BioShock Installs a Rootkit 529
An anonymous reader writes "Sony (the owner of SecureROM copy protection) is still up to its old tricks. One would think that they would have learned their lesson after the music CD DRM fiasco, which cost them millions. However, they have now started infesting PC gaming with their invasive DRM. Facts have surfaced that show that the recently released PC game BioShock installs a rootkit, which embeds itself into Explorer, as part of its SecureROM copy-protection scheme. Not only that, but just installing the demo infects your system with the rootkit. This begs the question: Since when did demos need copy protection?"
Yet another game (Score:3, Insightful)
Re:Yet another game (Score:1, Insightful)
It does not (Score:5, Insightful)
Shame on /. for linking to this (Score:5, Insightful)
Okay, I was getting myself good and riled up over this piece of news. I was even ready to return the game first thing tomorrow despite it being a lot of fun. Then I did the unthinkable - I RTFA.
Seems this is a big load of nothing. SecureROM installs a service to let those running without admin privileges run the SecureROM stuff. This is kinda bitterweet - yes, SecureROM is bad etc but running as a restricted user is good. This is assuming you trust SecureROM's website which says (from TFA):
I don't see the issue here.
Re:Not QUITE a rootkit (Score:4, Insightful)
This is pure FUD. The twat who wrote it even admits it in the comments:
Re:But why do they need to install spyware/rootkit (Score:3, Insightful)
It would probably be an unwise business decision to automatically exclude over half of your potential customers at this juncture.
SEO bait (Score:4, Insightful)
Re:Not QUITE a rootkit (Score:2, Insightful)
Inaccurate. (Score:3, Insightful)
I *really* wish we could force (through consumer pressure rather than legislation if possible) publishers to acknowledge copy protection on the OUTSIDE of boxes (or other appropriate pre-purchase manner).
It's hard to boycott something that you don't hear about until AFTER purchase. (Especially since it's very difficult to return an opened game.)
Re:This is why fucking capitialism needs to be (Score:2, Insightful)
Vote with your dollar and don't buy this shit!
PC gaming (Score:5, Insightful)
I got sick and tired of copy protection fucking up my machine, or refusing to run a valid copy because it didn't like my disk. (Medieval Total War and Diablo II being two games in particular that simply would not run on my hardware without a CD crack.)
Having to upgrade hardware every couple years was annoying, but it's all this crap heaped on me, who is trying to pay real money for games that pushed it over the edge. I'm sure I'm not alone. And yes, I know that Console games are protected too...but for console games, it's transparent to the user.
Note that I also paid for "Galactic Civilizations II", which was not protected, and the expansion will be the only PC game I purchase this year.
Re:Yet another game (Score:5, Insightful)
Somewhat off-topic, but if this isn't a sign of the times I don't know what is. You shelled out $50-60 of hard-earned money to buy a game immediately after it's released and what's your reward? You sit and wait for hours while the moron publisher's servers get overloaded with "activation" requests. And here in this comment, instead of showing irritation or annoyance, you just accept this as normal (not saying you weren't pissed then of course
Funny, I remember when you would buy a game and could take it home and play it right away. Of course technology has progressed since then - now companies can alienate honest customers while adding a few hours to the time it takes to crack the copy protection. Steam is one of the worst things to happen to computer gaming in a long time.
If that's not progress, I don't know what is.
Re:This is why fucking capitialism needs to be (Score:5, Insightful)
Actually, these rootkits are good... (Score:5, Insightful)
Good for certain uses anyway. I've participated in Iowa State University's Cyber Defense competitions as a red team hacker, and I've found they really help to take out the defending teams. Every team is required to run a regular Windows desktop that any user can access (the teams often play the part of universities or other facilities trying to secure a public lab), and it's fun to just walk up like a normal user, put in a "normal" music CD or game (courtesy of Sony), and then BOOM, rootkited. From there on, of course, things get easier... it's hard to remove malicious files when the OS won't let you know they are there :D.
Re:raising vs begging the question (Score:3, Insightful)
Considering that the meaning of "begs the question" that you say is wrong may very well be the more common understanding, I'd say they understand it perfectly well. Common understanding of words and phrases are what define a language.
Honestly, I think people keep using the phrase "begs the question" in their summaries for the express purpose of annoying people like you.
Mod Slashdot -1 Troll (Score:2, Insightful)
Re:Yet another game (Score:3, Insightful)
Re:Shame on /. for linking to this (Score:1, Insightful)
Oh the pain, the pain of it all!
