Slashdot Mirror


Napster Has Been Cracked

Sabathius writes "Users have found a way to skirt copy protection on Napster Inc's portable music subscription service just days after its high-profile launch, potentially letting them make CDs with hundreds of thousands of songs for free...""

46 of 616 comments (clear)

  1. Aw Crap by Sentry21 · · Score: 5, Informative

    The jig is up. I was hoping I'd finish my 14-day trial before anyone found out about this. Oh well, I got 8 gigs already, and I can get more today.

    I use a program called tunebite that plays the files back and records them to MP3, as well as copying over album/artist metadata from the tags.

    Hopefully I can get everything copied before they fix it (if they ever can fix it).

  2. Who thought, it would take Slashdot this long? by mi · · Score: 3, Informative
    to post the story?

    "Growsing about rejected submissions" my behind -- I submitted a better worded snap with more informative links two days ago...

    WinAmp has pulled the plug-in in question from their site, it seems...

    --
    In Soviet Washington the swamp drains you.
    1. Re:Who thought, it would take Slashdot this long? by pla · · Score: 2, Informative

      You can Get it here, about ten lines down, the "Output Stacker".

      Oddly, this doesn't seem to have appeared on thousands of mirrors across the web yet, so please, take pity on Marv and, if you can, mirror it and post a link here.

  3. Re:Whatever by rsidd · · Score: 5, Informative

    On linux, so long as you're playing via /dev/dsp you can always grab the digital signal, for example via vsound. I wouldn't be surprised if that's possible with MacOS X too, or even Windows.

  4. Re:Old News by jxyama · · Score: 5, Informative
    >All that is happening is that people are grabbing the actual output of the song, and dropping it into a wav file. This will ALWAYS happen with any kind of copy protection. If you let users actually hear (music) or see (movies/tv) the content, there will always be a way to get it. At the absolute worst, people can just set up a tape recorder and grab it from that.

    you are absolutely right, however, the difference here is, napster is a subscription model. (with a free trial to boot.) so the circumvention of the DRM means you get as many songs as you want for little or no money. music download sites, like iTMS or MSN, you have to pay first, then crack it all you want... so media/content companies aren't quite "losing" there to the same degree...

  5. Re:Whatever by mirko · · Score: 5, Informative
    --
    Trolling using another account since 2005.
  6. I wouldn't say cracked by Daath · · Score: 4, Informative

    It's not actually been cracked - They can't make real digital 1:1 copies of the songs - What they do is record from the sound card. That's not so bad if you just want to burn them to CD, but if you want to re-encode from WAV to Ogg or MP3, the quality will deteriorate further...
    You can do this will *all* DRM media, nothing new here - It's only because it's Napster (woohoooo) that people think it's revolutionary. It isn't.

    --
    Any technology distinguishable from magic, is insufficiently advanced.
  7. Re:If you don't have time to RTFA... by harlows_monkeys · · Score: 4, Informative
    Until recently, music subscription services have been somewhat restricted in their ability to transfer songs they provide to portable players, while Apple has sold millions of portable iPods by allowing users to buy songs from iTunes and store them on iPods

    Divide the number of songs sold on iTunes by the number of iPods sold, and it works out to only something like 5 or 10 albums per iPod. Unless people are buying much much bigger players than they need for some reason, it looks like people are mostly putting things other than iTMS music on their iPods.

  8. Re:Whatever by Sentry21 · · Score: 2, Informative

    Actually, it captures it from the sound card (in Windows, you can record sound card output), so at that point, it's still digital.

    Good quality too.

  9. Re:Old News by R.Caley · · Score: 2, Informative
    I think that from a legal standpoint it is slightly harder to abuse analog copying, since you inherently lose quality, bolstering your fair-use defense.

    Unless you want to keep uncompressed audio, you will lose quality using this hack.

    You should look up fair use, it is much more restrictive than you seem to think it is.

    --
    _O_
    .|<
    The named which can be named is not the true named
  10. Not cracked by Mr_Silver · · Score: 5, Informative
    The DRM wasn't cracked, simply the output of the file was redirected back into a WAV (or MP3) without any DRM - akin to doing a tape to tape copy.

