Slashdot Mirror
Street Fighter V Update Installed Hidden Rootkits on PCs (theregister.co.uk)
Capcom's latest update for Street Fighter V was installing a secret rootkit on PCs. An anonymous Slashdot reader quotes The Register:
This means malicious software on the system can poke a dodgy driver installed by Street Fighter V to completely take over the Windows machine. Capcom claims it uses the driver to stop players from hacking...to cheat. Unfortunately, the code is so badly designed, it opens up a full-blown local backdoor... it switches off a crucial security defense in the operating system, then runs whatever instructions are given to it by the application, and then switches the protection back on
Friday Capcom tweeted "We are in the process of rolling back the security measures added to the PC version of Street Fighter V." This prompted one user to reply, "literal rootkits are the opposite of security measures."
Friday Capcom tweeted "We are in the process of rolling back the security measures added to the PC version of Street Fighter V." This prompted one user to reply, "literal rootkits are the opposite of security measures."
Only a fool would install a game made by them after this.
Because people want to play video games..
I know ya'll in the tech industry love to poach employees from other companies... But REALLY Capcom!? Did you have to hire that guy from Sony !?!?
As opposed to figurative rootkits?
#DeleteChrome
You lose!
the code is so badly designed, it opens up a full-blown local backdoor
Sounds like antiviruses: they're supposed to fix problems and filter out malware, but such complex software requires excellent optimized algorithms and code, which unfortunately is still due.
Slashdot, fix the reply notifications... You won't get away with it...
SFV was already a mediocre, overpriced, overhyped and unfinished piece of junk. But this really is the dingleberry on top of the shit sundae.
Sic transit gloria Capcom. They really did make some awesome games in their time, but it seems today they rely on brand name alone to pump out turd after turd.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Well, games on Steam for Linux are not installing stuff with root privileges.
The PC version of SFV has been universally regarded as superior to the PS4 version. In fact, this was the update that supposedly finally brought the PS4 version up to the level of the PC version.
People aren't whining about Capcom trying to stop cheating from happening.
People are rightly complaining that Capcom's attempt to stop cheating from happening placed your computer one step away from being part of a botnet or worse.
-=This sig has nothing to do with my comment. Move along now=-
Why make it hard on yourself? Just re-use your Ashley Madison login.
Il n'y a pas de Planet B.
Cracked software is the only software that has been given an independent in-depth review of its security measures. Buying uncracked software opens your computer to every malice the original author has stooped to in order to seize control of your computer.
And more often than not, the EULA makes it rather hard to get legal recourse for damage intentionally done to your computer. In contrast, a cracker inserting malicious code may go to jail for it.
I'd have liked to finish off this posting with "/s" but there really is no suitable placement for the starting sarcasm tag.
Why make it hard on yourself? Just re-use your Ashley Madison login.
I thought the point of Ashley Madison was to make it hard.
Haha.
Considering the whole mess that PC game was is a half-baked, barely ported console clone, one has to wonder whether that rootkit exists in the console version as well, and whether it can be used to gain control over the system...
Why should rootkits only work against the interests of the person owning... ok, that's saying too much, "being in the possession of" is a better term ... the machine?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
What we need to be doing is getting executives arrested for violating the Computer Fraud and Abuse Act. That awful law has been used to prosecute hackers and hobbyists for much more minor things than this, and has been twisted enough to fit various cases that there's more than enough precedent now.
Capcom made their game and malware to run on the OS their target audience uses. It happened to be Windows but there was nothing to stop it from bring Linux under other circumstances.
Because people want to play video games...
Was does Windows have anything to do with couple of thousands games on Steam(*) that all run on any OS (Windows ; Mac OS X ; Linux) ?
Oh, yeah... "Triple-A games".
The kind of overrated content that rarely gets correct ports (Hi, Ryan Gordon, thank you for being the refreshing exception to this sad rule !), and is the most likely to b0rk your machine due to DRM (You know! Because "AAA" development costs a lot of money, and the "AAA" studios have to protect their revenue. By completely fucking the experience of their paying customer base).
If anything, today's DRM example is a big argument of why people should prefer the PirateBay version, and why I've personally downloaded cracks for any DRMed game that I've bought.
----
(*) : I know that Steam also uses some forms of DRM, but we have yet to have a FA on /. titled "Steam's own DRM causes a massive backdoor on all computers"
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
But Street Fighter V is available on Linux
Twinstiq, game news
And not to mention consoles. I have a Linux PC but not a very powerful GPU so I play games on consoles. Works fine.
Twinstiq, game news
Where is the intrepid prosecutor that throws them all in jail?
Oh, wait, the US police state does not do that to representatives of companies, because they might be able to fight back. Better to only do it to individuals that cannot defend themselves...
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Actually, in countries with a working legal system, this _is_ a criminal offense. The problem is that the legal profession is so far behind the times (and never understood how reality works anyways) that criminals like Capcom will go free.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
I doubt that. Massive screw-ups like these are usually a team effort. You know, "engineers" that cannot explain the feature well or do not really understand it themselves, "managers" that make decisions without a clue about what they decide on, and so on. I have seen this numerous times in action. It is really quite fascinating to watch how dysfunctional most/all corporate decision-making processes are in large corporations.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
http://steamcommunity.com/grou...
