Slashdot Mirror
DRM Tinkering with Intel's PXA270?
putko asks: "Intel has a new line of chips with DRM built in. This appears to be the very first DRM-enabled chip to hit the streets. This microprocessor is unlike others available, because the user doesn't have complete control over the thing, and your computer can (theoretically) betray you.
For a while now, there have been computers (IBM ThinkPad) that won't boot unless you give the password, but you could always rip out the hard drive and read it, right? With this chip, the keys and RAM are on the chip, and the flash is encrypted, so this really looks locked up tight.
Has anyone worked with this chip, and is possible to build your own device that uses the Intel Trusted Wireless Platform to protect your secrets (like your software, perhaps)?"
"I'm reminded of this due to Slashdot's recent story on the iPAQ, which uses the chip (and has some neat security features too). Somewhat surprisingly, nobody brought up the Doomsday scenarios, there. It should also be mentioned that there are companies selling incredibly tiny boards for it. Maybe you can run Linux on them?
Wouldn't it suck if the chip had the capabilities and you couldn't use them in your own projects -- e.g. if that was just reserved to big companies like Microsoft? On the other hand, if you can use the features, you might see some neat applications. Assuming you can program the DRM stuff, how do you avoid locking yourself out of the chip while developing? What extra pitfalls may developers run into using it?"
Wouldn't it suck if the chip had the capabilities and you couldn't use them in your own projects -- e.g. if that was just reserved to big companies like Microsoft? On the other hand, if you can use the features, you might see some neat applications. Assuming you can program the DRM stuff, how do you avoid locking yourself out of the chip while developing? What extra pitfalls may developers run into using it?"
I have been writing/ranting on this topic for quite sometime on Slashdot (see here, here, and here). My worst predictions are coming true. In order for DRM to work it needs to be embedded in the OS, the BIOS, and various pieces of hardware.
Yeah, there is a possibility that non-DRM'd pieces of hardware (including LinuxBIOS) will have a market but the vast majority of people want stuff to work and work w/o problems. Microsoft, Intel, Phoenix, etc, will all tell everyone that they will end viruses, worms, trojans, spyware, etc if they just use their hardware solutions.
Yeah, well, that's great and all but you won't be doing anything on the net unless you are running trusted hardware. People's arguments that an "alternative" network will show up to solve that is bullshit. Just wait till your online banking, your taxes, and your foo are all on the "secure" Internet.
Nevermind that, but it may become illegal (through creative lobby) to own and operate an unlicensed/unprotected piece of hardware. Enjoy finding an ISP that will let you connect.
While this particular CPU might only find a niche market and may very well flop completely, I have a feeling that we will start seeing more and more of this sort of product coming out of the hardware giants. Who knows, maybe my paranoia will be justified?
Joe Blow: Open warez site please
PXA270: I am sorry Joe, but I am afraid I can't do that...
ELOI, ELOI, LAMA SABACHTHANI!?
... because this is nothing new.
First of all, this is an *EMBEDDED* processor, not an x86-class CPU. It may be used in PDAs and the like, but it is not going to be running your desktop anytime soon.
Secondly, embedded devices with encrypted onboard flash are nothing new - they've been around for years.
www.eFax.com are spammers
Yeah, I had all of that info you're looking for... but I forgot the password on that system ;)
Real programmers use "copy con program.exe"
More to the point.. how do you hack this good for nothing piece of shit?
This comment does not represent the views or opinions of the user.
Can anyone say 'Clipper Chip'?
Remember what happened to that brilliant idea? This is it in a new guise, this time reborn to lock-in traditional media.
Never fear, either too many objections will be raised to make it viable in the marketplace, or some smart person will figure out how it tics...
Lodragan Draoidh
The more you explain it, the more I don't understand it. - Mark Twain
Trusted Boot ROM - will ensure that the OS being booted is the one that the manufacturer installed. No more installing NetBSD on your pocketsized wireless gizmo.
Media DRM - files can be created to work only with the OS, ROM and disk in the unit, and only for a specifed length of time.
The features seem to be directed at wireless carriers and content providers, to prevent unauthorized use of their networks and content. So, if you don't like it, use other vendors.
We should be wary of *any* move towards turning computers from our servants into our prison guards.
I wouldn't get too worked up, it's just another exercise in futility from the DRM people. You think they'd have learned by now that any programmable computer is inherently hackable. Any DRM can be removed or forged, the system would have no way to tell the difference between my home movies and a pirated copy of Pirates of Silicon Valley. Just as an example, what is to stop me from running an emulator or virtual machine, and then playing my DRM free media on such a system? How would it know it was running untrusted code if all it saw was javaw.exe?
"For a while now, there have been computers (IBM ThinkPad) that won't boot unless you give the password, but you could always rip out the hard drive and read it, right?"
If the password for the hard drive is set, you won't be able to move the drive to another system or it will look like the drive is dead. If you do know the master password and try it in another system, I believe it will wipe out the drive, it's pretty secure, and the main reason I use ThinkPads.
Microsoft requires all PC sold with Windows XYZ to use a Trusted Boot ROM. The Trusted Boot ROM verifies the Windows license is valid before booting. Whoops, you mean your PC won't boot Linux because it doesn't have a valid Windows license. What a unforseen side effect!
I was amused to see that in a recent interview with Richard M. Stallman he referred to DRM as Digital RESTRICTIONS Management.
Although I'm not a big fan of spin, the current political climate makes renaming things with misleading names a necessity. When you say "Digital RESTRICTIONS Management", it makes it fairly clear that it's a technology aimed at limiting personal liberties.
P.S. Yes, I know this is a repost, but...
Signatures are a waste of bandwi (buffering...)
The company I work for has been working on a PXA270 board for a while now. I seriously doubt this chip will flop, since it's a MUCH NEEDED speed boost to Intel's ARM CPU line for embedded/handheld devices.
:)
Besides that, it's a great chip! 600+ MHz, low power like their previous PXA CPUs and plenty of features.
This DRM feature is just another optional feature for designers to use. Right now, I don't see any real reason most designers would use such a feature set. They have no incentive to just lock-down a system willy-nilly. It won't generate any new sales.
And yes, we are running Linux on this chip.
I'm a developer for these chips, and I have to say, this is much ado about nothing.
This has been said before - the primary goal is to get the board part count down.
The primary goal is to get the board part count down.
Let me reiterate once more: The primary goal is to get the board part count down.
With this chip, the only thing that it means is that you don't need o include a flash chip on the board.
The system will still be reflashable through a JTAG interface - just as any other device with flash connected to a CPU would be. In that respect, this machine is no more holding us "hostage" than any other previously released iPAQ or Zaurus.
I thereby declare you, sir, to be talking out of your ass.
Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore
This is not correct if your OS supports confinement. It's a bad sign when the first item in the list is wrong.
How about leaving out the DRM circutry? That sounds like a pretty effective and easy way to get the part count down.