Slashdot Mirror


Independent Developers Fight Piracy & Lose

An anonymous reader writes "The author of the Echelon decided to take his fight against software piracy to the next level and then threw in the towel. After someone began posting new serial numbers on a well known hacking site, the author took matters into his own hands. With version 1.0, entering a hacked serial number causes the software deleted the user's Home directory. Yes, you read it right, the software completely erases it (aka rm -rf ~). A variety of people have voiced some some strong opinions on this. While some argue that piracy is good for established companies, a few large companies are battling piracy and having limited success. Small, independent developers, however, are recognising this is a serious problem and are generally stumped by what to do about it."

108 of 1,053 comments (clear)

  1. Too Far? by Oculus+Habent · · Score: 4, Insightful
    I think deleting the entire user's directory is a little harsh. If I were going for vandalism, I'd go for things that cause problems, but shuouldn't do serious damage. Something along this line:
    • Delete Perl
    • Stop Apache, Samba, & nfsd and remove their startup scripts.
    • Delete X
    • Delete ftp, grep, ssh, or other important programs.
    The key is to piss off the user. Each of these things are replaceable, but a PITA.
    --
    That what was all this school was for... to teach us how to solve our own problems. -- janeowit
    1. Re:Too Far? by praxis · · Score: 4, Insightful

      Well, go ahead and do that, if the software is running with access to those things. If, for example, the software is running with only write access to the user's home directory, then what?

    2. Re:Too Far? by NemesisEnforcer · · Score: 5, Insightful

      Or how about something reasonable like deleting the software that the user was trying to pirate?

      I don't think he'd have faced a lot of criticism if the software's reaction was that mild. However, he might have caught a lot of heat if it happened accidentally with a legit user.

    3. Re:Too Far? by lowe0 · · Score: 2, Insightful

      The only bad thing (and it's a big deal) about this is the possibility of damage to legitimate customers.

      Other than that, you ran the guy's code without permission - the consequences are entirely your problem.

      Measures such as this are a bad idea because of the potential for accidental damage, but if that problem were solvable (it's not) we'd have a great tool for preventing unlicensed use of intellectual property.

    4. Re:Too Far? by Gudlyf · · Score: 4, Insightful

      At first glance, you might think, "Yeah! Serves 'em right! Delete their home dir!" The thing is, it's akin to setting up a trap in your car or home for burglars that hurts or kills them (although deleting ~user shouldn't be physically harmful, at least directly). In short, going on the offensive in an equally or more sinister way doesn't always make it the right thing to do.

      --
      Trolls lurk everywhere. Mod them down.
    5. Re:Too Far? by walendo · · Score: 2, Insightful

      How about encrypting the user's home directory (or whatever) - and offering the decrypt password for the same price as the pirated software. :-)

    6. Re:Too Far? by rd_syringe · · Score: 3, Insightful

      Why is it harsh? If you crack the software, you pay the consequences. You're not owed anything at that point. As far as ethics is concerned, the app could do anything it wanted.

      Warez is a result of this lame sense of entitlement that today's computer users have. Arguing piracy is "good" for companies doesn't matter--it's not provable, but more importantly you don't have the permission from the copyright owners to do it. Pirates are just freeloaders who get bitter when the free ride is taken away.

      id Software lost over a million dollars to record-breaking piracy the weekend before Doom 3's release. Ask Carmack sometime how he feels about that.

      We've already seen game companies transitioning more and more to consoles (and the games suffering as a result). They're doing this because of the extra protection from piracy. As more and more people pirate the fuck out of everything, the system will eventually completely crumble, and nobody will be able to make a living off of any software. We won't have the Photoshops or 3D Studio Maxes or Cubases of the world, because there won't be businesses behind them doing the development. It's not like OSS is answering the call or anything--all the major software revolutions have been spawned by capitalist endeavors. I'm a musician, and I can load up fantastic plug-ins like FXpansion BFD as a VSTi in Cubase. Piracy hurts innovation like that because there's no incentive for people to make developing software their career. Little college dorm room kiddies will just come along and download it and then run to boards like Slashdot and justify it as "free advertising."

      At some point, the issue will come to head and a resolution will be reached, going either way--all-out piracy or full-on copyright protection. But right now, it's just a tense string being pulled tighter and tighter...

    7. Re:Too Far? by sparcnut · · Score: 5, Insightful

      I think even deleting system programs is way too far. Suppose you have a user (an eye dee ten tee) who has his only copy of his master's thesis in his home directory... you can imagine what happens next. You can make the argument that he deserved it, but it doesn't justify wiping out his thesis.

      If the program instead followed your suggestion (never minding the permission issues - it would have to be run as root) and deleted system software, what would happen if the program was run on a production server? Sure, it really ticks off the user, but a lot of things on the server for all users would grind to a halt until the deleted files are replaced. You just can't justify doing something this drastic.

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10);'
    8. Re:Too Far? by jcr · · Score: 5, Insightful

      Have a look in Black's Law Dictionary for "extortion".

      -jcr

      --
      The only title of honor that a tyrant can grant is "Enemy of the State."
    9. Re:Too Far? by vadim_t · · Score: 4, Insightful

      Well, to begin with, it's completely unreasonable, as the amount of damage is pretty much random. A *long* time ago, the idea of "eye for an eye" was established as reasonable punishment. Yes, reasonable, since before people would do things like "You break my arm, I set your house fire with your family inside". Eye for an eye set a reasonable upper bound which wasn't that bad in those times. Trying to go back to before that by this kind of completely unreasonable revenge is ridiculous.

      Besides that you have a legal problem. I'm fairly sure that somebody could argue that even though they caused you a $100 of loss (or whatever it costs), the nuked home directory caused $10K of loss. That kind of thing could turn out *really* ugly.

    10. Re:Too Far? by operagost · · Score: 5, Insightful

      What's the point? The user's system is vandalized without reason. The loss of revenue does not equate to the destruction of the user's data. There is always the possibility that the user mistyped the serial number, or has a legitimate serial number which has unwittingly fallen into a pirate's hands.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    11. Re:Too Far? by Zangief · · Score: 4, Insightful

      Yeah, and then pirates just need to alter the date te software thinks it is really, and away they go.

    12. Re:Too Far? by gcaseye6677 · · Score: 4, Insightful

      I realize that doing something like this may make the developer feel better, but it accomplishes absolutely nothing other than petty revenge.

      The purpose of anti-piracy measures is, presumably, to reduce piracy. When you decide you're going to take revenge on anyone who pirates, all you are going to do is drive away people who might otherwise pay for the software. Nobody says "gee that guy wiped out my hard drive. I should pay for the software I stole from him." Would you do it if you were in that position?

      The pirates will continue to pirate, while finding a way to make the program work without permissions to do anything harmful. The innocent user who enters the activation key incorrectly will likely be harmed by this. And the developer will lose future business, and rightly so. And if serious damage were caused, they will face a lawsuit.

      If there are any developers out there thinking about doing something stupid like this, please reconsider. It will not help you in any way; it will only hurt you. I for one will never install software that has provisions to wipe out my home directory. What if it does so by mistake?

    13. Re:Too Far? by MechaStreisand · · Score: 2, Insightful

      The thing is, though, what's wrong with setting traps for burglars? If they don't want to get maimed or killed, maybe they should have picked a different job. Why do we always have so much sympathy for criminal scum in this society, and none for the victims?

      --
      Disclaimer: IANAL. This post is, however, legal advice, and creates an attorney-client relationship.
    14. Re:Too Far? by fyngyrz · · Score: 1, Insightful
      The only bad thing (and it's a big deal) about this is the possibility of damage to legitimate customers.

      You can just about eliminate that possibility. We do it this way: Registration/activation requires entry of:

      • UserID: John Doe 2287523 USA
        (contains users name, order number, and country hence unique per customer)
      • ID Key: 1234-5678-9012-3456

      These two are inextricably linked, and the ID Key is hashed into a wide space that ensures that even slightly similar UserID's won't have similar ID Keys. So:

      • If hacked ID Key is entered by accident and users legitimate UserID is entered, they don't match, and software is not enabled. No problem.

      • If correct ID Key is entered by user and hacked UserID is entered, they don't match, and software is not enabled. No problem.

      • If legitimate userid and legitimate enable code are entered, program installs and is enabled. No problem.

      • If hacked serial number is entered by user, and hacked user ID is also entered, then you know that the user is attempting to steal from you. Depending on your outlook, your faith in the legal/court system, or the existance of a legal structure at all that can be of use, you have your choice of actions to take.

      Numerous internal checks ensure that the entire validation subsystem remains intact, and code configuration alters with each revision of the software to make sure that hacking requires maximum effort with minimum reward. There's not a lot more you can do, we think.

      --
      I've fallen off your lawn, and I can't get up.
    15. Re:Too Far? by freakmn · · Score: 2, Insightful

      Would it still be extortion if you gave the key away for free? Say, if they e-mail you a request for it, you could mail it back? People might be caught in a decision between admitting piracy and recovering the contents of their home directory. If they do admit to it, they have a good chance of getting caught. If not, the contents are as good as deleted.

      --
      warning: This post is likely to contain gobs of dripping sarcasm. Consume at your own risk.
    16. Re:Too Far? by Waffle+Iron · · Score: 5, Insightful
      If you crack the software, you pay the consequences.

      In a civilized society, consequences are doled out by a court of law, not by vigilantes their software.

