367
Denuvo has been broken, company promises countermeasures against new DRM bypasses — zero-day game releases become norm as security concerns mount over hypervisor-based bypass (www.tomshardware.com)
submitted 7 months ago by to c/technology@lemmy.world
51 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 7 months ago (1 child)

But at the end of day, doesn't app have to ask OS? At that stage, can't you spoof "positive" responce of unmodified system?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 7 months ago

    That's the strength of public/private key encryption.

    The application (or OS) knows what the hardware vendors public key is. Thus ,it can verify that any message (or application key) claiming to come from that hardware (TPM) is legitimate or not. Thus, the OS is just a proxy or the middle man.

    Now what you could do (in theory) is to start modifying the application and replace the hardware vendor public key with your own. ...but you'd need to do this with every application and they'll probably have some sort of anti-tampering or (more likely) you won't even be allowed to install the application because your OS isn't "safe/secure".

    disclaimer: I'm a bit hazy on some of these details. There are probably more elegant solutions.

  • permalink
  • fedilink
  • source
  • parent