endorphin.org · Domains · Slashdot Mirror

Re:Always use protection by Qzukk · 2008-07-03 10:51 · Score: 1 · on 12,000 Laptops Lost Weekly At Airports

With encrypted LVM solutions things can get all kinds of hairy though.

LUKS (cryptsetup) actually has a mechanism for adding multiple keys, though if you let the user log in as root, they'd just change those keys too. Or hell, dd /dev/urandom over the whole thing.

But if they really wanted to screw the company over, why bother with all that when they can just "lose" the laptop on a business trip?

Violating my 5th Amendment Rights... again? by hacker · 2008-04-22 07:13 · Score: 2, Interesting · on Laptops Can Be Searched At the Border

Might want to think hard about what's on your laptop if you're going to be passing through a US international airport.

What's on my laptop is a 320 gigabyte AES-256 luks-encrypted LVM volume set sitting on an encrypted physical drive. This is unlocked using a 32-character passphrase which is not stored anywhere but in my brain. Without that passphrase you basically unpack a kernel and recognize the hardware... and that's it.

I use Ubuntu on my laptop, and this is all configured out of the box on that distro.

Requiring me to unlock my encrypted volume using that password immediately violates my 5th Amendment rights, and is hence, unconstitutional.

So once again, Privacy 1, Government 0.

They seem to keep forgetting that it is the PEOPLE who gives the government their power, not the reverse.

Re:Truecrypt: Linux, OS X, and Windows. Free. by uniqueme · 2008-03-03 07:38 · Score: 1 · on 7 Secure USB Drives Reviewed

TrueCrypt under Linux requires a kernel module, which doesn't always compile with the latest stable kernel. FreeOTFE http://www.freeotfe.org/ does not require a kernel module, supports LUKS http://luks.endorphin.org/, supports many of the features of TrueCrypt (such as hidden volumes), and is free/libre software that compiles for Windows, Linux and PDA (Windows Mobile 2003/2005 and Windows Mobile 6 platforms).

Re:Criminal prosecution? by Schraegstrichpunkt · 2008-02-19 03:02 · Score: 1 · on Cracking a Crypto Hard Drive Case

For God's sake, can't the company's executives be charged under a criminal statute? Fraud, anyone? I guess their next product will use advanced ROT13 encryption technology. Why? Because you saw "AES" and assumed it was secure against unspecified attacks? AES is a block cipher, not a hard drive cryptosystem. If you want LUKS (which isn't perfect, but is probably the current state of the art; see the paper New Methods in Hard Disk Encryption), then you have to ask for it.

There is some responsibility on the part of users to ensure that computer systems actually perform the tasks they expect them to. "Uses AES somewhere inside this box" is not the same thing as "provides confidentiality and non-malleability of the bulk data against adaptive chosen ciphertext attack up to 2**128 operations and 2**64 blocks of ciphertext".

Re:Criminal prosecution? by Schraegstrichpunkt · 2008-02-19 03:02 · Score: 1 · on Cracking a Crypto Hard Drive Case

For God's sake, can't the company's executives be charged under a criminal statute? Fraud, anyone? I guess their next product will use advanced ROT13 encryption technology. Why? Because you saw "AES" and assumed it was secure against unspecified attacks? AES is a block cipher, not a hard drive cryptosystem. If you want LUKS (which isn't perfect, but is probably the current state of the art; see the paper New Methods in Hard Disk Encryption), then you have to ask for it.

There is some responsibility on the part of users to ensure that computer systems actually perform the tasks they expect them to. "Uses AES somewhere inside this box" is not the same thing as "provides confidentiality and non-malleability of the bulk data against adaptive chosen ciphertext attack up to 2**128 operations and 2**64 blocks of ciphertext".

Re:Hmmmm... Selfmade solution? by fsmunoz · 2007-09-18 09:53 · Score: 1 · on Which Lost/Stolen Laptop Trackers Do You Like?

That said, while Truecrypt exists for Linux, I'm sure there is a native way to do encryption without additional software. If anyone has more information about that, I'll be glad to hear of it. (Migrating to Ubuntu full-time, so one day I'll need it) Yes, LUKS. Works at block level and is available during the install of Debian etch, and surely others. Easy to create and maintain. Unlike TrueCrypt it doesn't offer that "shadow" volume thing, but that's an extra behyond normal requirements.