    17. Re:Too Far? by Cat_Byte · · Score: 4, Insightful

      That really sucks. The only pirated software I have is stuff that I actually own but would rather have a version that doesn't require the CD or something I own that the CD was damaged & I refused to pay $10 or whatever for a new CD. I have the license keys to back them up. If a pirated copy deleted my important calls you can bet I would be on the phone with support for hours until they restored all of my data they messed up.

      --
      Two roads diverged in a wood, and I - I took the one the bus load of girls just went down.
    18. Re:Too Far? by strictfoo · · Score: 5, Insightful

      then you know that the user is attempting to steal from you

      Untrue

      It's not common, but when I lose my key to a software product I have paid for, I don't bother with the (sometimes) huge hassle of trying to get it again. Over the past 7-8 years I'm sure I've registered many different software packages with many different email addresses so I usually have no idea what one goes with what software package.

      I am in no way stealing. This guy is out of line. Removing the home directory of a user is ridiculous. Just delete the f'en product directory.

      --
      I've just signed legislation that'll outlaw Russia forever. We'll begin bombing in five minutes.
    19. Re:Too Far? by Gudlyf · · Score: 2, Insightful
      Yes, I believe there are laws against just that. I recall a store owner rigging his ceiling windows with electrified wire, where he killed someone trying to break in. Anyway, he went to jail for manslaughter or something like that.

      You'd actually be able to sleep at night knowing you killed some poor drug addict who was strung out looking for a little cash for his latest fix, or some drunk college kid just looking to pull a prank? You're talking about killing someone!

      --
      Trolls lurk everywhere. Mod them down.
    20. Re:Too Far? by Zangief · · Score: 2, Insightful

      Well, if they trust the system to provide the app the date, you just give the app another library; your system can still use the right lib, so your dates are okay.

      If the app phones home to get the date, you just study the packets and eventually, you get to find out the right message.

    21. Re:Too Far? by PReDiToR · · Score: 4, Insightful

      to make sure that hacking requires maximum effort with minimum reward

      IANAH, but I play one on hackthissite dot org.

      I have spent hours learning to hack websites, applications and databases, I'm not great, but I found the process of learning fun.
      I don't think you can dissuade people from cracking your apps by making it hard work, the harder it is, the more credibility you get in cracking circles.

      The thing that gets to me is that coders and packagers can spend so long trying to lock up their apps that they spend time on that which could be spent debugging or advertising, fundraising for the next version or putting eye candy in the app so that the people who actually pay for software will find it attractive and pay for it because it looks professional.

      --

      Do not meddle in the affairs of geeks for they are subtle and quick to anger
    22. Re:Too Far? by gfxguy · · Score: 2, Insightful

      And that's more worth it than, say, just paying for the program you so desperately need?

      --
      Stupid sexy Flanders.
    23. Re:Too Far? by Znork · · Score: 3, Insightful

      "If they don't want to get maimed or killed, maybe they should have picked a different job."

      Does that go for any policemen, firemen, small children, spouses, relatives, housesitters, etc, who might actually have a reason to be there too?

      Or have you invented a new form of trap that magically springs only on the guilty?

    24. Re:Too Far? by Carewolf · · Score: 1, Insightful

      You have to put up warnings about it if you do. Commiting abitrary homicides or injury is illegal, and revenge is not a valid excuse.

      OTOH if you have clearly marked your house as a death-trap, he wouldn't really have an excuse.

    25. Re:Too Far? by thedillybar · · Score: 3, Insightful
      >If a pirated copy deleted my important calls you can bet I would be on the phone with support for hours until they restored all of my data they messed up.

      Almost modded this funny, then I realized you weren't try to be funny. Anyone who does this isn't going to have a support number, and isn't going to put up with your BS if they do. Clearly they don't care about customer satisfaction if they're wiping home directories. What makes you think they'll be able to recover your rm -rf ~ better than you can anyway?

    26. Re:Too Far? by drakaan · · Score: 4, Insightful

      They said "hacked serial numbers", not "pirated copies". You would have used your (legitimate) serial number and would have been unaffected, presumably.

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
    27. Re:Too Far? by Carewolf · · Score: 4, Insightful

      The funny thing is, this has gotten to point where the only "vendors" of shareware you can trust was essentially warez-sites, as the crackers compete in removing all the spyware, nackware, crippleware, and other attached diseases.

      When you download something of the official site, it will not work, spy on you, advertise random crap and now delete you home directory; but if you download it from a warez site, it is clean and functional. This counts even for software bought in shops, like Windows XP, which doesnt require "activation" in the cracked versions.

      No wonder piracy is on a rise!

    28. Re:Too Far? by ifwm · · Score: 3, Insightful

      "You'd actually be able to sleep at night knowing you killed some poor drug addict who was strung out looking for a little cash for his latest fix"

      Your emphasis is on the wrong guilty party there fella. While it is illegal to set traps to injure or kill people, no one MAKES junkies break into houses. If I did trap my place, I would sleep very well knowing they killed THEMSELVES.

    29. Re:Too Far? by Anonymous Coward · · Score: 1, Insightful

      You don't understand why people crack software.

      I used to crack software back in the '80s. I didn't crack software because I desperately needed it. I cracked software because it was a challenge and a thrill. It also helped me to learn to write better software. For my friends who also cracked, it was the same.

      I also bought nearly all the software I cracked.

    30. Re:Too Far? by Anonymous Coward · · Score: 2, Insightful

      I will warn you, then kill you if you do not leave. I dont have time to see if you have a gun, or even find out why you are there. I will shot at you till I am out of ammo

      You are just the exact kind of idiot who ends up in prison for manslaughter. I believe in the right to own guns but when I see people like you it really makes me wonder if letting the average Joe Idiot own a gun is such a great idea.

    31. Re:Too Far? by clifyt · · Score: 2, Insightful

      Whats the problem?

      They don't develop for Windows any more, but they do support it.

      I run one of the largest Emagic users groups on the net. Hell, half the folks that help moderate my site are Windows only and they have no problems using the software on Windows.

      Heck, the latest version of Logic Pro allows windows users to upgrade to all the latest plugins (excetp space designer) for around $200. I cashed my Windows license in, picked this up and bought myself a Mac. I know PLENTY of Mac users that got pissed off at this deal because they already bought most of the plugins and felt cheated.

      So what exactly did you loose? Nothing -- you got the software that works on your machine.

      Yeah -- this is one piece of software I have paid for...no free handouts for this one because I need it and it always takes Emagic to hand out the free auths for anyone I know that gets them.

      And that Oxygen copy -- its an alpha 'crack'. Lots of shit that doesn't work. Its not as bad as the Radium hack (they were the 'zero day' and still the biggest distributed version) but still unusable if you are a real musician (ie., lots of intonation problems as the auth codes were actually built into the tuning tables -- the crackers never could figure out a way around that).

      All in all, the point is software isn't like cake -- it doesn't get get rotten with age. You can still use it...I actually prefer 5.5 for a lot of things as the 6 series wasn't an update that I needed -- lots of hacks from the programmers to make nontechnical folks happy that pissed off the rest of us...you aren't missing a damn thing.

    32. Re:Too Far? by XMyth · · Score: 4, Insightful

      That's the thing though...."extra sales" ? There will be none. No one is going to say "well, it deleted my home dir...maybe I'll buy it!" This is pure retribution...plain and simple. Very short sighted, IMHO.

    33. Re:Too Far? by hazem · · Score: 4, Insightful

      And what happens when a bit error causes a JNE (Jump Not Equal) to become a JE (Jump Equal), and the correct information leads to your data being erased? All these checks are great, but it all really comes down to:

      if status=valid,
      run normally
      else
      delete all files
      end if

      If the stupid program can tell when a fake number is entered, it should simply refuse to run.

    34. Re:Too Far? by Gherald · · Score: 2, Insightful

      Yes it is worth it because usually one guy figures it out and posts a crack to keygen.us or somesuch. That is the (ahem) beauty of 3rd party software "fixes."

    35. Re:Too Far? by clifyt · · Score: 2, Insightful

      If ya want to nitpick,

      Quite honestly, I think the creator of a work should be able to indefinitely control his work no matter how long that may be.

      There is *NOTHING* in a work of art that is considered a need to humanity. Nothing. Remember -- copyrights protect works of art, not ideas. Patents are for ideas and I think 7 years is more than long enough to protect an idea.

      But copyright? Nothing that can save a mans life. Feed a starving nations children. Stop a speeding plane from hitting your building. Its a trivial work. As trivial as it is, the creator should be able to control it for as long as he wants.

      I believe works should come from a person -- anything that is written from the perspective of a business should not be copyrightable. A person should be able to allow a business to manage his copyrights, but the business should not be able to own it. Upon death of the author, the family should have a short while to profit off the copyright so as not to induce hardships. A short time would be far shorter than it is today.

      But all in all, I believe intellectual properties should be respected even if the law does not require it.

      "Talent, originality, and determination made the intellectual property back then."

      And it makes it today...unfortunately every motherfucker with a CD Burner or an internet connection now claims that they should have the right to reproduce this stuff -- and not require any talent to do so. Or at least one would think this is the popular group think from this site.

      "You're in the industry so you tell me, did all the artists that made it to the big leagues in your industry have money coming out of their behinds to actually pay for all the crap they needed to make a good impression and get signed?"

