Slashdot Mirror


Newest Audio CD DRM Proves Ineffective

The Importance of writes "As noted previously, a couple of weeks ago BMG released a new CD by Anthony Hamilton that included DRM. Slashdot readers speculated that the system wouldn't work. Now there is a report proving it doesn't work by Alex Halderman, a graduate student at Princeton's computer science department and the author of an earlier, definitive report (PDF, HTML version) on first generation CD copy protection. Famed computer scientist Ed Felten asks: "Is this the end of the road for CD copy protection?" His answer? "It ought to be.""

45 of 703 comments (clear)

  1. For those too lazy to RTFA by Anonymous Coward · · Score: 5, Informative

    Start with a Windows 2000/XP system with empty CD drives. Be sure to reboot the computer first to ensure MediaMax is not running.

    1. Click the Start button and select Control Panel from the Start Menu.
    2. Double-click on the System control panel icon.
    3. Select the Hardware tab and click the Device Manager button.
    4. Configure Device Manager by clicking "Show hidden devices" and "Devices by connection," both from the View menu.
    5. Insert the Anthony Hamilton CD into the computer and allow the SunnComm software to start. Observe that the SbcpHid device driver is added to the Device Manager list when MediaMax runs for the first time.

    At this point you can attempt to copy tracks from the CD with applications like MusicMatch Jukebox or Windows Media Player. Copies made while the driver is active will sound badly garbled, as in this 9-second clip [10].

    Next, follow these additional steps to disable MediaMax:

    1. Select the SbcpHid driver from the Device Manager list and click "Properties" from the Action Menu.
    2. Click the Driver tab and click the Stop button to disable the driver.

    With the driver stopped, you can verify that the same applications copy every track successfully.

    And oh, yeah, this work is a blatant DMCA violation.

    1. Re:For those too lazy to RTFA by cpeikert · · Score: 4, Informative

      Or, to avoid these several steps, simply press and hold the shift key for a few seconds while inserting the CD into the drive.

      This prevents the SbcpHid driver from being installed in the first place.

    2. Re:For those too lazy to RTFA by Jucius+Maximus · · Score: 5, Informative
      "Next, follow these additional steps to disable MediaMax:"

      Or just hold down the shift key when you put the disc in and the autorun won't install their mediamax trash to begin with.

      Or do what I do. Just get TweakUI and prevent autorun for CDs to begin with. It is quite useful when you don't want your new game or whatever to autorun its installer when you put the disc in.

    3. Re:For those too lazy to RTFA by Anonymous Coward · · Score: 5, Funny

      Or under Linux:

      1. Insert CD into drive
      2. Start grip, CDDB info retrieved automatically
      3. Select All Tracks and then press "Rip + Encode" button

      But Windows is easier to use because, well, because it just *is*, that's all! :-D ;)

    4. Re:For those too lazy to RTFA by keiferb · · Score: 5, Funny

      > Do not try to think outside the box. That's impossible. Instead, realise the truth. There is no box.

      Please stop what you're doing and call your local BSA office. The product you're using did not come with a box and is therefore pirated. Stay where you are and remain calm. The police will arrive shortly.

    5. Re:For those too lazy to RTFA by Anonymous Coward · · Score: 5, Funny

      The SHIFT key is now officially a DMCA (or is that DCMA?) circumvention device. I pity you americans...

      Cheers from Germany!

    6. Re:For those too lazy to RTFA by wampus · · Score: 3, Funny

      Or if you run linux, just stick the disc in the drive, run cdparanoia, and put the disc back in its case.

      Maybe the latest version of WineX will support the SbcpHID driver.

    7. Re:For those too lazy to RTFA by NanoGator · · Score: 3, Insightful

      "And oh, yeah, this work is a blatant DMCA violation."

      Are you sure? I don't see this as reverse engineering. I see it as troubleshooting a broken computer.

      --
      "Derp de derp."
    8. Re:For those too lazy to RTFA by Dragoon412 · · Score: 5, Informative

      Better yet...

