Tuesday, December 21, 2010

How would you crack the UbiDRM?

Of course I am not going to tell you how to do it exactly. For a number of reasons, the first and foremost is that I don’t know how Ubisoft DRM works. Just like the crackers of the DRM software, you make good guesses, explore the program and try to work around what you have. It’s about repeating these long, arduous and mundane steps until the games DRM is cracked. From the point of view of the scene, I can respect the challenge!

Ubisoft doesn’t have just one DRM system; it in fact released several different versions of the UbiDRM, testing the waters as to what works best. Some games like Prince of Persia and Splinter Cell Conviction used a less sophisticated method of the DRM. But the newer UbiDRM, being used now, uses an incremental release of the play files.

Clever!

This means if the games DRM is bypassed, a cracker has to double check the whole file, otherwise it could look bad on their part. Of course this means that when Ubisoft were boasting it hadn’t been cracked, and the crackers where saying here you are, they where both right. But it was wrong of Ubisoft to say anything in the first place, then to say nothing afterwards. However at the moment the DRM is proving its ground. And good luck to it!

Not that it ever was a weak DRM in the first place. Much to the surprise of many people, the first round of UbiDRM was not cracked straight away. Even though it was widely reported as being done in 24 hours, it was not completely true, but what happened is a story in itself.

Personally I don’t agree with the UbiDRM! There is no denying that this is a very clever system, but it breaks one of the most fundamental rules of the ten DRM commandments.

I. You shall not have any DRM before me! (One DRM protection method per Game is enough!)
II. You shall not make for yourself any likeness of the Game or DRM! To those that crack games or illegally distribute you shall not bow down to them nor serve them.
III. You shall not take the customer’s name your god in vain, for the customer will not hold him guiltless who takes his name in vain!
IV. Remember the Game, to keep it holy. For days the customer shall labor, but the weekend is for serious gaming.
V. Honour thy Game Publisher and Developer, that your gaming may be long upon the land which they have provided for you.
VI. You shall not corrupt the gamers rig.
VII. You shall not cheat on the gamer.
VIII. You shall not steal the gamer’s personal information.
IX. You shall not bear false witness against thy gamers rig.
X. You shall not covert thy neighbour’s DRM, Rig, Gaming Experience, nor anything that is your neighbour’s!

Yes, UbiDRM breaks the third DRM commandment:

It takes the customer for granted. Well honestly it breaks more than one, but the third commandment is such an important one. To say we are constantly watching you! Is saying that you don’t trust the honest customers, no matter what benefits you dress it up with, Ubisoft is branding all as the one. And that’s insulting, and of course this is the territory of the double edge sword.

You want to target the illegal downloaders and convert them into happy customers. You don’t want to target everyone, force them to the doors of the credit card company and force them to pay!

I pre-ordered Assassins Creed 2, then some months later when more details came out. I found out that it would come with this uPlay/UbiDRM system; at that time I don’t think it had a name. So my internet connection being weak and intermittent I just knew that it would never work out. I sent out a complaint to Ubisoft and they never even bother to reply.

Instead they hired some third party PR company to solve all their complaints. The Third Party PR Company were fantastic and did everything Ubisoft has failed to do, respect the customer. I cancelled my pre-ordered copy and they sent me out a free game. It was King Kong 2005, the one with StarForce protection system. The thought was nice, but I don’t attribute this goodwill gesture with Ubisoft. Sometimes I get the impression they can’t even be bother or even worst they don’t care!

Anyhow!

It’s interesting to know how UbiDRM or the always online DRMs differ from the past protection methods such as SecuROM. These newer DRM, in comparison are a whole different ball game when it comes to breaking the DRM. In the old days, with SecuROM, you’d come to some code that performed a security check, which basically look like this:

[--GAME CODE--]
Perform Security Check!
If it FAILS{ Stop the Program from Working EXIT}
If it PASSES { Continue playing Game }
[--GAME CODE--]

With a very liberal brush, I am tarring all the old DRMs as employing this simple method. It’s not true, but the point is that problem is that once the game kicks you out, this gives away a tell-tale sign. This tells me some security protection happened at this point. So with a debugger, a common programming tool, a lot of time, you can rewrite the main exe file to skip the security check. So it now looks like this:

[--GAME CODE--]
Skip 3 lines down!
Perform Security Check!
If it FAILS{ Stop the Program from Working EXIT}
If it PASSES { Continue playing Game }
[--GAME CODE--]

Of course I really have underestimated the brilliance of what crackers do and the brilliance of the security companies too. Most of the newer DRM version don’t do these simple security checks any more, but still use this exception rule of kicking you out of the game. That is enough to give crackers a starting point, and all they need.