      What are your trying to prove with this question. Its goes to bias when you ask did ALL. No -- there are some thieves out there. In the hiphop world, folks brag about being thieves. Folks seem to like this and treat these idiots like ghetto kings. Yeah, Rock and Roll is all about being a rebel as well.

      So no, I don't think that all musicians made it there legitimately. Personally, I think if you have to make your art by ripping someone else off, you aren't an artist. Probably why some genrea have gone to idiots not calling themselves artists but entrepreneurs. They think its a big word and they look educated by using it. At least they aren't calling themselves artists and I can respect that.

      I don't know about you, but back in the day it cost me money to build my studio. I have two synths worth around $10k sitting in the studio. I had to earn those. I bought a decent Mac because thats what they big guys were using...my PC was much cheaper and was build from scraps. But thats what you did to be a pro.

      In the visual arts? My roommate spends around $100 on canvases every week or two. Can't be bothered to do that? Can't really steal it can you? Well ya can, just not as easily. His airbrush? Cost him around $350 before he ripped out the guts and replaces everything once or twice. His large format camera...Its like $6 or $7 per shot in the damn thing.

      So what is different between the way the old skool is with having to pay to learn the art and idiot children thinking they need to steal to get into their art? I learned 3D from using POVRay on a 486. It sounds like this is the area you are in...POVRay was free. Lots of free front ends for it that are probably much easier than it was back when I was using this crap. 48hours for a render was not uncalled for...come back over the weekend and find out its crap and start over.

      I've always seen the educations versions very inexpense and far cheaper than what it cost to get into my field.

      In my day job, I am a researcher and educator. My department is always trying to dodge why enrollments are down any particular year. Folks try to blame one department or another. This year they were claiming my department was pa

    36. Re:Too Far? by bahwi · · Score: 2, Insightful

      Because the damage is then minimal. Re-install and try it again. It really isn't a deterrent. It's like if you steal something from a store, all you have to do if you get caught is give the item back. That's not a deterent.

    37. Re:Too Far? by vadim_t · · Score: 2, Insightful

      1. It's not straightforward. There's no attempt to make a matching punishment. Say, what if due to the loss of the home directory you lose $1000? Some people have years of personal data there. This is about the equivalent of stripping somebody's house clean of all documents as revenge for a $30 theft.

      2. I'm an atheist. I couldn't care less about what Christians think about revenge, but my intelligence tells me randomly destroying people's data is going to backfire sooner or later, and it's wrong to begin with.

      Yes, actually I want the government to get involved. In fact, I'd even like to see this guy charged. This despite that I'm very far-left by US standards. While I think that the less government intervention the better, I think that allowing anybody who thinks they have been wronged to exact revenge in some arbitrary manner won't help maintain a stable society.

      Even as a developer, I don't think any program is so important as to destroy an user's data when it thinks it's been pirated. Programmers aren't perfect, we make mistakes. The damage could be done to the wrong person. It's also not our job to pronounce judgement over those who ilegally copy our works.

      This kind of revenge is also harmful if you want the small developers to prosper. If every developer out there did this kind of thing, eventually users would get annoyed enough with this. From there I can see several things they could do: Use exclusively software made by big companies, use only Free Software, or decide all this stuff is too dangerous and complicated. None of those options will do much good to small commercial software developers.

      Just take a look at those links in this article. This programmer got a *lot* of negative pubicity. Myself, I'll bookmark this to make sure I never buy anything from them. This isn't resulting in more capital, it resulted in stopping the development completely.

    38. Re:Too Far? by Mr.+Slippery · · Score: 2, Insightful
      Why do we always have so much sympathy for criminal scum in this society, and none for the victims?

      Oh, please. The US has the highest percentage of people incarcerated in the world, and is one of the few industrialized nations whose governement claims the right to kill citizens. Conditions in our overcrowded prisons have degenerated to the point where prisoner-on-prisoner sexual assault is considered a normal part of the sentence and a basis for jokes.

      Many of them are young men who can still grow up to be fine citizens, if placed in a decent environment.

      Allegations of "coddled criminals" don't withstand the lightest scrutiny. But it makes for damn fine politics..."My opponent is a wuss! I will be tough on crime!" Yeah, that's working really well.

      Every politician makes noise about the rights of victims; no one talks about the right of the accused except in the abstract, and any talk about the rights of a convict brings out the "tough on crime" blowhards, who seem to think that criminal acts indicate some kind of demonic possession that must be beaten out of a perpitrator.

      I'm all for the right to self-defense; I'm a gun owner and a martial arts instructor. But that right does not include killing or maiming another human being over a piece of property.

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
    39. Re:Too Far? by SnappleMaster · · Score: 2, Insightful

      Do what I do: write the CD key onto the CD itself.

      If I was not a nice person I would also say something like "and don't be such a retard - take care of your stuff".

      --
      Be happy. Nothing else matters.
    40. Re:Too Far? by Mycroft_VIII · · Score: 2, Insightful

      "ooh, I lost my car keys, I'll just steal this one instead"

      Actually it's more like 'I lost my car keys and the dealer/manufacturer won't sell me a replace for less than the cost of the whole car so I guess I'll have to just hotwire my own car"

      As far as using an online found key screwing the one guy who bought a copy with that key, well that's the fault of the game maker for using such a system and NOT printing the key on the cd at least.
      I've learned to copy my keys both into a blank book I bought and on the cd.
      I have one game I can't play because the key is missing, the funny thing is I lost it twice (my screw up) because after loosing the first time I went online for clues and found out the publisher had screwed up the cd key system on the release of the 'gold' edition with extras and had put up a key that worked on thier website in plain view for anyone who followed any one of many links. then a few months later win98 had one of it's classic total meltdowns and I lost it again during re-install. This is what taught me about cd keys on the CD itself, and backed up somewhere else just in case.

      Mycroft

      --
      https://signup.leagueoflegends.com/?ref=4c3ed6600b6ea
    41. Re:Too Far? by fucksl4shd0t · · Score: 4, Insightful

      Doing this is probably the only legally defendable kind of destructive copy-protection.

      Actually, there is no legally defendible copy protection of any sort. A pretty important nit to pick, really. The DMCA itself should actually be declared unconstitutional, because it is.

      You see, copy-protection violates the sacred arrangement that copyright represents: it prevents the software from entering the public domain upon expiration.

      The DMCA should be declared unconstitutional for this reason exactly, because it protects a method that is used to prevent copyrighted materials from being copied without the owner's permission, more or less indefinitely. Copyright is supposed to expire, and unless your copyprotection accounts for it, you're in violation.

      I'm still very much in favor of revoking copyright for people who use copy protection on their stuff and immediately forcing it into the public domain. So it should be legal to break the copy protection. If you want protection from the law, honor your end of the bargain and place the work into the public domain upon expiration of the copyright. If you don't want protection from the law, then go ahead and use copy protection. but don't whine about piracy, you had your choice.

      --
      Like what I said? You might like my music
    42. Re:Too Far? by tftp · · Score: 2, Insightful
      The purchase of serial numbers is usually done over email, and guess how easy it is to lose the whole account with some free email provider?

      Of course the email asks you to print it in triplicate and keep it in a safe place, but how many people do that? If they lose the serial and have to reinstall, what they are to do? It would not be illegal for them to use a pirated serial since they paid their due and they can even show the expense on the credit card bill.

    43. Re:Too Far? by farble1670 · · Score: 2, Insightful

      i don't think it's unreasonable to ask you to hang onto the CD and CD key. that's part of the deal.

      suppose you bought tix to a sporting event, and lost them. would it be okay if you broke into the venue through a back entrance? no problem right? you paid for the tickets right? or maybe they should just have an "i forget / lost my tickets" entrance you people like you.

      if you could ensure that everyone that enters in such a manner actually purchased tickets, then this really would not be a problem. the point is that THE TICKET IS THE ENSURANCE. the ticket how they verify that you paid for the event. by the same token, the software key is the ensurance that you actually purchased the software.

      by your reasoning, all software should be registration-less, key-less and based on the honor system. i'm guessing that won't work. nice idea though.

    44. Re:Too Far? by Kjella · · Score: 2, Insightful

      ...and if you go 5MPH over the limit, it's okay for your car to blow up? Nobody MADE you go 5MPH over, you killed YOURSELF. I suspect the bomb planter wouldn't get away with "As a speeder, he was a menace to everybody on the road. As another trafficant, it was my right to booby-trap his car."

      The punishment should fit the crime, and it is certainly not the victim's right to choose the appropriate punishment. That is what the court system is for, and why we have laws against vigilante justice.

      Kjella

      --
      Live today, because you never know what tomorrow brings
    45. Re:Too Far? by Anonymous Coward · · Score: 2, Insightful


      Of course the email asks you to print it in triplicate and keep it in a safe place, but how many people do that? If they lose the serial and have to reinstall, what they are to do? It would not be illegal for them to use a pirated serial since they paid their due and they can even show the expense on the credit card bill.


      Try to say that to the BSA when they knock down your doors and confiscate your computers.

    46. Re:Too Far? by drakaan · · Score: 3, Insightful

      If you can show the expense on the credit card bill, it shouldn't be hard to contact the software vendor and get a new key. Going to a site to get a hacked key is not only illegal, it's lazy and pointless, if you actually paid for it. If you're not savvy enough to have a copy of the serial number somewhere, does that mean the vendor should just say "oh, okay, use a hacked key"? How, exactly is he supposed to know that you bought the software but were too lazy to ask for a replacement key?

