Personal computing discussed

Moderators: renee, Hoser

 
Arclight
Gerbil Elite
Topic Author
Posts: 768
Joined: Tue Feb 01, 2011 3:50 am

Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:34 pm

Hello fellow TR forumists,

Recently i received an invite for participating in the Warface closed beta. After going through the usual stuff of setting up a username and confirming e-mail i reached a point where i was asked to install a plug in for the browser (currently it only supports Chrome and firefox afaik) and to my surprise it asked me to allow it to have access to all my browsing history and all the data on my HDD.

<<<<<<<<<<Click for screenshot/hosted on imgur>>>>>>>>>>>>

Isn't that a SPYWARE or am i wrong?

Please discuss bellow.

Background information
Warface is a upcoming first person shooter, free to play game which is developed by Crytek Kiev. It uses the Cryengine 3 and it will have closed maps, as far as i can tell and probably no vehicles. It will try to target CoD fans with a simillar style of play but better graphics and a few features specific to games like Crysis. Here is a video of the gameplay
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
 
Waco
Maximum Gerbil
Posts: 4850
Joined: Tue Jan 20, 2009 4:14 pm
Location: Los Alamos, NM

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:36 pm

There's no chance I'd let that install on my machines. Some profiling? Sure. All browsing history and all HDD storage? Not a chance.
Victory requires no explanation. Defeat allows none.
 
Arvald
Gerbil Elite
Posts: 761
Joined: Tue Sep 27, 2011 12:14 pm
Location: Gerbil-land, Canada

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:43 pm

you see the same on phone apps... devs get lazy and just ask for 100% access.

Likely they want a directory on the HDD to run the game data from
 
SuperSpy
Minister of Gerbil Affairs
Posts: 2403
Joined: Thu Sep 12, 2002 9:34 pm
Location: TR Forums

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:48 pm

Yeah, either the devs are lazy or they really are malicious and are hoping normal users won't notice.

Either way I wouldn't let it install. :wink:
Desktop: i7-4790K @4.8 GHz | 32 GB | EVGA Gefore 1060 | Windows 10 x64
Laptop: MacBook Pro 2017 2.9GHz | 16 GB | Radeon Pro 560
 
auxy
Graphmaster Gerbil
Posts: 1300
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:50 pm

Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)
 
Captain Ned
Global Moderator
Posts: 28704
Joined: Wed Jan 16, 2002 7:00 pm
Location: Vermont, USA

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 2:53 pm

auxy wrote:
Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)

Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.

http://feross.org/fill-disk/
What we have today is way too much pluribus and not enough unum.
 
auxy
Graphmaster Gerbil
Posts: 1300
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 3:05 pm

Captain Ned wrote:
http://feross.org/fill-disk/
Eheh, well, that doesn't require a permission. If they wanted to do that, they could just do it! (;´Д`)

There's a reason I don't use Chrome, tho. ┐( ̄ヮ ̄)┌
 
MadManOriginal
Gerbil Jedi
Posts: 1533
Joined: Wed Jan 30, 2002 7:00 pm
Location: In my head...

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 6:45 pm

Captain Ned wrote:
auxy wrote:
Yah -- that Chrome permission amounts to "write to the hard drive without the rest of Chrome being involved"; in other words, without downloading a file -- so it's *probably* not as sinister as it seems. Crytek is a reliable and fairly honest company -- but I probably wouldn't install it either. (;゙°´ω°´)

Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.

http://feross.org/fill-disk/


It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?
 
Captain Ned
Global Moderator
Posts: 28704
Joined: Wed Jan 16, 2002 7:00 pm
Location: Vermont, USA

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 6:49 pm

MadManOriginal wrote:
It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?

Um, the OP was using Chrome and I was merely pointing out that this could be an exploit of the HTML5 local storage bug.
What we have today is way too much pluribus and not enough unum.
 
ludi
Lord High Gerbil
Posts: 8646
Joined: Fri Jun 21, 2002 10:47 pm
Location: Sunny Colorado front range

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 6:55 pm

At the risk of pointing out the obvious...it's a browser-based application that apparently uses install files on the local hard disk. In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.

How/when/why the application will attempt to do so is another question entirely, at which point you have to decide whether or not you trust the publisher.
Abacus Model 2.5 | Quad-Row FX with 256 Cherry Red Slider Beads | Applewood Frame | Water Cooling by Brita Filtration
 
auxy
Graphmaster Gerbil
Posts: 1300
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Fri Mar 15, 2013 7:07 pm

MadManOriginal wrote:
It affects Chrome, Safari and IE according to the page you linked. Did you not read the page, or do you just hope that people don't read links?
How rude. You don't have to leap to the defense of your favorite products when you assume someone else is attacking them. That's called fanboyism. (≧σ≦)
That said, in his defense...
Captain Ned wrote:
Sounds like someone may be posing as Crytek to take advantage of the HTML5 local storage bug that Chrome hasn't closed yet.
Read quickly, it's easy to assume you're implying it's a bug in Chrome rather than the larger vulnerability. I know you're not, but it's an easy mistake to make. I read it as "this is a bug that Chrome has", rather than "this is a Chrome bug", so I didn't have a problem with it, but someone less rational than me -- :looks at MMO: (;¬_¬) -- might not read it correctly.
This kind of semantic nonsense is what happens when people are way too sensitive about other people's implications -- if you take everything at face value like I do, life is much simpler and communication works much better.(*^∇゜)v
ludi wrote:
In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.
This is a good point! Gold star for you.
(ノ・ェ・)ノ⌒
 
Arclight
Gerbil Elite
Topic Author
Posts: 768
Joined: Tue Feb 01, 2011 3:50 am

Re: Warface (closed beta) is actually a spyware?

