Google Adds Licensing Server DRM To Android Market
eldavojohn writes "According to AfterDawn, Google has given app makers the option to use a license server as DRM to ensure the user has paid for an app before they can download it. Reportedly, the Market app will communicate with a Google license server using RSA encryption. It is important to note this is only available for non-free apps (built with SDK 1.5 and later), and it was instituted to provide a better solution to the old and widely criticized copy protection scheme that was susceptible to Android app piracy (like sideloading). For better or for worse, Android's Marketplace appears to now have an optional, phone-home form of DRM."
Following news of the new licensing service, Hexage Ltd, makers of a popular Android game called Radiant, released the data they had collected on piracy of Radiant over a 10-month period beginning last October. A series of charts shows total users, paid users and the piracy rate, by region.
Do no evil*
* Unless there is a significant financial interest to be evil.
Palm trees and 8
the jig is up.
"In true dialogue, both sides are willing to change" --Thich Nhat Hanh
If I had to choose between an app checking to see if the user purchased this from the Android store, or DRM schemes using various encryption techniques, remotely pushed keys, daemons that would disable Google accounts if they detected a phone was rooted, I'll take the simple API calls.
Maybe if paid apps for android market where available for everywhere, piracy rates would be much smaller. I'd rather google made paid apps available everywhere before they add DRM.
I don't fault Google for adding this in. They are trying to build up Android and one part of doing that is by developing a strong development ecosystem around it. The problem is if there is huge piracy numbers it's hard to get money behind developing an app for Android. By giving some businesses a little more comfort, they can help to encourage adoption of the platform as a viable development platform for a business.
Requiring a phone to be online in order to run an app, especially if it otherwise has no need to communicate with the Internet, will hurt users of non-phone Android devices such as the Archos 5 Internet Tablet. I hope any developer that feels the need to do this will use the Steam-style "cached response from the last time the app was run if no connection to the Market is available", as the article puts it, rather than the Assassin's Creed 2-style "only allow[ing] the app to start if the server is available to verify the license."
An apparent conclusion from these numbers is that the most important thing is to get a large number of users, since the larger number of users, the lower the piracy rate. :p
Good riddance to the freetards in life. Why should I pay more because THEY freeload.
At the great risk to my karma, I guess I have to just pipe up and say that I don't see the problem here.
License-server based apps have been selling on various platforms for years. Decades. Android now supports this, adding a little attraction to developers to invest time and money making an application for use on Android. Given the lack of QA on a great many Android apps (can anyone offer an explanation how Facebook for Android is such pure garbage, all jokes about content aside?) I for one see this as a step in the right direction.
Android developers, you now have a piracy deterrent for your applications you would like monetary compensation for creating, and more importantly, maintaining. I fail to see how this is evil and how any of the wry 'do-no-evil-lol' quips are deserved.
There's a spot in User Info for World of Warcraft account names? Really?
Also, a lot of people disagree with paying for apps as that goes against the purpose and concept of free software (and associated benefits/gains).
Except there are several genres of application that free software developers have so far failed to deliver. I've listed several other as-yet-uncloned apps in this comment.
You can see in the charts something like 98% piracy in South America.
This happens because... there's no way to buy applications if you're in South America. So, anyone with a paid application here *has* to pirate it.
Only 478 pirates in South America. I suspect these statistics are more about the quality of the game than the number of pirates in South America.
If this same thing was happening anywhere else (UniSoft? Battle.Net?) there would be outrage, but since it seems the majority of /. readers are pro-Android *and* Apple haters, then we're going to see an awful lot of, "there's nothing wrong" or "this is great" apologists.
Yey, I did a DRM in my pants, Yay!
With recent news about certain Android apps sending private information to whomever created it, I have recently installed DroidWall to filter access (e.g. - Battery meter apps!? Puh-leez!) to my phone's data connection.
If some app expects me to allow a data connection just to prove I am not a thief, sorry, I won't be buying it! And yes, I do purchase apps that I consider worthy.
And what happens if someone is abroad? Would they have to pay $20 in roaming charges to play some bubble bobble game for an hour while waiting in some airport?
any developer that feels the need to do this
should the app developer choose to
Steam-style "cached response from the last time the app was run if no connection to the Market is available"
try: is the network on; except: don't check for a license
It sounds like you two are in violent agreement.
What if artists/producers/companies doesn't want their cnntent freely ripped and distributed over the Internet?
