warnerbros.com · Domains · Slashdot Mirror

Re:Therefore, the MPAA must be guilty by Chmrr · 2000-08-30 00:39 · Score: 1 · on More Threats From The MPAA

..at some point on the mpaa site, there has to be an outside link that will eventually lead to a search engine or some other site that discusses the decss code.

Simple. Off of their "related sites" page is a link to Warner Bros. Warner's "search" link allows you to search "the web." Enter DeCSS. Voila.

MPAA => foot => mouth. Whee.

More MPAA sites can link to DeCSS by x0dus · 2000-08-25 07:06 · Score: 4 · on More DeCSS Time-Warner Hypocrisy

Why limit ourselves to CNN's web site? Most of the MPAA member's web sites can be instantly turned into DeCSS links as well. Try the following links to get to DeCSS. No, I'm not linking to the DeCSS source code, that would probably be illegal for me to do. Instead, I'm linking to the web sites of Warner Bros., Universal Studios, and Walt Disney Company (who happen to have links to DeCSS--sue them, not me!).

On an unrelated topic, from my understanding the reverse engineering of CSS was originally deemed illegal because presumably Jon Johansen clicked a button which indicated he complied with a license that said he wouldn't reverse engineer Xing's DVD player. My question is: don't the laws of Norway require you to be legal age (18) to enter into a contract?

And You Thought I Was Kidding by ewhac · 2000-08-22 14:20 · Score: 5 · on Sony VP On Stopping Napster

Prepare to witness the most concerted and massive engineering effort -- both social and technical -- ever undertaken by mankind: The digital equivalent of damming the ocean.

I wrote about this on Slashdot almost a year ago, in the vague hope it might become a featured article: The music and movie industies are working very hard to prevent you from using your lawfully-obtained material in any way they don't want. To that end, they have formed the Copy Protection Technical Working Group (CPTWG), which is working hand-in-hand with a ton of high-tech companies to bring pervasive copy protection measures to your PC.

I saved my original screed on the subject, and it's reproduced below, with appropriate updates. Bottom Line: Do not let them sneak this garbage past you or your friends. If you find that a product contains copy protection, don't buy it, and encourage others to do likewise.

____________________

Recent stories on Slashdot have told of the ongoing "tennis match" between digital content providers versus consumers and technically skilled people. The recent cracking of DVD's Content Scrambling System (CSS) lent ammunition to the opinion held by computing professionals and users that copy protection systems are doomed to fail. The effort has been likened to building a dam against the ocean; a foolish and useless exercise. In Slashdot discussion fora, the point has often been raised, "If you can perceive it, you can copy it. What are they going to do, encrypt the bits all the way to the speaker/electron gun?" If the Copy Protection Technical Working Group gets its way, that is precisely what's going to happen.

I received a piece of email spam today, which actually turned out to be useful (probably the only time that's ever happened anywhere). It directed me to a flat panel display industry group. Among others, one of the links pointed to the California Display Network, which had a link pointing to technical info on flat panel technology. Since I currently earn my living writing graphics card and display drivers, I clicked through to see what I could learn.

I found an entry for an overview of digital visual interfaces, provided by Silicon Image. As I reviewed the headings of the slides, one entry stopped me cold: Conten t Protection Status. Content protection? In a flat panel?? Yup: "Implementation of DVI content protection is suitable for PCs and monitors." [emphasis mine]

Thus began an evening of link clicking and Google searches to find out what this off-handed remark could mean. The slide made mention of the 'CPTWG'. This is the Copy Protection Technical Working Group, a consortium of content providers (movie companies), consumer electronics manufacturers, and players in the IT industry. This is the same group that developed CSS for DVD players.

One paragraph from the above page is particularly disturbing:

CPTWG has focused until now only on "casual piracy [sic]", characterized as what a grandmother can do in her home with her DVD. Piracy [sic] requiring even the level of expertise (and equipment) of her grandson, who might be an EE student, has been excluded from consideration. There is a growing awareness that a broader content protection effort may be necessary.

The most recent meeting of the CPTWG was yesterday, 8 December, 1999. Their meeting announcements may be found here. It costs $100 to attend. According to the site, their last meeting was on 11 April 2000. It's not clear if additional meetings have been held at regular intervals.