    Napster have already responded on their site (link in top right) and basically said the same thing. They also rightly pointed out (i think, as i've not tried) that this would be a 1:1 copy, so a 60 minute album would take you the same amount of time to copy - which isn't going to be much fun to do lots of.

    Apparantly rumour has it that Steve Jobs contacted music executives, pointing them to the site and the Napster CEO countered by pointing out several sites which showed you how to do the same with iTunes files. I'm not sure how true this is.

    Interestingly enough, the Winamp plugin required to do this - Output Stacker - was pulled from the winamp site. Which I find a little odd, since there are perfectly legal uses for the plugin - so I don't understand why they're playing censorer (to be safe?)

    If anyone knows where to get it from, it would be appreciated since Googles cache shows no homepage and a Google search of the author gives only a set of links to a non-working winamp.com URL.

    --
    Avantslash - View Slashdot cleanly on your mobile phone.
    1. Re:Not cracked by Sentry21 · · Score: 2, Informative

      Try Virtuosa or Tunebite (which is what I use).

  11. Re:Are we not just talking about the analog hole by natemc · · Score: 4, Informative

    get the LAME output plug in, it will create and tag an mp3 for you

  12. Re:Old News by cccc828 · · Score: 2, Informative

    > Regardless, the point is that it is STILL ILLEGAL to abuse.

    Where? Here in Austria it is perfectly legal to make a copy of any CD/DVD for private use. It is even legal to use Filesharing networks for _downloading_ music.

    So, no it is not illegal to make a copy of DRM polluted files.

  13. Steve is such a nice guy... by magicRob · · Score: 1, Informative

    That he dropped the RIAA an email.

    At least with iTunes once you've bought a track, you've paid for it. Who really cares what you do with it after. Everyone is getting their slice of the action.

    The subscription model, once "cracked" means you can download as much as you want, remove the DRM and then download some more. All for $15/month (or whatever they're charging). The RIAA misses out on their cut... no doubt making their blood boil

    --
    Join the Digital TV discussion @ http://forums.dvbowners.com
  14. Napter CTO responds by graiz · · Score: 5, Informative

    A response from the Napster CTO taken from the homepage of Napster.com:
    ----

    It has come to our attention that there are a number of inaccurate statements posted by various sources on the Internet regarding the security of Napster and Napster To Go. As Napster's CTO, I would like to officially state that neither Napster To Go, Napster, nor Windows Media DRM have been hacked. In the interest of providing the most accurate information to consumers, the following is some background on the subject.

    There is a program that allows a user to record the playback of tracks directly from the computer's sound card. This process can be likened to the way people used to record songs from the radio onto cassette tapes, but instead of capturing the music on a tape, the file is converted into a new, unprotected digital format. This program does not break the encryption of the files, which can only be recorded one at a time making the process quite laborious. It would take 10 hours to convert 10 hours of music in this manner. It is important to note that this program is not specific to Napster; files from all legal subscription and pay-per-download services can be copied in this way.

    We hope that the information provided above clarifies the matter and puts questions regarding the security of Napster and Napster To Go to rest. Napster's mission is to provide consumers with a legal environment in which they can experience and discover the world's largest collection of digital music. We believe that artists should be compensated for their work and intellectual property rights should be respected. While we acknowledge there are always going to be those who do not share our belief, we remain committed to providing the most enjoyable and flexible digital music experience for those who do.

    1. Re:Napter CTO responds by Anonymous Coward · · Score: 1, Informative

      He says it would take ten hours to convert ten hours of music. Instead he should note that it would take one person ten hours to convert ten hours of music, and it would take ten people ten hours to convert 100 hours of music, and it would take 100 people ten hours to convert 1000 hours of music etc.

      Once it is converted, there is no need for another person to repeat that conversion.

  15. Output Stacker plugin URL by buro9 · · Score: 4, Informative

    Output Stacker plugin has been pulled from the WinAmp site, but you can still get it in their forums.