      --
      "Murphy was an optimist" - O'Toole's commentary on Murphy's Law
  2. While I sympathize, this is going to far. by Kenja · · Score: 5, Insightful

    I too have been stung by rampant piracy, however I would never do what these authors did for fear of the potential legal and ethical problems it could cause to knowingly sabotage someone's system. In my case the software in question is Net Weasel, a small HTML editor that has had millions of downloads, has several thousand active users bugging me for support and zero registrations (that's right, not a single person willing to pony up any money). Yet people still email me claiming to have a legitimate copy and demanding that I fix bugs or release a new version. As it happens I do have an updated version I use myself and I'm working on a 2.0, but until I come up with a way to stop people from writing cracks its just not worth my time to release. I'm already compressing and encrypting the executable, there's a point when the copy protection gets to be a bigger project then the application itself.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:While I sympathize, this is going to far. by jandrese · · Score: 4, Insightful

      Have you ever considered that perhaps you're charging too much for your software? Also, if people are flooding you with support requests for shareware, there is a good chance that they won't actually plop down $$$ for the software until it works as advertised. No matter how much work you put into your anti-piracy system, people won't pay for crap.

      I don't want to sound too harsh here, but if you take a hostile view of your customers, they will respond in kind. This might be a good opportunity to step back and see if there is anything you could be doing differently to make your product more buyable in the eyes of your consumers.

      --

      I read the internet for the articles.
    2. Re:While I sympathize, this is going to far. by Jerf · · Score: 2, Insightful

      zero registrations... I'm working on a 2.0

      Why?

      If your goal is to make money, I submit the market has already shown you what people are willing to pay for an HTML editor.

      Your decision, of course, but it is possible you are running on sheer inertia. Have you stopped for a moment and asked yourself if you really want to be doing this?

    3. Re:While I sympathize, this is going to far. by TedTschopp · · Score: 4, Insightful
      I don't want to sound too harsh here, but if you take a hostile view of your customers, they will respond in kind.

      Ummmmm.... By definition, they are not customers becuase they haven't purchased anything yet.

      --
      Fantasy remains a human right; we make in our measure and in our derivative mode... -- JRR Tolkien
    4. Re:While I sympathize, this is going to far. by Kenja · · Score: 2, Insightful
      "Why? If your goal is to make money, I submit the market has already shown you what people are willing to pay for an HTML editor."

      Because I use the program myself. In addition, the market has indeed shown what its willing to pay for a HTML editor, just look at programs like Home Site Builder.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    5. Re:While I sympathize, this is going to far. by DunbarTheInept · · Score: 2, Insightful

      No. Party one didn't necessarily steal the software. Perhaps Party One merely made a typo in the registration screen - a typo for which he'd like the program to tell him it's wrong and let him type it again.

      The problem with automated anti-piracy smack-downs like this is that they are going to register false positives. Like when the MPAA assumed that seeing a file by the name of "one.mpg" meant that the file must be the song "One" by Metallica, and that it must be a song for which you don't own the legal copy on CD or tape, and then acted accordingly.

      --

      Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

    6. Re:While I sympathize, this is going to far. by Wah · · Score: 2, Insightful

      Woah, slow down there TedT.

      By that definition, a customer has never walked into a store.

      I think that illustrates the point the other poster was trying to make. If there are thousands of people using the software, and many asking for support, then I can't see how directing them to a website that explains how one gets support (by buying the product) would be so difficult.

      It's got to be pay to work, because the scarcity properties of digital artifacts and our understanding of economics makes paying a hefty price more difficult than it would be normally. Especially if all we are paying for is the right to flip bits in a certain direction and in a prescribed consistent pattern.

      I'm not being a jerk, or saying everything should be free. Far from it. It's just a difficult problem to solve that involves changing the way certain ideas are concieved of. Looking at how difficult the problme is, at its core, is all I'm trying to get at with the above.

      However, the 'customer' thing goes back to the bazaars, and anybody who walks by your place is a 'potentail customer'. This, as it turns out statistically, make them part of a customer, and if you treat the part like the whole, it will become it.

      --
      +&x
    7. Re:While I sympathize, this is going to far. by Lumpy · · Score: 4, Insightful

      AMEN.

      Here's an example,

      there are gobs of DVD authoring apps out there, Most in the $199-$399 price range with the most expensive beign Scenerist at $30K+ All the cheap DVD authoring apps suck and make you do their "templates" that all look cheezy and crappy. So DVD authoring apps are pirated by most Indie and enthusiast movie makers.

      A year ago I found DVDlab, something with almost as much power as Scenarist and it costs $99.00.

      out of the 20 or so Indoe film Makers that had pirated versions of other DVD authoring apps, all but 3 of them have bought DVDlab.

      why?

      because it's affordable.

      software price is the #1 cause of piracy. why the hell pirate something when it's easier and cheaper to simply buy it?

      Most people are suspicious of software today. they are used to spending big $$$ for utter crap that only barely does what is promised. (Final Draft for example!) They are tired of being extored at every turn and paying huge $$$ to some guy that thinks being a programmer is worth more per hour than the engineers making high end bikes and other physical items that they know they own.

      Software is overpriced, espically consumer grade software.

      --
      Do not look at laser with remaining good eye.
    8. Re:While I sympathize, this is going to far. by HiThere · · Score: 2, Insightful

      If your application is already net-dependant, then that might be a reasonable approach. Otherwise... I often run without any net connectivity, and would find your approach extremely abusive.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    9. Re:While I sympathize, this is going to far. by gfody · · Score: 2, Insightful

      keygens only really popup for apps where its easy to modify the code that checks the key to make the key. most cracks are a single thoughtfully placed NOP instruction or two.

      its amazing the effort some developers will put in to securing their shareware at a high level but then have no idea how easy it is to circumvent at a low level. a compiled binary is no more secure than your source code. you can use a program like asprotect to encrypt the binary but it still needs to be decrypted at some point.

      until cpus have the ability to natively run encrypted/secured binaries there will always be cracks. and even then who knows

      one thing I find funny is that the developers of these $10-$20 shareware apps try like hell to make there own uncrackable key system or something. then the professional and enterprise software just uses some 3rd party library with cracks already available the day they release it.

      my advice for shareware develoeprs is to just make it easier to purchase! accept paypal, mastercard, visa, epay whatever.. put the ui right in the app, run a live key server, don't make me wait for an email before I can start using the software.

      --

      bite my glorious golden ass.
    10. Re:While I sympathize, this is going to far. by Anonymous Coward · · Score: 1, Insightful

      No one cares if you are going to be their "paying customer", because as you have made clear in your earlier posts you think that software is "too expensive" and "software engineers make more than high end bike mechanics" which is why it is pirated.

      Tell me, how much does it cost to develop software applications? You don't know do you Tim? You don't create (real) software, you don't sell software. It is obvious to me that most OSS users (not programmers) are like you: they think software should be free (as in beer). Of course, free as in freedom is used as a cover. The ONLY reason that OSS "get's" more popular is because its price is $0. Period. In particular, the corporations love the $0 price point. The executives are raking in the savings - they really appreciate it. The big suprise is that the OSS model is nonsustainable, so enjoy it while it lasts!

      How much should his HTML editor application cost in order not to be pirated? $100, $20, $10, $5? How much should developers make? $100,000? $50,000, $25,000? Please let me know, because I would like to tell you how much YOU should charge for your services and how much you should earn per year.

  3. Wow, what was his clickthru license like? by mveloso · · Score: 4, Insightful

    I'd love to read his license agreement.

  4. This guy is a criminal, and douche. by autopr0n · · Score: 4, Insightful

    If anyone lost any critical data due to this 'feature', there could be serious consequences. I'm not sure if rm -rf ~ on OSX makes the files unrecoverable, but the author ought to be liable to pay to recover the data.

    In fact, simply writing the software may have been illegal.

    If someone steals some CDs from you, you don't have the right to burn their house down.

    And, as a matter of fact the software in question may have been violating the GPL. It was basically a front-end to FFMPEG, which is GPL'd, and it may have come bundled with it.

    So basically the guy wrote an easy to use front end to some free software, and then trashed people's work when he stopped getting money from it.

    --
    autopr0n is like, down and stuff.
    1. Re:This guy is a criminal, and douche. by rd_syringe · · Score: 2, Insightful

      Bad analogy. It's more like he's letting you know that if someone steals the CDs, they will ignite into flames...so don't steal them.

      Frankly, I don't see what the big deal is here. Why should anyone care if they're not pirating software? Oh, wait...

  5. This author should be arrested. by pclminion · · Score: 2, Insightful
    I cannot see any reason why this shouldn't be classified as a trojan. The program does something vastly different than its expected purpose. The fact that the user was attempting to use the program without a valid serial number is immaterial.

    The author wrote and distributed a program with malicious intent and should be convicted of whichever computer-related offenses are most appropriate. Perhaps probation would be preferable to jail time, but I see no way to excuse this person's behavior.

    Any software developer with even a remote sense of reality realized long, long ago that preventing piracy is impossible. Make a product that people are willing to pay for, and they will pay for it. That's the best you can do.

