Warface (closed beta) is actually a spyware?

How we justify all that high-dollar hardware.

Moderator: Hoser

Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:34 pm

Hello fellow TR forumists,

Recently i received an invite for participating in the Warface closed beta. After going through the usual stuff of setting up a username and confirming e-mail i reached a point where i was asked to install a plug in for the browser (currently it only supports Chrome and firefox afaik) and to my surprise it asked me to allow it to have access to all my browsing history and all the data on my HDD.

<<<<<<<<<<Click for screenshot/hosted on imgur>>>>>>>>>>>>

Isn't that a SPYWARE or am i wrong?

Please discuss bellow.

Background information
Warface is a upcoming first person shooter, free to play game which is developed by Crytek Kiev. It uses the Cryengine 3 and it will have closed maps, as far as i can tell and probably no vehicles. It will try to target CoD fans with a simillar style of play but better graphics and a few features specific to games like Crysis. Here is a video of the gameplay
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
Arclight
Gerbil Elite
 
Posts: 695
Joined: Tue Feb 01, 2011 3:50 am

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:36 pm

There's no chance I'd let that install on my machines. Some profiling? Sure. All browsing history and all HDD storage? Not a chance.
Z68XP-UD4 | 2700K @ 4.4 GHz | 16 GB | 770 | PCP&C Silencer 950 | XSPC RX360 | Heatkiller R3 | D5 + RP-452X2 | HAF 932 | 1 TB WD Black w/ SRT
Waco
Gerbil Elite
 
Posts: 743
Joined: Tue Jan 20, 2009 4:14 pm

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:43 pm

you see the same on phone apps... devs get lazy and just ask for 100% access.

Likely they want a directory on the HDD to run the game data from
Arvald
Gerbil XP
Silver subscriber
 
 
Posts: 337
Joined: Tue Sep 27, 2011 12:14 pm
Location: Gerbil-land, Canada

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:48 pm

Yeah, either the devs are lazy or they really are malicious and are hoping normal users won't notice.

Either way I wouldn't let it install. :wink:
Desktop: FX-8350 | 32 GB | XFX Radeon 6950 | Windows 7 x64
Laptop: i7 740QM | 12 GB | Mobility Radeon 5850 | Windows 8.1.1.1.1 x64
SuperSpy
Gerbil Jedi
Gold subscriber
 
 
Posts: 1550
Joined: Thu Sep 12, 2002 9:34 pm
Location: TR Forums

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:50 pm

Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)
i5-3570K @ 4.4 (NH-C14), 4x8GB DDR3-1866, GA-Z68MA-D3H-B2, ASUS GTXTITAN-6GD5, 128GB Vertex 4 / 2x60GB Vertex Plus R2 / 2x2TB Barracuda 7200.14 RAID0 / ANS-9010 (4x4GB), SST-DA1000 (PSU), 2x VS229H-P, 1x VG248QE, 1x MIMO 720F, Corsair Vengeance K90+M95
auxy
Gerbil Elite
 
Posts: 781
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 2:53 pm

auxy wrote:Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)

Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.

http://feross.org/fill-disk/
It is one of the blessings of old friends that you can afford to be stupid with them. Ralph Waldo Emerson.
Captain Ned
Global Moderator
Gold subscriber
 
 
Posts: 20119
Joined: Wed Jan 16, 2002 7:00 pm
Location: Vermont, USA

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 3:05 pm

Captain Ned wrote:http://feross.org/fill-disk/
Eheh, well, that doesn't require a permission. If they wanted to do that, they could just do it! (;´Д`)

There's a reason I don't use Chrome, tho. ┐( ̄ヮ ̄)┌
i5-3570K @ 4.4 (NH-C14), 4x8GB DDR3-1866, GA-Z68MA-D3H-B2, ASUS GTXTITAN-6GD5, 128GB Vertex 4 / 2x60GB Vertex Plus R2 / 2x2TB Barracuda 7200.14 RAID0 / ANS-9010 (4x4GB), SST-DA1000 (PSU), 2x VS229H-P, 1x VG248QE, 1x MIMO 720F, Corsair Vengeance K90+M95
auxy
Gerbil Elite
 
Posts: 781
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 6:45 pm

Captain Ned wrote:
auxy wrote:Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)

Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.

http://feross.org/fill-disk/


It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?
MadManOriginal
Graphmaster Gerbil
 
Posts: 1404
Joined: Wed Jan 30, 2002 7:00 pm
Location: In my head...

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 6:49 pm

MadManOriginal wrote:It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?