Re:Don't use loop-aes anymore. by Daffy+Duck · 2007-07-16 14:28 · Score: 1 · on Building a Fully Encrypted NAS On OpenBSD

Notice how all the documents favoring and supporting the LUKS ideas were written by the same person? The only thing that made LUKS "standard" is that Jari Ruusu and Linus Torvalds were having a pissing match about the licensing status of Brian Gladman's optimized AES code, which ended with Jari pulling his code from the kernel. So LUKS (which uses the same AES code) is a standard because the author didn't have a personal confrontation with the kernel team at that time. Later, though, Clemens declared:

The Linux kernel is a design disaster. This might be a consequence of the development style. However, the result is that I have dropped any intentions to support LRW on Linux.

So you don't have LRW support on Linux.

Meanwhile, I've yet to see any expert review of either system. The closest I ever saw was David Wagner (well known crypto expert at Berkeley) saying that Clemens "does not understand cryptography very well".

I use loop-aes myself, partly because it's actually pretty easy to use, and mostly because of the extraordinary effort that Clemens put into denying the existence of the problems with his dm-crypt code. Just to be clear, the "well known" problems with loop-AES were shared by dm-crypt, and they were only well known because the loop-AES author acknowledged them loudly and fixed them while Clemens kept shouting "no no no there is no attack and you are stupid".

Re:Don't use loop-aes anymore. by LuSiDe · 2007-07-16 00:21 · Score: 1 · on Building a Fully Encrypted NAS On OpenBSD

Why LUKS was developed. LUKS supports LRW, ESSIV, and TKS1.

Re:Don't use loop-aes anymore. by LuSiDe · 2007-07-16 00:21 · Score: 1 · on Building a Fully Encrypted NAS On OpenBSD

Why LUKS was developed. LUKS supports LRW, ESSIV, and TKS1.

Look at dm-crypt by Cheeziologist · 2007-04-27 18:55 · Score: 4, Informative · on Full Disk Encryption - Xen, Windows and Linux?

I know you asked about people using pointsec with Linux, but have you considered using the device mapper to do hard disk encryption for you? On my laptop, I have the entire hd encrypted using aes and sha256, using the kernel's dm-crypt abilities and the cryptsetup program. To do this, you need to have a small partition to boot from that contains the kernel (and an initramfs if you don't build it into the kernel). From there you unencrypt the drive, pivot root, and continue booting. Additionally, if your intent is to run the virtual windows encrypted, you can use cryptsetup to manage the the device or files to keep the windows files on. There are many good tutorials on using dm-crypt, and can definitely tell you more than I can easily explain.

Re:I use TrueCrypt by Anonymous Coward · 2007-02-06 00:26 · Score: 0 · on Bitlocker No Real Threat To Decryption?

Go for it!

http://luks.endorphin.org/about

Linux Unified Key Setup by alexandre · 2007-02-05 14:13 · Score: 2, Informative · on Bitlocker No Real Threat To Decryption?

Want to encrypt your disk securely?
Take a look at LUKS.
It now comes standard in the latest Debian Etch installer :)

And the top-rated open source solutions are: by Anonymous Coward · 2006-12-28 04:26 · Score: 0 · on U.S. Gov't To Use Full Disk Encryption On All Computers

Transparent on-the-fly full disk encryption:

For Windows: http://www.freeotfe.org/ (based on LUKS)

For Linux: http://luks.endorphin.org/ (LUKS, supported by all major Linux distributions, for any size Linux server/computer/device)

* Cross-platform and well-behaving on-disk standard.

* Free as in both beer and freedom. open sourced.

What more can a government ask for?

A straight answer by fluch · 2006-10-21 17:39 · Score: 1 · on Why Not Use Full Disk Encryption on Laptops?

From my point of few I do not see any reason why the hard drive of a cooperate laptop computer should not be encrypted as soon as the mobile computer contains sensitive data (and it usually does). In my opinion it is just irresponsible to carry any mobile device (laptop, USB stick, etc.) out of the company if the data is not secured there, and the series of data leaks known to us all proves this. It might be a bit more inconvenient, it might cause some overhead in computing, but in my opinion this measures needs to be done.

I have a Linux laptop (IBM T30, 2GHz Pentium 4) and I have not a full disc encryption, but /tmp, /var, /usr/local, /home, /root and the swap area are encrypted (256bit AES). With the 2.6 kernel series it has become easy to set up encrypted partitions with dm-crypt and recently with my new acquired external harddrive I started to use the Linux Unified Key Setup (LUKS) which makes it even more convenient to have encrypted drives (now I can give away my external harddrive to a friend and he can use it without knowing my key, the system allows up to 8 keys and each of them can be revoked easily). I have never noticed any lack in performance and nowadays computers are even faster than my Pentium 4.