    The details on the plugin are cached here, this is the PULLED page:
    http://64.233.183.104/search?q=cache:zsalMv FLX6QJ: www.winamp.com/plugins/details.php%3Fid%3D86033+wi namp+output+stacker+plugin&hl=en&client=firefox-a

    This thread lists where it can be found NOW:
    http://forums.winamp.com/showthread.php?thre adid=3 5627

    And this contains the plugin:
    http://forums.winamp.com/attachment.php?p ostid=159 3266

    Google is a wonderful thing when companies wish to backtrack like that.

    The plugin has tons of geniune uses... pulling it, well yeah I understand AOL/Time Warner's motives... but they're kinda dumb.

  16. Re:And Apple... by Hitchcock_Blonde · · Score: 1, Informative

    But with PlayFair, the song still has to be purchased for the full 99 cents. I don't think the ability to download (and keep) thousands of songs for a mere $14.95 is what Crapster had in mind with this service.

    --
    Karma Schmarma
  17. Re:Whatever by UnRDJ · · Score: 4, Informative

    Many sound card drives (Echo Mia, Egosys Waveterminal, Emu series, to name a few) allow internal rerouting of a digital signal to and from various virtual ins and outs. Simply playback anything through the mme driver, route that to an asio or WDM input, record, and voila. But really people, just buy the music. I know I'm going out on a limb here, but look at a service like Rhapsody. $10 a month for as much 44.1/16 music on your computer as you want. Albeit the bitrate isn't that great (im guessing 128), if you're really using kazaa for virtuous reasons such as "discovering music that you can't find in the record store because the RIAA shoves pop down your throat," then you'll buy a cd when you find something you really like. Rhapsody has a huge library of songs, stuff you would never see on mtv. It has a 30 day free trial, see for yourself. No I'm not a Rhapsody employee =), I just honestly enjoy the service.

  18. Re:Man... by BasilBrush · · Score: 5, Informative
    Not any more. Transcode direct to MP3, no WAV step.

    And do them in parallel to beat the real time limitation.

  19. Re:Whatever by Reverant · · Score: 5, Informative
    I wouldn't be surprised if that's possible with MacOS X too, or even Windows.
    It is possible. It always has been possible. All Sound Blaster cards (after the first Live! series) have a virtual input mixer called "WhatUHear". Selecting it as an input, you can record whatever goes to the card's DAC, without actually going through the DAC->ADC process. The quality is excellent. I've been using this method to capture some nice soundtracks from several games that didn't offer the music as wave or mp3.
  20. Re:Whatever by Anonymous Coward · · Score: 5, Informative

    Actually, their drivers do contain something similar.

    For instance, I'm in the pro audio industry and folks have always claimed that a soundblasters S/N and other specs are right up there with the big boys. Of course they are -- their team is comprised of greats from around the industry including their aquisition of Ensoniq a few years back.

    What they don't tell you is that the digital outs and otherwise are disabled in the drivers. The claim is that you get 24bit in / out -- but the reality is that even if you are doing a pure pass through, that 24 bit randomly drops bits down to a signal of as low as 14.

    The strange this is this doesn't happen with the free drivers that were available for Linux nor the Mac solutions. And then someone backported one of the Ensoniq proaudio card drivers after realizing the chipset was identical and was able to bring this back to the PC by doing a little hex editing...and the audio in phenomenal (although the driver is still a bit buggy and I wouldn't recommend it for anyone that needed a serious project undertaken).

    But yeah, if Creative needed to make the industry happy, they'd throw in Macrovision in a heartbeat. Sad that your post is rated funny...

    Note: This was true several years back...I don't deal with audio interfaces as I once did, so it may not be true any longer.

    Also now, this is Off Topic, please rate it accordingly. I'm an AC and don't give a rats ass.

  21. Re:And Apple... by eboot · · Score: 4, Informative

    The difference is Napster offer 14 day trial, meaning that you an download as much as possible and rencode at the same time, meaning you can download, with a reasonable amount of effort, a thousand free songs. In iTunes you can burn 'perfect' recordings of downloaded songs without any audio 'trickery' but you still have to pay for them! So Jobs can call them out on this, but he still shouldnt. Nobody likes a snitch!