Um, the OP was using Chrome and I was merely pointing out that this could be an exploit of the HTML5 local storage bug.
It is one of the blessings of old friends that you can afford to be stupid with them. Ralph Waldo Emerson.
Captain Ned
Global Moderator
Gold subscriber
 
 
Posts: 20119
Joined: Wed Jan 16, 2002 7:00 pm
Location: Vermont, USA

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 6:55 pm

At the risk of pointing out the obvious...it's a browser-based application that apparently uses install files on the local hard disk. In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.

How/when/why the application will attempt to do so is another question entirely, at which point you have to decide whether or not you trust the publisher.
He who laughs last, laughs first next time.
ludi
Gerbil Elder
 
Posts: 5410
Joined: Fri Jun 21, 2002 10:47 pm
Location: Sunny Colorado front range

Re: Warface (closed beta) is actually a spyware?

Postposted on Fri Mar 15, 2013 7:07 pm

MadManOriginal wrote:It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?
How rude. You don't have to leap to the defense of your favorite products when you assume someone else is attacking them. That's called fanboyism. (≧σ≦)
That said, in his defense...
Captain Ned wrote:Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.
Read quickly, it's easy to assume you're implying it's a bug in Chrome rather than the larger vulnerability. I know you're not, but it's an easy mistake to make. I read it as "this is a bug that Chrome has", rather than "this is a Chrome bug", so I didn't have a problem with it, but someone less rational than me -- :looks at MMO: (;¬_¬) -- might not read it correctly.
This kind of semantic nonsense is what happens when people are way too sensitive about other people's implications -- if you take everything at face value like I do, life is much simpler and communication works much better.(*^∇゜)v
ludi wrote: In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.
This is a good point! Gold star for you.
(ノ・ェ・)ノ⌒
i5-3570K @ 4.4 (NH-C14), 4x8GB DDR3-1866, GA-Z68MA-D3H-B2, ASUS GTXTITAN-6GD5, 128GB Vertex 4 / 2x60GB Vertex Plus R2 / 2x2TB Barracuda 7200.14 RAID0 / ANS-9010 (4x4GB), SST-DA1000 (PSU), 2x VS229H-P, 1x VG248QE, 1x MIMO 720F, Corsair Vengeance K90+M95
auxy
Gerbil Elite
 
Posts: 781
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Postposted on Sat Mar 16, 2013 2:28 am

ludi wrote:At the risk of pointing out the obvious...it's a browser-based application that apparently uses install files on the local hard disk. In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.

How/when/why the application will attempt to do so is another question entirely, at which point you have to decide whether or not you trust the publisher.


Wait what? I thought Steam's access to local files only extended to hardware configuration. Have i been living a lie? Sure it might have the capability of accessing everything but just as well it should be stated in the TOS (or EULA?) that they would not use Steam for such purposes or otherwise they would face legal action. Was i wrong this whole time?
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
Arclight
Gerbil Elite
 
Posts: 695
Joined: Tue Feb 01, 2011 3:50 am

Re: Warface (closed beta) is actually a spyware?

Postposted on Sat Mar 16, 2013 9:02 pm

Arclight wrote:Wait what? I thought Steam's access to local files only extended to hardware configuration. Have i been living a lie? Sure it might have the capability of accessing everything but just as well it should be stated in the TOS (or EULA?) that they would not use Steam for such purposes or otherwise they would face legal action. Was i wrong this whole time?
:lol: Are you serious?!

Any application software that runs locally can do anything it wants to your PC, and it doesn't have to tell you, and you didn't have to agree to it. Most EULA include a line or two mentioning that anything the software does to your PC is not the creator's fault, meaning you don't even have legal recourse if their program breaks your PC.
i5-3570K @ 4.4 (NH-C14), 4x8GB DDR3-1866, GA-Z68MA-D3H-B2, ASUS GTXTITAN-6GD5, 128GB Vertex 4 / 2x60GB Vertex Plus R2 / 2x2TB Barracuda 7200.14 RAID0 / ANS-9010 (4x4GB), SST-DA1000 (PSU), 2x VS229H-P, 1x VG248QE, 1x MIMO 720F, Corsair Vengeance K90+M95
auxy
Gerbil Elite
 
Posts: 781
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 1:35 am

auxy wrote:Any application software that runs locally can do anything it wants to your PC, and it doesn't have to tell you, and you didn't have to agree to it. Most EULA include a line or two mentioning that anything the software does to your PC is not the creator's fault, meaning you don't even have legal recourse if their program breaks your PC.