Further, if it comes to data loss due to a lost key, then may I ask, where is the backup? I have a backup of my system, for sure encrypted (Dar is here for me a great help). In a cooperate setting backups should be standard as well (harddrive failures happen as happen that keys get forgotten). So loosing a key should not be a problem. One does not need to encrypt the backup either, after all the encryption should only prevent data from being read when the laptop gets stolen and into wrong hands. If the backup is secure in the cooperation than there is nothing (big) to fear if it is not encrypted.

So what point really justifies to take the risk of data leak in a cooperate setting??

Ask questions---lots of questions. by Dwonis · 2006-08-22 20:03 · Score: 1 · on Debunking a Bogus Encryption Statement?

"Recently, a coworker tried to assert that encrypting a file twice with a 64 bit algorithm is equivalent to encrypting it once with a 128 bit algorithm. I know enough about encryption to know that isn't true, but I am having difficulties explaining why and how. Doesn't each pass of the encryption create a separate file header which makes this assertion untrue? Can anyone point me to references that would better help me explain this?"

First of all, what is a '64-bit encryption algorithm'? Is this a symmetric or asymmetric algorithm? Is it a block or stream cipher? Are you talking about block or key sizes? What specific algorithm are you referring to?

We can't analyze anything if all we're given are vague generalizations like "a 64-bit algorithm" and "a 128-bit algorithm". Some symmetric ciphers gain security under functional composition. We know that DES is one such cipher, since it has been shown that DES is not a group. However, it is not true in general that symmetric ciphers gain security under composition. For example, no matter how many times you encrypt something using a Caesar cipher (a generalization of ROT-13), there will always be a single key that decodes the resulting ciphertext. Ask your coworker to show that the specific algorithm you're discussing is not a group. If he can't, then what reason do you have to believe that you gain any security through what he proposes?

The second problem here is that your coworker seems to think that the onus is on you to prove that a given system is insecure. Every time an expert invents a new cryptosystem, there is a good chance that the system will be insecure; It is a near-certainty that any cryptosystem your coworker comes up with will be insecure. Bruce Schneier brought up this topic again in this month's Crypto-Gram :

Anyone can invent a security system that he himself cannot break. I've said this so often that Cory Doctorow has named it "Schneier's Law": When someone hands you a security system and says, "I believe this is secure," the first thing you have to ask is, "Who the hell are you?" Show me what you've broken to demonstrate that your assertion of the system's security means something.

Thirdly, even if your coworker's new cipher design---and that's what it is---miraculously has the security properties that he thinks it does, is that enough? If you're using 128-bit keys in a symmetric cipher, you're only getting 64 bits of security, thanks to the "Birthday Paradox". If you want an attacker to have to perform 2^128 steps to brute-force your key, then you should be using 256-bit keys anyway. Justin Troutman explains this in more detail in his two-part series, "Ideal-to-Realized Security Assurance In Cryptographic Keys".

Finally, all this talk about composing cipher primitives might well be irrelevant. What is this cipher being used for? Disk-based encryption, for example, has vastly different requirements than a typical secure channel. (See New Methods in Hard Disk Encryption for a discussion of some of the issues associated with hard disk encryption.) What mode of operation are you using? What are you using for authentication? How much information does your cryptosystem leak? How are you negotiating what protocol you're using? To what extent is your protocol switch vulnerable to a chosen protocol attack? What about implementation issues?

I suggest that your coworker read the first two chapters

no economic value by multiview · 2006-06-18 06:27 · Score: 1 · on A New Technique to Quickly Erase Hard Drives

pack an AES chip into every hard disk (this is a trivial silicon chip, fabricated in ASIC and mass produced this is likely to cost way below 5$), and pack a master key into the first few sectors. Make the AES encryption transparent. The drive firmware reads the master key on power up and en/decrypts without user intervention.

However: when a special ATA command is issued the master key is overwritten with a new one (see http://luks.endorphin.org/LUKS-on-disk-format.pdf how this can be done safely). This operation doesn't take a second and instantaneously kills your data. The result: a new blank entropy filled HD.

So what's the economic value of this new invention? Likely zero.

Re:Boot time encryption by Diphthong · 2006-04-19 02:11 · Score: 1 · on Open-Source or FIPS-Validated Disk Encryption?

I have been using LUKS to do this on my Gentoo box. It sees to it that the root partition is completely encrypted; only the boot partition is in the clear. (Gentoo itself has support for encrypted swap.) The instructions are a bit scattershot, but I was able to get it to work. YMMV.

Before doing this, use Darik's Boot and Nuke or something like that to fill the drive with random data; I do not think LUKS takes any steps to randomize the contents of a newly-created partition.