  6. What the h*ll? by Kalroth · · Score: 5, Insightful

    I'm a professional software developer myself and while the software I work on isn't piracy prone, I'd never go this far.
    Disable your own software, do bad encodes, draw goatse/tubgirl images on the encodings, but dont, DONT mess with files that doesn't belong to your program.

    This is just plain immature, not to mention very wrong.
    And yes, it seems like the author already removed it, but putting it there in the first place is bad.

  7. Illegal? by Anonymous Coward · · Score: 5, Insightful

    I've read that adding timebombs to commercial binaries was potentially illegal. Wouldn't willful destruction of property (rm -rf ~) be even worse as victims would have an easier claim for damages?

  8. Mixed feelings about piracy by 31415926535897 · · Score: 5, Insightful

    I have some mixed feelings about piracy. I believe that, at the core, software piracy is morally reprehensible (sorry about using the term piracy for those of you that quibble about that, but it is the term used in the summary).

    As a software developer, I feel that I ought to get paid for the work I do. I do work for a company that pays me to develop, so it's really their responsibility to make sure their software isn't pirated (if they want to protect their business).

    Nevertheless, I feel that piracy can be benefically to any company, regardless of size. I think that it may even help smaller companies more than larger companies, because piracy may be the vehicle in which a particual software package becomes very popular. However, one has to realize that 100% of software can't be pirated, otherwise nobody would develop anything meaningful (excepting the free software movement, but that's something pretty special [and I do wholeheartedly support it, even with LOC when I can]--I am speaking in a manner of business). Like most things in economics, it probably requires the right critical mass (you need to have the right number/ratio of people buying your software to make you profitable, but you need to have a certian number/ratio of people pirating it to make it popular).

    I never think that software should ever use measures that destroy your property (digital or otherwise) as a means to prevent piracy. I am glad that the author of the software mentioned above took out the folder deleting technique--I cannot believe he did that in the first place.

  9. Re:pirates and all by AlexTheBeast · · Score: 4, Insightful

    The one point this guy makes is that piracy does hurt the small niche programmer.

    I have always been amazed that the large companies probably get a big benefit from releasing their software into world... people learn to use and depend on it... and eventually as the rep gets better, then sales improved.

    However, I have no doubt that piracy has really hurt programmers like this guy. He reports a 30% decrease in sells. I can understand why he is so desperate.

    Do two wrongs make a right?

    If you know a kid is going to steal a coke, is it okay to put poision in that coke?

    I don't know what is morally right or wrong, but I can understand why this guy is so worried.

    AlexTheBeast

  10. Addendum by Anonymous Coward · · Score: 4, Insightful
    I'd like to add that back when I was using windows, the first program that I ran into this with, bulletproof ftp, was actually able to detect a keygen'd serial number. It displayed a nasty message in the bpftp program and then opened up IE and took me to the ordering page on the bpftp site.

    I was impressed. I was maybe 16, and I wasn't necessarily using keygens because I hated companies or wanted to be malignant, I just had no money. This was the first program that had been able to detect a keygen'd serial. So, I actually bought a license for bpftp... (it was cheap anyway).

    Maybe I'm the only one who feels this way, but I had to hand it to 'em. It's a respect thing, I guess.

    Or maybe it was just adolescent "logic" running through my head. Nowadays it seems kind of dumb. Oh well, thank god I don't use windows anymore.

  11. One way to control piracy by Anonymous Coward · · Score: 1, Insightful

    Why not convince users to pay for software by only allowing registered users access to online support. People who pay for software a less likely to lend their logins.

  12. Brilliant! by meanfriend · · Score: 2, Insightful

    Make your software behave in such a way no one is willing to use it and then no one will pirate it!

    Seriously, this is not the first time a program detects a hacked serial key and then [insert some behaviour], though this is the worst measure I have ever heard of.

    Windows XP for instance doesnt allow you to install SP1 if you are using one of a few leaked keys.

    IIRC, CDRWIN (a cd-burning program) would slowly 'degrade' your burns over time if you used an invalid key. Very insiduous, as it would seem to work at first then slowly get worse and worse.

    What if you mis-type in your valid serial and the program thinks it now matches a banned key? Whoops!

    If you insist on deleting something on the detection of a hacked serial, then trash the programs binary, *not* the users whole home directory. That's just assanine.

  13. Deletes more by StevenHenderson · · Score: 1, Insightful
    a hacked serial number causes the software deleted the user's Home directory

    Yikes! Apparently it deletes the ability to recognize faults in grammar as well! :)

  14. Good for him by MarsDefenseMinister · · Score: 4, Insightful

    I'm a big supporter of free software, and am totally against software piracy. A contradiction? No SIR!

    Free software depends on adherence by users to an agreement with the developers not to illegally use the software in a proprietary manner. If we expect people to abide by free software licenses, we have to abide by commercial software licenses too.

    In my opinion, the only thing he did wrong was to not put a clause into his license that when the user clicks on it specifically authorizes the code to delete the home directory if it chooses to.

    Stop stealing music, software, etc. while at the same time expecting free software to remain free. It's hypocrisy.

    --
    No weapon in the arsenals of the world is so formidable as the will and moral courage of free men.-Ronald Reagan
  15. What about typos? by The_Rippa · · Score: 2, Insightful

    What happens if you enter a serial number incorrectly and it triggers the "hacked" serial code that deletes your files?

    And what about a random bug in the software that could end up doing the same?

    Personally, I wouldn't even consider running a piece of software that has the capacity to delete all my stuff.

    Wouldn't it make more sense to hit a webpage and save the ip number or something?

  16. Re:A Better Idea by mpe · · Score: 5, Insightful

    Instead of deleting the files, they should encrypt the files.
    The decryption key will be provided when the product is registered. :-)))))))


    This is likely to be only slightly less illegal than deleting someone's files.
    Effectivly you'd be holding someone's data to ransom.

  17. hitting back is illegal all the same by l3v1 · · Score: 4, Insightful

    No matter if they killed your dog first, if you kill theirs back in revenge you'll just as culpable as they are.

    On the other hand, I can understand the difficult situation of small companies defending theirselves (we've also had to deal with similar situations lately).

    I just don't accept this course of action. It just doesn't make him any different. Acting like this just proves his ignorance and inability to come up with a suitable defense (has not to be perfect, just enough to generate some reasonable income).

    --
    I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  18. Re:Check the EULA by themassiah · · Score: 4, Insightful

    This may be a troll, but I'll bite. Just because something is in writing, doesn't mean it's legit or legal! I could put a clause in my EULA saying "If you read this, I can take all your money and all your children's money", but that doesn't make it legal or enforceable.

    --
    - Sometimes you're the pidgeon, sometimes you're the statue.
  19. Re:Check the EULA by ValourX · · Score: 4, Insightful

    No, that is not true. A license cannot violate the laws of your country, and in the U.S. a license cannot take away any of your constitutional rights.

    A provision in a license does not give someone superpowers over you. The only remedy legally available to software distributors/makers/developers that have users who are breaking the terms of the license is: termination of the license. There is no way to legally destroy files on a user's machine no matter what they have done to you.

    -Jem

  20. Developers still don't get it by Teddy+Beartuzzi · · Score: 4, Insightful
    Pirates *aren't* your customer base. They don't buy software. They may use your program without paying, but they aren't a lost sale.

    Spending time trying to convert them into customers is completely wasted. Stop them from using your program with a perfect protection scheme, and all they'll do is use a different program.

    Do it in a rediculous manner like this joker, and all you're going to do is drive away your legitimate customers. I wouldn't pay for this thing in a million years. Who knows what crap this thing could pull in the future? All it takes is one bug, and suddenly it thinks legit users are pirates...

    This stunt he pulled has caused far more loss of sales for him than any software piracy.

  21. Better yet... by InThane · · Score: 4, Insightful

    Offer the codes for free. This way you get out of the extortion issue.

    However, in order to get the code, the person in question must prove their own identity... Opening themselves to criminal and civil charges.

    I like that.

    --
    InThane
  22. How about enlightened self interest (Re:Too Far?) by winwar · · Score: 4, Insightful

    Okay, so the person didn't have permission to use the software. I can certainly understand the urge to do something like this.

    However, consider the consequences. The publisher could get sued. Sure, he probably will (might?) win, but it costs money to defend. Oops, there goes more profit. The publisher loses goodwill (hard to define-but not all publicity is good publicity....). Oh, and maybe the publisher gets hacked/cracked by someone he has pissed off (people pirating software may not have the strongest morals/ethics/logic but some may be good at computers). Oops. There goes more profit.

    In short, I see a lot of downside and little upside. And I sure as heck wouldn't want to use a product as a LEGITIMATE user if I knew it was designed to screw up my system (even if only for illegitimate users).

  23. Rediculous extremes by 87C751 · · Score: 4, Insightful

    What ever happened to just not working when a bad S/N is entered? Not producing garbage output or destroying files, but just not working. If you're going to take the approach of pissing off the user, where's the justification in vandalizing the system to do it? Unless the programmer is trying to invite up-close-and-personal criticism.

    --
    Mail? Put "slashdot" in the subject to pass the spam filters.
    1. Re:Rediculous extremes by Just+Some+Guy · · Score: 3, Insightful
      What ever happened to just not working when a bad S/N is entered?

      Or even a known-pirate S/N that the installer used because they left the legitimate number lying on a notepad on their desk at home, and need to get system at a remote site up and running now?