I'm not talking about modifying other local files and/or breaking the PC. I'm talking about that software being used as a spyware, surely there must be rules laws against it, right?
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
Arclight
Gerbil Elite
 
Posts: 695
Joined: Tue Feb 01, 2011 3:50 am

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 4:35 am

No one has mentioned Ubisoft yet?

Just look at what happened when they tried to do something similar. Their plugin allowed anyone to remotely read, write and execute whatever they wanted on your local machine.

Browser plugins are bad M'Kay
Fernando!
Your mother ate my dog!
cheesyking
Minister of Gerbil Affairs
 
Posts: 2246
Joined: Sun Jan 25, 2004 7:52 am
Location: That London (or so I'm told)

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 5:04 am

^ I'd extend that to DRM programs are bad.
I'm not installing any of that crap on my main box, not even Steam.
jihadjoe
Gerbil Team Leader
 
Posts: 248
Joined: Mon Dec 06, 2010 11:34 am

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 5:35 am

You're missing out on a lot of great games if you're not willing to use Steam. This is especially true during their big sales.
i7-4770K, H70, Gryphon Z87, 16 GiB, R9-290, SSD, 2 HD, Blu-ray, SB ZX, TJ08-E, SS-660XP², 3007WFP+2001FP, RK-9000BR, MX518
JustAnEngineer
Gerbil God
Gold subscriber
 
 
Posts: 15343
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 12:06 pm

well any real game install will have to have full access, why? how else can they have full access sound, graphics card, etc?

when i say real i mean any game you buy in store that are high quality graphics in them
Crysis Series, Half-Life Series, Left 4 Dead etc all use full access to system unless the user is restricted to standard user not admin

so basicly this game will have to talk to the chrome plugin outside chrome
AMD Phenom II X4 965 Black Edition C3 125W, GA-MA790FXT-UD5P, HD 5870 1GB GDDR5, OCZ Gold XTC 4GB 1600mhz @1333mhz 7-7-7-18 Dual Channel (2x2GB), VelociRaptor 150GB , Corsair 620HX 620W, Windows 7 Home Premium 64-bit
wiak
Gerbil
 
Posts: 30
Joined: Tue Jun 15, 2004 2:52 pm

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 3:39 pm

jihadjoe wrote:^ I'd extend that to DRM programs are bad.
I'm not installing any of that crap on my main box, not even Steam.
I object a little to the characterization of Steam as a "DRM program", even though in the literal sense, that's what it is. \(°o°;)

It's also so much more than that, though; it's a chat service, a news service, an auto-updater (remember Fileplanet.com? there's a reason it stopped being relevant) and a community resource, not to mention a handy-dandy game launcher. You can even add your non-steam games to Steam, just so you have all your games in one place! ヾ(@°▽°@)ノ

I hate DRM as much as the next anti-DRM zealot -- NeelyCam pissed me off so much in a comment thread the other night with his pro-DRM trolling that I told him to "go and die" -- but the DRM functions of Steam aren't restrictive and don't impact anything else you do with the machine.
i5-3570K @ 4.4 (NH-C14), 4x8GB DDR3-1866, GA-Z68MA-D3H-B2, ASUS GTXTITAN-6GD5, 128GB Vertex 4 / 2x60GB Vertex Plus R2 / 2x2TB Barracuda 7200.14 RAID0 / ANS-9010 (4x4GB), SST-DA1000 (PSU), 2x VS229H-P, 1x VG248QE, 1x MIMO 720F, Corsair Vengeance K90+M95
auxy
Gerbil Elite
 
Posts: 781
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 4:13 pm

auxy wrote: You can even add your non-steam games to Steam, just so you have all your games in one place!
I do it so that my Steam friends can see that I'm currently playing Guild Wars 2.
i7-4770K, H70, Gryphon Z87, 16 GiB, R9-290, SSD, 2 HD, Blu-ray, SB ZX, TJ08-E, SS-660XP², 3007WFP+2001FP, RK-9000BR, MX518
JustAnEngineer
Gerbil God
Gold subscriber
 
 
Posts: 15343
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Warface (closed beta) is actually a spyware?

Postposted on Sun Mar 17, 2013 4:25 pm

SuperSpy wrote:Yeah, either the devs are lazy or they really are malicious and are hoping normal users won't notice.

Either way I wouldn't let it install. :wink:


I just found the subject topic of the thread, your posting and username amusing. :D
ULYXX
Gerbil
 
Posts: 19
Joined: Fri Mar 23, 2012 1:06 am


Return to Gaming

Who is online

Users browsing this forum: No registered users and 4 guests