Slashdot Mirror


iTunes 4.5 Authentication Cracked

fooishbar writes "Yesterday, Apple released iTunes 4.5, which deliberately broke the 4.2 authentication scheme, which had been successfully reverse-engineered. However, crazney has been at it again, and within 24 hours of downloading iTunes 4.5, has broken the new scheme, and added more features to this library along the way. If you want to incorporate iTMS support in your program, give libopendaap a go!" Reader ScottGant submits this story about the Pepsi/iTunes promotion: "News.com has this story about Pepsi's iTunes promotion give-away. The promotion, which is slated to end this Friday, was to have given away 100 million tracks through Apple's iTunes music site. But according to Apple on Wednesday, only about 5 million free songs have been redeemed."

19 of 725 comments (clear)

  1. On Pepsi's iTunes Contest by Dark+Paladin · · Score: 3, Informative

    I'm hardly surprised by the results. Personally, I don't drink Pepsi usually (though it's not a religious thing, no matter what people think). But I'll drink a Sierra Mist, which is included in the contest.

    So when My Lovely Wife (MLF) would go to the store, she knew to look for Sierra Mist with the label. For about the last 5 months she's looked, and every so often I'd take a peek.

    Nothing. Nada. I've talked to other people in the San Diego/Southern California area. Nothing. I was on a business trip to Chicago - didn't see any out there (though maybe someone who lives there might have had more luck).

    I don't know if it's that Pepsi had a lot of "warehouse" Pepsi to sell that just never got to the market, or if they only shipped it to certain areas. But whatever the reason, I have not seen one iTunes Pepsi cap - and those friends I have who have seen them in their area mention that it's not 1/3 that one, but typically more like 1/10 (though perhaps they were victims of the "Bottle Tilt Trick" in their area from ambitious music buyers).

    I'd like to hear that Pepsi extends the contest for another 6 months in the hopes that the labeled bottles will eventually reach stores, but I'm not holding my breath.

  2. Only 5 million songs is no surprise by profet · · Score: 4, Informative

    I live in NYC and have seen exactly 1 bodega with iTMS Pepsi bottles.

    Maybe someone forgot to ship these things to places where people actually would use them?

  3. Re:Why do "free" songs require credit card numbers by YrWrstNtmr · · Score: 5, Informative

    That's because for a "free" song you had to give them your credit card number.

    No, you didn't. I got two free, no credit card required.

  4. Re:Only five million? by Anonymous Coward · · Score: 3, Informative

    This week, there is a different free single each day. From then on, there will be one free single each week.

  5. Re:Why do "free" songs require credit card numbers by DiscoOnTheSide · · Score: 5, Informative

    I dunno what iTunes *YOU* were using, but I never had to give my credit card # and I'm on free song #9 and counting...

    --
    Viva La Revolucion! Buy a Mac!
  6. Re:This is annoying. by wanerious · · Score: 4, Informative

    You did not purchase the song. Read the agreement. You purchase the right to listen to the song subject to the conditions outlined in the agreement. If the agreement is not to your liking, do not purchase the song.

  7. Right-- fairplay still works. by Anonymous Coward · · Score: 4, Informative

    This is about authentication with the itunes music store, not removing the playfair drm protection.

    Fairplay still works without any changes. A "friend" did the following last night:

    1. Using an old version of itunes on a pc, purchased a new song from the music store.

    2. Launched VLC on the PC, and found it had no problem playing it. Checked c:\documents and settings\[username]\application data\drms and there was a new file: XXXXXXXX.005, in addition to the other two files that were already there. They had extensions .002 and .004

    3. Upgraded itunes on the PC to 4.5. Bought another song. It shows fairplay v2 when you look at it's info.

    4. VLC can also play this one. No new file in the drms directory was created.

    5. Copied both songs.m4p and the key files from drms to the mac running the latest itunes. Put the keys in ~/.drms

    6. Ran playfair (v 0.5.0) against the two songs. They decoded into .m4a files which show no protection, and play fine in VLC, and itunes.

    7. Just to double check, bought a third song using itunes on the mac. Ran playfair against it (still using the keys from the PC) and it decoded and plays fine.

    My conclusion is that as long as you have the keys, you can still use playfair. My friend gets the keys from the PC running VLC. I don't know if other techniques may have been broken by the new itunes.

    I don't have any problem with the ethics of removing the protection. I don't-- I mean, *wouldn't* use it to illegally share the music. It's just nice to have clean files in case Apple quits developing itunes for the PC, or some other unlikely scenario.

  8. Free iTune download by G27+Radio · · Score: 3, Informative

    I found a link to this on Ben&Jerry's site after reading the news.com article. Pledge to vote in the next election and you get a free iTunes download with 24-48 hours.

    Get 'em while they're hot--er, or before they melt?