As my old college professor used to say “let hack to learn, not learn to hack!”

Currently there are a number of implementations that make up the UbiDRM. The one here is specifically for the PC game Tom Clancy’s H.a.w.x. 2 released on the 16th November 2010. What Ubisoft has decided to do, and quiet rightly, is to use a whole host of security methods. Because time is the enemy of the gamer, and there is a limit to the amount of time an illegal downloader is willing to wait.

The things that UbiDRM uses is the handshake, UDP connection, Cookie, Server Checks, Ubi Launcher, partial files and maybe some other methods. And of course I want to make it perfectly clear; I haven’t discovered or explored any of these.

The first thing you have to realise is that human speech isn’t like computer speech. Computers need order and timing; otherwise it would get into a big mess. As for human speech, it is a big mess, but we normally use visual clues as to when we can talk back. Computers use a handshake, and at its most basic level it’s a greeting from one computer and an acknowledgement from another. In this handshake, the computers agree on the message size, frequency and a whole other list of protocol issues. But in its simplest terms, if you think of two radio stations, you can think of it as agreeing to say “over” at the end of the conversation.

UDP, now this is surprising as all other UbiDRM games used the TCP method of transmission. Basically Transmission Control Protocol is message system that uses the handshake method, it is very controlled and every message sent is sure to be received and acknowledged. While UDP, User Datagram Protocol, doesn’t use a handshake method. It’s more fire and forget, if the message gets there then so be it.

Ubisoft must have its own internal handshake sent on an unreliable transmission system. Or that the game files don’t regard the transmissions as important, which means there must be a leeway in the time between communications. But as it turns out, blocking the UDP ports still allows the game to function, so they can’t play a huge role in the protection system.

There is also a theory going around that UbiDRM uses http cookies, of sorts, that it creates text files that the server can then analyse. Cookies, basically a bite size chuck of information stored for your web browser. They are not code and cannot be run, but contain instructions that can be used by something else. This is why you are warned so often about cookies, as they can be to store information on your computer and you.

Server check makes the majority of the security protection system here. If Ubisoft can constantly make changes to the DRM from the server side, this is good as they have total control. But its bad, if Big Brother is going to watch the honest gamers who have purchase the games. They might as well take it one step further and setup all games in Ubisoft HQ and play under their watchful eyes. This further punishes the honest gamers, but at the moment the H.a.w.x. 2 still doesn’t have a crack. But the real test will be Assassins Creed Brotherhood due out next year.

The Ubi Launcher is a security system in itself, not only does employ some of the tactics, such as communication with the server, it also has a CD check. Currently, this isn’t a problem as the cracker groups have release a work around for this. A very good start, but means nothing at the moment. As you are able to bypass the security check to gain access to the main menu, just not play the singleplayer game, however you can play the LAN.

The partial file is also a good system to use, as it means that someone has to play the whole game, and upload it for someone else to work on. Because rarely are the two the same people, this means more time is needed before the game is cracked for the general populous. Black ops sold 7 million copies in the first 24 hours, this means you only have to protect a new game for a short while to get the majority of sales.

Of course in the pirate world this isn’t completely true. For starters I believe that illegal downloaders are so use to having a crack, they are prepared to wait for the one stubborn game. But after 1-2 weeks that patience wanes significantly, but of course it depends on the game. If Black Ops was protected for the length as H.a.w.x. 2 is, I believe that the sales number would be very significant.

Tom Clancy’s H.a.w.x. 2 was released on the 16th November 2010, and it is now crack free for 34 days (20/12/2010) and still counting.

