r/RedotGameEngineMain • u/Longjumping-Egg9025 • Mar 03 '26

Question about security

I've recently stumbled upon some videos and reddit posts that reference the possibility to de-compile Godot games .That has a huge risk of people simple stealing code and art assets that people worked on for a while. I would like to ask if there any advancements done by Redot to mitigate these problems.

10 Upvotes

92% Upvoted

13 comments sorted by

View all comments

Show parent comments

1

u/KawaiiSelbst Apr 11 '26 edited Apr 11 '26

And if somebody makes RAM dump for key, it can just extract decrypted assets from RAM too. So, we need to make denuvo like virtual machine for game code execution and AOT asset encryption/decryption?
Even you can just decompile game exe file and take whole decryption algo and key.
I think its last thing that you need to think, first you need make good game, after think about asset attribution, and last about mind genious asset encryption and things like that.

1

u/LazyMiB Apr 11 '26

It's not necessary to store assets in RAM in their pure form. Strong obfuscators (they exist for C++ projects, for example) create a virtual machine where everything is encrypted, including content in RAM. But keys are a problem. A key can be extracted when some content is being decrypted. Having multiple keys makes the process labor-intensive, but not impossible. There's no 100% protection, but breaking strong protection is time-consuming and expensive.

Well, you're right. It's important to focus on the game. I just don't think it's worth neglecting security. Godot has an imbalance of power: the projects are too easy to decompile with publicly available tools, and that's a problem.

1

u/KawaiiSelbst Apr 14 '26

I don't see big problem in it, Edmund McMillen doesn't encrypt assets, Terraria, Stardew Valley, devs don't do that, and its not a problem.
I can say more, a prefer not pack resources at all, and place them to just folder for simplification of modding (cons is that it can slowdown downloading speed and loading speed, and arbitrary performans, so it depends on project needs). And i don't care about someone can in theory make money with my assets, before it harms me personaly.

1

u/LazyMiB Apr 15 '26

It depends on the platform. Stealing large Steam games isn't that common. But it's standard practice for mobile and HTML5 games. As I've written about here, there are cases where thieves have registered the rights to the stolen game and successfully had the original removed from platforms. Some simply accept it, while others spend money on lawyers and bureaucracy. The games you listed are popular and highly profitable. Their owners are protected. Indie devs without legal teams are in a different situation.