For good, easy, root encryption by GenKreton · 2006-03-20 05:45 · Score: 2, Interesting · on Encrypt Filesystems with EncFS and Loop-AES

I use LUKS (Linux Unified Key Setup) on several of my machines. It is an extension onto cryptsetup and uses dm-cryp instead of loopaes. It is fairly easy to setup and allows for multiple users with different phrases if needed as well as tokens. It has treated me much better than loop aes had in the past.

http://luks.endorphin.org/

Why is this being compared to loop-aes on Linux? by Anonymous Coward · 2005-12-28 03:15 · Score: 2, Informative · on NetBSD's Crypto-Graphic Disk

Reading the first few lines of the interview I get the impression it does almost the exactly the same stuff dm-crypt does, which has been in Linux stable for over a year now.
Have a look at http://luks.endorphin.org/
In my opinion, there has been some excellent work been done.

Re:Not yet... by Anonymous Coward · 2000-08-30 00:26 · Score: 3 · on More Threats From The MPAA

Mirrors part 1 by Anonymous Coward · 2000-01-19 02:42 · Score: 0 · on Corel Draw 9 for Linux Needs Beta Testers

Visit Humpin! (No, it's not what you think!)

Temporary restraining order DENIED!

Thanks to the efforts of the Electronic Frontier Foundation and the organization and support provided by a few of our fellow defendants we are still here! Another hearing is scheduled for January 14th.

We would like to point out to all of the mirror sites with things like "fuck the lawyers" on them that it is because of a generous group of lawyers that we are still here. These lawyers are working for free (or much less than they could get by going over to the Dark Side) and don't deserve this kind of abuse.

Here is the EFF's stance on this case.

Save a copy of this web page now!

We have just been informed that the DVD Copy Control Association is seeking a restraining order against us (named as "Doe 28") for distributing DeCSS and linking to pages that distribute it and linking to pages that link to pages that distribute it.

Section 48 of this request states that we supposedly "have received notice through the MPA and refused to remove the information at issue". This is absolutely false! We have never received any such request (from the MPA or anybody else for that matter) and we obviously were not given the opportunity to refuse! Either Jared Bobrow needs to go back to law school or the DVD CCA needs to get a new firm. This is the kind of sloppy work that could get an important document thrown out.

Here is a 2600 story on this.

Explanation on legality of this information

The software (source as well as binaries) offered on this site can be freely redistributed because it was published under the GNU General Public License. The purpose of this software is not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) DVD content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site were written by third parties using clean-room reverse engineering methods which are (ready?) completly legal.

Attention www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

Here is a 2600 story with more details on how rhythm.cx was shut down.

Current Mirrors Last updated: Wed, Jan 19, 12:13am EST
Numbers are only for the maintainer's convenience

We apologize for the length of time between updates. This list has gotten quite large and thus more difficult to maintain.

Much thanks to this site for listing mirrors of the mirror lists.

Mirrors part 1 by Anonymous Coward · 2000-01-16 07:10 · Score: 0 · on New DVD Lawsuits Filed by the MPAA (UPDATED)

Note: This mirror list has been copied from http://www.humpin.org/decss/, on January 2nd 2000 13:13 GMT

Mirrors since 28-Dec-99 added by me.
To my main DVD page (containing list of lists of mirrors) Visit Humpin! (No, it's not what you think!)

Temporary restraining order DENIED!

Thanks to the efforts of the Electronic Frontier Foundation and the organization and support provided by a few of our fellow defendants we are still here! Another hearing is scheduled for January 14th.

We would like to point out to all of the mirror sites with things like "fuck the lawyers" on them that it is because of a generous group of lawyers that we are still here. These lawyers are working for free (or much less than they could get by going over to the Dark Side) and don't deserve this kind of abuse.

Here is the EFF's stance on this case.
If you need a REAL reason to host these files, try reading this. Truth has never been more purely distilled.

Save a copy of this web page now!

We have just been informed that the DVD Copy Control Association is seeking a restraining order against us (named as "Doe 28") for distributing DeCSS and linking to pages that distribute it and linking to pages that link to pages that distribute it.

Section 48 of this request states that we supposedly "have received notice through the MPA and refused to remove the information at issue". This is absolutely false! We have never received any such request (from the MPA or anybody else for that matter) and we obviously were not given the opportunity to refuse! Either Jared Bobrow needs to go back to law school or the DVD CCA needs to get a new firm. This is the kind of sloppy work that could get an important document thrown out.

Here is a 2600 story on this.