Re:Oh great (Score:5, Insightful)
Re:raising vs begging the question (Score:1, Insightful)
Then I realized that it's actually probably a much smaller percentage of
Anyway, before I get too carried away with the rant, I'll just say that normal people don't focus on such mundane, trivial things, and there are more normal people on
Re:Yet another game (Score:3, Insightful)
Re:I know it really isn't a rootkit, but... (Score:4, Insightful)
Re:But why do they need to install spyware/rootkit (Score:4, Insightful)
(Remember, we are not your personal army.)
Punish your customers (Score:5, Insightful)
I used to buy a fair few more PC games. After some of the nastier games the bigger vendors started playing, I stopped buying larger commercial games and moved on to games made by smaller indies (okay, there were some other reasons to, but that's a discussion for another day). They are far less likely to install crap on your system or make you jump through hoops post-purchase.
Until recently. I purchased a game from a larger indie and then found out I had to "activate" it (after they got my money, of course). They "promise" it'll all be okay, they've got money aside in case they go out of business (which they'll never touch, of course, promise promise). But it's okay because "Windows does it too". I'd name-and-shame them but they did make an effort to make it right when I kicked up. And honestly, I don't want this fight. So let's just say it was a good indie game.
So I'll be buying less and less games over time, I guess.
So where are we now? Here I am, along with other paying customers, doing the right thing- and I get shafted as a result. I can get a better copy with less restrictions by going to the local warez-are-us. That copy won't stop working ten years later when the developer shuts down. It won't phone home and refuse to run. It won't refuse to run without a net connection sending God-knows-what to their activation server.
As a software developer I can completely understand the reason to protect your software from being casually distributed, but dammit- CD driver replacements, rootkits, web trojans, privilege elevation servers, surprise "activation". Why are you subjecting your legitimate customers to this nonsense, when the people ripping you off are just going to get it from someone who has already stripped this stuff out? Don't you realise the logical conclusion of making your product considerably worse that the warez version? Of making every software install a risk of hosing the system?
Not a Sony Game (Score:2, Insightful)
Excuse me - this IS a bad thing (Score:2, Insightful)
this is a textbook case of violation. violation of many individual rights that a pc user holds over their pc. and no surprise, its again sony - nobody else.
Troll my ass (Score:3, Insightful)
Read the Moderator Guidelines.
Re:PC gaming (Score:4, Insightful)
Gal Civ II rocks--it's an awesome game.
Re:But why do they need to install spyware/rootkit (Score:5, Insightful)
I think you make an important point that is seldom stressed:
It really is our internet; we have no one to blame for what it is other than ourselves.
Re:Maybe Sony is doing this on purpose? (Score:2, Insightful)
It's not their title, it's not even coming to their platform. The only way the publisher would end up with Sony DRM on this title (which Sony definitely doesn't have a stake in), is if the PUBLISHER sought it out.
In short, if folks are looking for an angle where Sony somehow masterminded this, I think they're going to be quite disappointed IF they think about it logically. On the other hand, if their thought process goes: "Rootkit=SONY!", then I think they're a bit too dense for logical thought in the first place.
Re:raising vs begging the question (Score:3, Insightful)
Most of them are beyond help anyway. I'd also say that those are examples where one would be justified in correcting improper use. I see no problem using begs the question to mean raises the question, it's perfectly acceptable English. Use circular logic or reasoning to refer to the logical fallacy, because these days no one is going to know what you're talking about, or care. And don't bring the law into this, that's another can of worms entirely. Legal jargon is intentionally difficult with numerous minefields to navigate, you'll probably need a lawyer to make sen...oh damn, they're good.
Re:Oh great (Score:2, Insightful)
That's not to say that Sony doesn't have fanboys, but that Sony has a lot of anti-fanboys amongst the Wii and 360 folks. I personally am an admitted MS anti-fanboy, although it has to do with grudges dating back to Windows 3.1 vs the Amiga, and hasn't been added to much by the X360.
Personally, I do prefer the PS3, but don't object to folks preferring the 360 or even bashing the PS3's legitimate issues (i.e. overpricing, etc). I simply take annoyance with folks who bash the PS3 simply because they're anti-Sony in general (you'll find that a lot on Joystiq).
Re:Yet another game (Score:3, Insightful)
Re:Yet another game (Score:2, Insightful)
Re:Oh great (Score:1, Insightful)
Re:But why do they need to install spyware/rootkit (Score:2, Insightful)
It's more like if the demo is the same exe, and you don't put the copy protection on it, you've just provided a "no cd fixed exe" patch to anyone who wants it.
