Installa Steam
Accedi
|
Lingua
简体中文 (cinese semplificato)
繁體中文 (cinese tradizionale)
日本語 (giapponese)
한국어 (coreano)
ไทย (tailandese)
Български (bulgaro)
Čeština (ceco)
Dansk (danese)
Deutsch (tedesco)
English (inglese)
Español - España (spagnolo - Spagna)
Español - Latinoamérica (spagnolo dell'America Latina)
Ελληνικά (greco)
Français (francese)
Indonesiano
Magyar (ungherese)
Nederlands (olandese)
Norsk (norvegese)
Polski (polacco)
Português (portoghese - Portogallo)
Português - Brasil (portoghese brasiliano)
Română (rumeno)
Русский (russo)
Suomi (finlandese)
Svenska (svedese)
Türkçe (turco)
Tiếng Việt (vietnamita)
Українська (ucraino)
Segnala un problema nella traduzione
Just wait a few days until exploit is beign fixed.
If you are too paranoid about it, just uninstall the game until devs finish the patch.
Cheers
Agreed. The developer is working on it. (Finally. Took the better part of a decade and some very public shaming to get their gears in motion, but it's happening nonetheless.) So just give them time and go play something else in the mean time.
This vulnerability cannot be abused when the game is not running.
I love how people are quick to resort to labeling an inquiry over your legal rights wrt software that is defective (has a massive security vulnerability making the multiplayer component unsafe for use) as "drama."
Can we coin that behavior somehow?
'Reverse entitlement' maybe?
Fact of the matter is: this is a totally sane question to pose if you're at least somewhat familiar with Bandai Namco's track record wrt patching these type of issues.
Just to remind everyone:
The entire Dark Souls series - DS 1; 2 and 3 has had prior RCE-vulnerabilities. In fact; the entire series still has all those RCE-vulnerabilities up to this day. Bandai Namco never bothered patching them. Instead, players had to resort to third-party mods that try to detect cheaters and try to detect malicious crafted network data before it can exploit the vulnerabilities. (Yes; modders had to build not just their own rudimentary anti-cheat; but also something of a specific anti-virus for these games. It's preposterous.)
The news that did the rounds on Twitter is about a new RCE-vulnerability, separate from the other ones. Easier to make use of, and apparently less constrained (and thus more dangerous) in what it can actually do.
Bandai Namco has known about these prior vulnerabilities for literally years and did nothing. The white-hat who discovered this new RCE had directly reported their findings to Bandai Namco and again: they did nothing. (Allegedly didn't even contact them back with a basic acknowledgement or dismissal.)
Bandai Namco only acted in taking down the servers for patching when the white-hat in question had arranged to have this new RCE exploited live-on-stream on Twitch for a mainstream audience to see with a streamer of some repute. Because then the cat was out of the bag and their hand was forced.
You want drama?
The drama here is Bandai Namco knowingly selling ticking time-bombs to people and getting fat off of it.
From a purely formalistc point of view, you're right. But when formalism & reality disagree, reality is right.
That honestly made me laugh out loud.
I only brought that up because well, it's the complete answer I could give.
It doesn't mean of course it SHOULD be used. It's just theer if things went truly pear-shaped.
This company would be well aware of not only the laws but the ♥♥♥♥ storm such a story brings. Obviously it would affect future sales of games if they couldn't be bothered to fix security issues, so its a bit of a no brainer really.