    --
    Two tears in a bucket. Motherfuck it.
  22. Google digging gave a link... by Gopal.V · · Score: 2, Informative
    I still found the output stacker on Winamp.com [yeah, slashdot it out of existence].

    I don't listen to pop music (only Enigma, Eminem and a few others) - and I don't have the bandwidth to pull it off Napster. But how hard it is to really hook up something like Mp3 Recoder and do this with WMplayer (I record webcasts from clients).

    Google is a REALLY dangerous tool against censorship. But that all said, you can't just supress information - Information wants to be free.
  23. Re:Old News by Anonymous Coward · · Score: 1, Informative

    I dunno, it depends on your definition of HUGE. By my rough calculations, 1 hour of 720x480 24fps video is ~30gigs. so a full legnth movie uncompressed will be around 75-90gigs or so.

    It gets a bit more unwieldly when talking about HD video. 1 hour of uncompressed 1080i (or p I guess), would be ~180 gigs at 24fps. Its still not undoable with 300 and 400 gig drives available.

  24. Re:It's a matter of time by DGregory · · Score: 1, Informative

    Except with Napster if you quit paying the $15/mo you don't get to listen to the songs you've downloaded anymore.

  25. Its not a crime by adeydas · · Score: 3, Informative

    Well according to Napster, this is not a crime. Quotting from the article: "The DRM (digital rights management) is intact. Basically, people are just recording off a sound card. This is nothing new and people could do this with any legitimate service if they want to use a sound card".

  26. Re:Man... by JAgostoni · · Score: 5, Informative

    And you are STILL losing quality even if it was just transcoding like that.

  27. New key developments by flowerp · · Score: 4, Informative
    New key developments:

    -If you use the "Out-lame" Winamp plugin in the Output Stacker in place of "Out-disk", you can convert straight to MP3. It still encodes no faster than realtime, but this is a great way to conserve space. WAV(Out-disk) is still recommended if you are burning CDs and want to keep as much quality as possible. I can confirm that this all works.

    -You can run multiple instances of Winamp at once, each converting its own song. Each instance's playback will not interfere with any of the others, illustrating the fact that this is not simply recording the music off of your soundcard. Doing this, you can get FAR MORE than 252 full 80 minute CDs within 14 days. I can confirm that this works.

    You can transcode(MP3) or decode(WAV) X albums in the time it takes for the longest track on the album to elapse. And since you're not limited to only tracks from one album at a time, you can trans/decode as many tracks as instances of Winamp your computer will run limited only by your computer's resources.

    Quote from Napster's official statement: "It would take 10 hours to convert 10 hours of music in this manner."

    With the updated methods, you can convert 100 hours or 1,000 hours or 10,000 hours of music in 10 hours. The only limit is your computing resources.

    --
    --- Eat my sig.
    1. Re:New key developments by DA-MAN · · Score: 4, Informative

      How do you run multiple WinAmp instances? I tried and it just jumps to the current instance.

      CTRL-P and go to "General Preferences". Once there, click on "Allow multiple instances" and voila.

      --
      Can I get an eye poke?
      Dog House Forum
  28. Re:Really lossy? by Big+Mark · · Score: 1, Informative

    There's a way to transcode that keeps the same end waveform (well, almost) but just changes the file format - once you've extracted the frequency components for a particular frame in the original file you make sure those exact same components go into the respective frame in the output file.

    Depending on the way the format stores the components the output file could have a significantly different size, and some artifacting is unavoidable if the formats are radically different (e.g. mp3 uses ints whereas oggs use floats, casting betwen the two datatypes usually results in some fudging, not to mention the different transformation algorithms they use to convert the waveform into frequency components).

    However, it's still possible to transcode from one format to another with no loss of quality, at the possible expense of huge files.

  29. Expected by nurb432 · · Score: 2, Informative

    Any high profile DRM will be attacked on sight.

