Hasta La Gadget!

If you’ve played Assassin’s Creed 2 (or other Ubisoft games), you may have installed more stealthy infiltration than you bargained for. Some snooping by Tavis Ormandy around Ubisoft’s UPlay looks to have have discovered that the service’s browser plugin, meant to launch locally-stored games from the web, doesn’t have a filter for what websites can use it — in other words, it may well be open season for any maliciously-coded page that wants direct access to the computer. Closing the purported, accidental backdoor exploit is thankfully as easy as disabling the plugin, but it could be another knock against the internet integration from a company that doesn’t have a great reputation for online security with its copy protection system. We’ve reached out to Ubisoft to confirm the flaw and learn what the solution may be, if it’s needed. For now, we’d definitely turn that plugin off and continue the adventures of Ezio Auditore da Firenze through a desktop shortcut instead.

Update: That was fast. As caught by Geek.com, the 2.0.4 update to UPlay limits the plugin to opening UPlay itself. Unless a would-be hacker can find a way to compromise the system just before you launch into Rayman Origins, it should be safe to play.

Filed under: Gaming, Software

Ubisoft UPlay may accidentally contain web plugin exploit, Ezio would not approve (update: fixed) originally appeared on Engadget on Mon, 30 Jul 2012 10:02:00 EDT. Please see our terms for use of feeds.

Permalink TechDirt  |  Seclists.org  | Email this | Comments

While today’s videogames are bigger, flashier and more impressive than ever, it’s hard not to think that the golden era of console gaming is behind us. Back in the late ’80s and early-to-mid ’90s, when a new console came out every couple of years to cut its predecessors off at the knees and brutally savage the bank accounts of the hardcore gamer who had to have them all, there was genuine excitement. Now, with modern consoles showing their age and throwing on more and more gimmicks like so much makeup to compensate, it’s hard to really get properly enthused about any of them.

Out of nowhere came Ouya and, based on the $2.6 million it raised in 24 hours alone, it’s safe to say it has succeeded in renewing that excitement. That’s a stark contrast to the general feeling of malaise at this year’s E3. I’m excited too — but cautiously so.

Continue reading Editorial: Ouya’s success is opportunity missed for Microsoft, Nintendo and Sony

Filed under: Gaming

Editorial: Ouya’s success is opportunity missed for Microsoft, Nintendo and Sony originally appeared on Engadget on Wed, 11 Jul 2012 13:49:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments