Question about the bonus pack on the site

Hi there. I've bought GalCiv2 when it came out but didn't have the chance or time to try it up until now. Because I absolutely refuse to install any of this Stardock Central stuff I was wondering if I could use the patch available here? Funny thing is, do you know why I bought GalCiv2 without playing it? Because it had no protection whatsoever and I think that should be supported. Know what's even worse than rootkit copyprotection on your system? Yeah, applications that communicate with some corp on the internet without you knowing what they send and receive.

Ok, so I hope I can use this bonus pack patch thing or I'll have to resort to downloading the patches on P2P. Would be a shame but can't be avoided. I already refuse to use steam and the likes and find it rather unfortunate, that stardock has decided to go down that road. What's the problem with allowing users logged in to this website to download the patch anyway or making the patches in a way so they ask for a serial?
6,637 views 13 replies
Reply #1 Top
stardock is completely unobtrusive,
i start it when i need
not the other way around
Reply #2 Top
without you knowing what they send and receive.
End of quote


Want to see what gets sent? Try email activation. It's just a signature keyed to your current windows installation. It's sent to our servers to be processed into a sig.bin file for the game. We don't keep the data, and it's not anything that would be useful to us or anyone else anyway. It's not even hardware-keyed like some similar systems.

What's the problem with allowing users logged in to this website to download the patch anyway or making the patches in a way so they ask for a serial?
End of quote


Standalone patches take a not-insignificant amount of extra work and testing. Distributing updates directly via SDC allows us to do it more quickly and inexpensively, which means more numerous and more frequent updates for users on the same budget. Plus standalone updates require activation anyway; they'd just be a way around needing SDC.
Reply #3 Top



Ok, so I hope I can use this bonus pack patch thing or I'll have to resort to downloading the patches on P2P. Would be a shame but can't be avoided. I already refuse to use steam and the likes and find it rather unfortunate, that stardock has decided to go down that road. What's the problem with allowing users logged in to this website to download the patch anyway or making the patches in a way so they ask for a serial?
End of quote


How is it any different to be logged on to a website and have it download a patch to your computer than being logged on to SDC and having it download a patch.
Reply #4 Top
I was down on SDC initially, but after using it for a while, it isn't so horrible. You should try it and you'll probably like it. It's a little bit convoluted, but it's no problem once you get used to it.

If it makes things easier for Stardock and the result is we get updates more often and faster, then it's certainly worth it to host a small innocuous distribution program on my system. It does offer some convenience for the user as well. You can easily archive and restore existing installations. It keeps track of version information and handles authentication/activation transparently. Stardock has a ton of games available through SDC and some of them are fairly big names with good reviews. Other than some disk space (which is cheap these days), SDC is really a win-win for everyone.

Reply #5 Top
Oh- you don't need it to play the game. Just activate it when you want to look for a patch, then close it.

Reply #6 Top
At that price and with the continual follow-ups (upgrades, "patches", etc!) for it, i'd say SDC can certainly grab its folder on my C: and do the stuff necessary.
Besides, i come here to be informed and if a new version gets my attention, i'll simply log-off the web, fire the SDC engine, and take what i PAID for.
Their choice, my advantage. So far.
No particular troubles with anything. Just plain straight easy.
I'll even add that such customer relation processing is top-of-the-line and can only help the users.

- Zyxpsilon.
Reply #7 Top
Want to see what gets sent? Try email activation. It's just a signature keyed to your current windows installation. It's sent to our servers to be processed into a sig.bin file for the game. We don't keep the data, and it's not anything that would be useful to us or anyone else anyway. It's not even hardware-keyed like some similar systems.
End of quote

Ok, I appreciate your answer, so I took the time to look at it even against my will because no matter the source and the corp, such informations can never be trusted.

Every time Stardock Central is started it connects to google-analytics.com and transmits some informations for statistics collection. Including time, monitor resolution and quite a few encoded additional informations.

