Interesting web discovery...

Post by **Trey** » Tue Mar 11, 2008 5:46 am

I stumbled across the ftp server of a company called Yummy.net which seems to be some sort of online game seller. Did a ftp search for Mortyr found it on their server along with a ton of other games. Not that it'll do anyone any good. Apparantly you need to download some sort of propriatary software that allows you to purchase, then download the entire game to your computer and play it. You could download the contents of the game, but without the software it'd be useless. Strange file extensions like .yar (which seems to contain the game data), .yap, .ykey. Processed by a program from Gameshield.

I wonder if these folks know that their server is open? Or are they just so confident that their encryption is unbreakable that they don't even bother to lock their server

Liamoneal · Post by **Liamoneal** » Thu Mar 13, 2008 12:27 am

Nothing is unbreakable. What's the URL?

Oyn · Post by **Oyn** » Thu Mar 13, 2008 12:44 am

Eww, Mortyr.

Post by **Trey** » Thu Mar 13, 2008 2:04 am

There are a couple mirrors, here's one:

ftp://ftp.simtel.net/pub/yummy/

Most stuff is under 'GameContent' everything from Neverwinter Nights Gold to Atari 2600 games...

Post by **loki1985** » Thu Mar 13, 2008 11:26 am

ID software had a similar system once, which was even weaker than this one seems to be, and even IDs system was not cracked, i think.

just guessing, but it probably works this way: the data gets encrypted with a random key. when you purchase it, you get that random key, but encrypted using your public key. for this to work and to crack it, you at least must buy each game once. this is why there is no easy solution, especially not possible to break the system for all games at once.

otiscrusher · Post by **otiscrusher** » Thu Mar 13, 2008 3:20 pm

ID software had a similar system once, which was even weaker than this one seems to be, and even IDs system was not cracked, i think.

Everything is cracked, everything. The same person who creates the protection is paid to crack it, it's life. It always been and always will be...

Post by **Trey** » Fri Mar 14, 2008 12:29 am

loki1985 wrote:just guessing, but it probably works this way: the data gets encrypted with a random key. when you purchase it, you get that random key, but encrypted using your public key. for this to work and to crack it, you at least must buy each game once. this is why there is no easy solution, especially not possible to break the system for all games at once.

Yeah, I think what I read on Gameshields' website said it worked something like that.

Post by **Trey** » Fri Mar 14, 2008 12:33 am

otiscrusher wrote: Everything is cracked, everything. The same person who creates the protection is paid to crack it, it's life. It always been and always will be...

Well, everything is crack-able, all it takes is time and effert. It's just a matter of wether it's worth anybodys time to work on it.

Post by **loki1985** » Fri Mar 14, 2008 12:57 am

otiscrusher wrote: Everything is cracked, everything. The same person who creates the protection is paid to crack it, it's life. It always been and always will be...

well, that is not entirely true. most systems are unsecure, but public/private key encryption is unbreakable, at least for current computers. using a 1024 bit sized key would take millions of years on current computers (and i mean big ones).
of course also systems using such schemes are decrypted, but not by "breaking" or "cracking" the system, but instead by getting the original key. and one such way would be to buy a license. once that is done, any amount of key files can be created, avoiding getting caught.

but technically, that is not really "cracking". you also wouldn't say you managed to "break into" a car if you used the original car key, right?

and i know the "the guy who designs the system can also crack it" theory, but in such "standardised" systems like P/P key systems, that is not true. because such schemes are common practice in high-security areas like banking and similar since many years, only in e.g. computer games they have not yet been used extensively because of the efforts and usability limitations connected to it. also, computer games cannot efford the cost of e.g. delivering individually encrypted container files, so once you have a license, you can adapt that to any copy (see above).

as you can see, cryptography and similar is a topic i am somehow interested in