The attendance roster from the April meeting (RTF file) lists a very interesting, and possibly worrying, mix of organizations. A partial list of representatives included:

MPAA (Motion Picture Association of America),
AFMA (American Film Marketing Association),
Sony Pictures Entertainment,
Universal Studios,
Warner Bros.,
Disney,
Paramount,
CEMA (Consumer Electronics Manufacturers Association),
MEI (parent company to Panasonic), makers of consumer electronics,
Pioneer, makers of consumer electronics,
JVC, makers of consumer electronics,
Philips, makers of consumer electronics and VLSI components (including video encoders),
Sony, makers of consumer electronics, computers, and displays,
Toshiba, makers of consumer electronics, computers, flat panels, disk drives, digital cameras, copiers, and laser printers,
NEC, makers of computers, displays, printers, and telecomm equipment,
Hewlett Packard, makers of computers, printers, and testing/measuring equipment (oscilloscopes, logic analyzers, etc.),
Quantum, makers of disk drives,
IBM, makers of computers, disk drives, and bunches of other stuff,
Compaq, makers of computers,
Apple Computer, makers of computers,
ATI Technologies, makers of PC graphics cards,
Dolby Labs, creators and licensors of audio enhancement technologies,
Intel, makers of microprocessors, motherboard controllers, and graphics and peripheral chips,
Microsoft, software market monopolists,
Dow Chemical (I have no idea why they're here),
DVD-CCA, licensors of CSS, and currently in court trying to prevent the spread of DeCSS,
A number of law firms.

If you download the roster and read closely, you'll see every major piece of your computer represented. There is no doubt that at least one part of your computer -- your CPU, your RAM, your disk drive, your graphics card, your monitor -- is manufactured by one of these companies.

If you look further still, you'll see there are no consumer advocacy groups listed.

What are they all working toward? Quite simply, to prevent you from using your lawfully obtained digital material in any way they don't want.

Here's one example of how they'll do it: If you've visited Fry's or CompUSA recently, you'll notice that full-size flat panel displays are starting to appear. Currently, most of these displays are based on the old VGA analog signals, which are converted into the digital signals needed by the panels. The Digital Display Working Group is working on a new connector and signalling standard called Digital Visual Interface (DVI) that will allow computer displays to go all-digital. You won't need a DAC on the video card; the digital signals will be fed straight through to the display. Image fidelity will be much higher, since there won't be any intervening DAC/ADC conversions. Version 1.0 of the standard has been published and is available for download (PDF format). The DVI spec currently does not stipulate copy protection measures. However, plans are in the works to incorporate it.

Intel is one of the primary contributors to this effort. On Intel's developer site, they have some papers on copy protection for IEEE 1394 (Firewire) digital streams. In two separate articles, 1394-based Digital Content Protection: an Intel Proposal, and Content Protection for IEEE 1394 Serial Buses (the latter being a Powerpoint presentation masquerading as a PDF file), Intel outlines its proposal for protecting digital content over Firewire. By using cryptographic authentication techniques, a device offering digital content will "handshake" with other devices on the bus to assure that digital data is only received by, "compliant devices." In a revised overview of the proposal, IDF Talk: Content Protection for the IEEE 1394 Bus, Intel offers concrete implementation details, including:

DSS (Digital Signature Standard)
Diffie-Hellman key exchange for device authentication,
Blowfish cipher for content encryption, with a keylength of 32-128 bits,
Digital watermarking techniques to declare "rights" (right to playback, right to copy, etc.) to the receiving device.

The full proposal (currently version 0.91), with lots of technical detail, is mirrored on CPTWG's site (the links to Intel's site don't work).

Intel's proposal also recommends that the copy protection system be field-upgradeable to thwart ongoing attacks, and that it should be possible to revoke (read: disable) a device determined to be "compromised." (The tone of the proposals is also interesting. It's previously been thought that, because of USB, Intel is hostile to IEEE 1394. Yet these proposals suggest that Intel's quite enthusiastic about 1394... Once copy protection is incorporated.)

Intel's proposal mentions only IEEE 1394. However, it also mentions that there's nothing preventing the technique being applied generally to any bi-directional link. So for all occurrences of '1394', substitute 'DVI', and you've got an idea of what to look forward to in your new digital monitor. And your new DVD player. And your new HDTV set. And your new USB speakers.

