It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
JakobFel: Sorry, but I could respect your opinion until you said that Origin, Epic and Uplay are better than Galaxy 2.0... even with its bugs, Galaxy 2.0 is leaps and bounds beyond anything those three crap launchers could do.
avatar
Red_Eagle_LXIX: Fair enough, but to me a Game Launcher that does not display owned games is not very useful. Those launchers all successfully display the games I own on those services.
exactly this. uplay gives me uplay games, ea gives ea and so on. playnite brings them all together. including gogs.

i do not need gog to try and do what i already have another program doing.
avatar
JakobFel: Sorry, but I could respect your opinion until you said that Origin, Epic and Uplay are better than Galaxy 2.0... even with its bugs, Galaxy 2.0 is leaps and bounds beyond anything those three crap launchers could do.
avatar
Red_Eagle_LXIX: Fair enough, but to me a Game Launcher that does not display owned games is not very useful. Those launchers all successfully display the games I own on those services.
Well, the problem is that not everyone has this issue. Yeah, I definitely run into bugs and I do think they should wait for the full release, but I've never had anything that I couldn't work around. It seems like that's the case with most users. Unfortunately, there will always be niche groups of users that have trouble with software due to the virtually limitless hardware and software configuration combos out there.

I'm not saying they shouldn't fix the issues you're dealing with, I'm just saying that clearly, it's not something that affects the majority of users or it would have been a prioritized fix.
avatar
Red_Eagle_LXIX: EDIT: after another hour messing (few more reboots, more manual deletes after uninstalls) around I finally have a working 1.2 version again that shows my Game Library from GOG and is currently verifying my installed games.
1.2.56.15 works for me, 1.2.67.58 does not. Version 2.0 does not.
avatar
ftfy: Versions before 1.2.67 have a critical vulnerability and should not be used.

Details here:

https://www.positronsecurity.com/blog/2020-04-28-gog-galaxy-client-local-privilege-escalation/

I can't find a Galaxy changelog for 1.2 anywhere, but I do know that in 1.2.67 there was a security update.
Hmmm, maybe the later versions not working are because I don't install to the default folder in Program Files.
The install seems to lack some permissions to files it creates. I will have to test that later.

EDIT: nope, same issues on 2.0. Says it is already running on another account, if I get by that via delete of lock file I have no games.
Post edited May 22, 2020 by Red_Eagle_LXIX
avatar
Red_Eagle_LXIX: Hmmm, maybe the later versions not working are because I don't install to the default folder in Program Files.
The install seems to lack some permissions to files it creates. I will have to test that later.
I currently have 1.2.67 installed on my G drive, and have had other versions on my D drive. So it's probably something else, but I have no clues as to what. You don't happen to be logging in on a standard user account or have an overly sensitive AV/Firewall on your system do you?
Yeah, it's still broken AF. PSN and Humble Bundle crash when I open it, but after a refresh, it's okay and Steam goes offline and can't update library.

Seems they won't bother fixing it at all. Hell, the fact I see Gwent on Steam says a lot.

What's the point of connecting all platforms on one place, when all of the main ones are COMMUNITY developed plugins, most of the times they don't work and CDPR doesn't step up.
Can someone tell me what the permissions are on their /ProgramData/Gog.com/ folder?

I think I have resolved my issues with 1.2.67 and higher. V2.0 is now importing my library of owned games from Gog at 36%.

I had to add permissions for LOCALPC\Administrators and LOCALPC\Users to read the Gog.com folder. After which no more lock issues and no more failure to load the game list.
I came to this route because after launching I noticed I could no longer access the log files in the subfolder even after Galaxy was no longer running.
Post edited May 22, 2020 by Red_Eagle_LXIX
avatar
Red_Eagle_LXIX: I think I have resolved my issues with 1.2.67 and higher. V2.0 is now importing my library of owned games from Gog at 36%.

I had to add permissions for LOCALPC\Administrators and LOCALPC\Users to read the Gog.com folder. After which no more lock issues and no more failure to load the game list.
I came to this route because after launching I noticed I could no longer access the log files in the subfolder even after Galaxy was no longer running.
Well, since it was never officially confirmed, your fix does seem to confirm that the elevation issue was fixed with version 1.2.67.
avatar
Red_Eagle_LXIX: Fair enough, but to me a Game Launcher that does not display owned games is not very useful. Those launchers all successfully display the games I own on those services.
avatar
JakobFel: Well, the problem is that not everyone has this issue. Yeah, I definitely run into bugs and I do think they should wait for the full release, but I've never had anything that I couldn't work around. It seems like that's the case with most users. Unfortunately, there will always be niche groups of users that have trouble with software due to the virtually limitless hardware and software configuration combos out there.

I'm not saying they shouldn't fix the issues you're dealing with, I'm just saying that clearly, it's not something that affects the majority of users or it would have been a prioritized fix.
You say that, but given that they currently have AT LEAST THREE WEEKS of support backlog right now...

...I don't think they have any idea who's affected by what at this stage in proceedings.
high rated
avatar
Red_Eagle_LXIX: EDIT: after another hour messing (few more reboots, more manual deletes after uninstalls) around I finally have a working 1.2 version again that shows my Game Library from GOG and is currently verifying my installed games.
1.2.56.15 works for me, 1.2.67.58 does not. Version 2.0 does not.
avatar
ftfy: Versions before 1.2.67 have a critical vulnerability and should not be used.

Details here:

https://www.positronsecurity.com/blog/2020-04-28-gog-galaxy-client-local-privilege-escalation/

I can't find a Galaxy changelog for 1.2 anywhere, but I do know that in 1.2.67 there was a security update.
Looks like this vulnerability is still possible, even in the most recent versions: https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/

GOG's response to this has been pretty abysmal and it's disheartening that I had to uninstall it from my Windows machine. The community should hold GOG to task for fixing this issue as their primary concern. I really hope that by the time Cyberpunk 2077 releases that this will be addressed, otherwise I may have to take my purchase to Steam instead.
I totally agree whoever is running this project is screwing up. It lacks basic features. They bit-off more than they can chew!
avatar
smuggly: I totally agree whoever is running this project is screwing up. It lacks basic features. They bit-off more than they can chew!
It's worse than lacking basic features; see the post and link above yours. It literally is a security risk and shouldn't be used. I'm done with Galaxy, any version.
avatar
smuggly: I totally agree whoever is running this project is screwing up. It lacks basic features. They bit-off more than they can chew!
avatar
ftfy: It's worse than lacking basic features; see the post and link above yours. It literally is a security risk and shouldn't be used. I'm done with Galaxy, any version.
You are right, and thanks for the link(s)!
Two things i noticed:

1. GOGs handling of security vulnerabilities seems to be on par with the rest of the communication.
2. Either they don't understand the problem, or they are deliberately fucking it up: "After an investigation, it was found that GOG simply updated the signing key used for verifying messages. This key has been recovered, and the proof-of-concept has been updated with it." (cited from your link, edit: whoops, i mean melanko's link) Both explanations are disturbing.
Post edited August 31, 2020 by jhAtgog