Slashdot Mirror


Denuvo DRM Challenges Game Crackers

jones_supa writes Now that the PC gaming community has grown very large, it has become only a matter of hours before the copy protection of a major AAA title is cracked and put up for download after its official release, or sometimes, even before. However, it looks like CI Games is having great luck with its recently launched next-gen video game known as Lords of the Fallen, as its PC DRM still remains uncracked now after 3 days of release. The DRM solution that the game uses comes from a copyright protection company known as Denuvo, and it is apparently the same one that has been used in FIFA 15, which is also yet uncracked. While this DRM has kept the game from being pirated until now, it has also been speculated that this solution is supposedly the main cause behind several in-game bugs and crashes that are affecting users' gameplay experience. To improve stability, the developer is working on a patch that is aimed at fixing all performance issues. It remains officially unconfirmed if the new DRM solution is really causing all the glitches.

34 of 187 comments (clear)

  1. This is news, how exactly? by TranceThrust · · Score: 5, Insightful

    Since years the hacker communities have raced to hack DRMs, and since even before DRM had that name it was that kind of `protection' that harmed the gaming experience of people who do pay for their software. EA should grow up and realise DRM is not harming sales; they are harming their customers. Of course we know EA doesn't care given that they like to harm their game devs as well as their own games as well. Join the boycott of these fools.

    1. Re:This is news, how exactly? by mark-t · · Score: 4, Informative

      EA should grow up and realise DRM is not harming sales; they are harming their customers.

      It's interesting you should observe that, because in the end, It's the bottom line that allows game companies to pay their developers to continue to develop more titles, and what the actual customer experience is going to be is a direct reflection of how many titles they actually sold, not necessarily what people think of the experience afterward. Customer experience only impacts them to the extent that it might theoretically influence future purchases from such customers, but as you've observed, DRM isn't particularly harmful to sales in the first place, so any bad customer experience from it isn't actually giving such game companies sufficient disincentive to stop them from continuing to use it.

    2. Re:This is news, how exactly? by The+Ickle+Jones · · Score: 5, Insightful

      People should just stop buying products from companies that are hostile towards their own customers. If they don't, and they get screwed, part of the blame falls on them for buying from a scumbag company.

    3. Re:This is news, how exactly? by CohibaVancouver · · Score: 4, Insightful

      This.

      Let the market decide. If DRM angers you, don't buy games from companies that use DRM.

    4. Re:This is news, how exactly? by lgw · · Score: 2

      Are your replying to the right post?

      BTW "Profit" is only a bad word if you're a villain in an Ayn Rand novel. Profit just measures the difference between how much X cost to create and delver from how much X was worth to someone - that is, the value created. It's not a bad thing.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    5. Re: This is news, how exactly? by greenfruitsalad · · Score: 4, Insightful

      i have an artificial ceiling on game prices. i am mentally unable to convince myself a game can be worth more than 9.99 no matter what. and even that is only for an AAA title or good flight simulator. fortunately, i've grown out of impatience long ago and don't mind buying the likes of Crysis 3 a year or 2 after release.

      last year I decided to see what this steam thing was and installed it on my linux machine. it was during their christmas game sale. a LOT of slightly dated AAA (windows) games went for 3 - 9.99. now here's the thing. at those prices i bought around 40 games, most of which i later decided i didn't like and only played a few minutes of and some of them i never even installed. and at those prices, i didn't care!

      but paying 60+ dollars for a game? simply NEVER GONNA HAPPEN!!! incompatible with a healthy human brain. distributors need to realise that for every sucker who pays, there are 100s willing to pay a sensible price (not steal). and for each of those, there are even more willing to buy it as a hmmm i'll play it when kids grow up for a dollar or two.

    6. Re: This is news, how exactly? by Fnord666 · · Score: 3, Insightful

      i have an artificial ceiling on game prices. i am mentally unable to convince myself a game can be worth more than 9.99 no matter what. and even that is only for an AAA title or good flight simulator. fortunately, i've grown out of impatience long ago and don't mind buying the likes of Crysis 3 a year or 2 after release.

