Monday, April 16, 2007

Hackers Again.

Hi,

It looks like I haven't blogged for a while, but actually I have another post I just haven't finished yet.

There's a big thread on KvR where someone is offering $1000 reward for information that leads to prosecution of some hackers. I think that's a paltry reward given what's being asked for, but of course, everyone's opinions vary- the thread is about 55 pages long now. Some people are pro hackers, some people against. I've made my position clear before- or at least I thought I had...

You may or may not be aware that I got a little message wishing me a happy new year from some hackery-type people. That left me somewhat perplexed. I wasn't sure if they were sincerely hoping I had a happy new year (although a perhaps somewhat impoverished one), or if they were just being mean? I'm pretty sure they read the blog, and I'd love some clarification. I can't trace anonymous comments, so there's nothing to stop you posting to me. In fact, I'd love to find out.

I did ask in a previous post that if anyone does feel the need to crack Sonalksis software, they should update the UI graphics to make sure everyone knows they did it. I've even made this easy to do. Perhaps I should make the installer files available to make it easier still for them?

The argument that plugins should be free is false.
You want Sonalksis plugins. They require X amount of working time to develop and test.
For me at least, if it wasn't a day-job, I could not find the time to do the work necessary.
Free plugins = non-existent plugins.

Not so! You say - there are many free plugins!

Yes, but evidently the circumstances that apply to their authors do not apply to us at Sonalksis.
If you want Sonalksis quality (and customer support and updates and new features and...), you need to get it developed by Sonalksis. For that to happen, we have to have the time, and that means taking things seriously.

Even if you disagree that circumstances are different (though everyone's circumstances ARE different), that makes you an ethically justified user of free plugins, not an ethically justified user of cracked non-free plugins.

Essentially, when you buy something, you are saying not only that you want that item (and support for it in future) but that you want the manufacturer to provide you with similar future items which also appeal to you.
By using cracked Sonalksis software when you can afford not to, what you are saying is that you DO NOT want more Sonalksis software to be available. Now, if that is what you mean to say, then that's fair enough - but pay for the software you do use, and tell us that for whatever reason you want us to go bust. That's the only ethically defensible position, I'm afraid.

I have started to get the impression that a lot of people think of plugin companies as big fat-cats, all rich beyond their dreams, driving porsches and ferraris. Big glass offices, server rooms with millions of blinking lights. Water fountains. Multi-million pound mansions in the countryside with stables and maybe a racetrack for practicing rallying at the weekend.
Yeah, that's the dream, but actually, I don't know of ANY company who's got that far (except perhaps Waves at their highest peak).

So some reality just so you can ground what it's really like. Most plugin companies are very small. 20 people is a HUGE number of employees for a plugin company. Pay is never great - there's always more money working for some faceless corporate consulting outfit. I've almost finished paying off my student debts - maybe another year or two will get it. No-one at Sonalksis owns a car, let alone a Porsche or a Ferrari (although one of the guys has a van!).

Making plugins is not (as far as we can tell!) a way to get rich and retire, making a killing exploiting the musicians of the world. Actually, making plugins isn't even I.T. It's not the same market. It's the music industry. The market for a plugin company IS NOT everyone with a computer, it's PURELY musicians. I think we ALL know how much money there isn't in this industry.

This is why my comment above about sustaining company development is moot. No-one in this industry (not even Waves!) is sitting back and laughing (WUP?). Not any more. We're all doing the best we can to stay in business. We're all still trying to live the dream - making a living in the music industry! Everyone goes about things in different ways, and I'm sure different approaches have different merits - even though I strongly disagree with a few things going on today.

When money comes through the door here, it gets invested in three things:
1) Making new plugins. This is the only way we can stay in business.
2) Supporting existing plugins. This is the only way we can guarantee that we're a company worth buying from. No-one wants to be a bad company, do they?
3) Growth. We need to advertise to have new customers, we need to take on people who are good to do the stuff we're bad at, we need to expand as a company in order to keep growing (because otherwise you shrink and die)

So, now you know. No fat-cats smoking cigars. No Ferraris. Not even a second-hand Lamborghini. What you're paying for is for us to keep making new plugins, and to keep the old ones working.