I mean, if this DRM thing can't be solved within standards of HTML5/W3C, some people will wait for a very long time for standards based video over the web instead of Flash/Silverlight.
I am telling this slightly off topic video thing as Rob Glaser of Real Networks called Linux developers/users to come up with a DRM scheme. It was before this "Hulu" "iPlayer" things. Everyone laughed at him, used usual "real player is spyware" etc. karma whoring comments and now, everyone happily (!) boots into Windows to watch protected content.
Google, implements DRM on Linux now and it isn't against anyones ideological beliefs. If there is something to pick, it is that fact.
for *BSD becAuse Cycle; take a and I probably continues in a
Do I have to buy all my apps over again like with an iPhone?
Obama's legacy: (N)othing (S)ecure (A)nywhere and (T)error (S)imulation (A)dministration
... now I see why we have always been at war with Oceania - they are apparently stealing all our apps.
It's pretty amazing the North America piracy figure is so much lower. I wonder if that's the result of a far larger user base in NA? Or are Europeans (where I thought the figure would be similar) just have a more pirate-prone culture?
It would also be interesting to see beyond this static view, how many users they saw going from pirated to paid. That I think is the key figure to understand if piracy is a problem or a marketing tool.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
A knee-jerk reaction would be "The piracy rate is greater in Asia because they have less of a problem with stealing".
A more accurate reaction would probably be: "There are less paying customers because it is more complicated to transfer money to a North American store when you're in Asia, so the remaining users tend to be pirates."
I think the essential element you're missing is that Andriod's DRM is only an option. Otherwise you'd be right.
It is obvious that the piracy level is higher in regions where it is impossible to buy paid apps. For the sake of the application customers, application publishers and the Android ecosystem, please do something about it google. The ratio between paid versus free apps in the Android Market is extremely tilted towards free apps for this very reason. As long as there are countries where it is impossible to buy paid apps for Android there will be people who will pirate and crack the applications.
That's it! I'm going back to winmo, cause nothing like that ever happens on IT!
My abilities are only limited by my imagination
Even if Google encrypts the binary, it has to be decrypted somehow
Put cryptographic hardware in your CPU, and have it decrypt the binary inside the CPU at instruction cache miss time. The Capcom CPS-2 arcade board did something similar, coupling a crypto-processor and an MC68000 CPU.
(can anyone offer an explanation how Facebook for Android is such pure garbage, all jokes about content aside?)
Because the Facebook developers suck?
The iPhone Facebook app isn't much better. They finally got it stable, but that's after several versions and even then some people still have some crashing, and there are still plenty of missing features (I can filter the Newsfeed on the website to exclude those stupid facebook game posts people post every 5 seconds, but I can't seem to do the same on the phone? WTF??). If it wasn't for the narrow development approach apple takes, and that (I think) so many more iPhone users have Facebook installed than Android users** and were screaming at Facebook to get their act together, then it probably would have never gotten to the point it 's at now.
**PS: my hypothesis is that since Android users are more conscious about personal digital freedom, they are less likely to be Facebook users than iPhone users and there is less demand for the Android app than the iPhone app. It seems plausable but I have no proof to back this up. The point still stands that for a while the facebook app sucked very hard and I don't think it was primarily anything to do with any platform. Now it currently sucks a little.
"All great wisdom is contained in .signature files"
Free software types are not opposed to for-pay software, at all. The two concepts are not related.
This distinction was somewhat valid when one had to order software on tapes and disks. But in an era when the cost of distribution is just about zero, it's very difficult to charge for copyleft software.
What are the options to earn income from software that's entirely copyleft?
Access to the source and build systems, and the ability to distribute modified versions, are the real strengths of open software. By removing the freedom-to-run requirement it becomes easier to charge for software that still gives users all the freedoms that motivated Richard Stallman to start GNU and the FSF.
When will the newcomers to digital distribution ever stop whining about piracy?
There were (at least) two fundamental flaws with the original Android Market protection scheme, neither of which appears to have been rectified by this change (besides possibly to make matters worse for end users):
* As everyone has already noted, lots of people around the world with Android phones can't actually buy apps from Android Market, EVEN IF they have a Mastercard/Visa/AMEX card with dollar-denominated account. That's just plain fucked.
* You can't officially purchase and run protected Market apps if your phone is running an unblessed "Developer" kernel. Of course, there's not a single goddamn phone from HTC, Samsung, or Motorola with Google-blessed kernel that has BlueZ Bluetooth HID profile compiled into it, so it's impossible to build your own kernel with it enabled without being formally exiled from 99% of commercial Android apps. At least, unless you crack them. Any DRM scheme that forces legitimate users to crack apps they purchased in order to use them is fundamentally broken, especially when there are still gaping holes in Android phones that need a customer kernel to fix.
