top | item 21953764

Average Denuvo cracking time is now 75 days

74 points| BethGagaShaggy | 6 years ago |iscracked.info | reply

67 comments

order
[+] karlkloss|6 years ago|reply
The thing is, this DRM stuff causes a lot of problems, like performance loss and even crashes. Therefore even honest buyers use the cracks, to get rid of it.

Some people even wait until the game appears DRM-free on GOG, because of this.

[+] cwyers|6 years ago|reply
I suspect that at least 99.9% of PC game buyers don't even know whether a game has something like Denuvo or not.
[+] pizza234|6 years ago|reply
Users like to hate DRMs, even when it's not justified.

Technically Denuvo is not a DRM, it's an anti-tampering system. This is not just a matter of wording - nobody complains about Steam's DRM, so it's not about DRMs, it's about a specific product.

Having said that, Denuvo performance loss is minor. It's quite amusing that in one case, a patch which also included its removal, decreased the performance: https://www.pcgamer.com/uk/rage-2-patch-removes-denuvo-but-p....

Regarding the crashes, there's much hearsay around. However, in absence of rigorous examinations, there's the benefit of doubt. In my opinion, it's not buggy in itself (I've played several games with Denuvo, and they were working fine), rather as the general bug risk of adding extra functionality to software. As the article above points, "[...] that would imply Denuvo checks constantly running within the main game loop, which would make no sense.".

All in all, defining Denuvo as "this DRM stuff causes a lot of problems" is definitely a mischaracterization, although it's not clear if "this DRM" refers to Denuvo, or DRMs in general.

[+] SCdF|6 years ago|reply
Isn't "a lot of problems" somewhat of an exaggeration? I don't like DRM conceptually any more than I imagine most people do, but hasn't most people's ire with it been reddit-level sleuthing / whinging?

I have seen evidence that heavy DRM (Denuvo I think, specifically) caused increased loading times.

Apart from that, every time someone tries to prove there is any other difference with any measure of scientific rigour they find no statistically differences.

[+] molticrystal|6 years ago|reply
For Denuvo they have been better lately at implementing the checks in a way where it does not interfere with performance or if it does, it is very difficult to detect.

But for DRM overall and Denuvo there are numerous issues, and thanks to the "make a game and forget it", principle they games continue to suffer from bad implementation. In particular games with the older iterations of Denuvo continue to have performance issues.

To expand upon this, the older a game continues to have DRM the more problems become apparent. For example just recently in December, where Disney's decision not to renew Securom caused legal owners Tron:Evolution to have their game stop working.[0]

Who knows what fate all those expensive Denuvo titles have in store for them, but we probably have a fair idea. Due to the resources needed to bypass more difficult DRM, often the updated version of the game will remain uncracked and that could make it possibly unplayable for the average consumer if things go south.

[0] https://www.techdirt.com/articles/20191204/09531743504/disne...

[+] FDSGSG|6 years ago|reply
> Therefore even honest buyers use the cracks, to get rid of it.

How many of these cracks actually fully get rid of denuvo? I'm not familiar enough with current developments, but most DRM patches I've seen didn't actually get rid of the DRM.

[+] m-p-3|6 years ago|reply
I just wait for a GOG release, I'm patient and my game backlog is already way too long. No point in paying the full price if I can play something else I bought for cheap in the meantime.
[+] trekrich|6 years ago|reply
i try to buy as many games on gog as possible now.
[+] tanilama|6 years ago|reply
It doesn't matter TBH. As long as the DRAM slows down everyone, it would just be part of the game experience then.
[+] sadmann1|6 years ago|reply
I find the dynamic between passionate hackers doing it for free against paid DRM writers to be very interesting, gets to show you how passion for problem solving can sometimes trump people writing software for money no matter the money involved
[+] discordianfish|6 years ago|reply
I think it’s just much harder to write effective DRM than to break it.
[+] SCdF|6 years ago|reply
Devs keep using denuvo though, precisely because crackers aren't trumping the denuvo devs.