Explanation on legality of this information

The software (source as well as binaries) offered on this site can be freely redistributed because it was published under the GNU General Public License. The purpose of this software is not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) DVD content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site were written by third parties using clean-room reverse engineering methods which are (ready?) completly legal.

Attention www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

Here is a 2600 story with more details on how rhythm.cx was shut down.

Current Mirrors Last updated: Fri, Dec 31, 8:18pm EST
Numbers are only for the maintainer's convenience

Much thanks to this site for listing mirrors of the mirror lists.

OOPS - Trying Humpin list again by Anonymous Coward · 1999-12-30 11:08 · Score: 0 · on DVD Hearing Victory: We Won - For Now

You have one bat and there are 100 million holes Visit Humpin! (No, it's not what you think!)

Temporary restraining order DENIED!

Thanks to the efforts of the Electronic Frontier Foundation and the organization and support provided by a few of our fellow defendants we are still here! Another hearing is scheduled for January 14th.

We would like to point out to all of the mirror sites with things like "fuck the lawyers" on them that it is because of a generous group of lawyers that we are still here. These lawyers are working for free (or much less than they could get by going over to the Dark Side) and don't deserve this kind of abuse.

Here is the EFF's stance on this case.
If you need a REAL reason to host these files, try reading this. Truth has never been more purely distilled.

Save a copy of this web page now!

We have just been informed that the DVD Copy Control Association is seeking a restraining order against us (named as "Doe 28") for distributing DeCSS and linking to pages that distribute it and linking to pages that link to pages that distribute it.

Section 48 of this request states that we supposedly "have received notice through the MPA and refused to remove the information at issue". This is absolutely false! We have never received any such request (from the MPA or anybody else for that matter) and we obviously were not given the opportunity to refuse! Either Jared Bobrow needs to go back to law school or the DVD CCA needs to get a new firm. This is the kind of sloppy work that could get an important document thrown out.

Here is a 2600 story on this.

Explanation on legality of this information

The software (source as well as binaries) offered on this site can be freely redistributed because it was published under the GNU General Public License. The purpose of this software is not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) DVD content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site were written by third parties using clean-room reverse engineering methods which are (ready?) completly legal.

Attention www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

Here is a 2600 story with more details on how rhythm.cx was shut down.

Current Mirrors Last updated: Thu, Dec 30, 2:55am EST
Numbers are only for the maintainer's convenience

Much thanks to this site for listing mirrors of the mirror lists.

This site contains some good technical documentation as well as more source code that the DVD consorium's lawyers would rather you not see:
http://crypto.gq.nu/

Semi-broken Mirrors
(These mirrors sometimes work and sometimes don't)
http://joe.to/storage/files/decss.zip
ftp://eris.giga.or.at/pub/hacker/crypt/ DVD/
http://gullii.stu.rpi.edu/dvd/files/D eCSS.zip and http://gullii.stu.rpi.edu/dvd/f iles/css-auth.tar.gz
http://www.discordia.de/decss/DeCSS.zip and http://www.discordia.de/decss/css-aut h_tar.gz and http://www.discordia.de/decss/LiVid.tgz

Broken Mirrors
(These are listed here for the notification of the people who run them)
http://members.theglobe.com/avoiderman/css-auth.ta r.gz
ftp://mikpos.dyndns.org/pub/cssdvd.zip
ftp://195.115.63.44/pub/DeCSS.zip
http://home.c2i.net/buddha9/
http://frodo.campus.luth.se/~iocc/tip.html
http://home.t-online.de/home/skinner01/decss.zip
ftp://ftp.firehead.org/pub/
http://freeweb.digiweb.com/business/avoiderman/
http://www.hack.b3.nu/

Mirrors shut down by The Man
(A moment of silence, please.)
http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://dvdcracked.tvheaven.com/index.html
http://home.worldonline.dk/~andersa/download/DeCSS .zip
http://download.cnet.com/downloads/0-10079-100-143 3209.html?tag=st.dl.10001_104_3.lst.titl edetail
http://www.theresistance.net/files.html
http://cryptome.org/dvd-css.htm
http://www.d.umn.edu/~dchan/css/
http://caspian.twu.net/dvd/
http://mclaughlin.orange.ca.us/~andrew/
ftp://134.173.94.44

Mirrors by Anonymous Coward · 1999-12-29 06:42 · Score: 0 · on DVD Hearing Today - Are You Ready to Rumble?

You have one bat and there are 100 million holes Visit Humpin! (No, it's not what you think!)

Save a copy of this web page now!

