EA's Origin Vulnerable to Remote Execution

EA always wants to maintain ownership of the products it sells. Typical that, in their greed, they'd forget to protect the clients they also want to exploit.
 
That video doesn't really show anything.

I'll just go ahead with my sarcastic remark:
Game programmers aren't exactly known for bug free secure code
 
What happened to the good ol' days, where if someone announced they'd be talking about a security exploit the company would jump to it and threaten DMCA violations, lawsuits, and jail time against the person.
 
sfsuphysics said:
What happened to the good ol' days, where if someone announced they'd be talking about a security exploit the company would jump to it and threaten DMCA violations, lawsuits, and jail time against the person.
Click to expand...

Or...actually fix it?
 
jpm100 said:
Which just speaks to the notion of not wanting multiple clients on my machine. I have no problem with EA selling through Origin. Just with selling online only through Origin.
Click to expand...

Steam does the same thing.

There should be no DRM clients at all.
 
Down with steam, down with origin, down with skype, down with umm instagram
 
jpm100 said:
Which just speaks to the notion of not wanting multiple clients on my machine. I have no problem with EA selling through Origin. Just with selling online only through Origin.
Click to expand...

I don't like multiple clients on my machine. Mostly because I have a few (GFWL, Steam, Origin, GameFly) that have different games. It's hard to sort through them all to figure out what game is where. I have the majority on Steam, about 6-7 on Origin, a couple on GF, and GFWL I have the AoE series (cost me a dime!).

Don't really mind Origin or GFWL, but Steam is better executed.
 
Dion said:
Steam does the same thing.

There should be no DRM clients at all.
Click to expand...

Which isn't going to happen for new games in any quantity anytime this century. Granted there are a few exceptions who depend on being an exception to get themselves attention. But closest thing to DRM-less client system was D2D. And even then only half their games were truly sold in a way you could backup and not need D2D anymore. The otherhalf required special authentication for every install. And most of their stuff was laced with old school DRM like Securom and Starforce, etc.

D2D went out of business. You have GoG which with few exceptions is borderline abandonware.
 
That exploit is as good as the UPlay exploit. You can alter the code slightly to format someone's hard drive with it. Wonder how long until it is fixed.
 
Ur_Mom said:
I don't like multiple clients on my machine. Mostly because I have a few (GFWL, Steam, Origin, GameFly) that have different games. It's hard to sort through them all to figure out what game is where. I have the majority on Steam, about 6-7 on Origin, a couple on GF, and GFWL I have the AoE series (cost me a dime!).

Don't really mind Origin or GFWL, but Steam is better executed.
Click to expand...

What do you find so bad about Steam? I only have Steam right now mainly because of what you mentioned, what game where and having to find it.
I am 99% OK with the way Valve is doing DRM. The only part I have issue with is if I buy a game at full price I should be able to sell it or do whatever I want with it. The games I buy for $5 I have no problem that I'm stuck with them.
 
Dion said:
Steam does the same thing.

There should be no DRM clients at all.
Click to expand...

Not going to happen with AAA titles. And to be honest, I can understand why these companies want DRM, they just need to find a better way of implementing it (always online isn't the right way)

I'm sure most of us know that person who would do stuff like buying a copy of DRM-less game, share it with others and split the cost. People would do anything to get cheap legit copy of a games.

Of course there are benefits of no DRM too, it's just that it is prone to absue. There's no any one single solution that works for all situation. But I believe DRM-less works better for smaller indie devs where most people would have no problem buying a game for themself, be it because of its lower price or out of support for indie devs.

I don't think it will work for AAA titles.
 
Was it just rumor, or were people getting their accounts hacked through gravatar a while back?


Posted from Hardforum.com App for Android
 
So what? They are showing a firefox vulnerability on windows XP. Did you think either were not the best candidates for such a garbage demonstration?

Lame...
 
Dion said:
Steam does the same thing.

There should be no DRM clients at all.
Click to expand...

I have several questions about these "game clients" -- if that's the correct term . The ones I'm curious about aren't the real nasty outliers that most gamers avoid, but the more common ones mentioned in this thread such as Steam that many of you use.

Do they require execution with elevated privileges, install system services, require open ports on firewalls, or -- god forbid -- install kernel-mode drivers?

I'm ignorant when it comes to modern PC gaming (the last game I played seriously was distributed on "high-density" floppy disks). I'm trying to inform myself of how PC gaming in 2013 works, for reasons which I'll explain later if anyone cares. Maybe I should've created a new thread.
 
So, the malicious code requires you to run Firefox and attempt to start EA games from the browser window?
 
You must log in or register to reply here.
Back
Top