It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
FrAnubis: If it was to avoid responsibility, they wouldn't be public and you wouldn't be able to check the code yourself...
that's all you can come up with? what if something happens (their github hacked and code exploited or they made a mistake, etc)? what if your other gaming account get damaged or banned because of galaxy or its plugins? who would take the responsibility for that? I bet it won't be gog, they stated it in galaxy TOS - they are not responsible for any of the "community" plugins.
are you saying they created this fraud with fake github accounts to be responsible for plugins? I guess I'll never understand the logic of fanboys.
who told you I cannot code? maybe because I can I'm not going to use these atrocious plugins with security holes 10 miles wide. Especially when gog makes sure to stay away from acknowledging the authorship of the above.
Don't be naive, they can't provide it in closed code because they are too lame to create own plugins from scratch. they forked and slightly face lifted web parsing plugins from other people, they will get into trouble for changing licence and can be sued if that code is not for commercial use.
i havent looked at the code however gog should have no reason to take responsibility for the 3rd party apps the app is designed for freedom in mind meaning you know the risks of things you do with it and if you dont not there problem just like any other company out there its no different then microsoft changing setting on your pc to allow them to push a update
the 3rd party apps manaul or automatic both use offical apis of the features or apps they are adding so if anyone made there plugin malious then gog wouldnt have to do anything anyway because that means that the person making the plugin used say for example the steam api to malisiously attack customers of steam so steam would pursue that the tos of the platforms dont disallow these things they just disallow using the apis and intagrations being used for things that hurt there customers so its not really that big of a deal as if your smart enough anyway your pc has the measures to stop something like that from being done either by 2 step or some form auth that isnt just on that account i get security but what gog is giving isnt something that you can be picky like this its still in closed beta and people are already complaining about things like this it just makes me said because this is the direction we need to actually go to support the exact oppesite of stadia
morale of the story everything takes comprise if you cant protect yourself then dont use it if you cant use a computer well enough to know you shouldnt use something because it looks skecty then you shouldnt even be on the internet
avatar
cdrag45: i havent looked at the code however gog should have no reason to take responsibility for the 3rd party apps the app is designed for freedom in mind meaning you know the risks of things you do with it and if you dont not there problem just like any other company out there its no different then microsoft changing setting on your pc to allow them to push a update
the 3rd party apps manaul or automatic both use offical apis of the features or apps they are adding so if anyone made there plugin malious then gog wouldnt have to do anything anyway because that means that the person making the plugin used say for example the steam api to malisiously attack customers of steam so steam would pursue that the tos of the platforms dont disallow these things they just disallow using the apis and intagrations being used for things that hurt there customers so its not really that big of a deal as if your smart enough anyway your pc has the measures to stop something like that from being done either by 2 step or some form auth that isnt just on that account i get security but what gog is giving isnt something that you can be picky like this its still in closed beta and people are already complaining about things like this it just makes me said because this is the direction we need to actually go to support the exact oppesite of stadia
Don't know about rest of the people here, but don't you think it is a little strange, that a company releases a software with a usp, but said company does not actually provide support for it ?
Of course there is no need for gog to take responsibility for stuff they do not make, but If you advertise Galaxy as the one place to go for all your gaming needs, you should at least provide official support for the biggest competitor on the market: Steam.And it does not matter in what state the software is, as gog never anncounced that they would take responsibility for (certain) integrations after official release
I personally don't care much about the whole topic as I use intergrations just for testing new versions, but it is still a odd thing to do, in my opinion.
avatar
cdrag45: morale of the story everything takes comprise if you cant protect yourself then dont use it if you cant use a computer well enough to know you shouldnt use something because it looks skecty then you shouldnt even be on the internet
Well no. Gog wants to address a audience as broad as possible (as most gamers nowadays, sadly, aren't very tech saavy), with the existence of the client itself already beeing a nod in that direction > the easier gogs customers are able to start playing games they bought the more likely it is they will buy again in the shop.
Post edited November 27, 2019 by DerBesserwisser
high rated
0 trust in current integrations, 0 trust path, 0 updated trusted versions list.

