Check out our Monthly Survey Page to see what our users are running.
We do often include affiliate links to earn us some pennies. See more here.

GOG's Installer Encryption Proving to be Difficult for Linux Users

By - | Views: 29,459
GOG has begun using encrypted RAR files in their Windows installers for various games to enhance their security. This however has caused problems for some Linux users.

The new installer format uses password protected RAR files that are encrypted to stop pirates from adding malware to the installer and then spreading that package throught torrents to users. The password protection is also meant to prevent user stupidity where the user would unpack the RAR file without running the installer like it's meant to (on Windows) thus breaking the installation package.
Source

The problems arise when Linux users attempt to use the extraction utility innoextract to unpack the installers of the games without having to use Wine. This is useful when using some versions of Wine that don't support GOG's installers or when you only want to access the game's data files to use them with an alternate game engine. The password protection put in place by GOG effectively prevents innoextract from extracting the package, making users reliant upon GOG's own installers which, like I said, might not work in Wine.

Some users consider this behaviour DRM-ish and against GOG's promise of being a DRM-free game store and they have put up a wishlist entry on GOG to make them revert back to the old installers. You can vote and add your comments here: https://www.gog.com/wishlist/site/dont_slip_into_drm_swamp_stop_using_password_protection_on_installer_packages

Known affected games include games such as Assassins Creed, Wasteland 2, Heroes of Might and Magic 5 and The Bard's Tale along with other games. Note that this doesn't affect Linux packages of the Linux supported games, only the Windows installers. You can also check the full list of games that are affected and also report your findings here:
https://github.com/dscharrer/innoextract/issues/37#issuecomment-67915715

Some Thoughts

The line between DRM and no DRM might not always be absolutely clear. In this case the password protection doesn't prevent you from making copies of your games, as you can just copy the installers around, but it does prevent you from messing around with the installer and makes you depend on their own installer.

But in any case I do side with the crowd against these measures. The way I see it, they are trying to protect pirates from malicious pirates and users from themselves which I find quite ridiculous. Normal user who purchases a game from GOG (on Windows) will most likely go for the big file that contains words like “setup” or “installer” instead of clicking random .bin files. And protecting pirates? Now that is just plain silly. Prevention of malware is of course good but if you are going to pirate games you have to be ready to pay the price of potentially installing something nasty on your system and many pirates are aware of this and throw their anti-virus scanners at every piece of warez they download.

Is preventing legitimate customers that use Linux from playing the games worth saving a couple of minutes of support time and the computers of a handful of pirates? Article taken from GamingOnLinux.com.
Tags: DRM, GOG
0 Likes
About the author -
author picture
I'm a Linux gamer from Finland. I like reading, long walks on the beach, dying repeatedly in roguelikes and ripping and tearing in FPS games. I also sometimes write code and sometimes that includes hobbyist game development.
See more from me
The comments on this article are closed.
28 comments
Page: 1/3»
  Go to:

Imants Dec 30, 2014
Thats why I stopped buying games which do not support Linux by default.

Quoteor when you only want to access the game's data files to use them with an alternate game engine
And I am too lazy to do this :). If I can not install game with one ore two clicks I do not bother,

Edit:
As for the password protection I do not see any reason why they could not do with their installer whatever they want as long games stay DRM-free.
StianTheDark Dec 30, 2014
I never use Wine or GOG so it doesn't affect me :)
hardpenguin Dec 30, 2014
QuoteIs preventing legitimate customers that use Linux from playing the games worth saving a couple of minutes of support time and the computers of a handful of pirates?
Legitimate? Just pointing out that those 'legitimate' ones want to play games that are not in any way supported for Linux...
StianTheDark Dec 30, 2014
Quoting: hardpenguin
QuoteIs preventing legitimate customers that use Linux from playing the games worth saving a couple of minutes of support time and the computers of a handful of pirates?
Legitimate? Just pointing out that those 'legitimate' ones want to play games that are not in any way supported for Linux...

I mean, not supporting Linux is a stupid move and they should do everything they can to make it work on Linux. And if GOG prevents people from playing it in Wine, then they prevent Linux users from playing the game.
neffo Dec 30, 2014
This all seems like a confected outrage. This isn't DRM. And by all accounts it's a trivial matter to bypass. (Why wasn't this mentioned in the post?)

By the sounds of it, this would work:

GAMENAME=neverwinter_nights_diamond_edition

GAMEID=`curl -s -o- http://www.gog.com/game/$GAMENAME | pcregrep --buffer-size 1M -o1 "addToCart\('/cart/add/(\d+)'\)"`

unrar x p`echo $GAMEID | md5sum | cut -d ' ' -f 1` $FILE
Samsai Dec 30, 2014
Quoting: neffoThis all seems like a confected outrage. This isn't DRM. And by all accounts it's a trivial matter to bypass. (Why wasn't this mentioned in the post?)

By the sounds of it, this would work:

GAMENAME=neverwinter_nights_diamond_edition

GAMEID=`curl -s -o- http://www.gog.com/game/$GAMENAME | pcregrep --buffer-size 1M -o1 "addToCart\('/cart/add/(\d+)'\)"`

unrar x p`echo $GAMEID | md5sum | cut -d ' ' -f 1` $FILE
I might have overlooked that bit when I went through the forum thread. Based on the messages I read and the tip that was given to us I got the impression that the password wasn't general knowledge.
pd12 Dec 30, 2014
for authenticity, they could just sign and checksum their files like everyone else?

It seems as if in trying to make a turn-key install process they made it more complicated and harder to install for people who know what they're doing. Not a good sign.
And definitely a breaker for some Linux WINE runners.
aL Dec 30, 2014
Quoting: pd12for authenticity, they could just sign and checksum their files like everyone else?

Indeed. Just open source your client and use it to authenticate the downloads so clueless people can benefit too...

Easy peasy. This actually makes the teachie guy in gog looks pretty useless. What else is this guy in charge of to be aware?
Bomyne Dec 30, 2014
This is why I only buy games on Steam... Let the Steam client do the installing.
neffo Dec 30, 2014
Quoting: pd12And definitely a breaker for some Linux WINE runners.

couldn't you just use the GOG installer in wine anyway?

Quoting: SamsaiI might have overlooked that bit when I went through the forum thread. Based on the messages I read and the tip that was given to us I got the impression that the password wasn't general knowledge.

it was in the github post (like one post after the one you linked to), not trying to sound like an arsehole here, but i didn't read the thread much either. it just seems like a bizarre change, yes, but the response is completely overblown (like every linux gaming issue).
While you're here, please consider supporting GamingOnLinux on:

Reward Tiers: Patreon. Plain Donations: PayPal.

This ensures all of our main content remains totally free for everyone! Patreon supporters can also remove all adverts and sponsors! Supporting us helps bring good, fresh content. Without your continued support, we simply could not continue!

You can find even more ways to support us on this dedicated page any time. If you already are, thank you!
The comments on this article are closed.