      Run -> gpedit.msc -> computer configuration -> administrative templates -> system

      In the right pane, double-click "Turn off autoplay" and set to enabled.

      Auto-running CDs is a security problem waiting to happen.

    9. Re:For those too lazy to RTFA by DLWormwood · · Score: 4, Interesting
      Auto-running CDs is a security problem waiting to happen.

      As a Mac user, let me just say that my "virus immune" platform has already been bitten by this. One of the few pieces of malware in the wild that was Mac-compatible was exploiting the equivalent functionality on the platform; it was known as the Autostart Worm. It was an embarassment for Apple and some publishing houses, and eventally showed up on some shipping commercial CDs. Since then, Mac users have disabled the functionality using the QuickTime control panel/system pref pane.

      --
      Those who complain about affect & effect on /. should be disemvoweled
    10. Re:For those too lazy to RTFA by gmhowell · · Score: 3, Informative

      2, why do people persist in logging on to the console and running anything as an administrator? Fix your local security, use administrative accounts for only administrative activities.

      More than a handful of windows games require administrator access to run (not to install, to RUN).

      To which one would reply 'well make a separate account for playing games'. To which I would reply 'with a mindset like that, no wonder Linux may never make it to the desktop of the average person.'

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    11. Re:For those too lazy to RTFA by the+unbeliever · · Score: 3, Informative

      Start >Run type "regedit" {enter}

      Navigate to

      HKEY_LOCAL_MACHINE/SYSTEM/CURRENTCONTROLSET/SERV IC ES/CDROM

      Change the variable Autorun from 1 to 0 to disable
      Change the variable Autorun from 0 to 1 to enable

    12. Re:For those too lazy to RTFA by jon787 · · Score: 4, Interesting

      Or you know completely disabling the gaping security hole that is autorun/autoplay.

      --
      X(7): A program for managing terminal windows. See also screen(1).
  2. It wont matter by Honest+Man · · Score: 5, Insightful

    As long as I have an audio-in port on my sound card and an external player, drm is a waste of their time and money.

  3. Huh by Sir+Haxalot · · Score: 3, Funny

    "Is this the end of the road for CD copy protection?" His answer? "It ought to be.""
    Yeah and 64k should be enough for anyone.

    --
    I have over 70 freaks, do you?
    1. Re:Huh by NanoGator · · Score: 4, Funny

      "Wow, you blew it, that not even right. Learn your quotes.... Assfuck."

      Quotes are used to make people laugh, not to win at Trivial Pursuit. His quote was quite humorous. Who cares if Billy G didn't really say it? Who cares if it's not quoted verbatim?

      Honestly dude, Bill Gates trivia does not magnify the size of your penis.

      --
      "Derp de derp."
  4. Okay, let's wager. by DrEldarion · · Score: 4, Funny

    Who wants to make a little bet?

    I have $10 on him being contacted by RIAA lawyers with DMCA references by the end of the day. Any takers?

    -- Dr. Eldarion --

    1. Re:Okay, let's wager. by Neophytus · · Score: 4, Funny

      I'd like to see them DMCA my British ass.

    2. Re:Okay, let's wager. by dillon_rinker · · Score: 4, Funny

      See, now you've made it worse. Not only has he broken the DMCA, he's provided the information to FOREIGN POWERS!

  5. Report by mopslik · · Score: 5, Funny

    Now there is a report proving it doesn't work

    No doubt written with a Sharpie pen.

  6. I love the text on the CD.. by DrEldarion · · Score: 4, Insightful

    Apparently this text is on the back of the CD:

    THIS CD IS ENHANCED WITH MEDIAMAX SOFTWARE

    Enhanced! Since when does taking functionality away from something mean you're enhancing it?

    -- Dr. Eldarion --

    1. Re:I love the text on the CD.. by Dr+Caleb · · Score: 5, Funny
      Since when does taking functionality away from something mean you're enhancing it?

