Activision Forces Online Check DRM Into New Game, Which Gets Cracked In One Day

from the totally-worth-it dept

By now it should be clear that DRM is essentially an arms race that will never be won by producers and publishers of content. While the fall of even the most vaunted DRM platforms has shown how useless those platforms are, the more consequential outcomes of DRM tend to be the way it bricks the products people bought or else limits the use of those products once the DRM is no longer supported. In sum total, it's very clear that DRM is very much anti-consumer, while failing completely at being anti-pirate.

It's a lesson that some in the video game industry insist on re-learning over and over again. Activision recently re-released Crash Bandicoot 4 for the new generation of consoles... and a long-awaited debut on PC. Despite the game having no online gaming components in it, Activision decided to put an online DRM requirement in the game, forcing it to check in with the Battle.net app for it to work. To be clear, there was no reason to include the DRM beyond it being a piracy check. And to be equally clear, even that reason was silly. Why? Well...

By midday Saturday, one day after the game's Battle.net launch, cracking-group Empress claimed first dibs on stripping Crash 4's PC version of its online check-in system. Their crack replaces one file in an otherwise vanilla install, and the group's release notes don't clarify what the crack does, other than describing the game's defeated DRM as "Battle.net + online only." (We thus believe this isn't a case of someone defeating Denuvo, even though a joke in Empress' release notes mocks the much-maligned DRM provider.)

As of press time, Crash 4 has zero online content, in spite of a couch co-op mode (designed to let a parent and child take turns with the single-player campaign) and a simple four-player versus mode dubbed Bandicoot Battle. Thus, the Battle.net handshake appears to revolve entirely around DRM, as opposed to checking for add-on content like new levels or even score leaderboards.

It's all so pointless. I have no idea how much time and effort it took for Activision to build this online-check into the PC release of the game. And it really doesn't matter, because literally every second of time and energy spent on it was completely wasted. The game was cracked in a day. Previous PC releases of Activision titles didn't include this DRM, though some will like to argue that any title released on Steam technically has DRM saddled into it. Still, as a new effort, this was all pointless.

Which is why it's so frustrating that game publishers keep going down this futile road. Instead, developers and publishers should be focusing on creating great gaming experiences for the public, building a bond with that public by treating them well, and not hampering their efforts with stupid online-checks that are defeated on the order of hours.

Is that really so hard?

Filed Under: copy protection, copyright, crack, crash bandicoot 4, drm, online check, video games
Companies: activision

Latest Denuvo Version Cracked Again By One Solo Hacker On A Personal Mission

from the crack-up dept

Denuvo is... look, just go read this trove of backlinks, because I've written far too many of these intros to be able to come up with one that is even remotely original. Rather than plagiarize myself, let me just assume that most of you know that Denuvo is a DRM that was once thought to be invincible but has since been broken in every iteration developed, with cracking times often now down to days and hours rather than weeks or months. Key in this post is that much if not most of the work cracking Denuvo has been done by a single person going by the handle Voksi. Voksi is notable not only for their nearly singlehandedly torpedoing the once-daunting Denuvo DRM, but also for their devotion to the gaming industry and developers that do things the right way, even going so far as to help them succeed.

Well, Voksi is back in the news again, having once again defeated the latest build of Denuvo DRM.

This week, Voksi announced the passing of yet another milestone, one that’s bound to disappoint the people at Denuvo. After sinking endless hours into what he openly admits is a personal grudge against the company’s technology, Voksi revealed that its latest v4.9++ protection had fallen. Speaking with TorrentFreak, Voksi says that after tackling previous versions, a little while back he began dissecting the newer 4.7/4.8 builds (not official Denuvo versions but a numbering system used by the cracking scene).

“Man, it seemed impossible back then. The obfuscation was insane, I had no idea what to do. So, over the next two months, with little breaks from time to time, I was analyzing exactly how [Denuvo] does those hardware checks,” he notes. “Then I tried my tricks for 4.7 on 4.8, but something wasn’t quite right. It was way more obfusticated and had some strange patterns and I couldn’t figure out why it was like that. Soon enough though in June things started to change.”