      The other nice thing about this is that you can game on modest hardware rather than needing bleeding edge, expensive components in your rig.

      --
      'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
    7. Re:This is news, how exactly? by meerling · · Score: 2

      Not that easy. I've bought games that made no declarations of DRM, and yet the bastards stealth installed really intrusive DRM that fucked up other things on my machine until they were identified and removed with extreme prejudice.

      Non-intrusive DRM isn't that bad, like cd keys, and isn't worth the effort to remove.
      I reserve the removals for anything that annoys me or interferes with anything.

      And yes, I'm glad there are people out there who crack everything and make the option available for the rest of us.

      (Back when Baldur's Gate first came out, the DRM thrashed the drive and slowed things down so much, most of my friends couldn't even play, and we all had purchased full price commercial copies. I found a crack, that suddenly made the game about 5 times faster and made the thrashing disappear completely. The DRM was the issue. After a few months, the company released a patch that killed the DRM, and low and behold, the game became playable for everyone.)

    8. Re: This is news, how exactly? by jratcliffe · · Score: 4, Interesting

      but paying 60+ dollars for a game? simply NEVER GONNA HAPPEN!!! incompatible with a healthy human brain. distributors need to realise that for every sucker who pays, there are 100s willing to pay a sensible price (not steal). and for each of those, there are even more willing to buy it as a hmmm i'll play it when kids grow up for a dollar or two.

      Don't you think that distributors actually have thought this through, and have done a lot of research on price elasticity in games? Why would you assume that people for whom the pricing of games is a multi-million or multi-billion dollar question are totally wrong about optimal pricing, and instead that your own personal price elasticity curve holds true for the population as a whole?

      You say that, for every "sucker" who pays $60, there are "100s willing to pay a sensible price." Modern Warfare 3 sold 6.5 million copies on its first day, in the US and UK, at $60/copy. You really believe that, at $10, it would have sold 650 million copies? That's more than the combined population of those two countries put together.

  2. Re:Makes you wonder... by X0563511 · · Score: 4, Insightful

    Because publishers care about money. They are the recording industry analogs in the gaming industry. They don't care about the artists (developers) or the art (games).

    --
    For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
  3. Even more news by NotInHere · · Score: 3, Funny

    A title hasn't been cracked for 3 days and made it to slashdot in that time.

    1. Re:Even more news by Luckyo · · Score: 2

      And it hasn't been cracked mainly because crackers usually take a while to crack a new DRM scheme. After it's initially cracked, same scheme applied to other games has severe diminishing returns and is cracked very rapidly.

  4. I bet those games are so boring by loonycyborg · · Score: 5, Insightful

    that the biggest part of their entertainment value is in cracking the DRM.

  5. Only three days? by Sigma+7 · · Score: 4, Informative

    Par is actually a few months.

    Let me know if this Denuvo DRM remains uncracked for as long as Spiro: Year of the Dragon, which had various traps to detect incomplete cracks, and delay the crackers for the initial wave of sales to be completed.

    1. Re:Only three days? by buckfeta2014 · · Score: 2

      Last time I checked, Spyro YotD was cracked. All they had to do was bypass the modchip checks. I had a burned copy.

      --
      Buck Feta. You know what to do.
  6. If you ask me.... by mark-t · · Score: 4, Insightful

    ... the only reason that it's not been cracked yet may be because of apathy.... more specifically, it isn't popular enough yet, or possibly not good enough to have warranted the attention of enough crackers to have made a working crack by this point. This story being on a tech journal might increase awareness slightly in that regard, and could conceivably act as an impetus that causes a crack to appear sooner rather than later, but I wouldn't suggest that is a particularly probable outcome, only that it is well within the realm of possibility.

    1. Re:If you ask me.... by Anonymous Coward · · Score: 4, Informative

      I've been out of the scene for a while, but asking around, Denuvo == Sony DADC/SecuROM peeps. It's just the new version of SuckuROM. Yawn.

