't install on Chrome if Chrome is running at install time? I am 95% sure I was running Chrome at the time I installed (as I pretty much always have it running).
Logged

Offline Volatar

  • Hero Member Mark III
  • *****
  • Posts: 1,055
  • Patient as a rock
Re: Ubisoft UPlay DRM Security Hole
« Reply #17 on: July 30, 2012, 05:08:24 pm »
Quote from: TechSY730 on July 30, 2012, 03:46:33 pm
If you feel up to it, you may want to report this in Firefox's bug system, and have them see if there is an oversight or something in the logic.

As much as I love contributing to open source, I really think I would just be one of a choir of similar voices at this point due to the publicity of the thing.
Logged

Offline keith.lamothe

  • Arcen Games Staff
  • Arcen Staff
  • Zenith Council Member Mark III
  • *****
  • Posts: 19,505
Re: Ubisoft UPlay DRM Security Hole
« Reply #18 on: July 30, 2012, 05:29:19 pm »
Quote from: Volatar on July 30, 2012, 05:08:24 pm
As much as I love contributing to open source, I really think I would just be one of a choir of similar voices at this point due to the publicity of the thing.
Yea, they're probably getting a lot of "U Disable UPlay Or We Disable U" feedback right now ;)
Logged
Have ideas or bug reports for one of our games? Mantis for Suggestions and Bug Reports. Thanks for helping to make our games better!

Offline eRe4s3r

  • Core Member Mark II
  • *****
  • Posts: 2,825
Re: Ubisoft UPlay DRM Security Hole
« Reply #19 on: July 30, 2012, 06:57:32 pm »
Quote from: Volatar on July 30, 2012, 04:57:13 pm
Quote from: keith.lamothe on July 30, 2012, 03:58:22 pm
Quote from: Volatar on July 30, 2012, 03:38:29 pm
Chrome did not have the addon installed.
I've heard of others finding it on firefox and not on chrome, but on both machines in my house that had uplay, both firefox and chrome had the plugins (chrome having 1, firefox having 2).

Maybe it won't install on Chrome if Chrome is running at install time? I am 95% sure I was running Chrome at the time I installed (as I pretty much always have it running).

This ;)

I didn't have Chrome running and I have the plugin in Chrome. I have absolutely no idea, wtf UPlay addon does in my browser though. uPlay isn't browser based. Like at ALL.
Logged
Proud member of the Initiative for Bigger Weapons EV. - Bringer of Additive Blended Doom - Vote for Lore, get free cookie

Offline keith.lamothe

  • Arcen Games Staff
  • Arcen Staff
  • Zenith Council Member Mark III
  • *****
  • Posts: 19,505
Re: Ubisoft UPlay DRM Security Hole
« Reply #20 on: July 30, 2012, 07:01:06 pm »
Quote from: eRe4s3r on July 30, 2012, 06:57:32 pm
I have absolutely no idea, wtf UPlay addon does in my browser though. uPlay isn't browser based. Like at ALL.
Or IS IT?

*dun dun dun*
Logged
Have ideas or bug reports for one of our games? Mantis for Suggestions and Bug Reports. Thanks for helping to make our games better!

Offline KingIsaacLinksr

  • Master Member
  • *****
  • Posts: 1,332
  • A Paladin Without A Crusade...
Re: Ubisoft UPlay DRM Security Hole
« Reply #21 on: July 30, 2012, 07:46:12 pm »
Quote from: eRe4s3r on July 30, 2012, 06:57:32 pm
Quote from: Volatar on July 30, 2012, 04:57:13 pm
Quote from: keith.lamothe on July 30, 2012, 03:58:22 pm
Quote from: Volatar on July 30, 2012, 03:38:29 pm
Chrome did not have the addon installed.
I've heard of others finding it on firefox and not on chrome, but on both machines in my house that had uplay, both firefox and chrome had the plugins (chrome having 1, firefox having 2).

Maybe it won't install on Chrome if Chrome is running at install time? I am 95% sure I was running Chrome at the time I installed (as I pretty much always have it running).

This ;)

I didn't have Chrome running and I have the plugin in Chrome. I have absolutely no idea, wtf UPlay addon does in my browser though. uPlay isn't browser based. Like at ALL.

No doubt they'll spew some nonsense about "improving the player experience". More like spying to make sure your not some kind of pirate. If I was paranoid I'd think that anyway.
Logged
Casual reviewer with a sense of justice.
Visit the Arcen Mantis to help: https://www.arcengames.com/mantisbt/
A Paladin's Blog. Long form videogame reviews focusing on mechanics and narrative analyzing. Plus other stuff. www.kingisaaclinksr.com

Offline Volatar

  • Hero Member Mark III
  • *****
  • Posts: 1,055
  • Patient as a rock
Re: Ubisoft UPlay DRM Security Hole
« Reply #22 on: July 30, 2012, 08:18:53 pm »
In theory it's so that you can launch UPlay from the browser, but you are right. I am curious what is in it.

Where can I find the files for plugins for Firefox?
Logged

Offline BobTheJanitor

  • Master Member Mark II
  • *****
  • Posts: 1,689
Re: Ubisoft UPlay DRM Security Hole
« Reply #23 on: July 30, 2012, 08:44:39 pm »
Quote from: Volatar on July 30, 2012, 08:18:53 pm
In theory it's so that you can launch UPlay from the browser, but you are right. I am curious what is in it.

