Google security engineer Tavis Ormandy has revealed a potential rootkit in Ubisoft's Uplay digital rights management (DRM) software. Uplay, which is bundled with games such as the Assassin's Creed series and Tom Clancy's Ghost Recon titles, is designed as a mechanism to protect Ubisoft's titles from being pirated. Writing on Seclists, Ormandy says he discovered the unexpected behavior in Uplay after installing a copy of Assassin's Creed Revelations.
"I don't know if it's by design, but I thought I'd mention it here in case someone else wants to look into it," says Ormandy. It doesn't appear that the Google security engineer has informed Ubisoft of his findings. Commenters over at Hacker News have published a proof of concept URL that...
Continue reading…
No comments:
Post a Comment