From The Blog
-
NetSPI’s Offensive Security Offering Leverages Subject Matter Experts to Enhance Pen Testing
Written by Sean KalinichBlack Hat 2023 Las Vegas. The term offensive security has always been an interesting one for me. On the surface is brings to mind reaching…Written on Tuesday, 12 September 2023 17:05 in Security Talk Read 712 times Read more...
-
Black Kite Looks to Offer a Better View of Risk in a Rapidly Changing Threat Landscape
Written by Sean KalinichBlack Hat 2023 – Las Vegas. Risk is an interesting subject and has many different meanings to many different people. For the most part Risk…Written on Tuesday, 12 September 2023 14:56 in Security Talk Read 349 times Read more...
-
Microsoft Finally Reveals how they Believe a Consumer Signing Key was Stollen
Written by Sean KalinichIn May of 2023 a few sensitive accounts reported to Microsoft that their environments appeared to be compromised. Due to the nature of these accounts,…Written on Thursday, 07 September 2023 14:40 in Security Talk Read 701 times Read more...
-
Mandiant Releases a Detailed Look at the Campaign Targeting Barracuda Email Security Gateways, I Take a Look at What this all Might Mean
Written by Sean KalinichThe recent attack that leveraged a 0-Day vulnerability to compromise a number of Barracuda Email Security Gateway appliances (physical and virtual, but not cloud) was…Written on Wednesday, 30 August 2023 16:09 in Security Talk Read 517 times Read more...
-
Threat Groups Return to Targeting Developers in Recent Software Supply Chain Attacks
Written by Sean KalinichThere is a topic of conversation that really needs to be talked about in the open. It is the danger of developer systems (personal and…Written on Wednesday, 30 August 2023 13:29 in Security Talk Read 644 times Read more...
-
Leaked Data from Duolingo incident Shows US is most Impacted
Written by Sean KalinichDuolingo, is a language learning site (not to be confused with an LLM) and has a very large base of users. The site is a…Written on Tuesday, 29 August 2023 19:12 in Security Talk Read 1065 times Read more...
-
We talk about the Ransomware Threat Landscape with SecureWorks at Black Hat 2023
Written by Sean KalinichBlack Hat 2023 – Las Vegas, NV – One of my personal focuses is understanding the “Why” behind changes in the threat landscape. In simple…Written on Tuesday, 29 August 2023 18:26 in Security Talk Read 574 times Read more...
-
Now Patched Flaw Leverages Abandoned Reply URL found in Entra ID allows for Privilege Escalation
Written by Sean KalinichMicrosoft has not been having the greatest of months. First it was identified that a stollen MSA signing key was used by a Nation State…Written on Monday, 28 August 2023 15:39 in Security Talk Read 1291 times Read more...
-
Qrypt Looking to Attack the Inefficiencies in Quantum Encryption to make Quantum Secure Communication a Reality Today
Written by Sean KalinichBlack Hat 2023, Las Vegas – At Black Hat one of my favorite things to do is see what the latest buzzword(s)/phrases are. One of…Written on Monday, 28 August 2023 12:53 in Security Talk Read 788 times Read more...
Recent Comments
- Sean, this is a fantastic review of a beautiful game. I do agree with you… Written by Jacob 2023-05-19 14:17:50 Jedi Survivor – The Quick, Dirty, and Limited Spoilers Review
- Great post. Very interesting read but is the reality we are currently facing. Written by JP 2023-05-03 02:33:53 The Dangers of AI; I Think I Have Seen this Movie Before
- I was wondering if you have tested the microphone audio frequency for the Asus HS-1000W? Written by Maciej 2020-12-18 14:09:33 Asus HS-1000W wireless headset impresses us in the lab
- Thanks for review. I appreciate hearing from a real pro as opposed to the blogger… Written by Keith 2019-06-18 04:22:36 The Red Hydrogen One, Possibly One of the Most “misunderstood” Phones Out
- Have yet to see the real impact but in the consumer segment, ryzen series are… Written by sushant 2018-12-23 10:12:12 AMD’s 11-year journey to relevance gets an epic finish.
Most Read
- Microsoft Fail - Start Button Back in Windows 8.1 But No Start Menu Written on Thursday, 30 May 2013 15:33 in News Be the first to comment! Read 115431 times Read more...
- We take a look at the NETGEAR ProSafe WNDAP360 Dual-Band Wireless Access Point Written on Saturday, 07 April 2012 00:17 in Pro Storage and Networking Be the first to comment! Read 85201 times Read more...
- Synology DS1512+ Five-Bay NAS Performance Review Written on Tuesday, 12 June 2012 20:31 in Pro Storage and Networking Be the first to comment! Read 79536 times Read more...
- Gigabyte G1.Sniper M3 Design And Feature Review Written on Sunday, 19 August 2012 22:35 in Enthusiast Motherboards Be the first to comment! Read 78509 times Read more...
- The Asus P8Z77-M Pro Brings Exceptional Performance and Value to the Lab Written on Monday, 23 April 2012 13:02 in Consumer Motherboards Be the first to comment! Read 68347 times Read more...