Where can I find the files for plugins for Firefox?

Tools > add-ons > plugins. And I found UPlay there just now and disabled it. I'm am brimming with purposeless nerd rage. Oh well, I'm sure there's already someone working on fixing it.

Edit: Yep, top o' this list, heh: https://addons.mozilla.org/en-US/firefox/blocked/
« Last Edit: July 30, 2012, 08:46:18 pm by BobTheJanitor »
Logged

Offline Volatar

  • Hero Member Mark III
  • *****
  • Posts: 1,055
  • Patient as a rock
Re: Ubisoft UPlay DRM Security Hole
« Reply #24 on: July 30, 2012, 09:44:20 pm »
Quote from: BobTheJanitor on July 30, 2012, 08:44:39 pm
Tools > add-ons > plugins. And I found UPlay there just now and disabled it. I'm am brimming with purposeless nerd rage. Oh well, I'm sure there's already someone working on fixing it.

I meant the files themselves. I wanted to take a look at the scripts and see if I could find anything hinting to their real purpose.


Quote from: BobTheJanitor on July 30, 2012, 08:44:39 pm
Edit: Yep, top o' this list, heh: https://addons.mozilla.org/en-US/firefox/blocked/

Oh that is glorious. Talk about a slap against Ubisoft.
Logged

Offline keith.lamothe

  • Arcen Games Staff
  • Arcen Staff
  • Zenith Council Member Mark III
  • *****
  • Posts: 19,505
Re: Ubisoft UPlay DRM Security Hole
« Reply #25 on: July 30, 2012, 11:05:52 pm »
Quote from: BobTheJanitor on July 30, 2012, 08:44:39 pm
Edit: Yep, top o' this list, heh: https://addons.mozilla.org/en-US/firefox/blocked/
Oh, bravo, Mozilla, Bravo :)  Nothing quite like blacklisting a software component from a DRMaholic company to make me smile.

I wonder why the UPlay PC Hub service isn't on there; maybe there just wasn't a vulnerability with it (that was discovered).  And it wasn't even on Chrome.
Logged
Have ideas or bug reports for one of our games? Mantis for Suggestions and Bug Reports. Thanks for helping to make our games better!

Offline Cyborg

  • Master Member Mark III
  • *****
  • Posts: 1,957
Re: Ubisoft UPlay DRM Security Hole
« Reply #26 on: July 30, 2012, 11:09:59 pm »
http://www.youtube.com/watch?v=YdOEM9wwdww

nsfw, by the way.

Yeah, so the jig is up. They are officially a bunch of douche bags.
Logged
Kahuna strategy guide:
http://www.arcengames.com/forums/index.php/topic,13369.0.html

Suggestions, bugs? Don't be lazy, give back:
http://www.arcengames.com/mantisbt/

Planetcracker. Believe it.

The stigma of hunger. http://wayw.re/Vi12BK

Offline Mánagarmr

  • Core Member Mark V
  • *****
  • Posts: 4,272
  • if (isInRange(target)) { kill(target); }
Re: Ubisoft UPlay DRM Security Hole
« Reply #27 on: July 31, 2012, 03:58:40 am »
Quote from: Cyborg on July 30, 2012, 11:09:59 pm
http://www.youtube.com/watch?v=YdOEM9wwdww

nsfw, by the way.

Yeah, so the jig is up. They are officially a bunch of douche bags.
mildly put...
Logged
Click here to get started with Mantis for Suggestions and Bug Reports.

Thank you for contributing to making the game better!

Offline Kahuna

  • Core Member
  • *****
  • Posts: 2,222
  • Kahuna Matata!
Re: Ubisoft UPlay DRM Security Hole
« Reply #28 on: July 31, 2012, 04:35:57 am »
I was thinking about buying Might & Magic Heroes VI. Yay now I can just download it!
I never buy EA's, Ubisoft's or Activision's games. Haven't bought for years and never will ever again.
Logged
set /A diff=10
if %diff%==max (
   set /A me=:)
) else (
   set /A me=SadPanda
)
echo Check out my AI War strategy guide and find your inner Super Cat!
echo 2592 hours of AI War and counting!
echo Kahuna matata!

Offline Mánagarmr

  • Core Member Mark V
  • *****
  • Posts: 4,272
  • if (isInRange(target)) { kill(target); }
Re: Ubisoft UPlay DRM Security Hole
« Reply #29 on: July 31, 2012, 04:08:05 pm »
Quote from: Kahuna on July 31, 2012, 04:35:57 am
I never buy EA's, Ubisoft's or Activision's games. Haven't bought for years and never will ever again.
That's pretty much the same here. Any games published by those guys these days are blacklisted. I think the last EA game I bought was Mass Effect 2. Activision? Uh, haven't touched one since WoW Vanilla. Ubisoft? Think it was Silent Hunter IV.
Logged
Click here to get started with Mantis for Suggestions and Bug Reports.

Thank you for contributing to making the game better!
Pages: 1 [2] 3   Go Up
« previous next »