Now, while we generally dislike DRM here at Techdirt, we're not in the business of cheering on a crack-artist defeating any particular DRM. What is right in our wheelhouse, however, is discussing the overall impact of DRM and its effectiveness. We've spent hundreds of words already pointing out that this is an arms race every DRM maker loses, with Denuvo in particular falling at a rapid pace. With that in mind, we've wondered aloud why game companies even bother with any of this DRM nonsense, when they instead could be connecting with their customers and giving them real reasons to buy with innovative business models and engagement.

But this point must be most evident when it's noted that Voksi, a single individual, has nearly brought Denuvo to its knees as some insane sort of solo project.

What comes next for 21-year-old Voksi remains to be seen but given his determination, other games are probably being worked on right how. He says that several other titles use 4.9 or 4.9++ protection so it’s possible he’ll have more surprises in the days and weeks to come.

“In the end, it might take some more testing and test cracks, but I’m very happy to announce that I won’t stop until we are Denuvo Cancer Free from all games,” he concludes.

Whatever you might think of Voksi as an individual or DRM and game-cracking in general, what should be immediately apparent is that relying on DRM that is vulnerable to one 21 year old with enough motivation to kill it over and over again is a fairly shitty business practice in which to be engaged. And, yet, game companies still work with Denuvo and other DRM makers for reasons I cannot possibly fathom.

When one person negates that work, it's probably time to come up with a new plan.

Filed Under: crack, denuvo, drm, video games, voksi

Denuvo Game Cracked In Mere Hours

from the the-end dept

Denuvo DRM has graced our pages many times in the past year or so. The DRM once thought to be unbreakable and heralded as the end of piracy has taken a precipitous downward path in reputation. Games using the DRM slowly began being cracked in months, then weeks. The ability to crack Denuvo then sped up, with cracking times dropping to a week, five days, a couple of days. Through it all, Denuvo worked furiously to patch its software, all while proclaiming that a week or so's protection is worth it to game developers as they protect their games during the all important initial release window.

Well, it seems like that ability to make that argument has come to an end, as DRM-"protected" game Total War: Warhammer 2 was cracked in a matter of hours.

Denuvo has suffered its biggest failure yet, with strategy game Total War: Warhammer 2 falling to pirates in less than a day, arguably just a few hours. It was cracked by STEAMPUNKS, a group that’s been dumping cracked games on the Internet at quite a rate for the past few months.

The fall of this game in such a short space of time will be of major concern to Denuvo Software Solutions. After Resident Evil 7 was cracked in days earlier this year, Denuvo Marketing Director Thomas Goebl told Eurogamer that some protection was better than nothing.

That argument is now dead, having been beaten behind the woodshed by the same reality that has faced every other DRM maker out there. DRM doesn't work. On a long enough timeline, DRM is always beaten. That those timelines are shortening to this degree should only drive the point home to game developers: DRM is no way to do business. It disrupts legitimate customers and doesn't stop piracy.

It's worth noting again that Denuvo has publicly stated in the past that it does not offer refunds to its customers. If anything, that stance should make the choice for game developers as to whether or not to use Denuvo on their products all the more clear. Developers certainly can simply throw money away, with no method for retrieving it, if they wish. But I would think that money could be better spent incorporating business models that actually make money and connect with customers.

Filed Under: crack, denuvo, drm, steampunks, total war: warhammer 2

DOJ Says That The Crack Of Syed Farook's iPhone Only Applies To That Model Of iPhone

from the that's-not-how-tech-works dept

Update: We've now added to the story that the DOJ is saying that CNN got the quote wrong, and the vulnerability applies to any iPhone 5C, which is more believable, but still raises questions. Original story, with a note appended is below.

So late yesterday the Justice Department told magistrate judge Sheri Pym that it had successfully broken into Syed Farook's work iPhone and therefore no longer needed to continue with the court's order compelling Apple to write a new version of its iOS with security features removed. And then, in talking to the press, the DOJ apparently claimed the method only works for Farook's iPhone:

On Monday, the Department of Justice said the method only works on this particular phone, which is an iPhone 5C running a version of iOS 9 software.

Perhaps the CNN reporter who wrote this really meant "this particular type of phone," in which case the statement would be only marginally more believable, but the idea that it only applies to "this particular phone" makes absolutely no sense, and suggests the DOJ is flat out lying again. The only way in that works with just this phone would be magically finding Farook's passcode (perhaps he left a post-it somewhere?). But if that was the case, the DOJ wouldn't have asked for two weeks to "test" the method (even if they only took one week). Finding the passcode and testing it doesn't take that long. Update: A DOJ spokesperson says that CNN got the quote wrong and that the actual statement was that the crack only applied to iPhone 5C devices.

