Ubi are retards. Uplay opens rather the security hole.

Talk on any game/console that doesn't have its own forum, including browser-based games

Moderator: Forum Moderators

Post Reply
Joose
Turret
Turret
Posts: 8090
Joined: October 13th, 2004, 14:13
Location: The house of Un-Earthly horrors

Ubi are retards. Uplay opens rather the security hole.

Post by Joose »

Story Here

The short version is that if you have any game installed that includes Uplay, then you probably also have the Uplay browser plugin as it seems to install silently. Due to fucktarded programming, this browser plugin lets websites run any program they want on your computer without any kind of prompt to do so. Oh, Ubisoft.

There's a safe way to test if you are affected by it here. Basically, if you click that link and wait a minute, first the Uplay window will load up and fart about for a bit, then the windows calculator pops up. If it does, congratulations! You win a rather large security issue! Lucky you! If nothing happens at all, then the plugin isn't on your computer, and you have to live without the risk of being haxxed. Better luck next time.

Its dead easy to fix the problem, just go into your browser preferences and disable the plugin. Nevertheless, I fully expect Ubi to be bummed into next week by the inevitable PR shitstorm.
TezzRexx
Dr Zoidberg
Dr Zoidberg
Posts: 4072
Joined: February 8th, 2005, 15:54
Location: BURMINGHUM, England
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by TezzRexx »

Just came on here to post that too... god damn what the fuck.

http://www.rockpapershotgun.com/2012/07 ... -pc-games/
FatherJack
Site Owner
Site Owner
Posts: 9597
Joined: May 16th, 2005, 15:31
Location: Coventry, UK
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by FatherJack »

Running a program already on your computer (ie calculator) is different to running *any* program, but it's still a big threat.

Anno 2070 has Uplay integration, but isn't on that list, so it's worth checking even if you don't think you have it.
Joose
Turret
Turret
Posts: 8090
Joined: October 13th, 2004, 14:13
Location: The house of Un-Earthly horrors

Re: Ubi are retards. Uplay opens rather the security hole.

Post by Joose »

FatherJack wrote:Running a program already on your computer (ie calculator) is different to running *any* program, but it's still a big threat.
Well yes, but as people have pointed out elsewhere, one such program already on your computer is cmd.exe.

Either way, we are talking "super bad" or "really pretty bad".
Dr. kitteny berk
Morbo
Morbo
Posts: 19676
Joined: December 10th, 2004, 21:53
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by Dr. kitteny berk »

I think that pretty much counts as a pretty fucking major hole, suppose it'd be easy enough to download and run any old app you like without too much hassle.
friznit
Heavy
Heavy
Posts: 5147
Joined: October 3rd, 2005, 21:51
Location: South of England
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by friznit »

Uplay in my big hole? Sounds pretty dodgy to me!
Dr. kitteny berk
Morbo
Morbo
Posts: 19676
Joined: December 10th, 2004, 21:53
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by Dr. kitteny berk »

friznit wrote:Uplay in my big hole? Sounds pretty dodgy to me!
Ulove it.
HereComesPete
Throbbing Cupcake
Throbbing Cupcake
Posts: 10249
Joined: February 17th, 2007, 23:05
Location: The maleboge

Re: Ubi are retards. Uplay opens rather the security hole.

Post by HereComesPete »

Well I uhauled my way over to uadd-ons and checked to usee if this was lingering and ucausing any problems. Thankfully it uwasn't.

And some of them are real things.
Grimmie
Master of Soviet Propaganda
Master of Soviet Propaganda
Posts: 7672
Joined: February 5th, 2005, 19:00
Location: Birming-humm, England
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by Grimmie »

Huh, yep. That certainly brings up Calculator.

I can't actually find the plugin listed anywhere, am I blind?

Regardless, apparently they patched it today: http://forums.ubi.com/showthread.php/69 ... curity-fix
buzzmong
Weighted Storage Cube
Weighted Storage Cube
Posts: 7167
Joined: February 26th, 2007, 17:26
Location: Middle England, nearish Cov

Re: Ubi are retards. Uplay opens rather the security hole.

Post by buzzmong »

Grimmie wrote:Huh, yep. That certainly brings up Calculator.

I can't actually find the plugin listed anywhere, am I blind?


Regardless, apparently they patched it today: http://forums.ubi.com/showthread.php/69 ... curity-fix
Firefox or Chrome?
According to the RPS thread, Firefox has it located in Tools->Addons->Plugins, but Chrome has it in a different place from "plug-ins".
FatherJack
Site Owner
Site Owner
Posts: 9597
Joined: May 16th, 2005, 15:31
Location: Coventry, UK
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by FatherJack »

buzzmong wrote:Chrome has it in a different place from "plug-ins".
Spanner icon, Settings, Show advanced settings, Content settings in the "Privacy section", Disable individual plugins in the "Plug-ins" section.

Or type about:plugins in the address bar.
TezzRexx
Dr Zoidberg
Dr Zoidberg
Posts: 4072
Joined: February 8th, 2005, 15:54
Location: BURMINGHUM, England
Contact:

Re: Ubi are retards. Uplay opens rather the security hole.

Post by TezzRexx »

FatherJack wrote:
buzzmong wrote:Chrome has it in a different place from "plug-ins".
Spanner icon, Settings, Show advanced settings, Content settings in the "Privacy section", Disable individual plugins in the "Plug-ins" section.
Wow, that's intuitive.
Post Reply