Previous Thread
Next Thread
Print Thread
Rate This Thread
Hop To
#4406532 - 02/21/18 02:59 PM FSLabs installed password grabbing malware on customers' computers. (A320)  
Joined: Jun 2002
Posts: 5,555
VF9_Longbow Offline
Hotshot
VF9_Longbow  Offline
Hotshot

Joined: Jun 2002
Posts: 5,555
Tokyo, Japan
Unbelievable.

FSLabs included a password cache software with their software which collected users' google passwords and uploaded them plaintext HTTP to an unsecured server in Germany. They claim it was to combat piracy. The illegality of this is mindboggling. I suspect some of FSLabs's staff is going to go to jail for this.

I bought a product from them in September. Never again. Who knows if they have been including other malware with their other products.

It makes me think Lefteris was the one behind the MD-11 nuke which created a huge scandal at PMDG years ago.

Very, very shady business practice, shame on you FSLabs.


Inline advert (2nd and 3rd post)

#4406539 - 02/21/18 03:28 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Jun 2001
Posts: 5,864
Bill_Grant Offline
Hotshot
Bill_Grant  Offline
Hotshot

Joined: Jun 2001
Posts: 5,864
Dallas, TX
Wow that is bad


~Bill

In my defense, I was left unsupervised...
#4406548 - 02/21/18 03:47 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Apr 2008
Posts: 19,581
Raw Kryptonite Offline
Beat the Kobayashi Maru
Raw Kryptonite  Offline
Beat the Kobayashi Maru
Veteran

Joined: Apr 2008
Posts: 19,581
MS
Incredibly stupid.


·Steam: Raw Kryptonite ·MWO & Elite Dangerous: Defcon Won ·Meager youtube channel
·Intel i5-9600K ·EVGA GTX1070 FTW 8GB ·EVGA CLC 120 Cooler
·16 GB Patriot Memory VIPER 4 3000MHz ·GIGABYTE Z390 AORUS PRO WiFi Mobo
· CORSAIR CARBIDE AIR 540 case ·BenQ BL3200PT monitor
#4406556 - 02/21/18 04:00 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Oct 1999
Posts: 15,786
Haggart Offline
I Fought Diablo
Haggart  Offline
I Fought Diablo
Veteran

Joined: Oct 1999
Posts: 15,786
The Lone Star State
they only join a growing corporate and government crowd like Equifax, Target, Yahoo, OPM (the Office of Personnel Management of the U.S. govt), Wells Fargo, etc who have acted in careless or purposeful manner and as such have undermined the public trust in keeping their personal identifiable information (PII) safe


"everything lives by a law, a central balance sustains all"
#4406558 - 02/21/18 04:05 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Jun 2002
Posts: 5,555
VF9_Longbow Offline
Hotshot
VF9_Longbow  Offline
Hotshot

Joined: Jun 2002
Posts: 5,555
Tokyo, Japan
Hag, I think the difference is that these folks were not just negligent. They deliberately included malware to steal passwords from customers with a legitimate product, then they transmitted the stolen data over unsecure HTTP onto an unsecure server.

I don't know how Lefteris is going to avoid jail time for this one. Incidentally, shortly after my FSLabs purchase, my credit card got fraudulent usages originating in the UK which is somewhere I've never been. It could have been a coincidence but I am guessing that FSLabs had something to do with this.

#4406561 - 02/21/18 04:19 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Apr 2002
Posts: 5,503
Pooch Offline
Hotshot
Pooch  Offline
Hotshot

Joined: Apr 2002
Posts: 5,503
Orlando, FL
Is piracy really that hurtful to these software developers to warrant such an attack on all of it's customers? I've always thought of these pirates as people who would not have bought the software, anyway. So there was really no loss of revenue. I'm naive, possibly, I suppose.
The damage done to their reputation far outwieghs any supposed damage done by pirates. I haven't bought any of their stuff, but if I had I'd want it uninstalled. It's amazing to see that they said they would never do anything to damage the trust their customers have put in their products. They already have! They seem to feel that they were justified. It's like the police breaking into your house in the middle of the night and rummaging through your belongings to see if you're a thief. You wake up and catch them and they say, "Oh don't worry, if we don't find anything illegal, it's fine!"


"From our orbital vantage point, we observe an earth without borders, full of peace, beauty and magnificence, and we pray that humanity as a whole can imagine a borderless world as we see it, and strive to live as one in peace."
Astronaut William C. McCool RIP, January 29, 2003 - Space Shuttle Columbia

#4406567 - 02/21/18 04:33 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Jun 2002
Posts: 5,555
VF9_Longbow Offline
Hotshot
VF9_Longbow  Offline
Hotshot

Joined: Jun 2002
Posts: 5,555
Tokyo, Japan
Avsim and FSLabs are currently censoring discussion about the issue on their forums - almost everything related to this is being erased. Looks like they're trying to run a cleanup job. I'm not one for conspiracies, but avsim's censorship is pretty shady. They need to let this run its course.

