Jailbreakers beware: games continue to cut service to hackers [UPDATE: Statement]

Apple has never been entirely keen on the idea of people hacking in to their smartphones, and here in 2013 its becoming apparent that developers of games for iOS devices aren’t finding the situation to be entirely positive either. What this week has turned up is the creators of Dues Ex: The Fall have included a code which, if your iPhone is jailbroken, will result in your complete inability to fire guns. And that’s important.

k-bigpic

When you’re playing a game like Dues Ex: The Fall, you’ll find it rather difficult to get anywhere without the firing of guns. This news comes from Kotaku where users have flocked to flip out over the situation due to their full purchase of the game and essentially complete inability to play it. This game was released this week for iPhone, iPad, and iPod touch.

When one downloads The Fall for $6.99 USD on the Apple App Store, it will work completely fine if you’ve got a factory-fresh iPhone, iPad, or iPod touch. If you’ve taken the time to jailbreak the device, on the other hand, you’ll be unable to play.

At the moment it’s not entirely clear why the developers behind the game do not warn users that they’re so very against the jailbreaking process that they’ll stop anyone who does it from playing their game. Jailbreaking is not illegal at the moment here in the USA, just warrantee-breaking. Game developers certainly – again, at the moment – appear to have the right to initiate a break like this, but we imagine the situation wont be around for long.

At least, not with no warning as we’re seeing here.

UPDATE: It would appear that Square Enix has been quick on the pistol with a response to this public relations mistake of a release. These words were provided by the developers to Penny Arcade Report:

“We have not been clear in our communication earlier this week when we launched Deus Ex: The Fall. We did not state clearly that the game would not support jailbroken devices and so we will be switching this off via an update, so that all the supported iOS devices will be able to play the game in the near future

We feel it is the right thing to do in this situation and apologize for any inconvenience this may have caused. No customer should be out of pocket when we were not clear from the start, so we’ll get the game updated as soon as possible so that everyone who wants to play Deus Ex: The Fall can do so regardless of whether their device is jailbroken or not.

As soon as this update is live we will communicate this via the Eidos Montreal Community channels” – Square Enix

This sort of situation has appeared with several other games in the recent past, notably Game Dev Tycoon which, having expected their game to be pirated immediately after having been released to the wild, added a bit of a break inside it.

game_dev_tycoon_pirate-580x386

As players played, they found their (pirated) game to be giving them massive amounts of bad sales reports due to in-game pirating. Irony at its best.


Jailbreakers beware: games continue to cut service to hackers [UPDATE: Statement] is written by Chris Burns & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

Dropbox hack allows bypass of two-factor authentication

Many online services are implementing two-factor authentication to bulk up security and prevent unauthorized access to sensitive information. Dropbox is just one of those online services that offers the feature, but it’s been recently discovered that the company’s two-factor authentication method is still vulnerable to breaching.

dropbox-568x500

It turns out that as long as someone has the username and password of your Dropbox account, they can bypass the two-factor authentication and log right into your account with a couple of clever tricks. Since Dropbox doesn’t verify email addresses when users sign up for a new account, a hacker can use a new email address that’s similar to an existing one by placing a period in somewhere, similar to how Gmail addresses work.

For this fake account, two-factor authentication is enabled and an emergency code is generated in case users ever lose their phone. The hacker will then login to the victim’s account, but will be prompted to enter the code for that account. However, the hacker will simply select that the victim lost their phone and they’ll be promoted for that emergency code.

Since the email address that the hacker signed up with is similar to the victim’s email address. the emergency code will work on the victim’s account. From there, the hacker can disable two-factor authentication and gain access into the victim’s Dropbox account. This is because that “baseballboy@yahoo.com” is registered as being the same “baseball.boy@yahoo.com,” just like how Gmail handles email addresses.

Of course, you have to know the user’s password before you can do this, but once you get a hold of it, it seems relatively easy to bypass Dropbox’s two-factor authentication. However, the security team that found the vulnerability is already said to be working with Dropbox to fix the bug.

VIA: The Hacker News


Dropbox hack allows bypass of two-factor authentication is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

Android vulnerability discovered affecting devices running version 1.6 and later

A doozy of an Android bug has been discovered by Bluebox Security’s Bluebox Labs, one that affects all Android releases since 1.6 Donut. With the vulnerability, malicious coders can create a trojan application to serve whatever purpose they’d like, whether to steal a user’s information or take over control of the device. More information will be given at Black Hat USA 2013 in a keynote speech.

android-donut

According to Bluebox Labs, because of how many versions of Android are affected, a potential 900 million devices could suffer from the vulnerability, which involves a means for modifying APK code without harm to the app’s cryptographic signature. As such, a perfectly legit app can be converted into a trojan that slips under the radar.

The company goes on to specify that apps developed by the handset’s makers pose a greater risk due to their elevated privileges. Because of this, one of these apps that are exploited and turned into a trojan can give the hacker complete access to the mobile OS’s apps and system, as well as all their related data. The ramifications of this are two-fold:

Depending on the intent of the hacker, personal data like text messages, emails, any documents on the device, account passwords that are saved, pictures, and other related items can be swiped, potentially giving access to things like bank accounts and revealing contacts’ information. In addition, this can be taken a step further so that the hacker has the ability to use the device to send text messages, snap pictures, record videos, make phone calls, etc.

In an extreme case, the vulnerability could be used to create a botnet.

According to Bluebox, it informed Google of this Android vulnerability in February of this year. To take care of the issue, every device manufacturer will need to create a patch and roll it out to its users, who will then need to install it. The security firm says it will release “tools/material” and more info about this vulnerability during Blackhat USA 2013, which takes place later this month.