Sat Mar 16, 2013 2:28 am

ludi wrote:
At the risk of pointing out the obvious...it's a browser-based application that apparently uses install files on the local hard disk. In the broadest sense, it can access all data on the computer, and it can access your browser history. But so can Steam and quite a few other applications that use browser integration, and the fact that we're not used to thinking about it that way is more of an indictment of the Windows security model than of Crytek.

How/when/why the application will attempt to do so is another question entirely, at which point you have to decide whether or not you trust the publisher.


Wait what? I thought Steam's access to local files only extended to hardware configuration. Have i been living a lie? Sure it might have the capability of accessing everything but just as well it should be stated in the TOS (or EULA?) that they would not use Steam for such purposes or otherwise they would face legal action. Was i wrong this whole time?
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
 
auxy
Graphmaster Gerbil
Posts: 1300
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Sat Mar 16, 2013 9:02 pm

Arclight wrote:
Wait what? I thought Steam's access to local files only extended to hardware configuration. Have i been living a lie? Sure it might have the capability of accessing everything but just as well it should be stated in the TOS (or EULA?) that they would not use Steam for such purposes or otherwise they would face legal action. Was i wrong this whole time?
:lol: Are you serious?!

Any application software that runs locally can do anything it wants to your PC, and it doesn't have to tell you, and you didn't have to agree to it. Most EULA include a line or two mentioning that anything the software does to your PC is not the creator's fault, meaning you don't even have legal recourse if their program breaks your PC.
 
Arclight
Gerbil Elite
Topic Author
Posts: 768
Joined: Tue Feb 01, 2011 3:50 am

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 1:35 am

auxy wrote:
Any application software that runs locally can do anything it wants to your PC, and it doesn't have to tell you, and you didn't have to agree to it. Most EULA include a line or two mentioning that anything the software does to your PC is not the creator's fault, meaning you don't even have legal recourse if their program breaks your PC.


I'm not talking about modifying other local files and/or breaking the PC. I'm talking about that software being used as a spyware, surely there must be rules laws against it, right?
nVidia video drivers FAIL, click for more info
Disclaimer: All answers and suggestions are provided by an enthusiastic amateur and are therefore without warranty either explicit or implicit. Basically you use my suggestions at your own risk.
 
cheesyking
Minister of Gerbil Affairs
Posts: 2756
Joined: Sun Jan 25, 2004 7:52 am
Location: That London (or so I'm told)
Contact:

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 4:35 am

No one has mentioned Ubisoft yet?

Just look at what happened when they tried to do something similar. Their plugin allowed anyone to remotely read, write and execute whatever they wanted on your local machine.

Browser plugins are bad M'Kay
Fernando!
Your mother ate my dog!
 
jihadjoe
Gerbil Elite
Posts: 835
Joined: Mon Dec 06, 2010 11:34 am

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 5:04 am

^ I'd extend that to DRM programs are bad.
I'm not installing any of that crap on my main box, not even Steam.
 
JustAnEngineer
Gerbil God
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 5:35 am

You're missing out on a lot of great games if you're not willing to use Steam. This is especially true during their big sales.
· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
wiak
Gerbil
Posts: 33
Joined: Tue Jun 15, 2004 2:52 pm

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 12:06 pm

well any real game install will have to have full access, why? how else can they have full access sound, graphics card, etc?

when i say real i mean any game you buy in store that are high quality graphics in them
Crysis Series, Half-Life Series, Left 4 Dead etc all use full access to system unless the user is restricted to standard user not admin

so basicly this game will have to talk to the chrome plugin outside chrome
My Blog nwgat.ninja <3 My Rig overclock.net
 
auxy
Graphmaster Gerbil
Posts: 1300
Joined: Sat Jan 19, 2013 4:25 pm
Location: the armpit of Texas

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 3:39 pm

jihadjoe wrote:
^ I'd extend that to DRM programs are bad.
I'm not installing any of that crap on my main box, not even Steam.
I object a little to the characterization of Steam as a "DRM program", even though in the literal sense, that's what it is. \(°o°;)

It's also so much more than that, though; it's a chat service, a news service, an auto-updater (remember Fileplanet.com? there's a reason it stopped being relevant) and a community resource, not to mention a handy-dandy game launcher. You can even add your non-steam games to Steam, just so you have all your games in one place! ヾ(@°▽°@)ノ

I hate DRM as much as the next anti-DRM zealot -- NeelyCam pissed me off so much in a comment thread the other night with his pro-DRM trolling that I told him to "go and die" -- but the DRM functions of Steam aren't restrictive and don't impact anything else you do with the machine.
 
JustAnEngineer
Gerbil God
Posts: 19673
Joined: Sat Jan 26, 2002 7:00 pm
Location: The Heart of Dixie

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 4:13 pm

auxy wrote:
You can even add your non-steam games to Steam, just so you have all your games in one place!
I do it so that my Steam friends can see that I'm currently playing Guild Wars 2.
· R7-5800X, Liquid Freezer II 280, RoG Strix X570-E, 64GiB PC4-28800, Suprim Liquid RTX4090, 2TB SX8200Pro +4TB S860 +NAS, Define 7 Compact, Super Flower SF-1000F14TP, S3220DGF +32UD99, FC900R OE, DeathAdder2
 
ULYXX
Gerbil
Posts: 19
Joined: Fri Mar 23, 2012 1:06 am

Re: Warface (closed beta) is actually a spyware?

Sun Mar 17, 2013 4:25 pm

SuperSpy wrote:
Yeah, either the devs are lazy or they really are malicious and are hoping normal users won't notice.

Either way I wouldn't let it install. :wink:


I just found the subject topic of the thread, your posting and username amusing. :D

Who is online

Users browsing this forum: Google [Bot] and 1 guest
GZIP: On