    Its just the way of the world now.

    --
    ---- Booth was a patriot ----
  30. Re:Man... by thecombatwombat · · Score: 1, Informative

    There doesn't always have to be. With DeDRMs/hymn there's not. You could possibly just go from protected wmv to regular wmv without any steps in between.

  31. Re:Whatever by Filmwatcher888 · · Score: 5, Informative
    There is a virtual sound card program for windows. It is called VAC, the Virtual Audio Cable. It works really well, and is relatively cheap.

    The only Virtual CD Burner software I've seen is called Original CD Emulator. It creates a fake CD Burner in the same way DaemonTools creats a fake CD drive.

    If anyone knows any other software that can do the same things as these too, please post them here too.

  32. Output Stacker Download by slewfo0t · · Score: 2, Informative

    Since I know that the Output Stacker won't be available for long... I have posted it on our website. It is available here for download... http://forums.grtg.org/index.php?showtopic=214 - Slew -

  33. Re:Man... by Anonymous Coward · · Score: 4, Informative

    Wrong.

    Original recording -> MP3: loss
    MP3 -> WAV: no additional loss
    WAV -> MP3: more loss

    Each time you convert to a lossy format, there is more going on that "throwing away the parts of the music you can't hear", which is often the quick, oversimplified explanation of lossy compression. There's added noise due to compression as well, and that noise will be, at least to some extent, cumulative with additional generation of compression.

    Even if the psychoacoustic models used were perfect (which they aren't, especially at low bit rates), at the very least there would be generational loss from calculation round-off errors when converting from MP3 to WAV and back again.

  34. This Rumour Confirmed UNTRUE by Anonymous Coward · · Score: 3, Informative

    I have spoke to a friend within apple who has told me they are aware of this rumour, it is NOT true, and it is apparently being spread by people like gmajor(look at his several replies acting as if the "email" is a fact) as some sort of FUD campaign (maybe gmajor does the astro???). I have to admit though, he had me at first...we all know between running sucessful companies and coming up with innovative products steve is busy RABIDLY FOLLOWING BLOGS!!! UZ PWNED!

  35. Re:Man... by Khazunga · · Score: 3, Informative
    If you keep transcoding your file over and over again you are not losing imperceptible data.
    You might not lose any data at all. It depends on the transcoding. Say you grab a perfect, audible-band-complete FLAC and keep only mid-tones [50Hz-15KHz], then enconde it in the frequency domain. Let's call this new format CRAP.

    CRAP saves space by throwing away data, losing quality. However, you only lose quality the first time around. You can transcode between FLAC and CRAP as many times as you want, and there is no subsequent data or quality loss.

    The problem arises when different formats/encoders throw away different parts of the spectrum. Then, the end result is a file that contains only the frequencies nobody threw away along the transcoding pipeline.

    In the end, I mean to say a transcoder in and by itself won't cause loss of data. You can convert to wav and back to a compressed format with no data loss, if you know what you're doing.

    --
    If at first you don't succeed, skydiving is not for you
  36. Re:Man... by BoldAC · · Score: 5, Informative

    hah!

    Actually, the DRM can be bypassed by having winamp send the audio straight to a raw WAVE file. Winamp stopped this previously by preventing DRM files from using a direct write-to-wav plug-in. However, this hack uses an additional plug-in to bypass this.

    The sad thing is that the Output Stacker has been pulled from the winamp website.

    Users have been posting links to sites that still contain Output Stacker in the forums.

    This recipe contains the step-by-step directions for the hack and active links to the plug-ins.

  37. Not true, no necessary quality loss by Anonymous Coward · · Score: 0, Informative

    Actually, if you just know the parameters of the first compression, then decompressing and compressing again with the same parameters and compression algorithm results in the same compressed binary. First you have a sampled wav, compressing that one and decompressing will result in another (distorted) wav. This distored wav will be the "perfect" fourier series match in compressing it again with the same parameters.