      Words change meaning when you translate from English to Marketing. :)

      --
      "History doesn't repeat itself, but it does rhyme." Mark Twain
  7. When an audio CD installs a driver by 16K+Ram+Pack · · Score: 5, Interesting
    It's perhaps time for me to call the police to report an infringement of the Computer Misuse Act.

    No audio CD should be installing *ANYTHING* on my PC, unless I'm aware of it at first.

    1. Re:When an audio CD installs a driver by DrEldarion · · Score: 3, Informative

      It's marked on the back of the CD case that software will automatically install when you put the CD in the drive. It even tels you how to install it if it doesn't automatically install.

      -- Dr. Eldarion --

  8. END?? by awfwal · · Score: 4, Funny

    "Is this the end of the road for CD copy protection?" The industry is stupid, greedy and desperate. I'm going with 'no'.

  9. Relying on Autorun, that's moronic. by Kevinv · · Score: 4, Insightful

    So they rely on the autorun setting on cd's to load the device driver for them? that's pretty stupid -- on windows it's enabled by default (typical) but most companies disable it because it's a security risk.

    The Mac got hit pretty hard with an autorun virus that ended up shipping on many cd's. As a result many Mac users disabled this in OS 9, and I believe OS X has it disabled by default.

    This might be effective on most windows home computers whose owners don't change the default setting, but I'm wondering how long before that driver gets infected with a virus....

    1. Re:Relying on Autorun, that's moronic. by sharkey · · Score: 4, Insightful
      but most companies disable it because it's a security risk.

      Not to mention really fucking annoying.

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
  10. copy protection by mrtroy · · Score: 4, Funny

    BMG are geniuses (genii? :P)

    Follow this pseudo-proof

    Step 1: Release a CD by Anthony Hamilton

    Step 2: Put new copy protection on it

    Step 3: Nobody copies the cd "illegally"

    Step 4: QED. The copy protection works

    --
    [I can picture a world without war, without hate. I can picture us attacking that world, because they'd never expect it]
  11. Wow, it's as if they didn't even try... by *weasel · · Score: 3, Redundant

    It loads a custom device driver via 'autorun' when you stick the CD in.

    So if you hold shift, disable autorun, or run an OS that doesn't do autorun, the CD might as well have no copy protection whatsoever.

    This is about as effective as putting a sticker on the front that says 'Pretty please do not attempt to extract data from this CD on your computer'.

    I wonder how much money this company got for their incredibly secure DRM system...

    --
    // "Can't clowns and pirates just -try- to get along?"
    1. Re:Wow, it's as if they didn't even try... by NanoGator · · Score: 5, Interesting

      "This is about as effective as putting a sticker on the front that says 'Pretty please do not attempt to extract data from this CD on your computer'."

      Gotta wonder, why hasn't the RIAA tried putting little "Do's and Dont's" pamphlet in CDs? I mean, seriously, the RIAA has done *nothing* to educate people about what's legal and what isn't. This is why people are appearing in court with a surprised expression on their faces. If the RIAA, ages ago, had insisted that record labels put little pamphlets in their CD's saying "please don't copy and give to a friend", then their stance would be a little easier to handle.

      The RIAA says their problems are because everybody's a thief, I say the RIAA's problems are a direct result of their own ignorance. At least the movie industry is smart enough to put a list of don't on every movie. Interestingly enough, there aren't as many DVD rips out there.

      --
      "Derp de derp."
  12. pick one by Anonymous+Custard · · Score: 5, Interesting

    1.2. Your rights to use the Digital Content are conditioned on your ownership of a license to use and possession of the original Compact Disc (CD) media and are terminated in the event you no longer own or possess the original CD media. (This apparently prohibits using copied tracks as backups in case the original disc is lost, stolen, or destroyed.)

    So if the CD fails to remain usable through normal wear and tear, does that put the publisher in breach of contract? They've effectively granted me a license that they are going to renege on should the physical media degrade.