Unfortunately the waiting game is also a double edge sword as new titles are constantly being released. If one game proves to be very secure, but not in high demand, people just move on. But if publishers don’t protect their games, they lose money, if they do and it takes too long people move on, there just seems to be no winning for the publishers at all. A protection company would need a constant series of wins, before becoming a threat.

Even though Ubisoft uPlay system is very customer unfriendly, it seems to be doing the trick. There seems to be only two ways to crack the UbiDRM, either by pretending to be the server (emulation) or through removing the DRM from the game exe file. Both are difficult tasks.

The first round of UbiDRM was removed through a cracking process and the sever side emulation, through a program called dormine. Skidrow have created the crack and released it, but to the jeers of the other groups, who believe that they have stolen code. Technically it’s not it not completely true, did they take the dormine code, yes. But in the rules, yes cracking groups do have unspoken ones, there has never been any mention of not being able to borrow code. And as it stands the dormine program will only get you to second base with UbiDRM. It only solves the handshake, TCP, and encryption, i.e. once you have the message you still have to know the correct responses. Skidrow did a commendable job in figuring out the rest and for the first Ubisoft games, all their bases where belonging to Skidrow.

The second method is just a pure crack, this doesn’t require an emulation of the server because it will strip out the protection code completely. However this is a difficult task, because you have to manually search for the parts figure what it is doing, try to remove it, and make sure that you haven’t missed anything. Finally it’s extremely difficult if Ubisoft are withholding parts of the game files. Because now its not about removing the security protection, is about rewriting the missing parts.

Imagine, I could tell you the story of Bram Stoker’s Dracula, but could you write a page or even a paragraph, exactly from memory. How hard would that be? We know Ubisoft is on to a winner with this security protection system. But as for creating a revenue source from their DRM, they have a long way to go.

As for Tom Clancy’s H.a.w.x. 2, this is unfortunately a game with an average want value. Most people are willing to wait for this game to be cracked, because it’s not high on their Christmas list. Now next year Ubisoft will be releasing Assassins Creed brotherhood, a highly anticipated game. It will be on everyone’s want list. This is the real litmus test, and I fear why Ubisoft should have released this DRM with that game. As this has given the crackers time to explore this method, and depending on the circumstances, could hinder the UbiDRM protecting Assassins Creed Brotherhood.

But for the many illegal downloaders looking to get their hands on H.a.w.x. 2 it’s a case of singing “All I want for Christmas!” And it’ll probably happen too!

Friday, December 3, 2010

Call of Duty-Black OPS Breaks even the Illegal Download record

Following the much praised Modern Warfare 2, again the Call of Duty series has broken all records for the first day sales. After all the court cases, the feuds, and the tantrums that followed MF2 Treyarch has pulled this one out of the bag. The first day sales being reported as 7 million copies worldwide, everyone must be happy with that!



But what I am finding more and more, when people talk about gaming sales. They are talking Xbox and PS3, but when it comes to PC versions everyone shuts up. It’s all about perception, and the PC sales are just embarrassing. Even though it took a while, I found that the sales market share of the Xbox 360 was at 59% and the PS3 at 36%. The PC market share was not so clear cut!



“Xbox 360 takes the largest proportion of sales with 59%, 36% for PS3 and the remainder on PC, Wii and DS.”











Call of Duty: Black Ops Sales Top $360 Millionhttp://news.teamxbox.com/xbox/23252/Call-of-Duty-Black-Ops-Sales-Top-360-Million/By: - "-Sparky-" Nov. 11th, 2010 10:08 am

It seems that the hype surrounding Call of Duty: Black Ops has paid off for Activision. The game launched on November 9th in North America and the U.K. with massive ad campaigns that spread across gaming websites, billboards and television ads. Day one sales for Black Ops totaled 5.6 million copies or $360 million dollars.

These sales figures eclipse last year’s launch of Modern Warefare 2 which sold 4.7 million units within the first 24 hours. Activision is hailing this launch as the “biggest launch in entertainment” surpassing the opening weekend set by the film Avatar last December.