Now, in what way is that beneficial for the customer or needed for the provided functionality? This is only one example and I'm sure, that there is more if I only look hard enough. For example in all the cookies Stardock Central writes/reads. Oh and security is another issue. Do you know, that my account ID and password is transmitted in clear text? Over the internet? Anyone can read it and use it to gain access to my account if they only want to.

So you see, applications like Stardock Central are an issue. Maybe not more than other software but still enough.

Reply #8 Top
Every time Stardock Central is started it connects to google-analytics.com and transmits some informations for statistics collection. Including time, monitor resolution and quite a few encoded additional informations.
End of quote


That's simply because it opens to the News page by default, which is just a page on stardock.com. And like all pages on our sites (these forums included), it uses google analytics to give us information on site usage. It's not anything specific to SDC, and SDC can be set to open to a different page or you can disable javascript in IE if you don't like that. Or you could even just add the analytics site to your hosts file and point it to localhost, and never worry about being tracked by it anywhere.

Do you know, that my account ID and password is transmitted in clear text? Over the internet?
End of quote


You've already done that by logging on the forums; intercepting packets isn't exactly something just anyone can (or will) do... I've not heard of a single complaint of that happening yet with an SDC account. It's a calculated risk, and a minute one at that. HTTPS (which is both slower and more demanding on resources) is mostly for peace of mind, even in sensitive applications--leaks almost universally happen at one end or the other, almost never in transit.
Reply #9 Top

My 2 cents....

SDC is not steam. I hate steam as much as the next guy and have quit purchasing software that requires it. What I disliked most was that it was always there and it had to be there in order to play the game(s). SDC is not like that, it is not always on and neither it or the internet are required to run the game.

That your account and password is transmitted in the clear is a little disturbing and something I did not know but I see that as more of a risk to them than to me. I do not keep my CC info stored there, they on the other hand could have serial #'s stolen and propagated throughout the internet.

Thanks
Reply #10 Top
SDC opens "news" by default, but you can set it start where you want. Mine fires up on the applications page. Steam is a good example of a disribution system to avoid. SDC has little in common with that one. SDC is not required to run the game, only to install it. You could remove SDC and the game would still function. You can use archive files with SDC to install/activate the game without even connecting.

Reply #11 Top
I'm aware of all those recommendations but that is not actually the point I'm trying to make here. Forgoing crippling copy protection is a great step forward that is, however, diminished by the need to install a proprietary download/connection client with inbuild user authentication. Somehow seems Stardock regrets the no copy protection move and tries to maintain their hold over the software with this kind of mechanism.

The way to go, in my opinion, is a SSL/PHP website where you have to submit your product code to receive your activation code. This procedure is needed for every mayor patch release as every new build of the game requests its own activation code. Simple and just as effective if not more so. Once you have the algorithm procedure and the database in place it is very simple to maintain and extend.

There is another dimension that I haven't talked about. What if Stardock dies? Wouldn't be the first small publisher/developer. What about the patches the authentication then? In recent years it happened numerous times, that people who regulary bought a game haven't been able to install and play because the corp was gone (unless they cracked it). In my opinion software like SDC is not as bad as Steam or StarForce but far away from doubt.
Reply #12 Top
Well I have to say you sound like a very difficult guy who is extremely afraid on security issues with your computer probably you keep top secrets or just an ignorant. Or just allergic to the idea that you dont control it the way you like.
Once you connect to internet want or not personal/system data will be sent this way or another. Using a program to download updates or connecting on a web site to download them does not change the fact data will be sent and stolen risk is minimal but for sure higher using a web page accessible to anyone rather a program installed in your own computer.
SDC have been a very convenient way to check updates and also archive/restore them much easier than having manually download and install.
Thats the way it is take it or leave it.
Reply #13 Top
Again, Theodore, I don't understand why authenticating your product on SDC and downloading is any different from doing it off the web.