Page 1 of 1
Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 10:51
by Joose
Story Here
The short version is that if you have any game installed that includes Uplay, then you probably also have the Uplay browser plugin as it seems to install silently. Due to fucktarded programming, this browser plugin lets websites run any program they want on your computer without any kind of prompt to do so. Oh, Ubisoft.
There's a safe way to test if you are affected by it
here. Basically, if you click that link and wait a minute, first the Uplay window will load up and fart about for a bit, then the windows calculator pops up. If it does, congratulations! You win a rather large security issue! Lucky you! If nothing happens at all, then the plugin isn't on your computer, and you have to live without the risk of being haxxed. Better luck next time.
Its dead easy to fix the problem, just go into your browser preferences and disable the plugin. Nevertheless, I fully expect Ubi to be bummed into next week by the inevitable PR shitstorm.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 11:20
by TezzRexx
Just came on here to post that too... god damn what the fuck.
http://www.rockpapershotgun.com/2012/07 ... -pc-games/
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 11:30
by FatherJack
Running a program already on your computer (ie calculator) is different to running *any* program, but it's still a big threat.
Anno 2070 has Uplay integration, but isn't on that list, so it's worth checking even if you don't think you have it.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 12:01
by Joose
FatherJack wrote:Running a program already on your computer (ie calculator) is different to running *any* program, but it's still a big threat.
Well yes, but as people have pointed out elsewhere, one such program already on your computer is cmd.exe.
Either way, we are talking "super bad" or "really pretty bad".
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 15:14
by Dr. kitteny berk
I think that pretty much counts as a pretty fucking major hole, suppose it'd be easy enough to download and run any old app you like without too much hassle.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 15:24
by friznit
Uplay in my big hole? Sounds pretty dodgy to me!
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 15:31
by Dr. kitteny berk
friznit wrote:Uplay in my big hole? Sounds pretty dodgy to me!
Ulove it.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 16:21
by HereComesPete
Well I uhauled my way over to uadd-ons and checked to usee if this was lingering and ucausing any problems. Thankfully it uwasn't.
And some of them are real things.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 18:16
by Grimmie
Huh, yep. That certainly brings up Calculator.
I can't actually find the plugin listed anywhere, am I blind?
Regardless, apparently they patched it today:
http://forums.ubi.com/showthread.php/69 ... curity-fix
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 21:12
by buzzmong
Firefox or Chrome?
According to the RPS thread, Firefox has it located in Tools->Addons->Plugins, but Chrome has it in a different place from "plug-ins".
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 21:33
by FatherJack
buzzmong wrote:Chrome has it in a different place from "plug-ins".
Spanner icon, Settings, Show advanced settings, Content settings in the "Privacy section", Disable individual plugins in the "Plug-ins" section.
Or type about:plugins in the address bar.
Re: Ubi are retards. Uplay opens rather the security hole.
Posted: July 30th, 2012, 23:01
by TezzRexx
FatherJack wrote:buzzmong wrote:Chrome has it in a different place from "plug-ins".
Spanner icon, Settings, Show advanced settings, Content settings in the "Privacy section", Disable individual plugins in the "Plug-ins" section.
Wow, that's intuitive.