Hopefully you remember that I'm not hopelessly naive about these things and I can tell a lost sale from someone who never would have bought. So I'm not arguing that a 13yr old with his first sequencer is destroying the industry - that's clearly nonsense. However, a studio selling recording time and using cracked software clearly IS. If they didn't pay for their hardware, someone would be in there to retrieve it nice and quick. If they didn't pay for their electricity, it'd get shut off. Cracked software should be the same deal, but it's not. This is what led me to request that hackers badge cracked software. But let's not think of it as "going after people who OUGHT to be paying".

I've seen dontcrack.com, and I like it. I have one of their t-shirts.
I saw their forums. Wheeewww... A lot of very angry people there, who've been done-over by large software companies, and now feel that their piracy is justified.

Well, what can you say to someone who's been put through so much pain that they'd rather pirate software than pay a cent to support the companies. Shame on the companies that messed them about! But that's not enough, because NOW, every other company will feel their wrath. It's worth noting that these people are in the large paying customers who're not prepared to pay any more - they want the companies that have mistreated them to go bust, and as long as they stick to non-cracked software, they are ethically sound!

We make a point of looking after our customers. We are a small company, and as I've probably mentioned before, all of our customers (so far.. touch wood) are lovely!
This might be related to the fact that customer support is essentially our highest priority as a company. Sometimes growth/new products suffer as a result; we just have to interpret that as a measure of how tough the market actually is. We can't afford to let customer service suffer, or we'd be out of business in a week.
Nor can we differentiate between the level of support a demo-user vs a customer gets. We've no way of demonstrating that we offer good customer service to customers unless prospective customers get the same service too.
So customer service is opened up to everyone.
Now out comes a crack, and suddenly TWENTY TIMES as many users have the plugins.
How fair does it feel that the cost of supporting them through customer service is paid for by the legitimate customers?
To clarify that- I can't distinguish between someone who is "using the demo and needs help" and someone who is using the crack. The former represents a potential sale, the latter most likely does not. I have to help them both.
Or maybe I only offer customer service to existing customers... would that be popular?

But on the flip-side, TWENTY TIMES as many people have now heard of Sonalksis... maybe they'll buy? Well... the demo period is (we think) pretty generous, so it's not the benefits of try-before-you-buy. So maybe it's a marketing thing?
Perhaps there is some benefit there?
But marketing is something you ought to take control of - if you had to choose between spending X amount advertising to random people, or the same amount advertising in a magazine read by your target audience, which would you choose?
I have a funny feeling this analogy isn't a million miles from the way it is, whether you measure X as cash expenditure or lost sales.

Ah well. There's really no fixed answer to this type of argument.
There's no hard data - and there never can be.
You can prove precisely nothing.


There's another angle that interests me though.
Why do crackers crack?
I suspect it goes something like this:
1) Young, very smart, technically gifted, wants to acquire some status
2) Does a few cracks which get some attention, acquires desired status
3) Gets surrounded by a network of people who really want more cracks done
4) Gets half-way emotionally blackmailed into it, and keep cracking until finally s/he gets the opportunity to stop.

It's well known that hacking (white hat) is something people do because it's interesting and fun. That explains the first few cracks (black hat). But surely there comes a point where it becomes routine and monotonous. Points 3&4 are my theory as to WHY people would carry on cracking after it's become dull. Suppose you've cracked CP mechanism X, and you did it because it was fun. Well, now it's cracked, why would you keep on cracking it for other plugins?

I believe that points 1-4 form a valid explanation for the motives and actions of crackers. It makes sense. To start with, they find something technically fascinating (although illegal), and they dive into it. Then, they find themselves locked into it, long past the fascination has gone.

I don't believe for one second that the crackers we have heard of are immature in any way. The concept that someone could have the immaturity to keep trying to attain status in a childlike way just bears NO conceivable parity with the level of skill required to crack software.