And whoever is installing them, probably curious users, might end up installing integrations left and right from github and possibly installing really bad spyware/malware in the future because you taught them not to be cautious.

FriendsOfGalaxy reveal yourself as official GOG, and fork only trusted/clean versions with nothing extra in them, communicate about your methodology, and then yes that would be a good start.. But please don't link random github accounts.. and don't push users to install stuff from noname accounts, it is unfair and a lack of responsibility.

The whole methodology and communication needs to be addressed, it is dangerous right now..
Post edited December 11, 2019 by siegfriedrox
avatar
FrAnubis: If it was to avoid responsibility, they wouldn't be public and you wouldn't be able to check the code yourself...
avatar
djoxyk: that's all you can come up with? what if something happens (their github hacked and code exploited or they made a mistake, etc)? what if your other gaming account get damaged or banned because of galaxy or its plugins? who would take the responsibility for that? I bet it won't be gog, they stated it in galaxy TOS - they are not responsible for any of the "community" plugins.
are you saying they created this fraud with fake github accounts to be responsible for plugins? I guess I'll never understand the logic of fanboys.
who told you I cannot code? maybe because I can I'm not going to use these atrocious plugins with security holes 10 miles wide. Especially when gog makes sure to stay away from acknowledging the authorship of the above.
Don't be naive, they can't provide it in closed code because they are too lame to create own plugins from scratch. they forked and slightly face lifted web parsing plugins from other people, they will get into trouble for changing licence and can be sued if that code is not for commercial use.
I can see a lawsuit in GOG's future honestly. This can't end well. It doesn't matter what they put in their TOS, if they are being negligent. Plus, they marketed it as having these features, matter fact it was the MAIN marketing of 2.0. Then, they drop that you have to use community made integrations and that they have no responsibility for all of the possible ways this could go wrong. This just seems like a recipe for disaster.
It's amazing that no one managed to link the actual integration's bug tracker. Whatever your issue with the Steam integration is, report it here. github.com/FriendsOfGalaxy/galaxy-integration-steam/issues
Sorry, but, this is a bit misleading. A new platform that spruiks itself as being the global connector, but, isn't actually creating/maintaining the hooks to the various platforms and systems it is accessing.

The UI isn't super clear either, and I installed a 'community' one today, only to find this thread and have subsequently removed it. If GoG aren't actively creating/maintaining/approving the code, then, I don't want anything to do with some random 3rd party, who may or may not get access to my credentials before its discovered whats happened.
lol funny thread.


You guys know that the Xbox store that here is supportet is the Win 10 Store aswell?

I have all my microsoft games like Gear 3 // age of empies DE etc there and thats are PC games....

I dont even think that it supports the console games.
avatar
Zoidberg: I disagree with GOG having to take responsibility for those. They got Microsoft support on this, if the other actors want to ignore this, this can only be done through free open source plugins (connecting to stores API) like they do.

One can't possibly be honest in demanding GOG to support everything, they made a tool allowing for such a feature. All they can do is push more people into using it, nothing more.
It's untrusted and thus untrustworthy code.

And I'm quite a bit angry at GOG to spring this on me without warning (spring as in: I used it and *NOW* have to learn that it's not actually CDProjekt's code and I have to assume there are *NO* checks on this code being done).
avatar
johnnypopcorn: It's amazing that no one managed to link the actual integration's bug tracker. Whatever your issue with the Steam integration is, report it here. github.com/FriendsOfGalaxy/galaxy-integration-steam/issues
Is that the OFFICIAL source for those community integrations (including the pre-installed ones, Steam, Uplay, Origin)? Got a link to where CDP says that?