Like, everything gets cracked at some point, that's not a failure. Denuvo holds up for months, and games are like movies in the sense that the opening week is really important, then everything trails off from there.

[+] scarejunba|6 years ago|reply
No one has ever written bug free code. Lots of people have found bugs in code. That's all I think the difference is.
[+] p0nce|6 years ago|reply
Crackers also do it for money
[+] fxtentacle|6 years ago|reply
I think the 75 days is mostly due to games that nobody cares about. High profile games tend to be cracked within hours or days. For example, Star Wars Jedi Fallen Order was already cracked by the time that my favorite gaming magazine printed their launch review.

https://iscracked.info/is-star-wars-jedi-fallen-order-cracke...

[+] thu2111|6 years ago|reply
That seems unlikely. If there were truly so many games nobody cared about then the underlying studios would go bust and stop applying DRM to anything, then fall out of the stats. Also these schemes aren't free so obviously the game companies cared enough to apply it.

For cases where these schemes have cracks days after release, it has historically meant the game was in the hands of crack teams quite a way before the release, usually due to corrupted insiders somewhere in the supply chain. DRM/anti piracy schemes are much more than the software you see on your computer, and the good ones have traitor tracing functionality so corrupted insiders can be found and fixed.

BTW 75 day lifetime for a DRM is about perfectly optimal. It looks like Denuvo have really hit it out of the ballpark if these stats are accurate.

Game/movie sales are very spiky. People wait for cracks but not very long. Most sales are within the first few days. A DRM that lasts even a week can be easily profitable for the firm using it as many will break down and buy the game rather than keep waiting. After a few months sales are reduced to a trickle and nobody cares if it gets hacked at that point.

The thing that most people miss about DRM is that not only is it very temporally dependent but being too strong is just as bad as being too weak. Due to the sales curve if your game DRM takes two years to crack despite huge attention from adversaries, then that implies you engaged in massive overkill. That almost certainly (in the PC space) means you wasted time that could have been spent on the game, or did things that hurt compatibility or would reduce sales in other ways.

The exception is when you have one DRM scheme for everything, like in games consoles. Then of course the cost of a break is much higher and the ROI of unbroken DRM is much higher. But the same principles still apply. For instance, cartridges were historically harder to clone than DVDs, and commodity DVD drives were less secure than the rest of the consoles, but the winning consoles used commodity storage tech anyway and accepted the reduction in security. It's all about ROI.

[+] naniwaduni|6 years ago|reply
I think it a grand irony that the only graphs on this page that aren't barely-interpretable depictions of category error are, of all things, the pie charts.
[+] klyrs|6 years ago|reply
It's so bad; the curves are hurting my eyes... my favorite part is where the curves get clipped to a suddenly straight line. That only seems to happen when the numbers are the min/max of the data range. Whoever wrote this fitting algorithm needs to be drawn, quartered, and fashioned into a pie chart macabre.
[+] ptah|6 years ago|reply
Could you elaborate on that please
[+] the_mitsuhiko|6 years ago|reply
Given the large number or urban legends about Denuvo I can only assume it’s a pain for the cracking community and given how widespread it is, it probably helps publishers.

Average cracking times are still way above 30 days which is the most crucial period.

[+] wolco|6 years ago|reply
Does someone know if insiders are releasing the cracks or are these cracking groups independent?
[+] huhtenberg|6 years ago|reply
Denuvo is based on VMProtect, at least in part, which implements DRM through virtualization and encryption of the original code. Since it takes days to "crack Denuvo", I'm guessing they are cracking the encryption key or doing some sort of statistical reassembly of the raw code from a sample base. In either case it doesn't sound like there are any insiders involved, no.

https://vmpsoft.com/

The back story is that at some point VMPSoft was suing Denovo for buying a single license of VMProtect and then using it to roll out their own DRM system. It was a complete LOL really. They ended up settling out of court.

[+] concerned_user|6 years ago|reply
If anything, insiders usually leak pre-release builds so crackers can start early.