I wonder how much identity theft occurred here - piracy or not, identity theft is very, very illegal just about everywhere.

#4406611 - 02/21/18 07:57 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Jul 2004
Posts: 10,984
Master Offline
meh
Master  Offline
meh
Veteran

Joined: Jul 2004
Posts: 10,984
Someone needs to hit them with a lawsuit right away before they have time to bury it all and some lawyers can get in there for discovery.

#4406627 - 02/21/18 09:42 PM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Apr 2008
Posts: 19,581
Raw Kryptonite Offline
Beat the Kobayashi Maru
Raw Kryptonite  Offline
Beat the Kobayashi Maru
Veteran

Joined: Apr 2008
Posts: 19,581
MS
Originally Posted by VF9_Longbow
Hag, I think the difference is that these folks were not just negligent. They deliberately included malware to steal passwords from customers with a legitimate product, then they transmitted the stolen data over unsecure HTTP onto an unsecure server.

I don't know how Lefteris is going to avoid jail time for this one. Incidentally, shortly after my FSLabs purchase, my credit card got fraudulent usages originating in the UK which is somewhere I've never been. It could have been a coincidence but I am guessing that FSLabs had something to do with this.



Exactly. Far different.


·Steam: Raw Kryptonite ·MWO & Elite Dangerous: Defcon Won ·Meager youtube channel
·Intel i5-9600K ·EVGA GTX1070 FTW 8GB ·EVGA CLC 120 Cooler
·16 GB Patriot Memory VIPER 4 3000MHz ·GIGABYTE Z390 AORUS PRO WiFi Mobo
· CORSAIR CARBIDE AIR 540 case ·BenQ BL3200PT monitor
#4406644 - 02/22/18 12:24 AM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: VF9_Longbow]  
Joined: Jun 2005
Posts: 16,082
- Ice Offline
Veteran
- Ice  Offline
Veteran

Joined: Jun 2005
Posts: 16,082
Philippines / North East UK
As always, it is the paying customer that is the victim of these anti-piracy tactics.


- Ice
#4406646 - 02/22/18 12:30 AM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: - Ice]  
Joined: Mar 2011
Posts: 2,042
cichlidfan Offline
Member
cichlidfan  Offline
Member

Joined: Mar 2011
Posts: 2,042
Woodbridge, VA, USA
Originally Posted by - Ice
As always, it is the paying customer that is the victim of these anti-piracy tactics.


In this case, the victim might have had their banking credentials, among other accounts, stolen. This is a bit beyond protecting a product.


ASUS ROG Maximus VIII Hero, i7-6700K, Noctua NH-D14 Cooler, Crucial 32GB DDR4 2133, Samsung 950 Pro NVMe 256GB, Samsung EVO 250GB & 500GB SSD, 2TB Caviar Black, Zotac GTX 1080 AMP! Extreme 8GB, Corsair HX1000i, Phillips BDM4065UC 40" 4k monitor, VX2258 TouchScreen, TIR 5 w/ProClip, TM Warthog, VKB Gladiator Pro, Saitek X56, et. al., MFG Crosswind Pedals #1199, VolairSim Pit, Rift CV1
#4406651 - 02/22/18 12:48 AM Re: FSLabs installed password grabbing malware on customers' computers. (A320) [Re: cichlidfan]  
Joined: Jun 2005
Posts: 16,082
- Ice Offline
Veteran
- Ice  Offline
Veteran

Joined: Jun 2005
Posts: 16,082
Philippines / North East UK
Originally Posted by cichlidfan
In this case, the victim might have had their banking credentials, among other accounts, stolen. This is a bit beyond protecting a product.

Doesn't matter. When the "victim" is the legit customer, something's wrong with that scenario IMHO.


- Ice

Moderated by  RacerGT 

Quick Search
Recent Articles
Support SimHQ

If you shop on Amazon use this Amazon link to support SimHQ
.
Social


Recent Topics
Dickey Betts was 80
by Rick_Rawlings. 04/19/24 01:11 AM
Exodus
by RedOneAlpha. 04/18/24 05:46 PM
Grumman Wildcat unique landing gear
by Coot. 04/17/24 03:54 PM
Peter Higgs was 94
by Rick_Rawlings. 04/17/24 12:28 AM
Whitey Herzog was 92
by F4UDash4. 04/16/24 04:41 PM
Anyone can tell me what this is?
by NoFlyBoy. 04/16/24 04:10 PM
10 Years ago MV Sewol
by wormfood. 04/15/24 08:25 PM
Pride Of Jenni race win
by NoFlyBoy. 04/15/24 12:22 AM
It's Friday: grown up humor for the weekend.
by NoFlyBoy. 04/12/24 01:41 PM
OJ Simpson Dead at 76
by bones. 04/11/24 03:02 PM
Copyright 1997-2016, SimHQ Inc. All Rights Reserved.

Powered by UBB.threads™ PHP Forum Software 7.6.0