    So if the algorithm is known, this all ends up with one thing - what is needed, is a tool for figuring out the initial parameters (by trying the first couple of sampled frames for instance), and then using them on the entire file. Then you'll go through wav but not lose any quality whatsoever.

  38. Only true for lossless codecs by NickSD · · Score: 5, Informative

    This is only true for lossless codecs. This won't work for any lossy codec. You can't go from MP3->WAV->MP3 for example without quality loss. Same with WMA, AAC, and pretty much all the popular lossy codecs. For more information, see this discussion on HydrogenAudio.

    1. Re:Only true for lossless codecs by Anonymous Coward · · Score: 1, Informative

      You're actually going: WAV -> WMA -> WAV -> WMA.

      In the first WAV -> WMA conversion, you introduce quantization errors. More are introduced in the second step. The lower the bitrate, the bigger the problem

      If WMA was a simple bandpass filter, you could convert between it and WAV as much as you like. It's not.

  39. Re:One more time... by Otto · · Score: 2, Informative

    I recommend any beginners book in crypto - most of what you wrote above is utter nonsense.

    To be fair, so is most of what you wrote.

    The point here is that you're talking about two or three different things simulataneously. The XBox, for example, doesn't have DRM. It has various protections, I grant you, but calling these DRM is a bit outside the usual scope of the term.

    Getting back to the original post you made:
    Please tell me the private key used for signing Xbox games. I'm well aware that we (my wording here is intentional, and a giveaway) managed to circumvent it anyway, but all things are most definitely NOT hackable.

    Why would you need their private key? The answer is that you need the private key in order to create a game to play on a stock, unmodified, XBox. Realistically, this capability has very little to do with the hackability of the XBox itself. You can hack the XBox up down and sideways without the private key, you just can't create a game to play on a non-hacked XBox without it.

    You're free to reflash your cellphone, but will you be able to extract the DRM-protected content on your memorystick?

    One way or another, yes, you will. If you can read the memorystick, then you can try attacking the encryption directly. If the memory stick doesn't actually contain the decryption key (say it's in the phone), then you can disassemble the phone, hook it up to a chip reader, and find/extract the decryption key. Don't care for that? Then rewire the phone's audio headphone output to go to a computer's line input and analog record the thing. Easily enough done.

    Whatever, the point is that somehow, someway, if you can hear it, you can make a copy of it. And furthermore, if you can hear it, then it's possible to make a *perfect* copy of it, although it may not be feasible or may be quite difficult to obtain the necessary keys (not everybody is up to disassembling their hardware and using EPROM readers and such).

    DRM, broadly defined, is the attempt to use technology to separate the acts of experiencing content and copying content. Since the content must be accessible to experience it, it's impossible to also make it inaccessible for copying purposes. There's no real-world difference between the two. They can make it as difficult as they like with the use of custom hardware and proprietary formats and such (although taken too far they run the risk of losing their customers), but it cannot be made impossible.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  40. Re:OK, no problem... by yeremein · · Score: 2, Informative

    I'll get a simple cable and connect the sound card output to it's input. Then I'll record the songs. Of course I'll loose some quality if it's an analog output, but is it really that significant? I don't know, I haven't tried...

    There will be a loss of quality from the D/A->A/D->recompress process, but it might not be noticeable if you have a good sound card and you have the volume levels set appropriately so as to maximize the signal-to-noise ratio without clipping.

    Don't think the RIAA doesn't have their eyes on that method too, though. They'd like to see mandatory watermark detection in all analog-to-digital converters in order to plug the so-called "analog hole". See the EFF's Endangered Gizmos list for more info.

  41. psychoacoustics by Anonymous Coward · · Score: 1, Informative

    People tend to prefer what they are used to. A normal turntable and tone arm adds distortion due to tracking error and also has a higher noise floor than a Cd player. This makes it possible to tell which you are hearing...and since the technically worse solution is what they are used to that is what they prefer. Double blind tests were done way back in back thirties or forties which showed that people preferred music with all the high frequencies removed to the real thing. They were used to the radio performance of the times, so live muic sounded far too bright and edgy.