As for "developer's option" whether or not to cache, let's be honest... at least half the developers publishing commercial apps don't have the slightest clue in HELL how to implement a secure caching scheme, and they aren't going to purchase a proprietary one that demands more money up front than they're likely to earn from the app's sale. So, anybody care to guess what's going to happen? Most apps in Market are going to end up checking the server every goddamn time, because the alternatives are too hard/expensive for most Android publishers to deal with. IMHO, Google got THAT part EGREGIOUSLY wrong. They should have distributed the Android DRM module themselves, and made it free & easy for publishers to do cached checking, but left it difficult and minimally-documented how to bypass that caching and check the server every time.
I love Android. I really do. But it's so incredibly frustrating when Google turns around and fucks things up in ways that CAN'T be fixed by end users with access to Android's sourcecode... usually, mistakes that are almost incomprehensible given the amount of in-house talent and expertise Google has available to it. At times, Google actually manages to make even *Microsoft* look coherent and customer-focused.
It requires an internet connection in order to launch. I can't play this game when I'm on an airplane, because of this bullshit. I'm only interested in playing this game in situations where I'm bored and have no internet access, so this really pisses me off. I look forward to the day I can crack it and because Namco chose to use such an obtrusive DRM, I will NO longer buy their games.
If you have to infringe because the legitimate publisher doesn't want to take your money, then copyright is failing "To promote the Progress of Science and useful Arts".
You don't "have" to infringe.
You can do without - or make something better. That is what drives things forward.
The fan has been obsessed with recreating Star Trek: TOS. But the technology is there for the him to make on original space opera, action adventure, or whatever he chooses.
If he needs a starting point, there are classics in the genre that haven't been dramatized in the last half century or so and are accessible to anyone: Science Fiction (Bookshelf)
The only thing DRM is good for is using the white paper to wipe my ass. Nothing has EVER been made better by DRM, nor has the public ever been given much of a chance against it. This is reason enough to tell Android to join the club of unused junk in my closet. Sucks because I really like the (idea of an) open environment. Too bad it isn't really open to anyone but google and the phone companies they have gone to bed with. Remember, the choices you make today may be small, but they may lead to huge mistakes tomorrow. Choose wisely.
"Computers are a lot like Air Conditioners" "They both work great until you start opening Windows"
There is a need for more than one application market, book market, movie market... Who cares if a $1.99 cell phone game or a $4.95 e-book are DRMed? If you expect any of these to be a masterpiece to share with your grandchildren, you value them way more than their author apparently does. Conversely, a durable hardcover book or an application that handles your important data and guarantees it to be available decades later is worth a lot more. It may make some time, but consumer application developers will start to wonder how to provide value that sells for more than two bucks per copy.
http://www.flashgamehole.com/sk/Barbie-Hry.html
http://www.flashgamehole.com/en/Cooking-Games.html
http://www.flashgamehole.com/en/Dress-Up-Games.html
http://www.flashgamehole.com/en/Ben-10-Games.html
http://www.flashgamehole.com/id/Barbie-permainan.html
I'm unable to find any evidence, that the charts from the announcement are actually from Hexage. It's not on their homepage and not in their Twitter feed...
Can anyone point me to the announcement?
What does a phrase from the US Constitution have to do with selling copyrighted software in South America?
For one thing, Google and many of these application publishers are in the United States. For another, the United States Trade Representative has been pushing "free trade agreements" with other countries, such as Australia and the countries of South America, that in essence require other parties in the treaty to implement copyright as the United States knows it.
for better or worse, copyright is a property right
Counties, which have jurisdiction over real property, levy property taxes on real property. This way, the owner of unused land has an incentive to either use or sell the land. So why doesn't the federal government, which has jurisdiction over copyright, levy property taxes on copyright?
That was exactly my thought when I saw this story. "Cue the Android apologists!" (aka Apple haters). I've seen a bunch of posts justifying this, all using reasons that would also apply to Apple's App Store, but somehow it's okay when Android does it. I can see why both platforms might want some non-intrusive DRM, but it's amusing to watch people give a free pass to Android when they'd be screaming "walled garden!!" if it was Apple.
I guess hypocrisy has been open sourced because hypocrisy wants to be free!!