And if it's any other method, it must have wider applicability to other iPhones. It's possible, if unlikely, that the method in question only works on iPhone 5Cs running iOS 9, but if it's a true vulnerability, it's likely that it impacts much more. It is true that later versions of the hardware include a chip called the Secure Enclave that might get in the way of certain vulnerabilities, but claiming that any such crack is limited to a specific phone is ludicrous.

And, of course, as we mentioned in the original post, if the DOJ really did find a vulnerability and refuses to share it with Apple, then the Justice Department is making us all less safe by refusing to reveal a potential security flaw that may impact tons of people. And then it's also lying about it publicly. Not a good look, but an all too typical one, unfortunately.

Filed Under: crack, doj, fbi, iphone, syed farook, vulnerability
Companies: apple

Hackers Get Tons Of Detailed Info On Nearly 1 Million Rich & Famous By Copying Major Limo Broker Service's Database

from the a-treasure-trove dept

Brian Krebs has yet another fascinating story from the hacking underground, where he's discovered that hackers appear to have broken into the computer system for CorporateCarOnline, a service that brokers limos around the US, and grabbed a copy of their database -- which appears to include a ton of information. This includes names, details and financial info on tons of A-list celebrities, sports stars and politicians. Krebs discloses some of the "notes" associated with some people, including LeBron James, Tom Hanks, Donald Trump, Aaron Rodgers, Rep. John Conyers, Senator Mark Udall and others. The note on Conyers apparently said: "Meet and Greet Baggage Claim. US Congressman. A DFTU situation," which Krebs suspects stands for "don't fuck this up."

However, as Krebs notes, the database could be a field day for tabloids (and, one assumes, blackmailers), because the notes associated with certain passengers for things they may have done in those limos can, at times, be embarrassing.

Any two-bit tabloid would have an absolute field day with this database. Simple text searches for certain words (“sex,” “puke,” “arrest,” “police,” “smoking pot”) reveal dozens of records detailing misbehavior and all kinds of naughtiness by executives, celebrities and people you might otherwise expect to behave civilly.

For example, the following is an explanation taken from a limo reservation made back in May 2006 by a woman working for MTV. The limo in question was actually a stretch Hummer with capacity to seat 14 passengers, and was rented for the occasion of visiting a series of wineries in Long Island, NY. When the stretch Hummer returned to the shop after disgorging its passengers, the fleet’s owners discovered that the vehicle had been plastered with cheese slices and crackers, and that someone had left behind a sex toy

And, with that, you have to imagine that TMZ, Gawker and others just started trying to figure out how they get their hands on this database...

Filed Under: crack, hack, lebron james, limo, rich and famous, security, tom hanks
Companies: corporate car online

Ubisoft Uses Internet Crack To Get Around Its Own DRM

from the ah,-the-irony dept

Ubisoft, one of the larger video gaming companies out there, has a somewhat troubled history of overburdening its games with awful DRM. And, as with most DRM systems, the people it tends to hurt most are the legitimate purchasers who somehow run afoul of whatever DRM rules are in place. In this case, the Ubisoft game Rainbow Six: Vegas2 (R6V2) had some DRM that would check to see if the physical media (CD-ROM) was in the drive before it would let you play. Unfortunately, Ubisoft also offered the game as a download via IGN's Direct2Drive store. They had set it up so this would work even without the actual CD, but a recent patch didn't take that into account, and broke the game for anyone who had purchased it via D2D.

So, what does Ubisoft do? It releases a patch that isn't actually a "patch" but a well known crack that it downloaded off the internet. As TorrentFreak points out at the link, according to the way companies like Ubisoft look at things, it "stole" someone else's code and passed it off as its own. And, of course, there's the somewhat delicious irony that it didn't just "steal" any code for its own use, but the very code that companies like Ubisoft insist is evil, immoral and illegal. Except, of course, when Ubisoft is in desperate need of it, apparently.

Filed Under: crack, drm, piracy, video games
Companies: ubisoft