      They're quite proud of how twitchy their protection is. Bugs in this case are indeed often due to the protection hooks and false-positives, but it sounds like this game is also unfinished and buggy. I guess that's one way to complicate testing.

      There's a tool ready for DNV, back from FIFA 14 (took almost 2 months for RLD to develop the tools). FIFA 15 is probably just being tested. My guess is that nobody really cares until something major's done, and no, "oh look another football game" isn't major. Then it'll be a race between the big-time groups, but my money's on RLD.

  7. Re:Aren't the crackers pro-DRM? by jones_supa · · Score: 3, Informative

    Microsoft has taken the approach for over a decade that it's better for people to use pirated Windows than an alternative OS.

    AFAIK Windows 8's WGA hasn't been cracked yet. We don't have a "Daz Loader" like we have for Windows 7. All the pirate activation solutions for Win8 are some kind of KMS (Key Management Server) running inside virtual machine or a similar workaround solution.

    All in all, I would say that these days some really sophisticated copy protections can be engineered, such as WGA or SonyPS3 (which took very long time to crack). Whether this is a good or bad thing, I'm not sure. The times when I have had to activate Microsoft products over phone while entering the long-ass string of numbers using the phone number pad, I would say that it's a bad thing.

  8. Re:Aren't the crackers pro-DRM? by Anonymous Coward · · Score: 5, Funny

    You're talking about Windows 8 here, my bet is no one had any interest in trying to crack that piece of shit.

  9. Re:Makes you wonder... by ScrewMaster · · Score: 2

    Technically, what they care about is control of distribution, because in their (relatively tiny) minds, that equates directly to profit. Loss of control is likewise perceived as inevitably causing loss of profit. That they might make even more money with a less dickish business model is way outside their comfort zone, because all they understand is what always worked before.

    So yes, they are analogs to the recording industry. Those legitimate customers who are harmed by the quest to control content distribution are acceptable collateral damage.

    --
    The higher the technology, the sharper that two-edged sword.
  10. Re:Makes you wonder... by nanoflower · · Score: 4, Insightful

    The way I've heard it told is that companies don't care about having uncrackable DRM. What they want is DRM that won't be cracked during that initial sales rush that comes upon release of a new game. If the game's DRM is cracked a month or more after release that won't impact the sales in the way that having the DRM cracked in the first week would. That's why some companies have even removed DRM from games that have been out for some time. (Admittedly the games were out for years but still.)

  11. Call to Arms? by DumbSwede · · Score: 2

    3 days you say – oh noes.
     
    Let's add some moral outrage at maybe DRM involved in buggy behavior.

    I am against DRM in general, but by the same token I'm not one to encourage other people to break it.
    Jones_Supa gets an article posted, but perhaps is really trying to motivate the community to open this cookie-jar for him. Hidden agenda much?

  12. What's the process? by AnotherAnonymousUser · · Score: 2

    I'm curious to know what the process is for cracking a game - what do crackers usually have to do to find what the game is requiring for activation? Anyone out there with experience that would care to enlighten myself and other interested readers?

    1. Re:What's the process? by DMUTPeregrine · · Score: 3, Insightful

      In an extremely general sense:
      Somewhere in the program the validation code will either pass or fail. This is done with a conditional branch instruction in the assembly. Crackers use a debugger to find where this branch is, then change it to an instruction that will always branch to the pass condition.

      Of course there are countermeasures used, and sometimes crackers will be able to reverse-engineer the validation check to create a keygen, etc, but the general process is still to disassemble the executable and modify or inspect the validation check.