SOURCE: BlueBox


Android vulnerability discovered affecting devices running version 1.6 and later is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

Ubisoft hack spawns Watch Dog promo conspiracy theories

Yesterday, game publisher Ubisoft was hacked, leading to usernames and passwords on their ubi.com website being stolen. However, it seems that a lot of Ubisoft fans are wondering if it’s a serious situation or just a publicity stunt for a marketing campaign for Ubisoft’s upcoming game Watch Dogs, which is a game based on hacking into various computer systems.

watch-dogs

When Ubisoft posted about the hack on their Facebook page, many fans commented on and questioned whether or not the hack was actually legitimate, or just propaganda for Watch Dogs. Users asked questions like, “Are you sure its not just a watch dogs promotional stunt?” and commenting, “this is probably a Watch Dogs stunt,” and “hacked by Aiden Pearce.”

It seems the questionable hack was brought up after the fact that users received an email from Ubisoft, but noted that the email looked like spam with some users saying that the email was in German and full of grammatical mistakes. Other users noted that there was no signature attached to the email, so they couldn’t tell who it was from. Even the email address seemed a bit weird: email_ubi@email.ubi.com.

39386826

However, Ubisoft clarified over and over that it was a real hack, giving users a link to change their passwords. While the game publisher says that passwords are encrypted, there’s still a chance that they could be cracked by the hackers, so they’re warning all users to change their passwords before the hackers end up cracking them to get access to further information.

Ubisoft also says that financial information is safe, as the publisher doesn’t host that information on their website or server, but rather through a third-party. Then again, if a hacker ended up logging into your account, they could eventually find their way to your financial information and other personal info. Hacked or not, it’s always a good idea to change your password every so often to prevent peeping eyes from gaining access to your info.


Ubisoft hack spawns Watch Dog promo conspiracy theories is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

Ubisoft hacked with usernames and passwords stolen, financial info safe

It’s been a bit of awhile since we’ve heard about a large online service hack, but we should’ve knocked on wood when we had the chance. Ubisoft has confirmed that some of its “online systems” were hacked, with only usernames, email addresses, and passwords stolen. The game publisher says that financial information is safe, since that info isn’t kept by Ubisoft.

timthumb

Obviously, Ubisoft is recommending that all account holders change their passwords on ubi.com, as well as on other websites where they use the same password. Of course, it’s good practice to not use the same password for everything, as that could start a chain reaction if your password gets stolen on one service.

However, Ubisoft says that the passwords are encrypted on their servers, so while the hackers didn’t have the passwords themselves at the time of the breach, Ubisoft says they “could be cracked, in particular if the password chosen is weak,” which is why the company is recommending that its users change their passwords as quickly as possible.

51rEm9gy4GL._SY445_

Unfortunately, specifics about how the breach happened weren’t disclosed by Ubisoft “for security reasons,” but they said that the hack did not affect their Uplay gaming service. Currently, ubi.com is “under maintenance,” and isn’t accessible at this time because the publisher is working on solving the attack.

Ubisoft is just one of the multiple big game publishers that will be releasing games for the Xbox One and PlayStation 4 later this year. Watch Dogs seems to be one of the big games to hit the new consoles in the fall, and the publisher looks to go all-in on the next-generation of gaming.

SOURCE: Ubisoft Blog


Ubisoft hacked with usernames and passwords stolen, financial info safe is written by Craig Lloyd & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.

iOS 7 jailbreak claimed by infamous iOS hacker

The second beta for iOS 7 was just released last week, but iOS hackers are undoubtedly working around the clock to jailbreak the new version of iOS, and it seems like it has been accomplished as one famous iOS hacker as posted a screenshot of what appears to be a jailbroken version of iOS 7,

Read The Full Story

Hackers May Have Released Personal Data Of U.S. Troops Posted In Korea

Hackers were able to access personal details of thousands of U.S. troops posted in Korea, and that information has reportedly been leaked on multiple sites online

Like It , +1 , Tweet It , Pin It Original content from Ubergizmo.

    

Facebook security bug leaves 6 million users’ personal info exposed

This afternoon, Facebook has made one of those announcements a company never really wants to have to make: they’ve had a rather unfortunate bug problem. The big problem here was, as Facebook notes, that their most recent method for recommending friends to new users also contained contact information of users – this including information added

Read The Full Story

Pirate Bay co-founder Gottfrid Svartholm Warg receives Swedish jail sentence

Back in September, we reported that one of The Pirate Bay’s founders, Gottrid Svartholm Warg, had been sent to Sweden by Cambodia, where he was arrested at his apartment. The issue resulted from a sentence in 2009, which was appealed and reduced to a few months and a multi-million fine. Today he received a jail

Read The Full Story

Banks brace for cyberwarfare drill Quantum Dawn 2

Banks brace for cyberwarfare drill Quantum Dawn 2

Come June 28th, Wall Street outfits including the likes of Citigroup and Bank of America will be under siege — from fake hackers, that is. Representatives from a total of 40 companies along with the Federal Reserve, Securities and Exchange Commission, US departments of Treasury and Homeland Security will take part in Quantum Dawn 2: a simulated cyberattack on faux trading and information systems. Led by the Securities Industry and Financial Markets Association, the drill will test the ability of participants to cooperate via email and phone to suss out what’s going on and hatch a plan. The exercise will momentarily pause so that those involved can decide on a course of action, and then it’ll speed up and model the effects of the decision over a longer period of time. With the recent flurry of hacking incidents and international finger pointing, something tells us this won’t be the last we hear of drills like Quantum Dawn.

[Image credit: MoneyBlogNewz, Flickr]

Filed under:

Comments

Via: AllThingsD

Source: Reuters