Ubisoft’s Uplay DRM (Digital Rights Management) system appears to have been hacked open, and – interestingly – the service appears to contain some kind of remote launching tool.
The news is currently flying around the internet, along with proofs of concept that – in one case – shows how a website can open up the Uplay client on your computer, and potentially other software within the security limits of the browser used.
“Ubisoft installs a backdoor that allows any website to take over your computer,” claims the report. “The Sony BMG rootkit was also DRM and required product recall when it was discovered.”
There are a lot of Uplay-required games out there from Ubisoft, including the aforementioned adventure series, Driver San Francisco, Just Dance 3 and Ghost Recon: Future Soldier.
Naturally this doesn’t affect console games, and appears to (at least from a brief look) need Internet Explorer and Windows, but it does appear to be gaining attention rapidly.
Plug-ins can be disabled from within your browser.