(my captcha is "goatees". you probably already know what i thought it was on the first read)
Re:Shame on /. for linking to this (Score:5, Insightful)
True, I'm surprised no one has really mentioned it here, but my biggest issue is that Bioshock refuses to start if it detects Process Explorer running. And since Process Explorer starts its own device driver (or whatever it is) upon first start which isn't later unloaded, I have to reboot Windows every time I want to play Bioshock.
That is a showstopper right there for me. I'm never buying any game Securom protected game again. This was the first and last time I did that mistake.
Re:Oh great (Score:2, Insightful)
Re:Oh great (Score:5, Insightful)
I agree that programmers should be paid for making software, just like musicians should be paid for making music.
But only for making the software/music, not for the copies. So if an artist/programmer spends 100 hours making a song or programming an application, he/she should get paid for the 100 hours they spent, according to their hourly rate. Why do people think it's fair to get paid for work they actually haven't done ?
If you have a plumber install a toilet in your house, you don't have to pay a license fee for every person who wants to take a shit on it, you just pay him for the amount of time he's spent installing it. I don't see how music or software is any different.
This sucks bad, and I won't be buying it now (Score:5, Insightful)
First of all, your link to the forums goes to a thread about achievement points on the Xbox version of the game. This thread [2kgames.com] is much more relevant; it's about the rootkit.
Second of all, I, like many other people, was looking forward to Bioshock's release. I, like I hope many other people will do, refuse to buy it now.
Whether people thing of this as FUD or not, the simple matter of the fact is that:
2K Games has A FAQ about SecuROM [2kgames.com] that is, at best, contradictory in several places. They say:
However, Sysinternals' RootkitRevealer software [photobucket.com] begs to differ. Who am I going to trust, a game company that is practicing Defective by Design [wikipedia.org] tactics, or Mark Russinovich [wikipedia.org], a software engineer who's proven time and again that he is the guru of this stuff, the guy who discovered the infamous Sony rootkit, the guy who knew Windows better than even the Windows people knew Windows, so well that Microsoft bought his company and hired him? I'll gladly cast my lot with Mark any day, even if he does work for Microsoft now.
2K Games also says in its FAQ:
They then go on to say:
Um... If SecuROM doesn't fingerprint my hardware, what is the "machine ID" that a hash is taken of and sent to their servers? And how the hell is it possible that changing several pieces of hardware might result in a required reactivation? The simple answer is, of course, that SecuROM does fingerprint your hardware, and 2K Games lied to our faces in the hopes that computer users who aren't as savvy as us won't get bogged down with the technical details and just read the part where they say that it doesn't fingerprint the hardware.
This is totally inexcusable, and I won't have anything to do with this company. Will the game be cool? Maybe, but nothing is cool enough to install this crap on my computer for. As far as I'm concerned, 2K Games has destroyed its credibility, and they can go to hell for it.
If I steal your credit card numbers... (Score:4, Insightful)
How the HELL did this get modded informative!!?
The summary never says that Bioshock is a Sony game. In fact, Bioshock isn't even mentioned until well into the summary, and it's clear that they licensed the software from Sony. The summary makes it crystal clear that Sony is the owner of SecuROM copy protection, the copy protection that Bioshock installs.
Are you on drugs? I mean, seriously, are you on drugs!? That's the only way I can think of to explain how stupid that sentence is. If Sony came up with the technology, and then the other guys decided to license it and use it, does this mean Sony had much to do with it? Hell yes, because they wrote it!!! Plus, there's also the little fact that they've done this exact same thing before that you're totally ignoring. Once is a lapse in judgement. Twice is a pattern. I wasn't what you call and anti-Sony-fanboy before all of this rootkit fiasco, but I sure as hell am now. If not wanting rootkits installed on my computer makes me a anti-Sony-fanboy, then I suppose I'm proud to call myself one, and for the mere sake of computer security, I highly recommend to everyone I know that they immediately become anti-Sony-fanboys too.
If I steal your credit card numbers, and then other guys decided to buy them and use them, does this mean that I had much to do with it?
Damn, there's dense, and then there's dense. You, sir, are the latter kind. By all means, feel free to riddle your computer with rootkits for the sake of playing a stupid game, and be happy that at least you know that you're selling your soul to the devil, unlike most of the non-computer-savvy users who will probably buy and play this game that are none the wiser.
Re:It does not (Score:3, Insightful)
At the time of writing, there's only one comment from the author that mentions "search engines". So I assume your are refering to this paragraph:
Now you may disagree, but that doesn't sound to me as if he means "I'm deliberately sensationalising the issue because I want to pimp my blog on Google". It sounds more like "I'm using the term 'rootkit' so that anyone who is searching for rootkit related stories can find this one", which seems reasonable enough to me. After all, as he pointed out in the previous paragraph, the issue was flagged by the Microsoft Rootkit Revealer, so it's not an entirely unreasonable use of the term.
