Encryption in Construct 2

Discussion and feedback on Construct 2

Post » Thu Feb 16, 2017 1:21 pm

Rayek wrote:After some emailing back and forth regarding the actual legal stance related to GraphicsRiver's license and unencrypted assets in released (Windows) desktop games, I asked for a definitive legal answer rather than "should be fine", and I have been moved up to level 3 support - to their legal department! Seems the situation is not as clear cut as it seems to be.

The plot thickens... I'll keep you informed - might take a couple of days.


I took the liberty of asking as well:

Me:

From your license here:
https://graphicriver.net/licenses/terms/extended

Specifically section 11:
"You must not permit an end user of the End Product to extract the Item and use it separately from the End Product."

If I put a licensed asset in my game, is that OK as long as my terms and conditions state that the end user is not permitted to extract the item?

I'm concerned that the asset in my game is easy to extract and wouldn't want to be held liable.


Their reply:

I know you had to wait a while for us to get back to you, so thanks a lot for your patience. We have a crazy backlog but are working hard to tackle it :)

> If I put a licensed asset in my game, is that OK as long as my terms and conditions state that the end user is not permitted to extract the item?

Yes, this should be totally fine.

I'm here to help if you need any further assistance.

Good luck with your game :)


Legal risk is a legitimate concern, but I'm yet to see any actual evidence that encrypting your game assets as people describe is a required step under licensed assets. Are there any more examples you have?
Image Image
Scirra Founder
B
173
S
41
G
34
Posts: 4,379
Reputation: 54,143

Post » Thu Feb 16, 2017 2:12 pm

I'd vouch for implementing a simple encryption, but with a warning for the users that it's main purpose is to prevent customers from just unzipping the files and was implemented for possible legal issues with bought assets.

I know it won't stop a bit more technical person to steal the assets, but I do think that if extra steps are necessary to get the assets instead of just unzipping a file, at least 75% of the people who would have stolen those assets won't do it. I think it's similar when a store leaves it's door for the night closed or locked.
B
135
S
33
G
17
Posts: 1,557
Reputation: 20,717

Post » Thu Feb 16, 2017 2:52 pm

glerikud wrote:I'd vouch for implementing a simple encryption, but with a warning for the users that it's main purpose is to prevent customers from just unzipping the files and was implemented for possible legal issues with bought assets.

I know it won't stop a bit more technical person to steal the assets, but I do think that if extra steps are necessary to get the assets instead of just unzipping a file, at least 75% of the people who would have stolen those assets won't do it. I think it's similar when a store leaves it's door for the night closed or locked.

I agree with what glerikud said.

XOR encryption surely won't stop the big guys but it would be much better to have XOR in place,
instead of leaving the majority of our game assets open for grabs in my opinion.
ImageImageImage
B
63
S
23
G
78
Posts: 658
Reputation: 44,929

Post » Fri Feb 17, 2017 2:37 pm

Ashley wrote:So I was thinking about this some more, and I guess something we could do with hopefully minimal performance impact is something simple like XOR encrypt the project name over the content of all asset files. If it's reversed at the point of loading hopefully there won't be too much delay (although this remains to be seen), and it stops you "just opening" any asset files.


I'm personally 100% fine with this. This is exactly what I'm asking for, as I doubt that C2 games will get too many skilled hacker around. Plus as you already said, RAM extracting is also a thing, so too heavy encryption is useless anyway.

But as I said, I'd rather have a small encryption than no encryption at all.
My addons:
[PLUGIN]Value Monitor
[PLUGIN] Text Alignement
[BEHAVIOR]Timescale Ratio
[BEHAVIOR]Polar Coordinates
[PLUGIN]Action Sequence
[BEHAVIOR]Action Sequence
[BEHAVIOR]Instance Variable Control
B
35
S
6
G
2
Posts: 228
Reputation: 3,388

Post » Sat Feb 18, 2017 5:23 pm

@Tom,

Yes, their legal department got back to me as well.

Legal has replied with an answer. The 'You must not permit' restriction in clause 11 is meant to stop a buyer from positively allowing - ie authorising (whether expressly or impliedly) an end user to extract the Item from the End Product.


"In answer to your question, you would not be in breach of clause 11 of the Extended License for this item if you released the game to the public with the GraphicRiver item sitting in an unencrypted file, however it would be best practice to include a terms and conditions text file with this game, using the wording you suggested.

If it is trivial to do so, we would encourage you to encrypt the game's data files for your peace of mind."
Win7 64- i7 [email protected], p6t Deluxe v1, 48gb, ATI 7970 3gb, EVGA 590 3GB, Revodrive X2 240gb, e-mu 1820. Screens: 2 x Samsung s27a850ds 2560x1440, HP 1920x1200 in portrait mode
B
30
S
10
G
8
Posts: 170
Reputation: 7,074

Post » Mon Feb 20, 2017 1:54 pm

Thanks for posting their response as well to confirm, so it looks absolutely fine and there aren't any obstructive legal issues with not encrypting your files as far as I can see.

Are there any more examples, or is everyone currently satisfied that there are no identifiable legal issues to not encrypting your files at the moment?
Image Image
Scirra Founder
B
173
S
41
G
34
Posts: 4,379
Reputation: 54,143

Post » Tue Feb 21, 2017 2:41 pm

@Tom, well if we could at least get that XOR encryption, that'd be nice. As Ashley said, it'll mainly work as a placebo, and as it will work (a little bit), it should solve most problems: People complaining about having no encryption, and assets stealing actually dropping as it's not as easy to get the assets as it needs a little bit of knowledge, which most people that steal assets don't have.
My addons:
[PLUGIN]Value Monitor
[PLUGIN] Text Alignement
[BEHAVIOR]Timescale Ratio
[BEHAVIOR]Polar Coordinates
[PLUGIN]Action Sequence
[BEHAVIOR]Action Sequence
[BEHAVIOR]Instance Variable Control
B
35
S
6
G
2
Posts: 228
Reputation: 3,388

Post » Tue Feb 21, 2017 3:19 pm

It's good to know that there isn't any legal issues with the current method. However, I agree with @skymen . An encryption would be useful, even if it's that simple as XOR.
B
135
S
33
G
17
Posts: 1,557
Reputation: 20,717

Post » Wed Feb 22, 2017 5:24 pm

Tom wrote:Thanks for posting their response as well to confirm, so it looks absolutely fine and there aren't any obstructive legal issues with not encrypting your files as far as I can see.

Are there any more examples, or is everyone currently satisfied that there are no identifiable legal issues to not encrypting your files at the moment?


I don't think, based on this one case, that no other legal situations will arise where NOT encrypting will cause potential problems.

While I have no knowledge of other instances, I think an option to encrypt assets would be a good thing to have in any case.

At the very least I can say I have worked with artists before who would not like to see their work "out in the open", so to speak. To allay their and clients' fears (which are often emotion based) encryption would be good to have - aside from potential legalities.
Win7 64- i7 [email protected], p6t Deluxe v1, 48gb, ATI 7970 3gb, EVGA 590 3GB, Revodrive X2 240gb, e-mu 1820. Screens: 2 x Samsung s27a850ds 2560x1440, HP 1920x1200 in portrait mode
B
30
S
10
G
8
Posts: 170
Reputation: 7,074

Previous

Return to Construct 2 General

Who is online

Users browsing this forum: No registered users and 13 guests