Tweet
Hi...
I've seen much confusion about Sony's newest creation, SecuROM v4.8x, so I'm going to try and unravel some of the legends about this.
Most copy protections are based on recognizing a copy from an original CD. E.g. Safedisc does this by checking for defect sectors on the disc that are hard to copy. But those defect sectors can already be copied, so Safedisc doesn't deliver full protection against copying anymore.
SecuROM v4.8x goes another way, and this way looks very promising right now. The spiral data track on the disc has a varying structure which causes the drive to take more or less time to read a sector. These delays between the delivery of two sectors are checked, and if the delays do not fit the right pattern, the CD is recognized as invalid.
Unfortunately it is impossible to copy this structure because the spiral data track is already pressed into a CDR when you buy it. Inside this track there is a substance that changes when it is hit by the writing laser, so the bits and bytes can be burnt into the track. But it is impossible to manipulate one sector so it takes longer to read it so a CDR will always be recognized as invalid.
However it is possible to monitor these delays and write them down in a file - and this is exactly what tools like Alcohol 120% and Blindread do. In Alcohol, this feature is called DPM - Data Positioning Measurement. The information gained from the DPM process is stored in the .mds-files (but not alone, there can be .mds-files without DPM information as well) (in Blindwrite, it is stored in .bwa-files which are exactly the same). With the virtual drives created by Alcohol (as well as with Daemon-Tools' virtual drives) it is now possible to emulate these delays when the image is mounted. And this will be the only working way to make backups as long as the spiral data track's structure cannot be manipulated.
Conclusion of the above-said:
It will not be able to make working 1:1 copies of SecuROM v4.8x-protected CDs anymore.
Mounting images and emulating the copy protection will be the way to go.
Now many of you may ask what about Blindwrite or Alcohol as they do make working copies of SecuROM v4.8x-protected CDs.
That is correct, but read exactly what I wrote: it is possible to make working copies, but NOT working 1:1 copies!
Blindwrite's Twinpeaks feature uses the information stored in the .bwa-files (which, as we remember, tells how long it takes to read a sector on the disc). Now it uses a trick to "fake" this reading delay - the same sector is burned twice onto the disc, with exactly the same information including the sector number. This is a violation of the CDR-standard (the so-called red book, if I recall correctly);
but as most CD-drives read both sectors but only deliver one, the delay of reading the second sector suffices to trick SecuROM v4.8x into recognizing the disc as valid. However some drives, e.g. some Plextors, report errors if the same sector is stored twice on the disc. As this is a violation of the standards, this is nothing negative, in fact this only happens with drives who strictly obey the standards.
The drawback of this method is that today's copyprotections (i.e. SecuROM) can easily be altered to check for these manipulations, too. So this ability to copy SecuROM v4.8x will most certainly not last very long, and if you're unlucky, your copy will become invalid with the next patch for the game because the patch will also update the copy protection (like No One Lives Forever 2 v1.2, Anno 1503 v1.02, Neverwinter Nights 1.21...)
The developers of Alcohol invented another way to make working copies of SecuROM v4.8x-protected CDs. When the DPM option, which allowed to read the structural information and store it in the .mds-files, was introduced, it was possible to mount the created images and emulate the delays caused by the varying track structure. So why not write the image to a CDR and somehow apply the structure (or, to be more precise, apply the delays caused by it) to the data that is just read by the drive? And this is what Alcohol does with the RMPS (Recordable Media Physical Signature) option. In addition to the data stream saved in the image, the structural information from the .mds-file is burned to the disc as well. Now this alone would be too obvious a difference between the CD-ROM and the CDR, so you need to install Daemon-Tools (version 3.29 or above) or Alcohol (version 1.3.6.1223 or above) and emulate their "RMPS emulation". This creates the necessary delays whenever they need to be applied to the data the drive just reads, and additionally it somehow hides the section of the CDR where the RMPS information is stored.
To help recognize RMPS-enabled discs, the actual label of the disc is always "NEEDS EMULATION", and when the emulation is enabled, this label will be replaced by the label of the original disc.
A tutorial on how to copy SecuROM v4.8x-protected CDs with Alcohol 120% using RMPS can be found in the Alcohol Support Forum.
I heard that the new BlindWrite offers a similar option (I think it is the so-called Autoplay feature) but unfortunately I don't know anything about that as I don't use BlindWrite, so I cannot say anything about that. If somebody could supply me with the basics about BlindWrite's RMPS equivalent, I would be glad to add it to this summary.
Well, I guess that pretty much sums up my knowledge about SecuROM v4.8x. Most of the credits go to VeNoM386 and LocutusofBorg without whom I would never have gathered so much information about all this. Thank you guys, you are amazing! Keep up the incredible work!
Hope it helps...