Call of Duty: Black Ops Sells 7 Million Copies on Day Onehttp://gamrfeed.vgchartz.com/story/82685/call-of-duty-black-ops-sells-7-million-copies-on-day-one/by Brett Walton on 10 November 2010

According to early VGChartz estimates, Call of Duty: Black Ops has become the fastest-selling game of all time with over 7 million units sold on day one following over 4.5 million preorders as reported earlier in the week. If the 7 million for Black Ops holds true, it would make the launch around 10% larger than Modern Warfare 2 and the biggest of all time.

Lending some extra weight to our estimations are reports that over 4 million users have now connected to Xbox Live to play Black Ops and similarly impressive figures via PSN. Breaking the data down, we estimate over 3.6 million units were sold in the USA, 1.4 million units in the UK, over a million units in continental Europe and 350,000 units in Canada. Xbox 360 takes the largest proportion of sales with 59%, 36% for PS3 and the remainder on PC, Wii and DS.




The article states, perhaps a little flippantly, the “remainder on PC, Wii and DS” fight for the rest of the market share scraps. This sentence is all too telling! It wasn’t even worth the effort to work out the remainder, which was 5% of the sales. On top of all of that the PC has now been pigeon holed with a girl’s game console and a girls, hand held, game console.

To claw some dignity back for the PC gamers, am going to assume and desperately hope that the sale market share was 3% for PC, while the Wii and DS combined was the final 2%. I chose this because I seem to remember the market share for Modern Warfare 2 was also 3% for the PC.



I suppose it’s interesting to know that the Xbox and the PS3 games are more expensive than the PC version. Under the Euro, both Console versions sell at a MRSP of €54.99, while the PC version is €10 cheaper, at €44.99.






GameStop Irelandhttp://www.gamestop.ie/core/common/default.aspx?quickSearch=Black%20Ops Price Check (27/11/2010)

Call Of Duty: Black Ops Std (Xbox 360) = € 54.99

Call Of Duty: Black Ops Std (PS3) = € 54.99

Call Of Duty: Black Ops Std (PC) = € 44.99


The table below shows us that the PC sales brought in just under 10 million Euros for Activision. This isn’t bad, but dwarfs in comparison when compared to the sales of the Xbox or even PS3. Even if 210,000 units were sold at the console price, you still be looking at a drop in the pond.



Even though the more expensive Xbox 360 version and PS3 out sold the cheaper PC version, “The Poor Pirate Excuse” tells a different story. The PC version has been downloaded illegally a disproportionately amount of times compared to all the console versions put together. For the full story you can read here at: <a href=” http://warfaceaps.wordpress.com/2010/11/15/the-glorious-pcs-greatest-shame/”>wordpress blog</a>. Below are the main two slides from that blog:



These pie charts show the illegal downloading proportion for the same game title across several different gaming platforms. The difference between the console, marked in Red, and the PC platform marked in Blue, is extremely clear and one sided.



This table shows the percentage value of the illegal downloading on a Console platform vs the PC platform. As you can see, generally the PC platform has a clear majority easily averaging 95% of the illegal downloads. Unless it’s a “high want value” game, then people who own a console are far more willing to illegally download it, the percentage becomes roughly 75%.

The Tables and Pie Charts dispel a belief that piracy happens because games are way too expensive. This is wrong, bearing in mind that PC games are normally cheaper than Console versions and that they are a want and not a need. The evidence shows that for Call of Duty: Black Ops the PC sales are out stripped by 2404% for the Xbox, and by 1467% for the PS3. Then in the same light, the PC illegal downloaders outweigh the consoles by 78%, compared to 22%. It just doesn’t make any sense.

It makes perfect sense if you cast a big shiny light on piracy and say it for what it is! Illegal downloading and pirating software material is far greater and easier on the PC. That nobody wants to pay for a game, when the perceived value of a PC game has become nothing.

Unlike the Xbox and the PS3 that need modchips to play the games. And this is no longer completely true as the hacks are getting much simpler! Most people are unwilling to use these kind solutions as it normally requires some complex steps and if it goes wrong then warrantees are void. The PC is a different beast, as the user normally has a certain degree of computer skills. For them, rar files and an illegal ISO, is a park walk with a Segway!



So how many times was Call of Duty: Black OPS illegally downloaded on its first day? Well this is a hard question for a number of reasons.