      --
      Not a sentence!
    2. Re:What's the process? by Anonymous Coward · · Score: 2, Informative

      One classic method for weak protections like CD keys etc. looks something like this (details can vary heavily based on personal preference though):

      1) Deliberately put in a bad key to get an error message like "Sorry, the CD key you entered is invalid. Please check the key and try again.".
      2) Find that string in the executable (with e.g. a hex editor) or the in-memory image (with a debugger).
      3) Search the executable for pointers to the string (this usually means applying an offset for the base of the executable in virtual memory) or set a read watchpoint on it with the debugger to find the "bad key" subroutine.
      4) Search for jumps/calls to the bad key subroutine (or follow the stack back if using a debugger) to find the key check subroutine.
      5) Read the key check subroutine to find the conditional jump that decides whether the key is valid or not.
      6) Depending on which way the condition is set up, either change the jump to an unconditional jump or change it to a NOP (or if you're extra-lazy, reverse the condition of the jump, which breaks valid keys)

      As "verification" techniques become more complex and specialized, so do the reverse-engineering techniques. The fundamental approach is to figure out what the developer has done to break the program, and then fix it, iterating and testing as necessary to find all the places where they broke it.

    3. Re:What's the process? by Wootery · · Score: 2

      given the digital nature of the products

      Man, digital software!?

    4. Re:What's the process? by Bite+The+Pillow · · Score: 2

      Often you don't know until people complain. Loudly.

      http://www.gamasutra.com/view/...

  13. That's really bad for Fifa15 by burni2 · · Score: 2

    Because now it's only a game for not the target audience intended (mass market)

    - just for the some who bought it because they buy every Fifa game and win the World Championship in under two days, or now the difficulty level will be more hardcore (your team crashed)

    - the crackers that have something very interesting to bang their heads on

    The game misses marketing effect of a good working crack, that will drive the starting sales, well and what I read strike the good working.

    So to conclude, warez and crackz are really a very good marketing strategy. And that game has nothing of it just the drawbacks. I would be interested in a sales graph showing sales of cracked games vs. resilient games. Very Hard DRM seems not to be a good investment, a medium hard cheap DRM is good, because totally without DRM would look like it's worth nothing.

    Example for Crackz, Keyz, Warez == good marketing
    If Windows 8.1 would be crackable the percentage of Windows7 would have decreased more. Answer yourself how Microsoft gained that WindowsXP dominance ? Well because the marketing guys at MS weren't such lunatics to kill the infamous "MSDN-Gold-Key" in over 7 years of it's existence! And don't tell me that they couldn't they just don't wanted to. But when Vista had adaption problems and win7 was on the verge, they kill the alternative. Fueling the legitimite used Software-License trading (which is legal in the EU).

  14. It has been cracked by Karmashock · · Score: 3, Informative

    I just looked online to see if there really was no crack for this title. No interest in playing the game mind you... free or not.

    It has been cracked.

    What they're saying is that in its cracked form it still has the crashes and bugs that the game has normally. They are suggesting that they are working on a more comprehensive crack that strips out the DRM completely enough that it not only permits game play but also improves it beyond what paying customers enjoy.

    Also... nothing new. I've downloaded cracks for a lot of games that I bought because the DRM was so offensive that the only way to enjoy the game was to use the crack to strip the DRM off.

    Anywho. DRM defeated. First law of computer security wins again.

    --
    I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
  15. Re:Let me know by jones_supa · · Score: 3, Informative

    Let me know when it's on sale for $5 bucks on Steam :).

    Actually you can use steamalerts.com for that. It allows you to set an arbitrary price point for a game and when it goes under that, you receive an e-mail notification.

  16. Re:Makes you wonder... by Dutch+Gun · · Score: 3, Interesting

    Because many game's sales over time tends to look like a logarithmic curve. Sales are stacked at the launch and drop dramatically after that, flattening into a long tail. My guess is they don't care about what happens after a few weeks, so long as they can maximize the profits during the initial sales period.

    Still, from my perspective (as a game developer and player), it's not really worth it. Any sort of reasonably effective PC-based DRM is, by nature, going to be intrusive, because it's not built in as a seamless part of the platform (which is why fewer gamers mind the less intrusive DRM of console games or even Steam's DRM, IMO). I'm certainly not planning on releasing my game with any DRM, since I think that's a selling point for many players. Honestly, I'm more interested in the long tail anyhow, since my games have lower up-front development costs than big AAA games.

