this post was submitted on 03 Aug 2023
60 points (82.6% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

60480 readers
634 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

🏴‍☠️ Other communities

FUCK ADOBE!

Torrenting/P2P:

Gaming:


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 2 years ago
MODERATORS
 

I understand that sharing video, photos, documents etc. is relatively safe because the data is not executed in the processor as instructions. How come people are willing to download and install pirated software though? How can one be confident that it does not contain malicious addons? Are people just don't know the risks? Or are there protection mechanisms that I am missing? I mean since the software is usually cracked there is not much use in comparing checksums with the originals, is it?

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 89 points 2 years ago (1 children)

Worth noting that paying for a license for software doesn't stop it being spying malware either. In fact the pirate versions often take out the spying and the reporting-to-homebase that proprietary software does.

The photoshop that phones home to check a license is arguably more malicious than the pirate version that has been cracked so it doesn't do that.

[–] [email protected] 5 points 2 years ago (1 children)

Good and valid point. I use opensource software wherever I can.

Though paid software is not going to encrypt your data for ransom or use a keylogger to steal bitcoin (yet).

[–] [email protected] 4 points 2 years ago (1 children)

There was an antivirus that was caught running a bitcoin miner in the background tbf. If memory serves it was Norton?

[–] [email protected] 2 points 2 years ago

It was opt-in, and I think to make your subscription cheaper. Then again, Norton sucks!

[–] [email protected] 73 points 2 years ago* (last edited 2 years ago) (13 children)

Long story short.

  1. Be prepared for disaster.
  2. Scan it. Sandbox it if concerned.
  3. Firewall inspect/block/allow every outbound comm.
  4. Get it from a trusted source.

Basically the same stuff you should be doing with all software.

Edit for firewall clarification.

load more comments (13 replies)
[–] [email protected] 43 points 2 years ago (2 children)

It's partly an honor system but also, anyone distributing malicious cracks are quickly called out whether its on public tracker comments like PirateBay or removed from private trackers.

Distributors of GOOD and CLEAN cracks often earn good rep in the community too, like Monkrus which I've had no issue with before.

Also, in my experience, installing a malware-packaged adobe app isn't actually all that bad if you run a malware scan immediately afterwards. With the scale and breadth of software piracy there isn't much money in making advanced malwares beyond bundling an existing one into an installer. I don't recommend it, but it's still easier and cheaper than paying Adobe!

TLDR the community polices itself pretty well considering.

[–] [email protected] 14 points 2 years ago (1 children)

Also, I would consider some legitimate licenced software more of a malware than a cracked one. If your software forces always-online license, comes with annoying startup processes, nagging ad screens, etc, it's malware. And if there's a cracked version without those things, I'll take the cracked version any day.

load more comments (1 replies)
[–] [email protected] 3 points 2 years ago (2 children)

I agree with what you said, but how do I make sure that the cracked software is not further altered by other people and uploaded. Do you just select the torrent with the most peers? Is that enough? When using one-click-hosters it is even harder...

[–] [email protected] 6 points 2 years ago (1 children)

No. It isn't about the torrent with most peers. It is about the source and the uploader. As someone has already mentioned it, it is about the Reputation!

load more comments (1 replies)
[–] [email protected] 2 points 2 years ago

It's hard! A lot of it is, like I said, reputation. Sources of safe pirated and cracked software are maintained mainly through word-of-mouth - The crappier and dodgy sources will always invest into SEO to get to the top of the results, and are more likely to avoid legal trouble as companies appreciate that malware-infested installers actually help discourage new pirates.

Also, there's generally little incentive to go beyond the basic modifications. Most online scams, even outside malware, cast the net as wide as possible and even go out of their way to avoid complexity. They get the most money out of scamming new and uneducated users who pay up quickly. The same logic means they want advanced users to know it's a scam to avoid wasting time on targets who won't bother paying anyway.

I bet there are exceptions to this rule, but since scamming and malware are such low-profit ventures there's a lot of incentive on quantity over quality.

[–] [email protected] 38 points 2 years ago (1 children)

I trust pirates more than billion or trillion dollar companies. Also, aggressive DRM such as iLok is worse than malware, so eh.

[–] [email protected] 10 points 2 years ago

Fuck iLok. Shit made me regret buying plugins, should have stuck with piracy.

[–] [email protected] 24 points 2 years ago* (last edited 2 years ago)

How come people are willing to download and install pirated software though?

You can just remove "priated" from that statement and come to the same conclusions. Considering the amount of bugs, backdoors and 0-day exploits distributed via official software I sometimes wonder why people execute proprietary, closed source programs at all.

An no, "reputable" companies mean nothing, just look at Microsoft clowning around with their signing keys.

[–] [email protected] 22 points 2 years ago (1 children)

If you get the software from reliable source, it is almost certain it does not have malware.

The piracy is an organized activity and people at higher rank nuke the release if it has malware.