    They've got to make up their minds! Is it a physical good, or a digital good? Did I buy a license and the CD was just a nice way for them to fulfill their promise that I'm licensed to use the content? Did I buy a plastic disc (for $15) which I'm free to do with as I please?

  13. Lets run the numbers shall we by aws4y · · Score: 4, Insightful

    A couple of dozen security and cryptography expersts vs thousands of talented hackers and ameture tinkerers. I am not nocking the guys who made this protection but they and there bosses have to understand that they are going to push this rock up a hill for all eternity. Maybe thats there goal: 1. create a DRM scheme 2. Sell it to RIAA dolts 3. DRM broken day it comes out???? 4. Profit

    --
    Did Glenn Beck rape and kill a girl in 1990? gb1990.com
  14. It will never work by HornyBastard · · Score: 4, Insightful

    The bastards will never learn.
    There will never be any copy protection scheme that will work.
    If you can listen to it, you can copy it by just connecting the output to the input for another device.

    Unless they make it so that nobody can listen to it, copy protection is an exersise in futility.

    --
    Death has been proven to be 99% fatal in lab rats.
  15. Oh for crying out loud by stratjakt · · Score: 5, Insightful

    It's not supposed to be uncrackable. I know it's crackable, you know it's crackable, they sure as hell know it's crackable. Just like any other protection mechanism on anything from a PC CDROM to the XBOX.

    What it's supposed to do is limit casual piracy. Make it tougher for the average slob to make a copy with the EZ-CD Copier that shipped with his Dell and give it to his buddies. That's it. Most folks would just give up if it didnt work the first time they tried, they aren't going to jump through any hoops, scribble on it with a sharpie, open up a hex editor, solder a mod-chip into their player, run a distributed cracking engine to decode it, whatever. It sure as hell has nothing to do with preventing some geek from leaking it on the 'net.

    That's a *large* chunk of the sales they actually lose. Bob Magoo who gets a copy from his buddy Turd Ferguson because he's too lazy or cheap to run down to Wal-Mart and get his own.

    So just friggin relax already, and dont be so proud of yourself that you figured out how to "hack" the technical equivalent of the safety pin that keeps a babies diaper in place.

    --
    I don't need no instructions to know how to rock!!!!
  16. Bundling Extras by floppy+ears · · Score: 4, Informative

    I believe anti-copy CD technologies will prove unfruitful, and will therefore eventually be abandoned by record companies. There firms may take a cue from the movie industry and increase the value of CDs by bundling interesting bonus features rather than restrictive copy-control software.

    An interesting New York Times article today about exactly this can be found here. The article even mentions a band that includes a PlayStation 2 game on a DVD with their CD. Which just goes to show that CD prices have absolutely no relationship with marginal costs.

    --

    "If I could live to be several hundred
    I could take a walk and really wander, really wonder."
  17. Re:Not aimed at the clueful... by Xzzy · · Score: 4, Insightful

    > "Hey...I guess we can't do this."

    then: "I wonder if I can download the song off kazaa"

    At which point he spends about 30 seconds searching for the song, which some more technologically clued in person has kindly made available.

    Users don't grok shift keys and drivers and EULA's. They do grok kazaa however.

  18. That's why i get my music from.... by zapp · · Score: 5, Informative

    MagnaTune

    I believe they were mentioned a little while ago, but they're the
    "We're a record company, but we're not evil" people.

    Seriously. Asside from a few artists I absolutely love, I have started getting my music fix from mp3.com and magnatune. If you're gonna listen to them though, please do help them out financially. It takes a lot of bandwidth to stream mp3s.

    --
    no comment
  19. Sad, yet refreshing. by serutan · · Score: 3, Funny

    More gasping and thrashing as the death throes of the recording industry continue... These inept attempts of the desperately greedy and self-important to maintain their obsolete roles are somewhere between amusing and pathetic.