We have just been informed that the DVD Copy Control Association is seeking a restraining order against us (named as "Doe 28") for distributing DeCSS and linking to pages that distribute it and linking to pages that link to pages that distribute it.

Section 48 of this request states that we supposedly "have received notice through the MPA and refused to remove the information at issue". This is absolutely false! We have never received any such request (from the MPA or anybody else for that matter) and we obviously were not given the opportunity to refuse! Either Jared Bobrow needs to go back to law school or the DVD CCA needs to get a new firm. This is the kind of sloppy work that could get an important document thrown out.

Here is a 2600 story on this.

Explanation on legality of this information

The software (source as well as binaries) offered on this site can be freely redistributed because it was published under the GNU General Public License. The purpose of this software is not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) DVD content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site were written by third parties using clean-room reverse engineering methods which are (ready?) completly legal.

Attention www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

Here is a 2600 story with more details on how rhythm.cx was shut down.

Current Mirrors Last updated: Wed, Dec 29, 3:14pm EST
Numbers are only for the maintainer's convenience

Much thanks to this site for listing mirrors of the mirror lists.

This site contains some good technical documentation as well as more source code that the DVD consorium's lawyers would rather you not see:
http://crypto.gq.nu/

Semi-broken Mirrors
(These mirrors sometimes work and sometimes don't)
http://joe.to/storage/files/decss.zip
ftp://eris.giga.or.at/pub/hacker/crypt/ DVD/
http://gullii.stu.rpi.edu/dvd/files/D eCSS.zip and http://gullii.stu.rpi.edu/dvd/f iles/css-auth.tar.gz
http://www.discordia.de/decss/DeCSS.zip and http://www.discordia.de/decss/css-aut h_tar.gz and http://www.discordia.de/decss/LiVid.tgz

Broken Mirrors
(These are listed here for the notification of the people who run them)
http://members.theglobe.com/avoiderman/css-auth.ta r.gz
ftp://mikpos.dyndns.org/pub/cssdvd.zip
ftp://195.115.63.44/pub/DeCSS.zip
http://home.c2i.net/buddha9/
http://frodo.campus.luth.se/~iocc/tip.html
http://home.t-online.de/home/skinner01/decss.zip
ftp://ftp.firehead.org/pub/
http://freeweb.digiweb.com/business/avoiderman/
http://www.hack.b3.nu/

Mirrors shut down by The Man
(A moment of silence, please.)
http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://dvdcracked.tvheaven.com/index.html
http://home.worldonline.dk/~andersa/download/DeCSS .zip
http://download.cnet.com/downloads/0-10079-100-143 3209.html?tag=st.dl.10001_104_3.lst.titl edetail
http://www.theresistance.net/files.html
http://cryptome.org/dvd-css.htm
http://www.d.umn.edu/~dchan/css/
http://caspian.twu.net/dvd/
http://mclaughlin.orange.ca.us/~andrew/
ftp://134.173.94.44

A different list of mirrors by Anonymous Coward · 1999-11-17 02:48 · Score: 0 · on deCSS Listed On Download.com

Here is the most recent version of the css-auth CVS code as well as DeCSS. Please mirror & redistribute.
This page was originally a mirror of http://www.rhythm.cx/dvd/, but then rhythm.cx was forced down.
So I've taken it on myself to keep a list of mirrors. I try to update and check the status of the listed sites at least once per day. If you know of any mirrors not in my list, if you wish to mirror this page, or if you find that any of the listed sites went down, then contact me.

you can download the following three files from here:
DeCSS.zip - DeCSS
css-auth.tar.gz - CSS authentication source
LiVid.tgz - Linux DVD Code

MD5 Sums:
d0aff684327a5c7bf110951e42ec3cae DeCSS.zip 8653090161e8f287d365132acb098581 css-auth.tar.gz a940de43a3c20895cf56bbca75c6d7a7 LiVid.tgz

Known Mirrors (as of 17/Nov/1999, 08:30 GMT):

Sites that copied this site (lemuria.org): http://josefine.ben.tuwien.ac.at/~davi d/dvd/
http://www.c0ke.com/DVD/
http://209.68.37.134/decss/
http://rockme.virtualave.net/
http://caspian.twu.net/dv d/mirrors/www.lemuria.org/DeCSS/

http://www.homestead.com/avoid erman/files/index.html
http://www.angelfire.com/jazz/avoiderman/
http://freeweb.digiweb.com/business /avoiderman/
http://www.intelcities.com/Main_ Street/Avoiderman/
http://members.theglobe.com/avoiderm an/dvd.htm
http://members.xoom.com/lkjhgfdsa2/