However, while I /like/ 1-4 as an explanation, I have two more potential hypotheses:
A) Crackers believe they are ethically justified
B) Crackers hold a vendetta against their victims
Now, as I have said, anyone with the skills to crack software is necessarily mature enough to realise that A is clearly false - there isn't /really/ an ethical justification. If they really do think that, then all we can conclude is that that's a +frightening+ state of affairs.
As for B... well, why? It would have to be a very generic vendetta too. Some kind of prejudice against plugin companies? Weird.

The handiwork I've seen from crackers recently indicates that the level of skill required to enter the arena is higher than ever before. The crypto knowledge alone is not something you'd learn at university... So here we are talking about people who could WALK into some of the highest paid jobs in the IT industry...

I just wonder why they don't surf over to musicdsp.org, spend 20 minutes figuring out DSP, and start their own plugin companies?

Any ideas?

18 comments:

Anonymous said...

This is intense. And brilliant. Passionate - and that's what life is all about isn't it?

Everyone who wastes breath justifying warez ought to read this. It's not a condemnation, it's a heartfelt study of the whole issue from every side. Absolutely awesome.

Anonymous said...

Oh, and I do have an idea why they do it. They're emotionally immature and have shite social skills. They are antisocial and anti-society, and this is their petty little revenge against capitalism. Like a lot of people, they think they are entitled to the fruits of other people's labour without paying it. So there's a paradox trying to sit comfortably in their minds: they have a good work ethic IN A SENSE - they're willing to do the hard work of cracking stuff - but the object in the end is to help people avoid the work it would normally take to get whatever they want.

Ethically pseudo-justified ("anticapitalist") slackerism.

Anonymous said...

Hmm.. haven't you guys thought about the crackers as a community? It's a way of life obviously. Just look at the 'original' scene from the Commodore days (vic 20, c64 etc). It's people defining their place in a community, at least that is my theory.

- dubai

Anonymous said...

Quite right - a community of thieving slackers.

Anonymous said...

if there was no crackers, there would be no need for copy protection, and if there was no need for copy protection, software would be cheaper, and software companies would hire more programmers to make more software.

crackers, think of what you do, I know many companies who have had to fire programmers due to the fact that sales goes bad due to the fact that their software was downloadable any fuckin where on the net.

funny guys those cracker, real funny.

grow up and get a life!

Anonymous said...

.. and yet there are software companies that do just fine without any nasty copy protection (cakewalk has always sold well and it has never had any other copy protection than a serial number or such).

I agree that piracy IS a problem but blaming bad sales solely on this is just stupid. Bad software goes under, good usually prevails. Thank god for survivor of the fittest and "voting with the wallet".

- dubai

Anonymous said...

Some more food for thought:

They had a study here in Finland about the young people who fight for the freedom of captive animals and animals that are breeding in cages just for their fur. It was quite interesting to see that a big portion of the people who joined the organizations just did it because "my friend also joined". Remember, these are usually groups of YOUNG people. Teenagers, the age of "who am I? What am I? does anybody love me?", insecurity at it's best.

I suspect a lot of the hackers are really young as well. Hence this is my theory:

I think the pirate community is just the same. All humans have a desire "to belong" some where, especially teenagers (12 to 24, yes, I consider people under 24 to be teenagers still :-) ). It doesn't really matter what they do, if it's morally right or wrong (like criminal youth gangs in most major cities) but as long as they get a sense of 'This is me, I belong here, I get respected here' the community will thrive. Actually, if you put the piracy community (the hackers that is, not the huge problem of selling fake CDs and such for profit) under a microscope I'm pretty sure you could see all of humanity's day to day dynamics in it. Some hackers are gods (the president/leader/religious wannabe leader) and some are second in rank (ministers etc), some are outsiders and hated by most (people who think differently and go against the system) and 98% are sheep that praise the hackers and their work for the sake of being accepted and "cool" (ordinary TV watching population that are like living zombies without a life).

We are humans. We live by our emotions first and foremost. All "rational" thoughts are altered by emotion. So, asking "Why do hackers crack our software?" and expect some easy answers, you better thing very hard and maybe re-phrase the question.

Why do some random young people walk down the street deciding to beat up random people whenever they feel? This happens, it happens everywhere and there are no easy answers.