Didn't know since I just game on console. With all the problems PC ports have anyway I find it too frustrating to play on that platform.
Twinstiq, game news
Because a Linux PC with an inexperienced user willing to run a game or dancing pig animation as root is every bit as bad as a Windows PC whose user will click 'yes' for any UAC prompt... maybe *worse*.
The only thing I wanna see is if this will result in a class action lawsuit like what happened in Sony's case back... in the 90s was it?
It'll say something about the current state of forgiveness for huge screw ups in this day and age of broken games and gamers being used as beta or alpha testers of new releases.
I'd rather just pay an extra 50 cents to continue than spend two days reinstalling windows and all my software.
God spoke to me
This sounds like another instance of proprietary malware to add to the list. And nobody should trust a proprietor to "roll back" their malware (just as some of the Twitter.com followups suggest), regardless of whether they say this was a mistake. There's no reason to trust unvettable, uncorrectable, unsharable code and there's no reason why people should have to live with months-old backdoors while the only programmers allowed to inspect or fix the code apparently don't fix that code.
Digital Citizen
This is a computer crime, bar none. No shades of grey here. So why aren't companies that pull this shit getting raided by the authorities and people being frog marched out of the offices in handcuffs? No too long ago, from what I heard, a student was facing serious prison time for tampering with a school's master calendar, yet these companies are damaging computer systems by the millions and at worst they face a lame lawsuit that they just write off as the cost of doing business. I am sick of it. And these same companies want to lock down, SECUREBOOT,and drm and fucking mummify everything so there is zero freedom to do anything without their blessing. Fuck this shit. If they law does not apply to them, it should not apply to me either. Maybe i should go and fuck their shit up, and get everyone else to do the same. Hak, crak and PIRATE! BANZAI!!!!!!!!
No, that's viagra spammers.
True - I stand corrected, or is that erected?
In a lot of countries the EULA is not valid if you can't see it before you buy the software!
Even then : the law goes above every EULA.
Besides the point that steam-games on Linux get installed as user and not with root privileges?
Sure the software could ask for root, but the password prompt would ring alarms instantly
First, the idea of "meeting of the minds" is an old common law concept that strongly influences how contract law works in the U.S., but it is not used in the U.S. the way it used to be--partially because of jokers like you.
Second, the idea of "meeting of the minds" does not mean what you think it means. It implies that a valid contract requires mutual intent and understanding. There are three situations where a meeting of the minds does not occur under reasonable circumstances, and so a contract doesn't exist: 1) two guys vaguely agree to something, but their promises leave out too many specific details to be reasonably enforced, 2) two guys agree to certain terms, one of those terms is ambiguous, both guys didn't notice the ambiguity and reasonably thought they believed it meant two different, incompatible things, or 3) one guy is in a coma, or black out drunk, and the other guy puts a pen in his hand, and has him sign a contract.
No court that I know of has ever bought your whole argument that "I said all the words and performed all the actions that a reasonable person would interpret to be assent to the terms being offered in order to trick you into performing your part of the contract, but secretly I had my fingers crossed behind my back, so there was no actual contract. Haha I win!" From my own moderate sample size, I can tell you that around that point, the other side moves for a directed verdict and usually gets it. Also, once when the judge was feeling particularly grumpy, the case was referred to criminal court to determine whether any criminal fraud was committed.
I sincerely hope that you learned contract law from poorly written blog posts. If you actually paid some degree-mill to teach you what you just vomited here, I would recommend demanding a refund. Don't hold your breath, though. When they agreed to accept your tuition, promising to teach you law in exchange, they probably said "Not!" after you left the room. Which, according to you, means there wasn't actually a valid contract to begin with.
What we need to be doing is getting executives arrested for violating the Computer Fraud and Abuse Act. That awful law has been used to prosecute hackers and hobbyists for much more minor things than this, and has been twisted enough to fit various cases that there's more than enough precedent now.
Ya, I can see the CFAA being used against a user who bypassing the company's root kit.
Street Fighter IV was well regarded in not needing a high end PC or GPU, I think.
On the other hand, PC version of Street Fighter II was unspeakable, but it was the tail end of rip off arcade conversions made by contractors for atari/amstrad/commodore/amiga etc., quite some time ago. So.. you get a 16 bit computer version with the beautiful backgrounds and characters, but they're turned into drunk paper dolls that jump higher that the depth of the screen and the controls are designed for a single button joystick (!), not that the game would have been playable anyway.
THAT is a PC port that sucks! I remember trying Halo 2 and thinking it looked like crap and ran like a dog (because on PC if you wanted those graphics you could play Quake 2 and run at 60 fps on a 400MHz CPU), but the game otherwise worked like intended.
Rip off games of the 80s and 90s were as if you wanted to play a game of chess, but the pawns are on the top most and bottom most ranks, you're in check when the game starts, and there are illegal moves such as nonsensical castling all over the place.
(correction : it was Halo 1, delayed Windows version. Looked bland without pixel shaders, and the textures were low res. Perhaps it would have been more fun on the original Xbox)