  9. Re:Why do "free" songs require credit card numbers by crackshoe · · Score: 4, Informative

    Except you didn't have to give them a credit card to get the songs. I didn't have to put in any credit card informtaion until i actually bought a track -- after i had downloaded 18 free iTunes songs. So yes, they were actually free. You only needed to give them an email addy to create the account (or at least I did, but i used the account i'd had with apple for 2 years, so they already had my email).

    --
    Don't worry - its just stigmata. Pass me a napkin and don't you dare tell my mother.
  10. Look at this link by Anonymous Coward · · Score: 3, Informative
  11. Upgrade the other machines! by RatBastard · · Score: 4, Informative

    What the planet of Hell do you need a workaround for? Just upgrade the other machines! iTunes is *DUM, DUM, DUMDUM* FREE (as in beer)! Is it really so hard to upgrade a free program?

    --
    Boobies never hurt anyone. - Sherry Glaser.
  12. Re:No they didn't by flying_monkies · · Score: 3, Informative

    The reason you didn't hear anyone winning at McDonalds had more to do with fraud

    --
    I disagree with what you say, but I'll defend your right to say it to the death - Voltaire
  13. Re:5million, because they want a credit card. by shawnce · · Score: 4, Informative

    You do not need to provide a credit card.

    They ask for it if you want set up the ability to purchase music at the time you open the account but you do NOT have to provide it to redeem a free song.

  14. Re:Good? by IamTheRealMike · · Score: 4, Informative
    No, but most people on Slashdot don't know what they're talking about (including you it seems).

    Crazney has broken the pointless encryption on streaming things in the iTunes library to other machines on a LAN.

    It has nothing to do with iTMS. Repeat after me: it has nothing to do with iTMS.

    The encryption on streaming tunes between clients only serves two purposes: to try and keep people on the Apple upgrade treadmill and to force people to use iTunes on all their machines if they want to stream music between them from the iTunes library. This is your own music we're talking about here, no copyright violations are taking place.

    To be frank, Apple is taking the piss with this sort of encryption, and now the piss is being taken out of them. Too bad, but it has nothing to do with FairPlay.

  15. Re:Only five million? by Golias · · Score: 4, Informative
    No it's not.

    Fat consumption has nothing whatsoever to do with diabetes. You could eat bacon 3 meals a day and not have high glucose levels. (Your blood pressure and cholesterol levels might not be so terrific...)

    Type 2 diabetes is one of two things: 1. You are not producing insulin fast enough to process large amounts of glucose in the blood.
    Or 2. Your body is not absorbing the insulin fast enough to do so.

    In either case, when you eat foods that are quickly turned to sugar in the blood (any foods which are high in starch or sugar, including white bread and potato products, and especially sugary foods like Pepsi) your blood's glucose level goes way up, because your body can't process it. This causes all kinds of problems. Fatty foods do neccesarilly raise your blood sugar levels. You may be confused because obesity (fat tissue, not fat consumption) slows insulin absorbtion, and is a contribuiting factor to Type 2 diabetes.

    --

    Information wants to be anthropomorphized.

  16. Just legally download free music by pherris · · Score: 3, Informative

    Places like etree have long lists of bands (over 1k listed on etree) that are cool with trading (mostly live shows). There's some great legally free music downloads out there, start checking them out.

    --
    "And a voice was screaming: 'Holy Jesus! What are these goddamn animals?'" - HST
  17. Re:Only five million? by Eraser_ · · Score: 3, Informative

    I was activly searching my town (east la county), neighboring ones (san bernadino county) and even a few stores in Santa Barbara california. It took about 3-4 weeks before the damn LAKERS caps went away so I could buy iTunes caps. Won about 6 or 7 songs in 10 bottles.

    Distribution sucked majorly.

  18. Re:Why do "free" songs require credit card numbers by afish40 · · Score: 3, Informative

    A lot of people seem to be up in arms over this, so let me clear it up somewhat: when the Pepsi promo was started, there was an option in the account settings to choose "none" for your credit card. However, in the last week, that option was disabled, and new accounts now require a valid credit card to be entered in order to be created. So both sides of the argument are correct.

    An interesting side note: my account had the "none" option selected, so even though that's no longer an option, my account has been unaffected! Meaning, unless Apple figures it out, I can keep my account open without entering any credit card information. I intend to do all my future purchases via iTunes Gift Certificates. ^_^

    --
    Thanks a million. Push Start to replay.
  19. Re:Distributors are the limitation by flamingnight · · Score: 3, Informative

    >I guess the bottle availablity has more to do with your local distributor than Pepsi.

    Exactly. The marketing agency I work for currently has Pepsi as a client. One of the biggest hassles in getting promotions going is dealing with the bottlers and distributors. If the bottlers still have items in stock waiting to be sent out, then it's even tougher to get the new bottles out.