- dubai

PS. Just trying to add some colour to the discussion, to keep it from being completely black and white.

Anonymous said...

Regarding copy protection and survival of the fittest, why even bother having that serial number then, cut the crap and have no form of CP at all, I am sure everybody who really appreciated the software would pay full price for it anyway!

Yeah right, and Santa Claus is from Iceland and actually does exist.

Anonymous said...

Santa Claus is from Finland and DOES really exist. :-)

A serial number is given to make the copy personal, identifying it. Simple as that. If you want to copy a cakewalk product to a friend there is nothing stopping you.

Bottom line is, copy protection does NOT equal better sales. Good software DOES equal better sales. How can this be so hard to understand? :)

- dubai

Anonymous said...

So you still think that a good product would sell a fair deal och copies even if there was not even a serial-number connected to it?

I sure do not think that this is reality, what would happen is that the software would be considered to be free, and no one would feel bad about using it even if they did not purchase it.

Santa Claus does not exist.

Anonymous said...

A very good example is EnergyXT. The guy is selling lots of copies (he even mentioned once in a thread on KvR that he is making a pretty decent monthly wage on selling EnergyXT licenses alone) with a software that has only a single key file as it's copy protection/identifier. There are no tricks, no hidden things in the file. It's simply an identifier that needs to be in the same folder as the main program. It would be extremely easy to distribute this program and yet most people prefer buying it.

Santa Claus does exist. :-)

Anonymous said...

Many manufactures use copy protection hardware. They seems to work.

Opportunity makes the thief.


Lock in your property!

Anonymous said...

crackers regard c/p as a puzzle to be solved, like your mother and sudoku, the reason they dont make plugins themselves is the same reason your mother doesn't start designing and publishing her own sudoku puzzles, that is, the difficulty is several orders of magnitude higher.

the guy from dubai has more of a clue than mike, theres a reason its called 'the scene' and it traces its roots back to the very beggining of software; far from being anti-capatalistic or anti-establishment, most warez groups operate purely for self interest
& the ability to leech 24/7 from topsites.

in fact, the audio software market has been fairly fortunate in that
most audiowarez groups are far more ethically minded than the average 0day group, and treat the product with some degree of care, stressing a 'buy before try' mentality.

Anonymous said...

I have a great respect for small companies that make great software. I didn't think it twice to pay for my copies of Visual Hub, Multirenamer, all of sb-software applications, and bought every pg music program and update until the CD's they sent me failed to read and they said "Sorry, that program isn't available anymore" when I requested a copy. I agree of course when you say a studio who charges for their time shouldn't use cracked software, although in the Radium days many studios actually paid for their software but used the cracked versions because they worked better.

I have something to confess: I teach in a university and when a student needs a program I give him/her a copy of it. I think they have the right to learn the tools they'll use in their professional lives. Some of these guys are using P4's or even machines with Windows '98 because they can't afford to pay for a newer machine. But as soon as they start working freelance or for a company they get a "no" when they ask for a copy of a program.

I believe ethics can be flexible, depending on the case. All you have to do is use of common sense. Some years ago (when I used to have more free time) I was a member of some aw'z groups and believe me, I found some of the most ethical and human guys there.

To end these random thoughts I must note that the American way of life is not universal. I don't own a car, but I have a Protools system at home which I use for my own entertainment and don't make a cent out of it. Having an apartment full of books, DVD's, CD's, computers and musical instruments is my idea of happiness. And all this also works a medium of making my goal in life: TO SHARE knowledge.


(no, i'm not in drugs, it's only that English is not my native language) :)

Unknown said...

ok...

1. audio software is OVERPRICED.
YOU know it, I know it and THEY FUCKING know it.Sorry.

2. Thats why crackers crack

3. puzzle solving is just a bonus

Bobbalicious said...

I work in a very large corporation in Europe. When faced with some serious software compatibility problems Microsoft flew over their best developers to help solve the problem we had (big customer = good service).