    Too bad they aren't as endearing as the penniless former aristocrats who were more or less kept as pets by the wealthy after World War One swept away most of the European monarchies. Watch for them in any old B&W movie that features millionaires and mansions. There's always a Count or a Baron or a Duchess at the dinner table. In a few years, after the recording industry is gone, maybe every fashionable Silcon Valley party will include a Geffen or a Rosen.

  20. not necessarily by SHEENmaster · · Score: 3, Insightful

    I rip every disc I attain (none in the past two years for boycott reasons) to secure my fair use right to a backup.

    Even under the bullshit of the DMCA, one has the right to reverse engineer or bypass copy protection schemes to excersize his fair use rights.

    The exception of course, occurs when one is a minor in a foreign nation that has extradition agreements to the USA.

    --
    You can't judge a book by the way it wears its hair.
  21. you have just violated the dmca1111 by Anonymous Coward · · Score: 5, Funny

    you used capital letters, dmca violator1111, you are going to jail1111

  22. Linux is a DMCA violation? by ReelOddeeo · · Score: 4, Funny

    Does this mean that anything that is NOT Windows is a DMCA violation?

    --

    Those who would give up liberty in exchange for security and DRM should switch to Microsoft Palladium!
  23. Shot in the foot by Trurl's+Machine · · Score: 3, Funny

    Like many iPod users, I actually buy much more music than I did previously. New listening device creates new spaces for listening music and thus increases demand. However, I am not rich enough to buy EVERYTHING I want to listen - usually when I enter a store, 4-5 albums catch my interest, but I can afford to walk out only with 2-3 of them. Obviously, I avoid CD's with stickers like "this CD is copy protected". I know the protection is probably easy to bypass, but why should I bother? I just choose the 2-3 albums without the protection. And here's a weird thing - whenever I put back a "copy protected" CD on the store shelf (carrying in my basket the non-protected ones) echo brings me the sounds of a gunshot and a voice shouting "ouch! my foot!" somewhere in the distance.

  24. Aphex by Phil+Wilkins · · Score: 5, Funny

    Copies made while the driver is active will sound badly garbled, as in this 9-second clip [10].

    That's not garbled, that's the Aphex Twin mix!

  25. Re:For the iMac it's only 2 steps: by grolschie · · Score: 5, Funny

    Or under iMac:

    1). Insert CD into drive
    2). Take iMac into tech support, so they can "extract" the cd that is now jammed in your computer.

  26. Re:Proof: stronger version of DMCA is needed! by badasscat · · Score: 4, Insightful

    An Autorun will be effective against the vast majority of Windows and Mac users.

    This doesn't matter. Who cares if you lock out all those people that aren't technically savvy enough to really use their computers to begin with? These people probably couldn't figure out how to even get on Kazaa anyway.

    If you can't even lock out those who know well enough to use the shift key, or to simply disable auto-run to begin with (as the author rightly points out many people have already done), then there is absolutely no hope of keeping this music off of file-sharing networks, or out of black-market pirate CD rings. All this is doing is locking out people who don't need to be locked out, and keeping the music easily accessible to those who (in the record industry's eyes) do need to be locked out. It is therefore completely ineffective and arguably counterproductive.

    In fact, it's no better than the pen trick on the old schemes. I mean, if you didn't read Slashdot or CDfreaks or whatever, you'd have had no idea that that worked either. The average consumer probably still knows nothing of the pen trick. But the fact that people who generally do a lot of copying did find out about it made that copy protection method completely useless to the record labels. The whole point is to stop people from copying (and sharing), not to punish those who just want to listen to their CD's (much as it seems otherwise so much of the time).

    About the only good thing I could see coming out of this (for the record industry) is a conditioning among average consumers to begin to accept DRM. Over a long period of time, that may change prevailing attitudes among the public. But it won't stop people from copying that want to copy and know anything at all about PC's, which has to be the end goal of all this in the minds of the RIAA and their cohorts.