Firstly, in the piracy world, things happen a little differently, the game was available 5 days before, on Thursday 4th November.

Secondly, the piracy market isn’t exactly like the conventional retail market.

Normally illegal torrents released on the official date do not peak straight away. They climb rapidly and then peak in 1-2 days; afterwards the tail off comes down slowly for about 1-2 weeks, were it reaches a saturation level. Normally at saturation level the Seeder graph line meets the Peer level, and it can stay like this, slowly decreasing for many months. Just through observation, torrents stay active for many years, depending on the popularity of the game. Black OPs downloading peak didn’t happen until Friday 12th and Saturday 13th of November 2010. Below is an example of the time line for one illegal torrent for the PC game Mafia 2.



So counting all the illegal downloads up to 1 day of the official release date across 7 illegal torrents for Call of Duty: Black OPS. We have a total illegal download count of 592,736, this is more than twice the PC sale estimate.



If we count the Seed and Peers of all the torrents, to when it peaks on Sunday 14th, from when it first appears on Thursday 4th. The illegal downloads figure dramatically rises to 1,817,990. From our experiments, most illegal downloaders don’t anticipate a release, but as soon as they hear of it, say a TV advert, then they join the P2P network.

However the Torrent Watch experiment was not designed to find the specific illegal downloads on any particular day. It was designed to say over the period of 6 month the average estimated loss, which we say is 10%, of a game would be roughly... this much. In this case over a period of 6 months there would be an estimated figure of 26,713 downloads a day. This comes to €120,181 per day, which is 26,713 x €44.99 x 10%. So if you imagine this loss over 6 months, being 182.5 days, you come to a rough amount of €21,933,032.

This is how we arrived at this figure of 26,713 downloads per day for Call of Duty: Black OPs. Torrent watch looks at the aggregate Seed and Peers 4 times a day. This gives us two curves per torrent, showing the numbers currently downloading from the illegal market. To turn this into an illegal download figure we estimated the rough time it takes to download 7 GB. But this depends on a number of factors like network speed, if people are sharing, the users connection speed and so on. So we generalised it, and said that if someone was to download 7 GB in 2 days (48 hours) they would need an average connection speed of 41 kb/s. In today’s internet connection terms is small, and seems like an average download speed!



The table shows the total recorded Seeders and Peers, and the number of days the tests was active for the particular torrent. You can see the total count of Seed and Peers for each of the Call of Duty: Black Ops torrents. From these numbers we calculate our recoup figure, taking the 10% as the minimum, to see what the return could be!

I suppose it really depends on the popularity you place on the PC platform, as 3-5% worldwide market share never felt right to me! While I don’t think it's in the same bracket as the PS3 or even the Xbox, I would like to believe that the actual share is much higher. There is no bases for saying this, but if we look at the gradient of the Xbox to the PS3 which is 0.61. By extending this gradient for the PC it gives a unit count of 1.5 million, a total sale of roughly €67 million, and a recalculated market share of 18%.



But as I have said; other than a straight gradient through the Xbox and the PS3 there is no proof for this. However on a subjective look, my own personal belief, it does feel more in line with the total sales. But I guess we shall never know? But WarFace will struggle to find out one day!



As for records, this is sure to be the most illegal download of this year. Torrentfreak releases those figures around the 27th December. My predictions for games in this year’s top 10 will be in this order Call of Duty: Black OPS, Mafia 2, Fallout New Vegas, Medal of Honor, Darksiders, PES 2011, and StarCraft 2: Wings of liberty. As for the number of illegal downloads, I am guessing it will be a whopper of a number at around 6-7 million illegal downloads.

The more worrying fact in all of this is the constant rise of illegal downloading. In 2008 the top most illegally downloaded was 1.7 million (Spore), last year 2009 it was 4.1 million (Modern Warfare 2), and if this year is as I suspect! Then it paints a bad picture for the PC Platform, and a very shaky one for the future of PC gaming!



Well as a publisher I’d have to ask myself why bother releasing a game for the PC at all?

Why don’t I just give it away for free...?



At least for that PC game the piracy level would be 0%, and that would be another record!