NetSoerfer (formerly known as Sergei.Gradski)
I've seen much confusion about Sony's newest creation, SecuROM v4.8x, so I'm going to try and unravel some of the legends about this.
Most copy protections are based on recognizing a copy from an original CD. E.g. Safedisc does this by checking for defect sectors on the disc that are hard to copy. But those defect sectors can already be copied, so Safedisc doesn't deliver full protection against copying anymore.
SecuROM v4.8x goes another way, and this way looks very promising right now. The spiral data track on the disc has a varying structure which causes the drive to take more or less time to read a sector. These delays between the delivery of two sectors are checked, and if the delays do not fit the right pattern, the CD is recognized as invalid.
Unfortunately it is impossible to copy this structure because the spiral data track is already pressed into a CDR when you buy it. Inside this track there is a substance that changes when it is hit by the writing laser, so the bits and bytes can be burnt into the track. But it is impossible to manipulate one sector so it takes longer to read it so a CDR will always be recognized as invalid.
However it is possible to monitor these delays and write them down in a file - and this is exactly what tools like Alcohol 120% and Blindread do. In Alcohol, this feature is called DPM - Data Positioning Measurement. The information gained from the DPM process is stored in the .mds-files (but not alone, there can be .mds-files without DPM information as well) (in Blindwrite, it is stored in .bwa-files which are exactly the same). With the virtual drives created by Alcohol (as well as with Daemon-Tools' virtual drives) it is now possible to emulate these delays when the image is mounted. And this will be the only working way to make backups as long as the spiral data track's structure cannot be manipulated.
Conclusion of the above-said:
It will not be able to make working 1:1 copies of SecuROM v4.8x-protected CDs anymore.
Mounting images and emulating the copy protection will be the way to go.
Now many of you may ask what about Blindwrite or Alcohol as they do make working copies of SecuROM v4.8x-protected CDs.
That is correct, but read exactly what I wrote: it is possible to make working copies, but NOT working 1:1 copies!
Blindwrite's Twinpeaks feature uses the information stored in the .bwa-files (which, as we remember, tells how long it takes to read a sector on the disc). Now it uses a trick to "fake" this reading delay - the same sector is burned twice onto the disc, with exactly the same information including the sector number. This is a violation of the CDR-standard (the so-called red book, if I recall correctly);
but as most CD-drives read both sectors but only deliver one, the delay of reading the second sector suffices to trick SecuROM v4.8x into recognizing the disc as valid. However some drives, e.g. some Plextors, report errors if the same sector is stored twice on the disc. As this is a violation of the standards, this is nothing negative, in fact this only happens with drives who strictly obey the standards.
The drawback of this method is that today's copyprotections (i.e. SecuROM) can easily be altered to check for these manipulations, too. So this ability to copy SecuROM v4.8x will most certainly not last very long, and if you're unlucky, your copy will become invalid with the next patch for the game because the patch will also update the copy protection (like No One Lives Forever 2 v1.2, Anno 1503 v1.02, Neverwinter Nights 1.21...)
The developers of Alcohol invented another way to make working copies of SecuROM v4.8x-protected CDs. When the DPM option, which allowed to read the structural information and store it in the .mds-files, was introduced, it was possible to mount the created images and emulate the delays caused by the varying track structure. So why not write the image to a CDR and somehow apply the structure (or, to be more precise, apply the delays caused by it) to the data that is just read by the drive? And this is what Alcohol does with the RMPS (Recordable Media Physical Signature) option. In addition to the data stream saved in the image, the structural information from the .mds-file is burned to the disc as well. Now this alone would be too obvious a difference between the CD-ROM and the CDR, so you need to install Daemon-Tools (version 3.29 or above) or Alcohol (version 1.3.6.1223 or above) and emulate their "RMPS emulation". This creates the necessary delays whenever they need to be applied to the data the drive just reads, and additionally it somehow hides the section of the CDR where the RMPS information is stored.
To help recognize RMPS-enabled discs, the actual label of the disc is always "NEEDS EMULATION", and when the emulation is enabled, this label will be replaced by the label of the original disc.
A tutorial on how to copy SecuROM v4.8x-protected CDs with Alcohol 120% using RMPS can be found in the Alcohol Support Forum.
I heard that the new BlindWrite offers a similar option (I think it is the so-called Autoplay feature) but unfortunately I don't know anything about that as I don't use BlindWrite, so I cannot say anything about that. If somebody could supply me with the basics about BlindWrite's RMPS equivalent, I would be glad to add it to this summary.
Well, I guess that pretty much sums up my knowledge about SecuROM v4.8x. Most of the credits go to VeNoM386 and LocutusofBorg without whom I would never have gathered so much information about all this. Thank you guys, you are amazing! Keep up the incredible work!
Hope it helps...
NetSoerfer (formerly known as Sergei.Gradski)
Comment