      Back in the Windows 98 days, I found myself in the position more than once of having left the OS box with serial number at home, so I'd have to Google (well, AltaVista) for one of the popular warez versions so I could finish an install and go home. Note that I was not pirating anything; I had the legal right to install one copy of the OS, and I installed only one copy.

      So now I'm visiting my mom's city on a long weekend, and helping my sister install Echelon so that she can burn copies of her vacation video. Dang, the legit serial number is sitting in my mailspool behind a ridiculously paranoid firewall 500 miles away. I know - I'll just grab a S/N from the 'net to get her system going until I get home. Oops, sorry 'bout that, sis! Hope you had backups!

      --
      Dewey, what part of this looks like authorities should be involved?
  24. It's just like physical security... by blcamp · · Score: 2, Insightful

    ...you do what makes sense. You put locks on the doors. You put wooden dowels in your sliding patio door and windows if you are going on vacation. But you can't rig your locks to blow someone up if they attempt to break in your house. That's insanity.

    There's only so much you can (and should) do with software. Even the boys in Redmond have a line item to deal with lost sales due to hacked code - it's simply a fact of life that not everyone is going to be a paying customer; it's a cost of doing business.

    --
    The problem with socialism is that they always run out of other people's money. - Margaret Thatcher
  25. Piracy is sometimes due to copy protection. by vadim_t · · Score: 2, Insightful

    Seriously. It's much easier to pirate some games than to buy it. The amount of inconvenience involved in running the legal product is sometimes quite amazing.

    For example, recently I bought Neverwinter Nights and both expansions. Previoulsly I had the pirated NWN, but of course I couldn't play online with it. So after I found I in fact like it, I bought two copies of NWN + SoU, and then a HotU one too.

    Installing it on Linux was a bit unintuitive, but I can live with that. Next problem was that the font of the CD key was illegible, and "A", "R", and "O", "D" and "0" look the same. Just great, with a pirated CD it installs directly, and with the legal one I need to spend 15 minutes trying to figure out which is the right key. And what if I happen to find another valid one, but which is not mine?

    For the SoU expansion, Bioware forgot to include some background music. The sad thing about this is that the pirate copy of SoU probably comes with the sound files on the CD, or at least it's something that could be easily done.

    Then there are some games in which copy protection goes to ridiculous levels, like installing special drivers. I *hate* this kind of crap, which is almost all the games I play are on Linux, where this stuff hopefully will never become common.

  26. Undesired side effects by nv5 · · Score: 2, Insightful

    This type of action is a bit like a war. Bombing an apparently guilty party may make you feel better, and maybe even act as a deterrent to others.

    However, there will be innocent bystanders caught in the crossfire. And the author is giving up the moral (and in some jurisdictions the legal) high ground.

    I somehow doubt, that this software behaviour will increase his sales - possibly the opposite might happen, i.e. sales will tank, because legitimate users might be afraid to be caught in the crossfire. So while he may be able to re-appear (or have the software re-appear) under a different name, he therefore would lose the goodwill associated with his and the current software name.

    It is very understandable that someone reacts harshly to being under attack, but it does not necessarily make it the wisest thing to do, even for oneself.

  27. Was there a warning? by ugen · · Score: 2, Insightful

    I wonder if there was a warning. If BEFORE prompting user for a serial number there is a BIG RED warning stating that entering a "stolen" serial number will DELETE ALL YOUR DATA, then may be, just may be, I can see this as a legitimate, if boneheaded method. Of course if it were me, I'd cancel the installation and put this guy on a mental blacklist forever - who wants to deal with an a-hole. Still, that method would at least be remotely legal. As it stands, lots of you have said it before but I'll repeat it - erasing private data is a crime, period.

    Ah, on the topic of cost of software. The interesting thing is that software market is NO MARKET AT ALL! To be a market, one has to be provided with choices of a product doing substantially similar things with prices set by supply and demand and some competition to boot.
    Often in software there is no choice - there is one product doing one thing and sold at a fixed price set by developers. When there is a true choice of products, prices still don't seem to be set by the market. Rather, developers randomly set the price and users excercise their market power by pirating (i.e. leveragint their fear of illegal action or acting immorally vs. the cost being too high for functionality provided.) Want to reduce pirating - auction your software. The real price will be found very soon, but it will very likely be a lot lower then $20 most seem to be asking for. BTW, $20 is an astronomical price for all but the most complicated software packages geared for ahome user. I would bet that market set prices would be somwhere between 5 cents and 2$.

  28. Re:what if the sw makes a mistake? by gcaseye6677 · · Score: 2, Insightful

    Can I add a line that says I get your first born child if you pirate the software? You know, to provide a good court test of the power of EULAs.

    Common contract law would not allow you to just include any terms you want to in the agreement, even if someone accepts. And contracts cannot be used to justify illegal activity.

  29. Most effective forms are- by celerityfm · · Score: 3, Insightful

    First off I am dumbfounded that you have not sold a single copy of your software :( It looks really nice though and I'm sure if I had a need for an HTML editor I would consider your software!

    But I believe we already have some glowing examples of effective anti-piracy measures:

    #1) Counter-strike. The video game. Yes, Valve's CD-KEY system actually works here because in order to play the game you have to connect to a server. To be able to connect to a server your CDKEY has to match one of the keys in their database. To be able to play your EXE cannot be cracked/modified as MD5 checksums stop you from joining. I'm sure there are ways around this but I haven't read about anyone who has effectively cracked this mechanism for multiplayer yet. MMORPGs are another good example.

    #2) Windows. Microsoft gave up on focusing on the individual user a long, long time ago as Bill Gates realized the real money isn't in individual sales as much as it is in contracts with pc manufacturers to have windows preloaded on new PCs. It would be a little harder for DELL to put a pirated copy of Windows XP on every single computer they sell, so Microsoft eliminates piracy here by making the user buy Windows before they get the computer. Of course, there are ways around this too.

    #3) Extreme dongles. Forcing the users to attach a dongle to the computer while running the program makes things harder on the crackers. Not impossible to crack, but more effective then not having it.

    But overall the most effective copy protections involve some sort of online "serial # check" or program integerity check of some kind. Since your users are web developers then they'll most likely be online anyways this may work. But another poster pointed out that as long as you are letting people download a "time limited trial version" that unlocks by simply entering a serial code then you've got a problem since the most effective crack is to simply fool your program into thinking trial mode never ends.

    It may be better to just distribute a "crippled" version that cannot unlock and let people who buy the software get an "unlocked version" that pings you with a serial number. You start to see 2 serials pinging you, then you block the serial and tell the owner to contact you for a new #, etc.

    Course people will think your software is spying on them by pinging back to you.. so definetely go out of your way to explain whats going on to the user.

    Good luck!

    --
    ...unfortunately no one can be told what The Mat^H^H^HGoatse is...they must experience it for themselves...
  30. Well.... by SerpentMage · · Score: 3, Insightful

    1) The shareware can charge whatever price they feel is right. If the price is too high then nobody will register. It is the shareware author's choice.

    2) If you have a copy of the software that does not work as you expect it, then DON'T BUY IT, and don't ask for support. If you use the software then buy it! It is that simple.

    3) Piracy has NO justifications whatsoever. If you don't like it, use open source and don't pay a cent. But don't pirate because you are a cheap ass.

    --

    "You can't make a race horse of a pig"
    "No," said Samuel, "but you can make very fast pig"
    1. Re:Well.... by Anonymous Coward · · Score: 3, Insightful

      Piracy has NO justifications whatsoever.

      Blanket statements are rarely true. I infringe upon copyrights routinely. I believe that copyrights should have limited terms, and that the terms should be sensible. Therefore, I have no problem infringing upon ~15 year old copyrights, while respecting younger copyrights.

      Stupid kneejerk blanket statements, on the other hand, have NO justifications whatsoever ;)

  31. wrong, here's two examples by poptones · · Score: 2, Insightful
    Way back when it was in about version 2.something I sent money to the writer of ez-cd extractor. Back then it was (although it may still be) one of the easiest *high quality* rippers around. Last I looked it was up to about version 7.3 or so. Now, in that time I have moved two or three times (email, I mean) so I sometimes have a hard time remember which address to use to request the latest reg code - and EVERY new version lately needs a new reg code. Mostly this resulted in me not worrying about it (there are other ways now that are nearly as easy) but sometimes I'll want one of the features so I install it. Then I have to wait 3 or 4 days until he gets arund to emailing me my new reg code.

    often I have used "cracked" codes because the feature I wanted to use was not in the "free trial" version. So I am a legit user, but I am using a "cracked" code. So how is it right I am to be treated as a criminal?

    I sent the developers of ReGet Deluxe 20 bucks because I found it to be the "absolut" best download manager for windows. Unfortunately those wacky russians have decided I never paypal'd them that twenty bucks at all and have denied me support for quite some time. As a result I felt no unease at all about using cracked versions of their software.

    Of course, now that I no longer rely on windows they have been replaced by a very nice OSS package - RIP ReGet.) Quite frankly, I think ANY developer nowdays who tries to sell "consumer software" and worries about piracy is not too much different than, say, Dow suing that farmer in canada for growing "their" rape (or is it wheat?) when the seed blew in from neighboring pastureland.

    There is so much open source software nowdays it's becoming harder to find "shareware" that ISN'T in some way based at least partly on OSS. I have no qualms with someone trying to make a living writing software, I just think they need to choose their market carefully. Nowhere in our law does it PROMISE you an income simply for offering something for sale, and there are limits to how far one is allowed to go to "police" behavior.