Other sites where DeCSS, css-auth and/or LiVid are mirrored: http://home.worldonline.dk/~ andersa/download/DeCSS.zip
http://douglas.min.net/~drw/css-auth/
http://www.devzero.org/freecss.html
http://home.t-online.de/home/skinn er01/decss.zip
http://www.chello.nl/~f .vanwaveren/css-auth/css-auth.tar.gz
http://www.vexed.net/CSS
http://members.brabant.chello.nl/~j.vr eeken/
http://www.dvd.eavy.de/css-auth.tar.gz and http://www.dvd.eavy.de/DeCSS.zip
http://www.eavy.net/stuff/dvd/css-aut h.tar.gz and http://www.eavy.net/stuff/dvd/DeCSS.zip
http://www.dynamsol.com/satanix/DeCSS.zip and http://www.dynamsol.com/satanix/css -auth.tar.gz
http://frozenlinux.com/civ/decss/
http://www.humpin.org/decss/
http://www.unitycode.org/
http://dirtass.beyatch.net/decss.zip
http://www.free-dvd.org.lu/
http://mclaughlin.orange.ca.us/~andrew/
http://batman.jytol.fi/~vuori/dvd/
http://www.zpok.demon.co.uk/deCSS/CSS.ht ml
http://plato.nebulanet.net:88/css/
http://www.d.umn.edu/~dchan/css/
http://www.logorrhea.com/main.html
http://people.delphi.com/salfter/LiVi d.tar.gz
http://www.theresistance.net/files.html
ftp://193.219.56.32/pub/dvd/LiVi d.CVS-11.06.tar.gz and ftp://193.219.56. 32/pub/dvd/LiVid.CVS-11.06.css-stuff-only.tar.gz
http://merlin.keble.ox.ac.uk/~a drian/css/index.html
http://www.dvd-copy.com/
http://www.zip.com.au/~cs/dvd/css /css-auth.tar.gz and http://www.zip.com.au/~cs/dvd/css/DeCSS .zip
ftp://ftp.firehead.org/pub/ (very slow - 33.6 line)
http://members.tripod.co.uk/bap/css/cs s.html
http://www.tasam.com/~fenkt/dvd/
ftp://eris.giga.or.at/pub/hacker/crypt/ DVD/
http://therapy.endorphin.org/DVD/
http://www.discordia.de/decss/DeCSS.zip and http://www.discordia.de/decss/css-aut h_tar.gz and http://www.discordia.de/decss/LiVid.tgz
http://www.dvdlinks.co.uk/css/
http://caspian.twu.net/dvd/
http://www.twistedlogic.com/htm l/tl_archive_map.htm
http://www.jonhanson.com/dvd/

http://www.geociti es.com/ResearchTriangle/Campus/8877/index.html
http://www.angelfire.com/mt/popefelix/ http://members.tripod.lycos.nl/jvz/
http://www.angelfire.com/in2/mirror/
http://www.sent.freeserve.co.uk/css -auth.tar.gz and http://www.sent.freeserve.co.uk/DeCSS.zip

Mirrors that appear have gone down since 12/Nov/1999: http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://www.xs4all.nl/~predator/freecss/freecss.htm l
http://sharedlib.org/decss.zip
http://decss.tripod.com/index.html
ftp://134.173.94.44/
http://gullii.stu.rpi.edu/dvd/files/DeCSS.zip and http://gullii.stu.rpi.edu/dvd/files/css-auth.tar.g z ftp://alma.dhs.org/pub/DVD/ http://home.worldonline.dk/~andersa/download/DeCSS .zip

The following site contains some good technical documentation as well as more source code that the DVD consortium's lawyers would rather you not see:
http://crypto.gq.nu/
Local Mirror: /DeCSS/crypto.gq.nu

You can contact me at tom@lemuria.org if you have any questions regarding mirroring, or want your mirror added here.

Note to lawyers and other scum:
This information is widely available by now, and no matter what you do, you will not be able to supress it. It was the DVD consortium that f***ed up, and now you're trying to solve a technological problem with threats and legal action?
If there were fines on stupidity, yours would cover the national debts of most western countries.

Mirrors again ooops by Anonymous Coward · 1999-11-17 02:40 · Score: 0 · on deCSS Listed On Download.com

This site contains some good technical documentation as well as more source code that the DVD consorium's lawyers would rather you not see:
http://crypto.gq.nu/

Semi-broken Mirrors
(These mirrors sometimes work and sometimes don't)
ftp://134.173.94.44/

Broken Mirrors
(These are listed here for the notification of the people who run them)
http://members.theglobe.com/avoiderman/css-auth.ta r.gz

Mirrors shut down by The Man
(A moment of silence, please.)
http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://dvdcracked.tvheaven.com/index.html

Mirrors - Now more than 70!!!! by Anonymous Coward · 1999-11-17 02:38 · Score: 1 · on deCSS Listed On Download.com

Oh yeah

Visit Humpin! (No, it's not what you think!)