    A DRM-based fight is really a no-win battle in the long run, so it seems pointless to fight such a war in the first place to me, especially 100% of the collateral damage is your paying customers. Just make peace with the fact that some people won't want to pay for the game. Instead, focus on building a community that wants to support your development efforts in order to encourage development of more of the games they like. You know... don't be jerks, don't be greedy, listen to your customers, and build quality products. Radical stuff, I know.

    To be honest, one of the things that's baffled me over the years is how entertainment-focused companies and even entire industries can generate such hatred and loathing. You would think it wouldn't be so hard to have a favorable public opinion when your entire business is delivering entertainment products that people willingly spend their discretionary income on.

    --
    Irony: Agile development has too much intertia to be abandoned now.
  17. NO MORE DRM by darkain · · Score: 5, Interesting

    I stopped buying DRMed products after purchasing Unreal Tournament 2004 a decade ago. That game had two releases: the normal release (7 CDs) or a special collectors edition that shipped on a DVD and came with a ton of bonuses. This was one of the first big commercial titles to ship on DVD instead, and was supposed to be a super simple install process. The game was supposed to install faster, and no disc swapping during install! Clean and simple, right?

    Well, the DRM that existed on the DVD version was absolutely broken. After a few hundred (maybe even a few thousand?) of us went to the Epic forums to bitch about the issue, they finally admitted that the errors occurring during install were related to the DRM, a bug which didn't exist in the CD copy. Yes, that's right. Only those of us that paid the premium to purchase the collectors addition were screwed in our asses due to the DRM.

    After a few days, there was no fix, so a buddy of mine brought over a pirated copy he downloaded of the 'net, so I could play the game.

    The game was still mass pirated. Those of us who legitimately purchased it were totally screwed over. This really helped the company, so I've yet to purchase any more of their games on disc since then, and never again will.

  18. It's also useless by Sycraft-fu · · Score: 4, Insightful

    The idea that bitchy DRM is what you need to make money is silly. The bitchier the DRM, the more it costs you in terms of implementation and support and, guess what, it turns out that a great many of those pirates just won't buy your game, they don't want it for anything more than free.

    You can see some good examples in the audio industry, which has some really bitchy DRM. Like take Steinberg Cubase and Cakewalk Sonar. These are two of the long time DAWs, both dating back to the DOS days. Both still make money, both are still in active development. Cubase uses super retarded DRM. A dongle that Steinberg bought and customized (syncrosoft, now called Elicenser) that is checked when you do anything. Seriously like opening menus has checks to the dongle. Sonar has no DRM effectively. You need a serial and an activation code, but the activation code is per serial, not per computer. It is just so you register your product with CW. The serial and code don't change and it doesn't phone home. Yet despite that weak DRM, Sonar continues to be developed and sold.

    Or in audio samples. The big name in virtual instruments is Native Instruments, their program Kontakt being the king of sampling. They have some fairly weaksauce DRM on their products. A challenge/response kind of thing that is cracked and pirated versions abound. Despite that, they make lots of money and are the unquestioned top of the sampling game. Then you look at EastWest who uses their own custom software with an iLok dongle because of evil pirates. They are too small for anyone to care about cracking. So no piracy, but they are tiny, a fraction of NI's size and profits.

    Really all bitchy DRM does is increase the cost on the developer. You end up spending more programmer time implementing it, more QA time making sure it works, and more support time helping people when it doesn't. There's no good evidence showing it increases sales. Remember that decreasing piracy is not the same as increasing sales. You can drop piracy to zero and yet discover you get little to no extra sales because the people who were pirating were only doing so because it was free, and have no interest in paying for it.

  19. TPP makes corporations equal to sovereign nations by lippydude · · Score: 3, Insightful

    'According to New Zealand's current Trade Minister, Tim Groser, full disclosure of what is being discussed would likely lead to "public debate on an ill-informed basis before the deal has been done"'

    "The TPP would even elevate individual foreign firms to equal status with sovereign nations, empowering them to privately enforce new rights and privileges, provided by the pact, by dragging governments to foreign tribunals to challenge public interest policies that they claim frustrate their expectations." ref