  32. Piracy is NOT a problem. by baadfood · · Score: 2, Insightful

    Software developers that have a problem with piracy are making an incorrect assumption. And that is that anything other than a small fraction of their user base is willing to pay. They are, incorrectly, looking at the number of downloads, comparing that to the number of sales, and are seeing the difference as losses. They are not. I personally would never pay for Echelon. I may download it and use it if free, but if I had to pay for it, then it drops below my radar of things-I-want-to-do. Or, some other developer has a 30 day trial I can use. The point is, some random small shareware app very rarely does something Im willing to consider paying money for. 90% of things like echelon I download Ill run once, think "thats cute" then totally forget about. Im not willing to spend $10 or more a time simply because Im curious about something. Sheesh, Why these software authros think that their tool is going to become an indispensible part of my life such that I need to pay for it. Crikey. Anyway, if shareware authors stopped lamentin gthe rampant "piracy", which is users of their software who would never buy it anyway, and concentrated instead on expanding the base of paying users, then they just might get somewhere.

  33. Don't compare car and software by hsoft · · Score: 2, Insightful

    You can't buy a car and the clone a million time.

    --
    perception is reality
  34. Slashbots by HeghmoH · · Score: 2, Insightful

    When the RIAA proposes destroying people's stuff when they discover somebody who's pirated their music, everybody in the discussion is outraged.

    When a software write actually tries to destroy people's stuff when people pirate his program, half the people in the discussion cheer him on.

    Now, I know that slashdot's readership is a big group with diverse opinions. Even so, the sheer volume in both cases is staggering, and I'd have a hard time believing that there is no overlap.

    Can't you people see past your noses? It's the same thing, and equally wrong in both cases.

    --
    Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
  35. Re:How about enlightened self interest (Re:Too Far by dissy · · Score: 3, Insightful

    > The publisher could get sued.

    More like -will- get sued.

    I'd gladly admit to one count of copyright voilation and pay my dues if I could at the same time prove he deleted a million or two dollars worth of IP from my account.

    Then on top of it, toss in any/all new malware and trojan horse laws at him, add a pinch of whatever they are calling 'cyber terrorism' nowadays, mix, stir, sit back and laugh all the way to the bank.

    Worst part for the author about this, his software is 'out there'. It's not something he can easily take back.
    One could spend a few months cleaning up any piracy connections they have, building/collecting this few million dollars in ligit IP, and install his software knowing what will happen. Its alot harder to prove someone isnt stupid than it is to prove this software author intended for his program to do this.

    About the only recourse is posting a warning on his site that whichever version this is is seriously broken and will (read; WILL) cause damage to your system.
    I'm sure there are even courts that will not look favourably at that, based fully on his intent.

    Dude seriously needs some perspective.
    It may feel good to pump 12 rounds into an unarmed tresspasser, but comon...

  36. Won't be buying your software. by Godeke · · Score: 2, Insightful

    I have to agree with those who think that kind of "check the server" security is a kiss of death for software. Remember all the hoopla about Windows Activation? There was some foundation, which people seem to have forgotten, to the concern.

    If Microsoft was a smaller company (and here we are talking about tiny shareware companies) I would be concerned about the fact that you can install XP for only 30 days without activation. After that it goes dark. Now if Microsoft stops activating people's XP installations, you had better have your money in hand. [I am aware that corporations use a activation-less version: there is a reason it was demanded]. Unlikely, due to the size of the company and the backlash they would get, but...

    If TinyOneManShop goes under, I'm basically out my money. In this case it is $20, which probably wouldn't cause many tears. However, there are several games I bought on-line a while back. My machine got blown away and I replaced it. Put the games back on the new machine, but there was no way to actually play them because... suprise, they went out of business. Now I'm out $100 for entertainment product which no longer entertains. Or does anything. That pisses me off.

    Now look at a company like Macromedia. I refuse to purchase the newer versions of their software because they are playing this exact game. Well, that's all well and good as long as Macromedia doesn't decide to use it as a method of forced upgrades ("Sorry, your software doesn't activate anymore because Spiffy Version X is out") or just go out of buisiness.

    I have likewise had CAD/CAM software become unusable after Windows NT 4.0 SP6 because it nuked the hardware key drivers. I have had CD key checking software puke because I have a DVD and a CD-RW. Let's face it... either your software is good enough to survive some piracy or you probably shouldn't be in the market. People who *really* want a corporate package are willing to buy support. Heck, they buy support for OSS for goodness sake. Interesting: the one thing his users want is support, and he isn't willing to see *that*.

    --
    Sig under construction since 1998.
  37. Re:Did They Look At The Target Audience??? by Anonymous Coward · · Score: 1, Insightful

    You do realize a DVD itself is MPEG2? MPEG in general has countless legit uses as well such as game intros and cut scenes, home movies (my family just recently paid a large sum of $$$ to convert all their old film and casettes to DVD, for example), pr0n sites...

    Btw, DV is very low compression and designed for editing, not storage and not playback and not transmitting over the net. Professionals who can stay all DV instead of converting to some other digital format or to analog are a rarity, not the rule.

  38. Situational ethics? by Anonymous Coward · · Score: 1, Insightful

    When I lose the serial to a piece of software I own (read: software I have bought and paid for), I go to some website and find another serial for that program. I simply don't have the time to call and wait on hold (or email and wait for a response) only to try to convince the vendor that I'm a legitimate purchaser. Some vendors have streamlined procedures for handling this situation; many more, particularly small ISVs, do not.

    Am I behaving unethically? Should I simply throw myself on the mercy of the vendor? I don't think so. I own my copy of that program, and I don't lose my right to use it just because I haven't needed it in awhile and lost my serial. I don't need to get the vendor's permission to continue using it.

    The point being: if my home directory were deleted due to using a copied serial for a program I had legitimately purchased, just because some asshat like this guy decided to get tough on "pirates", I would sue his ass. Seriously. There's nothing inherently dirty, unethical or illegal about a serial number on a website; what matters is how that number is used. This is so way, way over the line that only a total idiot could think it a good idea.

  39. Suggestions by metamatic · · Score: 4, Insightful

    Well, I just took a look at Net Weasel. It looks to me as if you've made a few fairly basic mistakes from the marketing perspective, so let me try and come up with some helpful comments as to why you're not getting the response you're looking for.

    1. Firstly, as far as I can tell your product is an HTML editor with no CSS support. Well, these days that's like trying to sell a graphics editor that doesn't do PNG, or an e-mail program that doesn't handle attachments. Even people who don't want to do their entire site design in CSS still want to be able to do the neat stuff you can only do with CSS.

    2. Related to the above, HTML standards have changed a bit in the last 5 years, and you haven't kept up to date by the looks of things. Not valid XHTML, no DTD statement, and so on.

    3. You've chosen a field where there is massive amounts of competition, and that's never a good way to make money. Everyone and his dog has made a simple text editor that handles HTML and makes it a bit easier. So, even if you had the best HTML editor in the world, I still wouldn't expect you to be raking in big bucks, because you'd be up against at least half a dozen big companies with big advertising dollars, shelf space in every Best Buy, and major mindshare.

    4. Think about who your target market is. You're not going to stand a chance of cracking the pro web designer market with the product you have; pro web designers need CSS, template libraries, DTD validation, image slicing, applet and plugin integration, and so on. At the opposite end, you're not going to get the Joe Sixpack market either, because they'll see raw HTML and recoil in horror. So, you're going after what I'll call the "dabbler" market--people who've learned a bit of HTML for fun and want to build a small personal web site. That's a pretty small niche to be in.

    5. You don't have enough differentiation from the free offerings for that niche, in my view. Every half-decent free text editor can edit HTML with syntax coloring, and usually validate it and generate IMG tags too. You clearly know what your differentiators are, which is good: they're the table editor, the form editor and the frameset editor, and maybe the font dialog if it supported CSS, which it doesn't. Trouble is, dabblers generally don't need forms or tabular data--they use tables for layout, which it doesn't look as if your table editor is suitable for. They sometimes use framesets, but most of them know by now that frames suck. So, what can your product do that makes it an essential $20 upgrade from vim or jEdit? Nothing as far as I can see, and...

    6. ...if I've missed some compelling must-have functionality your program offers, then your web site needs drastic improvement.

    I don't honestly think that you can hope to make money in the market you're currently aiming at. To do so, you'd have to fix all the defects and shortcomings, and then come up with some "killer app" functionality to beat Mozilla Composer, jEdit and the rest.

    So you'd have to get up to date with the standards, and support XHTML and CSS. Then you'd need to add all the other features the free text editors have that people just expect these days, like file browsers, folding, abbreviations/macros, regexp search and replace, autosave, bracket/tag matching, multiple cut/paste buffers, and spelling correction. And then, you'd need to add more compelling features, like a graphical color selector with tools to help users pick complementary colors, and something to search and replace across multiple pages.

    That's a hell of a lot of work for a product which, realistically, people would still only pay $20 or $30 for. If I were you, I'd cut your losses and write software that does something nobody else has done yet, or nobody has done cheaply, or nobody else has done well.

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  40. Piracy is the worst enemy of free software by seguso · · Score: 2, Insightful
    Here is why I hate piracy: piracy is the worst enemy of free software (free as in freedom). More than patents.