Denuvo state themselves that it only protects for certain period not infinitely so probably it is just hackers not releasing cracks immediately due to multiple possible reasons:

1) legal action if published got his 2-3 months when sales are at peak they are less likely to go after the crackers

2) games are often released very buggy thanks to online patching available, so they just wait for games to stabilize as not to update cracks weekly

3) less demand for cracks due to steam and sales, I feel like people wait for sales or prices to drop off in general

[+] oliwarner|6 years ago|reply
I think it'll still deliver what publishers want until that number's under a week.

New releases are big money. The biggest money.

It'd be nice to see them formally acknowledge this by republishing DRM-free copies after 90 days.

[+] qazpot|6 years ago|reply
It is still profitable to add Denuvo for game publishers, because most sales happen in the first week.
[+] pieno|6 years ago|reply
You are assuming that everyone purchasing a game, would not purchase it if they could download a pirated version. Call me naive, but I like to think that a lot of people that have the money to purchase a game in the first week, would still purchase it even if a cracked version is available. Just look at the billions of revenue earned by Spotify and iTunes before it, even if most music is available on release date (or even before the release date!) online without even needing cracks. I like to think that most (!) people pirating stuff, would not purchase the pirated product at all if no pirated version were available.

On the other hand, you seem to be missing the number of people just sick of DRM and all the hoops it makes you go through before actually being able to play a game. Some people may just start pirating games because the hoops of running a cracked version are easier than the hoops of running a legit version with all the DRM restrictions. Or they may just give on games altogether and decide to spend their valuable time and money on something else entirely.

So adding DRM may just as well be a net negative for game publishers.

I don't have the data to say which is correct, but just assuming that DRM is profitable because most sales happen in the first week, before a crack is available, seems a bit too simple.

[+] izacus|6 years ago|reply
> It is still profitable to add Denuvo for game publishers, because most sales happen in the first week.

This is one of those "false wisdoms" which get perpetuated by DRM industry, very similar to creative accounting to calculate monetary losses due to piracy.

The numbers don't and never did really support this conclusion (even inside the industry). My first hand experience shows that DRM is pretty much about ass-covering between publishing industry and distribution channels - basically so everyone in the chain can say "we did all we could and added this amazing Denuvo thing that's certified by our amazing legal department as completely secure!" and concede the fault for percieved "lost sales" to someone else in meetings with management and board.

[+] elevenoh|6 years ago|reply
When you look at the statistics you can see that the cracking time is becoming faster.

Which means that one day the crack should be released within the first week. I guess, then game studios have to rethink their DRM.

[+] Fnoord|6 years ago|reply
Depends on whether those sales would otherwise not happen, and on how much it costs to license, add, and remove Denuvo.

Also, don't forget that game reviews are relevant near release, and that is when Denuvo is still enabled which impacts performance.

[+] wiz21c|6 years ago|reply
from wikipedia's entry about denuvo :

However, technology website Ars Technica noted that most sales for major games happen within 30 days of release, and so publishers may consider Denuvo a success if it meant a game took significantly longer to be cracked

[+] dmos62|6 years ago|reply
I personally have absolutely no problem waiting a few months. Sometimes I wait for far longer, because I'm in no hurry and because there's a chance of the game's rough edges being ironed out during that time.
[+] username90|6 years ago|reply
So why not remove the DRM after the first week then?
[+] sudosysgen|6 years ago|reply
There are many problems with the headline.

First of all, a lot of Denuvo games no one cares about, either due to low popularity or because they aren't very different to the older, cracked version. These are a dozen of games that add times in the multiple hundreds of hours, warrantlessly.

Second, cracking groups often voluntarily hold off on cracking games so that they are already updated by then. Often for multiple weeks to a month, where you see the crack to be on yesterday's update.

In reality, I'd estimate cracking times to be around one or two weeks, with some high profile, usable at launch games to be cracked in hours.

[+] lousken|6 years ago|reply
I have about 200 games in my library but not a single one with denuvo. With denuvo it you aren't buying a game, but just a permission which can expire at any moment and it's gonna be up to the developer if they want to fix it or not.