Displaying items by tag: Origin
Concerns about an EA Origin Breach Pop Up After a Round of Password Reset Emails Go Out
There are rumblings on the internet that all might not be well with EA after a round of password reset notices appear to have been sent out on Sunday (8-13-2015). EA does not give a specific reason behind the reset notifications other than suspicious activity. However, the timing seems to correlate with an authentication exploit that has been talked about on the darker side of the internet. These claims are that a group has been silently exploiting EA’s authentication servers for months. It is far from certain that EA has suffered a large-scale breach, but it does bring up the subject of authentication server security.
Origin celebrates 40,000 users with discounts
![]() |
EA’s Origin despite skeptics eventually attracted an increasing number of players, which is to be expected considering games they are offering. Some come from EA while the rest come from other publishers, but the certain thing is that by each day their numbers grow larger.
EA's CEO Resigns... Timing is Everything.
![]() |
Timing is everything, at least that is what they used to tell me when I would ask for new hardware or upgrades for equipment. This is a very simple rule that extends into many corners of life and is a core part of almost every business strategy. If we take this as true then what are we to think about the timing behind EA CEO John Riccitiello’s resignation?
Origin Alpha test phase on MAC
![]() |
In order to prepare even better for the upcoming launch of Origin on Macs, EA has launched an alpha test booked for several thousand users. The Mac version of Electronic Arts Origin will be available "soon" and EA has started sending invitations for alpha testing of the Mac version of the Origin client.
Steam counts 50 million users
![]() |
The Vice-president of Sega's department for digital distribution asserted during London Games Conference that Valve's Steam has a whopping 50 million registered users. In addition, approximately half a million users willingly embraced the so-called Big Picture mode, which is currently in the beta testing phase. Also we wrote about Linux beta for the Steam client getting 5000 more users so soon these numbers could explode even further.
Digital video game sales on the rise
![]() |
Within the last few years more and more developers have been turning to digital sales as a means to sell their games. In fact, many companies can base nearly their entire success on digital sales. Companies such as Steam and Origin are some of the first that come to mind when consumers think of buying games online. Major companies such as EA and Activision Blizzard are expecting digital sales to exceed physical media sales within the next few years.
EA's Origin may be a little too intrusive
Wow, file this one under both stupid and scary. It would seem that EA is seriously pushing the boundaries of acceptable behavior. Someone read the full EULA for this new service and has found a clause that is incredibly frightening. We went ahead and downloaded the installer and read and printed the EULA
Under a section marked “2. Consent to Collection and Use of Data” we found the following;
“You agree that EA may collect, use, store and transmit technical and related information that identifies your computer (including the Internet Protocol Address), operating system, Application usage (including but not limited to successful installation and/or removal), software, software usage and peripheral hardware, that may be gathered periodically to facilitate the provision of software updates, dynamically served content, product support and other services to you, including online services. EA may also use this information combined with personal information for marketing purposes and to improve our products and services. We may also share that data with our third party service providers in a form that does not personally identify you. IF YOU DO NOT WANT EA TO COLLECT, USE, STORE, TRANSMIT OR DISPLAY THE DATA DESCRIBED IN THIS SECTION, PLEASE DO NOT INSTALL OR USE THE APPLICATION.
This and all other data provided to EA and/or collected by EA in connection with your installation and use of this Application is collected, used, stored and transmitted in accordance with EA’s Privacy Policy located at www.ea.com. To the extent that anything in this section conflicts with the terms of EA’s Privacy Policy, the terms of the Privacy Policy shall control. “
Now, many companies collect hardware and peripheral data along with the installed version of the OS for a customer, but to actually say that a user’s personal information can be used for marketing is a little bit much. We could not find anything that limited this use to EA alone. In fact in EA’s Privacy Policy (section 5. On Third Party Ad Serving Technology) it says;
“We or third parties operating the advertisement serving technology may use demographic information such as age and gender as well as information logged from your hardware or device to ensure that appropriate advertising is presented within the site, online or mobile product or service and to calculate or control the number of unique and repeat views of a given ad, and/or deliver ads that relate to your interests and measure the effectiveness of ad campaigns. We or third parties may log data for this purpose including IP address (including for purposes of determining your approximate geographic location), unique device I.D., information about your software, applications and hardware, browser information (and/or information passed via your browser), hardware, machine or device make and model, advertisement(s) served, in game location, length of time an advertisement was visible, other Internet and website usage information, web pages and mobile internet sites which have been viewed by you (as well as date and time), domain type, size of the advertisement, advertisement response (if any), and angle of view. The foregoing data may be used and disclosed per this policy and the privacy policy of the company providing the ad serving technology and to other third parties in a form that does not personally identify you.”
EA then goes on to say “EA will never share your personal information with third parties without your consent. We may, however, share anonymous, non-personal, aggregated and/or public information with third parties. There may be circumstances where you may share information on your own. Please see section XI for more details about your rights to information you share publicly on EA and other third party sites and forums. You may also opt in to allow EA to share your personal information with companies and organizations that provide products or services that we believe may be of interest to you. To opt out of further communications from a marketing partner or sponsor with whom your information has been shared, please contact that partner or sponsor directly.”
The hitch here is that by clicking on the “I agree” check box you are giving your consent. We wonder how many people will be ok with this once they take a look at all of the facts. We will also be looking at EULA’s from other software distribution companies to see if theirs are any better in the next few days and will let you know what we find. For now we would advise people to take caution with Origin, it is not only the online content distribution application, but the replacement for the EA Downloader for patches and updates… This makes me consider removing some of the EA games that I have.
The Whole EULA can be seen on our forum in PDF format