Read more here https://opentrackers.org/i/2600_Guide_to_Internet_Piracy-TYDJ.txt

load more comments (1 replies)
[–] [email protected] 21 points 2 years ago

You're thinking too technical about this. This is a money thing. Personally speaking pirated software/games were chicken soup for my poverty ridden childhood.

[–] [email protected] 18 points 2 years ago (2 children)

If i were to pay for an AutoCAD license , it would be over 200$ A MONTH

[–] [email protected] 8 points 2 years ago (2 children)

That's why I'm learning Blender, I think I'll be able to carry on without Maya.

Adobe isn't pretty but Autodesk is a scourge

[–] [email protected] 5 points 2 years ago

I Love blender. I am also learning it but more because it works on linux unlike AutoCAD

[–] [email protected] 2 points 2 years ago

Blender is fully capable these days, have fun!

[–] [email protected] 7 points 2 years ago (2 children)

What kind of cheap-ass, stripped down AutoDesk suite are you getting for $200/mo. Last I checked, the architectural suite was north of $4500/yr.

[–] [email protected] 6 points 2 years ago (1 children)
[–] [email protected] 2 points 2 years ago

Technically you can do all the same things with paint and a LOT of patience.

load more comments (1 replies)
[–] [email protected] 16 points 2 years ago (7 children)

really theres little reason to even use non-foss paid software....

[–] [email protected] 8 points 2 years ago
[–] [email protected] 2 points 2 years ago

I wish that was true

[–] [email protected] 2 points 2 years ago

There a reason if the alternative doesn't exist or isnt good enough.

load more comments (4 replies)
[–] [email protected] 14 points 2 years ago

You severely underestimate the power of free stuff

[–] [email protected] 8 points 2 years ago

Most don't invest that much into anti-piracy protection and you can avoid it with simple firewall and GPEdit corrections for the unlimited premium spoof.

There are also the key gens that emulates the server or the software to receive the codes or give a confirmation to the software.

This is all very oversimplified and there are an infinite number of anti-piracy methods that the companies don't even want to try to solve since it's all free advertising and it gets people used to their software when they have to buy it.

[–] [email protected] 6 points 2 years ago (1 children)

You can always run software in a Virtual Machine to see if it's the real deal or not. Additionally, people really like to be "the first" or "the one" who actually provides something. See for example the first cracked Version of Read Dead Redemption 2 - it was announced like a special record (and it was!). Being the first to provide an actual, working copy brings fame, that's why people go to such lengths to crack and provide software. And the people who download it? Well, they can often rely on those with virtual machines testing the software and then on reviews and ratings available on the download sites.

[–] [email protected] 3 points 2 years ago* (last edited 2 years ago)

Virtual machine testing is a good idea, but I wouldn't rely on it. Well written malware will check for a virtual environment and might even hold off executing if it detects it. Better malware will have already gained persistence as your testing for it.

[–] [email protected] 5 points 2 years ago (1 children)

It's one of those high-risk, high-returns case scenarios. You gamble. If you succeed, you will be saving some buck. Some software licences can be very, very expensive.

There is no way of knowing the answer to your questions. You just use your intuition and take a leap of faith.

[–] [email protected] 2 points 2 years ago* (last edited 2 years ago) (2 children)

Some software licences can be very, very expensive.

When I was in art school in the early 2000’s, I worked with computer controlled weaving looms. The program for drafting patterns and running the AVL Compu Dobby on the loom was free to download. In order to use it, though, you had to have a $3000 usb key.

load more comments (2 replies)
[–] [email protected] 4 points 2 years ago
[–] [email protected] 4 points 2 years ago

Yeah checksums are useless. But if you know assembly, you could diff the original binary with the crack and look for anything malicious.

[–] [email protected] 3 points 2 years ago

If you get the crack from a reputable source, you can trust it will be safe. A low seed torrent from a shady place (like The Pirate Bay) is probably a virus. High seed torrent from another source like 1337x or something with more active moderation is generally safe.

If you want to be extra sure, spin up a VM and install the crack there and check it out before doing it on your real machine.

[–] [email protected] 3 points 2 years ago (2 children)

Make a dedicated user on your machine for pirated software. Never give that user root. Should contain it.

load more comments (2 replies)
[–] [email protected] 3 points 2 years ago (1 children)

Meh, how is surgery a thing? You let people just open you up and dig around your insides?

it's a mix of need and belief in a proper vetting process. For computers there's the additional layer that any one machine is probably low stakes. In early internet days most software was prohibitively expensive but gave you the equivalent of super powers - as a teenager / young adult with ability to take that risk you're not going to do it?

[–] [email protected] 2 points 2 years ago (1 children)

Well, I prefer to go the hospital with licensed personnel and not to ask some guy on the internet to perform surgery..

load more comments (1 replies)
[–] [email protected] 3 points 2 years ago* (last edited 2 years ago)

I feel safe, maybe I shouldnt, but my life wouldnt be this good if I didnt have access to everything I cracked lol

load more comments
view more: next ›