This is part of my problem (why I uninstalled 2.0 and went back to 1.2): the communication. And cynical me can't shake the feeling that's intentional. I don't want to think that of CDP, but as said, it's hard to shake off.

As long as this doesn't improve (including at least a way to check inside Galaxy 2.0 *where exactly* a plugin came from, or, actually, where that plugin will come from if I install it so I can trust check myself)… no 2.0 for me.
avatar
johnnypopcorn: It's amazing that no one managed to link the actual integration's bug tracker. Whatever your issue with the Steam integration is, report it here. github.com/FriendsOfGalaxy/galaxy-integration-steam/issues
avatar
jae: Is that the OFFICIAL source for those community integrations (including the pre-installed ones, Steam, Uplay, Origin)? Got a link to where CDP says that?

This is part of my problem (why I uninstalled 2.0 and went back to 1.2): the communication. And cynical me can't shake the feeling that's intentional. I don't want to think that of CDP, but as said, it's hard to shake off.

As long as this doesn't improve (including at least a way to check inside Galaxy 2.0 *where exactly* a plugin came from, or, actually, where that plugin will come from if I install it so I can trust check myself)… no 2.0 for me.
It is very intentional, yes. Simply put, GOG can't legally do what Galaxy 2.0 promises to do -- scrape other platforms for data. But somebody can -- a shady 3rd party entity called FriendsOfGalaxy, who just happens to mischievously misuse the plugin API to provide the desired functionality on their own responsibility. (Or pull code from a 3rd party open-source repository.) Everybody sees what's happening, everybody knows that GOG trusts FriendsOfGalaxy enough to pull their code into Galaxy (in fact the only GitHub account they officialy source from). This, of course, does not mean that _you_ should trust FriendsOfGalaxy -- trust them just as much you trust GOG trusting them.

Now, if you want to use Galaxy 2.0 with non-GOG platforms, you don't really need to use the built-in plugin installer. Just download the plugins yourself (and possibly check their code) and put them into %localappdata%\GOG.com\Galaxy\plugins\installed. Here's a community-made list: https://github.com/Mixaill/awesome-gog-galaxy

Or you can just use Playnite, which has the same functionality...
Still waiting for GOG to officially support more integrations. I'M not trusting FriendsOfGalaxy if GOG never says its them.
The "terms of use" even extra exempt them from any responsibility if u use community intregrations so i dont see any reason to trust them at all.

Putting in my password and account names on third party stuff that GOG doesnt even want to take responsiblity on is just a BAD idea. Considering account security: ITS A TOTAL NO GO.
Any advise about account security would say to NOT input account names and password on unknown thirdparty programs.

For me GOG 2.0 is basically missing its main advertised function. The connection of platforms with atleast the big platforms. I'm not asking for any obscure platform.
Post edited April 30, 2020 by Myuukia
how is this even legal? is my customer data safe with gog galaxy2?
avatar
Sepix: how is this even legal? is my customer data safe with gog galaxy2?
Look at this exerpt:

5.4 GOG GALAXY 2.0. If you use GOG GALAXY 2.0 and decide to connect your accounts from other platforms with GOG GALAXY 2.0. using GOG official or community integrations, then we may also collect personal and non-personal information via such integrations (see section 4.3 above for details). This feature is totally optional. Please know that community integrations may be governed by separate private policies and we are not responsible for their use of your personal and non-personal information (see further section 5 of the GOG GALAXY 2.0 Licence Agreement)


Basically u install unchecked code from github with those buttons and they can do whatever. They will take no responsibility if u loose your accounts later down the road. So i would advise u to disconnect all community integrations.
avatar
Myuukia: Basically u install unchecked code from github with those buttons and they can do whatever. They will take no responsibility if u loose your accounts later down the road. So i would advise u to disconnect all community integrations.
holy shit, i didn't realise that. thank you for clearing this up for me!

since yesterday my whole (positive) view on gog and galaxy got destroyed :/