    If everybody had to pay for every software he uses, common people (not just geeks) would become sensible and finally appreciate the value of free software.

    If piracy were impossible, I imagine 90% of the software would be free, with the exception of games. Microsoft, in particular, would be relegated to a niche market.

    If only "Palladium" were released, things could change --- OTOH we know it won't work: if it did, MS would commit suicide.

    "But a man can dream... a man can dream." ----Professor Hubert Farnsworth

  41. If the software got permission... by i_r_sensitive · · Score: 2, Insightful
    Folks have mentioned other targets, and other methods (encrypting files etc.) as possible alternatives. The essential problem is that you are still modifying a user's personal files and system without their permission. In any case, the actions you are taking are malicious and unsanctioned, and the potential for legal exposure exists. At the very least devs should leave files not directly related to the app alone. Not only good programming practice, but ethical as well.

    Having said that though, what about the case where the program detects a leaked serial number and immediately throws up a dialog. Said dialog tells you in no uncertain terms that the serial number supplied has been pirated, blah blah. Dialog then continues on to tell you that if you may continue the installation. Further the dialog explicitly and in horrifying detail tells you exactly what it will do if you do continue (erase ~, sleep with your wife, beat your kids, etc.) and then simply asks if you want to continue. If you're a nice guy, you make sure that they page down to the bottom of the dialog before allowing continue to be selected.

    Voila! Now you have gotten the users permission to punish him for pirating your code. IANAL, but it's probably even legal. Best of all, you can curb one mailicious and one stupid tendency in one pass, piracy, and not reading dialogs...

    --
    "Talk minus action equals nothing" - Joey Shithead, D.O.A.
    "Talk minus action equals /." -
  42. Re:chroot jail by jrockway · · Score: 4, Insightful

    My textbook "Exploiting Software" suggests that if you are able to overwrite the interrupt vector, you should do something malicious when a breakpoint is hit, like erase the disk. That should keep people from fucking with the internals of your program for a while. I see about 30 ways to get around this, but m0r0n h4c13r software cracker might not.

    Still kind of funny that a textbook suggests this :)

    --
    My other car is first.
  43. Re: Not far enough. by ultranova · · Score: 4, Insightful

    Data Bombs and similar devices may not be the most effective detterants, but with all the brainpower behind the open source movement, there has to be something that can help closed source projects keep security intact without resorting to mass-lawsuit ventures. Without adequate protection, cracks come out within days, if not hours, and ISO's are released as soon as the CD's hit the market.

    What, excatly speaking, does open source movement have to do with piracy ? Open source is all about making the source code of the program available to the end user; it has nothing whatsoever to do with removing copy protection from closed-source programs.

    Furthermore, all the various stupid copy protections do is make cracks sometimes an absolutely neccessary part in getting the program to run. For example, the (legally bought) game Morrowind kept crashing on my machine at startup because of copy protection check; applying the no-cd crack solved the problem completely. Copy protection does not slow pirates in any significant way, it simply annoys legal users.

    And deleting the users home directory simply ensures that no one will buy your products out of fear of them deleting their directories because of typos when entering serials or programming errors.

    --

    Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

  44. Wanna buy the Brooklyn Bridge? by Anonymous Coward · · Score: 1, Insightful

    With access to the binary, it is IMPOSSIBLE to protect a binary from being pirated. This is why neither DRM nor piracy protection nor Palladium schemes will ever work.

    I call DRM and other anti-piracy schemes "Brooklyn Bridge Technologies." Wanna buy some?

  45. Only solution to piracy...service model by Sivaram_Velauthapill · · Score: 2, Insightful

    The only solution to piracy is to move to a service-oriented model. Microsoft is moving towards this and I think all companies eventually will. For now, things like online activation will become more popular. These things are costly for a small company but perhaps some company will provide registration services to these companies (a business opportunity for an entrepreneur?).

    As internet access proliferates, piracy will just keep increasing. It's possible to host pirated stuff in some foreign "lawless" (in a computer industry sense) country. I can probably list at least 60 countries where this can be done right now.

    The increase in piracy is inevitable IMO. If piracy doesn't increase then it likely means that governments are cracking down on civil liberties. Civil liberties are more important than piracy and the only way for the software industry to do well is to move to a service-oriented or subscription-based system. In other words, DRM is very bad and should be rejected on civil liberty grounds; however, online activation is ok IMO...

    --
    Sivaram Velauthapillai
    Seeking the meaning of life... @slashdot of all places ;)
  46. Re:chroot jail by Mycroft_VIII · · Score: 2, Insightful

    While Joe cracker might not start a lawsuit 'hey I used an illeagle copy of your software and it killed my pc'. What happens when innocent guy who bought a copy with a valid number, when it was shipped, but has since been generated and used by a crack program gets HIS files deleted (or maybe the protection software mistakenly thinks his serial is bad).?
    I'd be suprised if he didn't get into trouble there.

    Mycroft

    --
    https://signup.leagueoflegends.com/?ref=4c3ed6600b6ea
  47. Ok well I'll thrown in my 2 cents by Sycraft-fu · · Score: 4, Insightful

    Not about piracy, but about your program. I think the reason you aren't seeing registrations is because you've made a pretty much unmarketable product. Now I'm not going to go and extinsevly play with it, but it looks to me like a bit of a glorified text editor. Looks like you've added some things like syntax highlighting, a couple wizards for building tables n' such and, well, that's about it.

    Ok, well that's nice. That is certianly more HTML related features than notepad, and even a bit more than my beloved UltraEdit. However, you still face the same problem: You have released a text editor. It has a couple nice features, but it's just a text editor in the end.

    Well, that's the kind of thing that most people will take for free, but just aren't willing to pay for. I mean there are some nice features over a basic one, but I have a feeling if you made copying impossible, most people would just do without.

    You aren't asking a lot, but then again, you don't give a lot. I mean your HTML wizards for tables and frames seem unique but, really, those aren't that useful. Your editor also lacks most of the advanced features that Ultraedit (slightly more expensive than you) or Textpad (slightly cheaper than you) have.

    Finally, your stuff is out of date. Tables and frames are NOT the recommend way for doing layout anymore, layers are. If I was going to get an editor that could help me do something in HTML, layers would be my top choice.

    So, what you need to do, if making money is your goal, is do something to make your editor more worth buying. Here are some directions you could take:

    1) Go the text editor route. Flush it out with support for huge files, hex editing, regular expressions, alternate encoding, macron, etc. Make it a full featured text editor to comete with Ultraedit, but add something more, like your HTML wizards.

    2) Go the wizards route, but have them for EVERYTHING. You list like 3 wizards (form, tables, frames). K, nice start, but you need to add a whole lot more. Layers, style sheets, DHTML, JavaScript, etc. Make it so that the wizards can more or less write anything for you.

    3) Go the visual route. Try and make something like Fireworks, only probably less featured (And also less espensive). Something for those that want the pointy-clicky but can't afford a Macromedia product.

    However where you are now, I'm not supprised that you aren't getting sales. Your product is nice, and maybe something I'd use for free, but I don't see that I'd want to pay for it, espically not instaead of Ultraedit or Textpad.

    Not trying to justify the copying, just trying to explain it and give you some ideas.

    Also, the whole OSS/GPL push doesn't help. People are becomming trained that little programs that are downloadable ought to be no cost. Software in a box costs money, not software on the web.

    Also, don't feel like no one ever buys things like this. The University of Arizona has a site license for Textpad. People do buy text editors, but you need to find an angle that someone doesn't ahve, or do it better than someone is doing it now.

  48. When someone else installs the warez on your PC by sstidman · · Score: 3, Insightful

    I would probably tend to be one to side with the "crackers deserve what they get" folks, being that I always pay for my software and don't like the fact that folks take stealing software so lightly. However, about a year ago I had installed some shareware that was somewhat crippled until a valid license key was entered. A friend of mine took the liberty of going to a warez site, finding a key for the software and entered that key. He did not ask me nor did he tell me he had activated the software. I found out when I came back from the bathroom. Had that software deleted my entire home directory, I would have been seriously ticked at my friend and the author of the software. I might have been ticked enough to talk to a lawyer.

    --
    Send/track messages to 100K people: www.xPressAlert.com
  49. Re:This is where things are warped by Anonymous Coward · · Score: 1, Insightful

    "Pirate" is a ridiculous loaded term. We are just copying and/or sharing information. The question is whether you believe the artist of information should have absolute control over how it is used. Personally, I find that an absurd & unenforceable ideal. Not to mention, undesirable. But feel free to keep on chasing the holy grail of totalitarian control over every computer. You should like the Microsoft/Intel/AMD/IBM/etc. sponsored Palladium, NGSCB, Trusted Computing Initiative.

    Have fun with your police state "Minority Report" all-your-data-are-belong-to-us system. Excuse me, but your shitty ideas of morality and ethics make me want to go vomit. Here is the solution to all this intellectual property crap. Artists need to get paid for PRODUCING art. (I use the term art broadly, to signify everything from software and movies to architecture and engineering designs.) They should NOT be paid every time their work is "used" or "copied" or "distributed."

    We need to return to a patronage type system, and fund it with compulsory licensing (flat-fee) that lets people access all information ever made. The alternative is the police state in every computer as Intel referred to "Trusted Computing."

    http://www.theregister.co.uk/2004/02/11/why_wire le ss_will_end_piracy/