Explanation on legality of this information:

The software (source as well as binaries) offered on this site can be freely redistributed because it was published under the GNU General Public License. The purpose of this software is not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) DVD content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site were written by third parties using clean-room reverse engineering methods which are (ready?) completly legal.

Attention

www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

UPDATE: Here is a 2600 story with more details on how rhythm.cx was shut down.

I have taken it upon myself to mirror the mirrors. So until such time as the hounds of hell come a-knocking at my door, I present for you this list:

Page last updated: Wed, Nov 17, 2:33pm EST

Current Mirrors
(Numbers are only for the maintainer's convenience)

This site contains some good technical documentation as well as more source code that the DVD consorium's lawyers would rather you not see:
http://crypto.gq.nu/

Semi-broken Mirrors
(These mirrors sometimes work and sometimes don't)
ftp://134.173.94.44/

Broken Mirrors
(These are listed here for the notification of the people who run them)
http://members.theglobe.com/avoiderman/css-auth.ta r.gz

Mirrors shut down by The Man
(A moment of silence, please.)
http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://dvdcracked.tvheaven.com/index.html

Mirror list by Anonymous Coward · 1999-11-16 22:58 · Score: 2 · on deCSS Listed On Download.com

Oh yeah

Visit Humpin! (No, it's not what you think!)

Explanation on legality of this information:

The software (source as well as binaries) offered on this site can be freely redistributed. It was written by authors who expressly permitted and encourage the redistribution of this software and information. The purpose of this software is not, I repeat not illegal copying of DVD disks. It is meant to provide information necessary to be able to program a DVD player for Linux. To do this, the CSS system needs to be incorporated in the player. Recently the (very weak) content scrambling system was deciphered, freeing the way for a Linux DVD player. The CSS system is not a copy protection system, since it does not prevent copying of the disk. Writing information about the way an encryption scheme functions is completely legal. The source code and binaries on this site are completely legal too, since they contain no code from the DVD consortium or its members. The sources and programs on this site are purely written by 3rd parties using clean-room reverse engineering methods, which is, again, completely legal. This software and information below make it possible for people who legally obtained their DVD movies to view them on their Linux systems.

Attention

www.rhythm.cx was hosting a list of mirrors for these files. That list of mirrors has been replaced with a page reading "This site has been taken down for legal reasons." Here's what the maintainer put on the site the day it was shut down:

NOTE (Thu, Nov 11, 12:17pm EST): I've recently been informed that a law firm which is likely to be one that would try get these mirrors taken down has been visiting this mirror site as well as others. With that said, there is a possibility that I may have to remove this site in the near future because like everyone else, I can't afford to go to court to fight it. Luckly, it seems fairly unlikely that any law firm will ever be able to get rid of all these mirrors at this point (there are currently 41 in 8 different countries and this list is growing every day). However, I have only seen very few mirror _lists_ like this one anyplace. If anyone has the resources, it might be wise to mirror this list of mirrors as well so that the right people will still know that these mirrors exist.

UPDATE: Here is a 2600 story with more details on how rhythm.cx was shut down.

I have taken it upon myself to mirror the mirrors. So until such time as the hounds of hell come a-knocking at my door, I present for you this list:

Page last updated: Tue, Nov 16, 2:19pm EST

Current Mirrors
(Numbers are only for the maintainer's convenience)

This site contains some good technical documentation as well as more source code that the DVD consorium's lawyers would rather you not see:
http://crypto.gq.nu/

Semi-broken Mirrors
(These mirrors sometimes work and sometimes don't)
ftp://134.173.94.44/

Broken Mirrors
(These are listed here for the notification of the people who run them)
http://members.theglobe.com/avoiderman/css-auth.ta r.gz http://gullii.stu.rpi.edu/dvd/files/DeCSS.zip and http://gullii.stu.rpi.edu/dvd/files/css-auth.tar.g z

Mirrors shut down by The Man
(A moment of silence, please.)
http://www.rhythm.cx/dvd/css-auth.tar.gz and http://www.rhythm.cx/dvd/DeCSS.zip
http://dvdcracked.tvheaven.com/index.html

Slashdot Mirror

Domain: endorphin.org

Comments · 28