Intel goes even further in their paper, A Framework for DVD-Audio Content Protection. In it, the author suggests that DVD-Audio recorders permanently remember the IRSC (International Standard Recording Code) of every song the device is asked to copy, so that it may only be copied once, period. They go on to suggest that the recorder could have a modem built-in to authorize (read: purchase) the ability to make additional copies.

In short, through this industry consortium, Hollywood proposes to exert control over every link in the digital chain, from the digital camera, to the disk drive, to the CPU, to the graphics card, to your display. They will decide what rights you have. Even if a court decides Fair Use includes multiple copies for personal use (such as assembling a video montage), it won't matter. Your computer will still refuse to make the copies (and probably fink on you, as well).

This coordinated effort is ostensibly to combat unsanctioned copying (which the industry chronically refers to incorrectly as 'theft' and 'piracy'). However, no one has ever been able to provably quantify the value of unrealized sales due to such copying. All dollar estimates that have been published are just that: estimates, based on idealized extrapolations of what-if scenarios. Moreover, although the industry claims to "lose" billions every year, they continue to post record profits. Finally, despite the proliferation of CDR drives and the Internet, most unrealized sales are the result of organized mass counterfeiting rings, not casual copying. None of the proposed methods I've seen appear to thwart mass counterfeiting at all. So clearly there's some other reason for all this.

The thing that puzzles me most is why the computer and consumer electronics industries haven't told Hollywood to take a hike. Intel's copy protection proposals state, in bold letters, "No content protection = No Hollywood content." This belief is taken as axiomatic by all the players, and appears to be the driving force behind the entire effort. This belief is also false.

Audio on CDs are recorded as plaintext, and the music industry continues to earn rapacious profits. Even the with the advent of CDRs, no music industry executive in his right mind would suggest dropping CD sales and going strictly with cassettes and vinyl. If nothing else, the manufacturing costs for CDs are lower than those for cassettes and vinyl. Likewise, DVDs are tremendously cheaper to produce than videotapes. Videotape duplication is a labor-intensive process; DVDs can be stamped out automatically. The savings in cost-of-goods alone would more than balance against any unrealized sales from casual copying. Corporate shareholders, always mindful of the bottom line, will also demand that the studios move to the cheaper, higher-quality process, copy protected or not.

The fact is that the computer and electronics firms are in the driver's seat, and are free to dictate how the new digital formats will work. Hollywood will use whatever format becomes popular, whether it has copy protection or not. They may grumble about it, but they'll use it. The economics afford them little choice.

We are only now beginning to explore the social and ethical consequences of a Star Trek-like universe where everything can be infinitely duplcated at zero cost. We have no idea where things will end up. But now is not the time to start erecting electronic walls and imposing artificial scarcity. The ignoble and richly-deserved death of DIVX showed -- fairly unequivocally, I thought -- that consumers want to make free, fair use of their digital media, without interference from outside. I believe its death reinforces the future toward which we've been pushing for centuries: Increased abundance at reduced cost. We can only hope that the lesson of DIVX will be repeated until it is learned.

Schwab

Damming The Ocean by ewhac · 2000-01-13 14:55 · Score: 5 · on Copy Protection - Scapegoat or Real Threat?

I submitted this to Slashdot's Your Rights Online section some weeks ago, but it was rejected. I think the article is pertinent here.

Recent stories on Slashdot have told of the ongoing "tennis match" between digital content providers versus consumers and technically skilled people. The recent cracking of DVD's Content Scrambling System (CSS) lent ammunition to the opinion held by computing professionals and users that copy protection systems are doomed to fail. The effort has been likened to building a dam against the ocean; a foolish and useless exercise. In Slashdot discussion fora, the point has often been raised, "If you can perceive it, you can copy it. What are they going to do, encrypt the bits all the way to the speaker/electron gun?" If the Copy Protection Technical Working Group gets its way, that is precisely what's going to happen.

I received a piece of email spam today, which actually turned out to be useful (probably the only time that's ever happened anywhere). It directed me to a flat panel display industry group. Among others, one of the links pointed to the California Display Network, which had a link pointing to technical info on flat panel technology. Since I currently earn my living writing graphics card and display drivers, I clicked through to see what I could learn.

