Month: August 2022

Enlarge / Mods like this one, which replaces Lebron James with Jesus, no longer work in Multiversus. (credit: GameBanana / ShoeGrease)

The hit, new free-to-play Warner Bros. arena-fighter MultiVersus has enjoyed a robust modding scene since the game was still in its early access beta. This week, though, that community is on life support as players and developers report the game will no longer run with any modification installed.

Users on mod distribution site Game Banana started noticing the change around noon on Wednesday, with some discussing potential workarounds that might let their mods still work. By that afternoon, though, modder Ghost suggested on Twitter that "MultiVersus will no longer boot up if you have mods installed. They killed modding of any kind."

The move was seemingly confirmed by MultiVersus Game Director Tony Huynh, who tweeted overnight that a user-reported game-crashing issue "might be because your client has been modded. If so you’ll need to remove the mods to play."

Enlarge / Ring camera images give you a view of what's happening and, in one security firm's experiments, a good base for machine learning surveillance. (credit: Ring)

Amazon quietly but quickly patched a vulnerability in its Ring app that could have exposed users' camera recordings and other data, according to security firm Checkmarx.

Checkmarx researchers write in a blog post that Ring's Android app, downloaded more than 10 million times, made an activity available to all other applications on Android devices. Ring's com.ring.nh.deeplink.DeepLinkActivity would execute any web content given to it, so long as the address included the text /better-neighborhoods/.

That alone would not have granted access to Ring data, but Checkmarx was able to use a cross-site scripting vulnerability in Ring's internal browser to point it at an authorization token. Next, Checkmarx obtained a session cookie by authorizing that token and its hardware identifier at a Ring endpoint and then used Ring's APIs to extract names, email addresses, phone numbers, Ring device data (including geolocation), and saved recordings.