Their best developer told us after work, over a beer, that his favorite hobby was cracking software. This is a guy who is very well paid, spends his whole days in front of a computer and as a "relaxing hobby" breaks copy protection. He saw it as a challenge, to prove that he was smarter than the guys who developed the protection. He claimed that he never made the cracks available though.

Some companies can afford the make their software free for the home user and then charge big sums for the corporate users (e.g. Oracle). Microsoft's copy protection has also been very simple, to gain market domination.

The problem is for small companies to survive who can't apply big company policies (look at Apple who removed their well working copy protection and replaced it with a simple serial number).

Most cracked software that is downloaded would never have been bought anyway. Many warez collectors are just that, collectors. But to have professional studios running on cracked software, is a totally different story. Maybe a deal could be done with the big sequencer makers to develop a system to verify that the plugins are genuine. I think also the proposal to visible flag cracked plugins as cracked, but still fully functional, is good., but maybe not fitting with the crackers community.

Tom said...

Flawless up until the last stanza.

I think you've got alot of strong arguments here Dave, and I do support what you do. I actually felt a bit emotionally attached to what you were writing as I have paid for your EQ plugin after finally sitting down and doing some blind testing. So part of what I'm saying is thanks, for your brilliant work on this, and I know you'll probably read it which is better than a feedback form on a nameless site.

Do you know any companies who have gone out of business from piracy? Lack of sales could point to many things...how do you prove piracy has caused it?

I was just talking to my mate about the Komplete 5 bundle that has come out. All of Native instruments' plugins for 400 quid. It struck me, reading your post that alot of the negatives from piracy (although some which you didn't pick up on...from the users side) are similar in this kind of massive-value deal that has been offered.

...When you buy a plugin, there's a certain amount of emotional investment. Sometimes if I'm not completely sold on something I've bought (sounds ironic) I end up reading reviews AFTER I've bought it. It's kind of trying to go for a sense of satisfaction. With cracks, and massive value deals, the idea that you could have far more than your moneys worth is good for your wallet but bad for your creative investment and technical knowledge. It's been said before but you're not going to know 15 pieces of software in the depth that you know one, in the same amount of time.

This can also lead to an interesting point...if everyone used cracked software, we would all be looking for more instant results, as we don't have that time to invest - and would not feel satisfied if we don't get results with hardly any knowledge of the software. With this in mind, do you think that time-poor user experiences are shaping how plugins/synths etc. are designed? Kore perhaps? unified interfaces?
If the developers user base is 80% cracked users (stats made up off the top of my head) then most of the feedback will be in a round-about-way that of the time-poor and looking for that experience before they get bored and rush onto the next plugin.

Secondly, I think that cracking sucks for the user. Plugins can really help define a sound. Admittedly the 517 eq is distinctive but no-one's gonna identify me by it's use on a track. Maybe synth presets and such, which is why I think of the NI bundle as a good example. Now loads of people will have Komplete 5, and loads of people will sound exactly the same. The idea of that sucks. I don't know how true it is, but the thought of it stifles the creativity.

I just bought symphobia. It cost me £1000 which is a rediculous amount to spend, but I've just got my second trailer through which has essentially financed a bit of an upgrade. What makes me feel better about the spend (other than it sounds phenomenal) is that the price is almost like a hurdle. By pricing it highly, ProjectSAM will have a user base which is very focussed on getting the best out of the program, and for me, I'm one step further up the ladder than the other composers who are cutting back because times are tight.

Dave - your last point - trying to convert the whole world of hackers? Good luck with that! You've just sold how hard and unglamorous it is to be a dev. Although I hope you can keep on your fantastic work and I can keep on buying your stuff.

ps. Sonalksis EQ was recommended to me by Clay Duncan (composer @ Remote Control in LA) when I was out working on The Dark Knight/Iron Man/Frost Nixon. He said it was the best thing out there. It's now probably my most used plugin.

Ant said...

Beautifully put Dave.

I have an idea.

Why not blacklist known warez keys or identifiers in all incremental software updates?

The sequencer devs should get on board, and make plugin info saved with the project as standard.

Using warez would be very risky if there was a chance that your project would be opened somewhere else (in a mixing studio, etc) and be identified as being created on stolen software, and then refuse to open.