He goes on to say:
Now, I appreciate that you didn't say that he did use the term to boost "traffic and ad revenue", but I'm guessing that a lot of people will have read it like that. So I thought it worth pointing out that the comment in question explicitly states the opposite.
Re:Oh great (Score:4, Insightful)
Re:If I steal your credit card numbers... (Score:2, Insightful)
Just because they were dumb enough to do it in the first place, and compound the issue by selling it, does not automatically make them responsible for every vendor who decides to buy it.
You think there was any kind of board meeting when they sold the license? You think an exec even knew about it? no... A rep called another rep, and the deal was done. No, men in black suits. No, conspiracy, just a dumb move.
You still don't get it. (Score:5, Insightful)
Not exactly, you're buying a LICENSE to play their game. SecuROM is NOT required to play their game, therefore it is NOT a requirement of the license. As such, it has no place in the game.
Worse, SecuROM actually PREVENTS you from using your computer in other commonly used, non-infringing ways. So by buying the game, you're actually buying the crippling of your system along with it.
You need to read again what SecuROM does. Where you have it installed is irrelevant. It actually alters your operating system in a manner that allows non-privileged applications to run as an administrative user. That means that at the very least, it can affect your entire Windows installation. And before you go with your "I've used Linux..." rationale, you should realize that it can also affect your Linux installation.
Here's how it could work. I write a piece of software that uses the elevated privileges that SecuROM grants to normal users without your knowledge or consent that goes in and wipes all non-recognized partitions on your hard drive. Voila, your system has been compromised because playing a stupid game whose publishers willingly opened up a security hole on your system. That's what I mean when I keep saying that even if 2K Games didn't have evil intentions, what they're unleashing on people can most certainly be used for evil purposes.
The thought that you are paying them for the privilege of having a rootkit installed on your computer and that you're okay with it quite disconcerting to me, but by all means, if the service of having your system compromised is worth $50 to you, go ahead. (There are lots of people who would willingly compromise your system for free, incidentally.) Personally, I find it disgusting that anyone can't see the bigger picture and would support a company that engages in these practices, but it's your computer and your money.
Oh great-Intangible clues. (Score:2, Insightful)
Typical slashdot. First most games are produced by teams, not individuals. Second you may want to look up "Mass Production" and "Economics of scale". Apparently those are your weak areas.
"Why do people think it's fair to get paid for work they actually haven't done ?"
It's amazing how many "haven't done"'s one can download over a broadband connection.
"I don't see how music or software is any different."
This is slashdot. Anything "intangible" is hard to understand.
Re:Oh great-Intangible clues. (Score:3, Insightful)
Houses are build by teams, should I pay a license fee for every person who visits my house ? No, you pay the guys who build your house according to their hourly rate, doesn't really matter if it's one guy or tens or hundreds.
No, they aren't.
So, if a game sells 2 million copies, do I pay half as much as when the game sells 1 million copies ?
Re:Oh great-Intangible clues. (Score:3, Insightful)
Re:You still don't get it. (Score:3, Insightful)
In this particular example, I actually think this is a GOOD thing. I have another computer in the house for my kids, and there is one game on it that requires administrative permissions to run. I trust that it's just poorly written, and is not doing anything "bad" to the computer, so I enter those credentials when the kids want to play it. With Windows' architecture the way it is (needing elevated privileges to do basic things), I welcome this SORT of software to alleviate this problem. BELIEVE ME: I understand the tradeoffs. Again, it's a balancing act, and up to individuals to weigh their exposure to the benefits.
My original thoughts on weighing in here was just for people to keep in mind that this TOTAL situation is all part of the "negotiation" of either buying the thing or NOT buying the thing. If you agree to it, great, enjoy yourself. If you don't, then shut up and move on. Stop acting like this is some sort of crime against humanity to offer a certain thing at a certain price. That's the offer; take it or leave it. Just like anything else.
Re:But why do they need to install spyware/rootkit (Score:1, Insightful)
Re:Oh great (Score:3, Insightful)
Re-install Windows because of HD crash or OS corruption = your BioShock's SecuROM install count goes up and you eventually lose the ability to install.
WGA servers are down = Vista downgrades to non-genuine mode should you be unlucky enough that it phoned home during an outage.
The company goes out of business = you're fu**ed.
Fair compensation for work is... fair. But the restrictions they impose on legit customers and the risk of legit customers being hung out to dry should the company go bankrupt or experience technical difficulties is unacceptable.