I found an entry for an overview of digital visual interfaces, provided by Silicon Image. As I reviewed the headings of the slides, one entry stopped me cold: Conten t Protection Status. Content protection? In a flat panel?? Yup: "Implementation of DVI content protection is suitable for PCs and monitors." [emphasis mine]

Thus began an evening of link clicking and Google searches to find out what this off-handed remark could mean. The slide made mention of the 'CPTWG'. This is the Copy Protection Technical Working Group, a consortium of content providers (movie companies), consumer electronics manufacturers, and players in the IT industry. This is the same group that developed CSS for DVD players.

One paragraph from the above page is particularly disturbing:

CPTWG has focused until now only on "casual piracy [sic]", characterized as what a grandmother can do in her home with her DVD. Piracy [sic] requiring even the level of expertise (and equipment) of her grandson, who might be an EE student, has been excluded from consideration. There is a growing awareness that a broader content protection effort may be necessary.

The most recent meeting of the CPTWG was yesterday, 8 December, 1999. Their meeting announcements may be found here. According to the December meeting announcement, the next meetings will occur on 11 January, 2000, and 9 February, 2000. It costs $100 to attend.

The attendance roster from the November meeting (PDF file, sorry) lists a very interesting, and possibly worrying, mix of organizations. A partial list of representatives included:

MPAA (Motion Picture Association of America),
AFMA (American Film Marketing Association),
Sony Pictures Entertainment,
Universal Studios,
Warner Bros.,
Disney,
Paramount,
CEMA (Consumer Electronics Manufacturers Association),
MEI (parent company to Panasonic), makers of consumer electronics,
Pioneer, makers of consumer electronics,
JVC, makers of consumer electronics,
Philips, makers of consumer electronics and VLSI components (including video encoders),
Sony, makers of consumer electronics, computers, and displays,
Toshiba, makers of consumer electronics, computers, flat panels, disk drives, digital cameras, copiers, and laser printers,
NEC, makers of computers, displays, printers, and telecomm equipment,
Hewlett Packard, makers of computers, printers, and testing/measuring equipment (oscilloscopes, logic analyzers, etc.),
Quantum, makers of disk drives,
IBM, makers of computers, disk drives, and bunches of other stuff,
Compaq, makers of computers,
Apple Computer, makers of computers,
ATI Technologies, makers of PC graphics cards,
Dolby Labs, creators and licensors of audio enhancement technologies,
Intel, makers of microprocessors, motherboard controllers, and graphics and peripheral chips,
Microsoft, software market monopolists,
Dow Chemical (I have no idea why they're here),
A number of law firms.

If you download the roster and read closely, you'll see every major piece of your computer represented. There is no doubt that at least one part of your computer -- your CPU, your RAM, your disk drive, your graphics card, your monitor -- is manufactured by one of these companies.

If you look further still, you'll see there are no consumer advocacy groups listed.

What are they all working toward? Quite simply, to prevent you from using your lawfully obtained digital material in any way they don't want.

Here's one example of how they'll do it: If you've visited Fry's or CompUSA recently, you'll notice that full-size flat panel displays are starting to appear. Currently, most of these displays are based on the old VGA analog signals, which are converted into the digital signals needed by the panels. The Digital Display Working Group is working on a new connector and signalling standard called Digital Visual Interface (DVI) that will allow computer displays to go all-digital. You won't need a DAC on the video card; the digital signals will be fed straight through to the display. Image fidelity will be much higher, since there won't be any intervening DAC/ADC conversions. Version 1.0 of the standard has been published and is available for download (PDF format). The DVI spec currently does not stipulate copy protection measures. However, plans are in the works to incorporate it.

Intel is one of the primary contributors to this effort. On Intel's developer site, they have some papers on copy protection for IEEE 1394 (Firewire) digital streams. In two separate articles, 1394-based Digital Content Protection: an Intel Proposal, and Content Protection for IEEE 1394 Serial Buses (the latter being a Powerpoint presentation masquerading as a PDF file), Intel outlines its proposal for protecting digital content over Firewire. By using cryptographic authentication techniques, a device offering digital content will "handshake" with other devices on the bus to assure that digital data is only received by, "compliant devices." In a revised overview of the proposal, IDF Talk: Content Protection for the IEEE 1394 Bus, Intel offers concrete implementation details, including:

DSS (Digital Signature Standard)
Diffie-Hellman key exchange for device authentication,
Blowfish cipher for content encryption, with a keylength of 32-128 bits,
Digital watermarking techniques to declare "rights" (right to playback, right to copy, etc.) to the receiving device.