Note: iOS 9 + Facebook users w/ trouble scrolling: #super sorry# we hope to fix it asap. In the meantime Chrome Mobile is a reach around
hot  /  reviews  /  videos  /  cblogs  /  qposts

Ubisoft's Uplay DRM poses security risk (Update)

8:00 AM on 07.30.2012 // Jim Sterling
  @JimSterling

[Update: Ubisoft has publicly acknowledged the security flaw, and has issued a patch for all affected games. The patch will be a forced game update, and it's recommended to be run with your browsers closed. A new version of the Uplay installer is also available on its official site.

Ubisoft is yet to actually apologize for putting its customers at risk.] 

In today's episode of "Publisher's hurting consumers in order to help themselves," Ubisoft may have put gamers at serious risk with its Uplay DRM service. According to programmer Tavis Ormandy, major Ubisoft titles have a backdoor that can be used by malicious websites to take control of your PC. 

Uplay installs a browser plugin -- without warning the user -- which sites can exploit to gain access to your machine. It's highly recommended that anybody who has downloaded an Ubisoft game locate this plugin and delete it. It's commonly believed that this will eliminate the risk to the user. Search in your browser's add-ons/plugins section for "Uplay" and delete that sucker. It was initially believed to be a rootkit, but that is not the case. 

A list of games with the issue can be found below (courtesy of Rock, Paper, Shotgun), though personally it'll be a cold day in Hell before I let Ubisoft's games on my computer. Not just for this -- I'm frankly sick of that publisher's attitude toward the PC market. I think it's easier if we all just pretended it was a console-exclusive publisher. 

Meanwhile, of course, anybody who pirated these games ought to be playing risk-free, unpunished for they did not commit the crime of being a customer. Good going, Ubisoft! There are words that would have to be invented in order for me to adequately vocalize my disgust.

Assassin’s Creed II
Assassin’s Creed: Brotherhood
Assassin’s Creed: Project Legacy
Assassin’s Creed Revelations
Assassin’s Creed III
Beowulf: The Game
Brothers in Arms: Furious 4
Call of Juarez: The Cartel
Driver: San Francisco
Heroes of Might and Magic VI
Just Dance 3
Prince of Persia: The Forgotten Sands
Pure Football
R.U.S.E.
Shaun White Skateboarding
Silent Hunter 5: Battle of the Atlantic
The Settlers 7: Paths to a Kingdom
Tom Clancy’s H.A.W.X. 2
Tom Clancy’s Ghost Recon: Future Soldier
Tom Clancy’s Splinter Cell: Conviction
Your Shape: Fitness Evolved



Jim Sterling, Former Reviews Editor
 Follow Blog + disclosure JimSterling Tips
Destructoid reviews editor, responsible for running and maintaining the cutting edge videogame critique that people ignore because all they want to see are the scores at the end. Also a regular f... more   |   staff directory



 Setup email comments

Unsavory comments? Please report harassment, spam, and hate speech to our community fisters, and flag the user (we will ban users dishing bad karma). Can't see comments? Apps like Avast or browser extensions can cause it. You can fix it by adding *.disqus.com to your whitelists.

 Quickposts
Status updates from C-bloggers

TysonOfTime avatarTysonOfTime
The first thing I do when I see clickbait is click on it and complain about clickbait.
LinkSlayer64 avatarLinkSlayer64
Wow, uh, after having a lovely time with Kirby Air Ride, I decided to try playing some melee, for old times sake... I pretty much disliked my whole time with it. More details in a comment if I get around to it.
Jiraya avatarJiraya
Help me gather games for a new blog series - "Worst Sequels Ever"
Niero Desu avatarNiero Desu
The backend code on the site so fun to read. Going through some of Julio's old stuff: if($vars["fappers"]){ $fappoids = 0; $_xt_loop_name = "fappers"; $vars["fappers_cnt"] = count($vars["fappers"]); reset($vars["fappers"]);
BaronVonSnakPak avatarBaronVonSnakPak
Watching the second Guyver Movie: Dark Hero, starring David -Solid Snake- Hayter. https://www.youtube.com/watch?v=-Roie47-Cuk
The Dyslexic Laywer avatarThe Dyslexic Laywer
You didn't think I forgot what day it is did you?
Nathan D avatarNathan D
Gonna retire the MOARgasmic avatar for awhile.
OrochiLeona avatarOrochiLeona
Will you be mine?
Pixie The Fairy avatarPixie The Fairy
Got out of Deadpool. It definitely was a movie with Deadpool in it. Some parents were shocked to learn it was also rated R for a reason.
Sarah Jane farron avatarSarah Jane farron
So... gender and biology. All I'll say here is please respect people and their identities and don't try to push assumptions as fact. It doesn't need to be said to most here but denying people their identities is pretty harmful and very unpleasant.
Niwannabe avatarNiwannabe
Any PS4 recommendations for a guy who can't afford PS+, since all I've got is Battlefront and there's next to nothing to do in that game?
Niero Desu avatarNiero Desu
if you were experiencing lag with the dev site today, can you please try again? I moved some js around and am loading smaller avatars for people. some quickpost photos are scaled from gigantic raw uploads so we are optimizing those next to zip things up
Terry 309 avatarTerry 309
It's happening people... they're gonna kill off my favourite character... but he's taking someone else with him *massive spoilers in video*
FakePlasticTree avatarFakePlasticTree
Can I just say that I really dig the intro music for Yakuza 5? It's pumping!
Fuzunga avatarFuzunga
Hmm... yeah, this seems right.
Dreamweaver avatarDreamweaver
Would anyone be willing to help out dear ol' Dreamweaver with Destiny? Need a partner to tackle 7+ matches of Crimson Doubles for that 320 Light Ghost Shell. Will have to work on Comments of the Week first, but will be on later. I suck at the game though.
CoilWhine avatarCoilWhine
I'm not digging Trine too much. It has really screwy controls.
ShadeOfLight avatarShadeOfLight
Sonic the Hedgehog's Twitter account gave dating advice here: http://www.gamesradar.com/dating-advice-real-sonic-hedgehog/ I am now significantly less bitter about Valentine's Day.
absolutfreak avatarabsolutfreak
Tried out The Lost Vikings for the first time in Heroes of the Storm. Lots of fun, but I've got a long way to go before I could consider myself remotely good with them.
Malthor avatarMalthor
Dear Lord, I think I've stumbled over the most bullshit boss fight I've seen in a long time. "Here, let me summon 2-3 mnions each turn. They inflict all of the status effects btw, as do I. Have fun!"
more quickposts


Contest!


Seriously

Invert site colors

  Dark Theme
  Light Theme


Destructoid means family.
Living the dream, since 2006

Pssst. konami code + enter

modernmethod logo



Back to Top


We follow moms on   Facebook  and   Twitter
  Light Theme      Dark Theme
Pssst. Konami Code + Enter!
You may remix stuff our site under creative commons w/@
- Destructoid means family. Living the dream, since 2006 -