Slashdot Mirror


Napster Has Been Cracked

Sabathius writes "Users have found a way to skirt copy protection on Napster Inc's portable music subscription service just days after its high-profile launch, potentially letting them make CDs with hundreds of thousands of songs for free...""

118 of 616 comments (clear)

  1. Man... by Curtman · · Score: 5, Funny

    Never saw that one coming.

    1. Re:Man... by yogikoudou · · Score: 4, Funny

      Well I guess they were using SHA-1 ...

    2. Re:Man... by FrYGuY101 · · Score: 5, Insightful

      To be fair, this is a far more crude hack than Hymn.

      Hymn (the iTunes DRM remover) keeps the encoded data encoded, simply removes the copy protection, wheras this takes the decompressed audio, writes it as a wav file to the disk. As a result, if you want to encode it to save space, say, WMA, or ogg or MP3, you're losing more information (I suppose you could also go with FLAC, but that's a lot of space for a mediocre bitrate WMA version anyway).

      All in all, I'd say wait for a better way of bypassing the DRM before you hog up to the Napster smorgasboard.

      --
      "If we let things terrify us, life will not be worth living."

      - Seneca
    3. Re:Man... by BasilBrush · · Score: 5, Informative
      Not any more. Transcode direct to MP3, no WAV step.

      And do them in parallel to beat the real time limitation.

    4. Re:Man... by buttersnout · · Score: 3, Interesting

      True but this is much more a problem with a subscription service. If you use Hymn, you have already payed 99c for the track. You aren't really doing much other than making it so you can give a copy to your friends which you could do anyway with a cd. If you use napster you are permanantly keeping something you were only supposed to be renting. you could pay 15 dollars and get and get 5 gigs of music. Breaking fairplay will still require you to pay a little over $1000 for the tracks

    5. Re:Man... by SamBeckett · · Score: 5, Insightful

      To be fair, there always must be a "WAV" step; you just don't see it in action using method described for the link.

    6. Re:Man... by JAgostoni · · Score: 5, Informative

      And you are STILL losing quality even if it was just transcoding like that.

    7. Re:Man... by Anonymous Coward · · Score: 4, Informative

      Wrong.

      Original recording -> MP3: loss
      MP3 -> WAV: no additional loss
      WAV -> MP3: more loss

      Each time you convert to a lossy format, there is more going on that "throwing away the parts of the music you can't hear", which is often the quick, oversimplified explanation of lossy compression. There's added noise due to compression as well, and that noise will be, at least to some extent, cumulative with additional generation of compression.

      Even if the psychoacoustic models used were perfect (which they aren't, especially at low bit rates), at the very least there would be generational loss from calculation round-off errors when converting from MP3 to WAV and back again.

    8. Re:Man... by Anonymous Coward · · Score: 2, Interesting

      Has anyone checked to see what kind of embedded watermark (with the Napster subscriber's personal information) exists in the format blessed by the RIAA?

    9. Re:Man... by Khazunga · · Score: 3, Informative
      If you keep transcoding your file over and over again you are not losing imperceptible data.
      You might not lose any data at all. It depends on the transcoding. Say you grab a perfect, audible-band-complete FLAC and keep only mid-tones [50Hz-15KHz], then enconde it in the frequency domain. Let's call this new format CRAP.

      CRAP saves space by throwing away data, losing quality. However, you only lose quality the first time around. You can transcode between FLAC and CRAP as many times as you want, and there is no subsequent data or quality loss.

      The problem arises when different formats/encoders throw away different parts of the spectrum. Then, the end result is a file that contains only the frequencies nobody threw away along the transcoding pipeline.

      In the end, I mean to say a transcoder in and by itself won't cause loss of data. You can convert to wav and back to a compressed format with no data loss, if you know what you're doing.

      --
      If at first you don't succeed, skydiving is not for you
    10. Re:Man... by BoldAC · · Score: 5, Informative

      hah!

      Actually, the DRM can be bypassed by having winamp send the audio straight to a raw WAVE file. Winamp stopped this previously by preventing DRM files from using a direct write-to-wav plug-in. However, this hack uses an additional plug-in to bypass this.

      The sad thing is that the Output Stacker has been pulled from the winamp website.

      Users have been posting links to sites that still contain Output Stacker in the forums.

      This recipe contains the step-by-step directions for the hack and active links to the plug-ins.

    11. Re:Man... by severoon · · Score: 2, Insightful

      Basically, if you can hear music, you can steal it. It's just a matter of the quality you're willing to put up with. It's amazing to me that anyone thinks they can set up a situation where you ultimately send an unencrypted digital stream of data to your audio card, but no one's going to divert that stream to the hard disk.

      --
      but have you considered the following argument: shut up.
    12. Re:Man... by warlockgs · · Score: 4, Interesting

      As the originator (as far as I can tell) of this "hack" (I wouldn't call it that), it is absolutely amazing how quickly this got around. 4 weeks from post on cdfreaks, to worldwide news, and an article on slashdot. Yay to me.

      Click here to see the original post I made on this

      Anyhow, I hope you all are enjoying it. I merely wanted to transcode the files I had bought (3207 and climbing....) so I could load them on a non-WMA-aware MP3 player like any other piece of music I own. I certainly didn't intend for Napster to start a 14-day free trial, nor did I expect this method to get "out into the wild" (although, posting on the internet is no way to keep anything secret.....). I would like to take this moment and kindly remind you all that unless you actually *buy* some tracks, Napster loses money. Napster loses enough money, they'll fold shop. The artists will then get reamed by iTunes. Don't let it happen guys, lets at least try to be honest.

      /Just sayin....

      --warlock1711 of club cdfreaks.

  2. Whatever by Quasar1999 · · Score: 4, Insightful

    So long as the audio comes out speakers at some point you will always be able to grab the analog signal and re-encode it to whatever format you want... this isn't some breakthrough... It's called recording the analog output...

    --

    ---
    Programming is like sex... Make one mistake and support it the rest of your life.
    1. Re:Whatever by rsidd · · Score: 5, Informative

      On linux, so long as you're playing via /dev/dsp you can always grab the digital signal, for example via vsound. I wouldn't be surprised if that's possible with MacOS X too, or even Windows.

    2. Re:Whatever by mirko · · Score: 5, Informative
      --
      Trolling using another account since 2005.
    3. Re:Whatever by Anonymous Coward · · Score: 5, Insightful

      I don't see why you couldn't create a fake audio driver for Windows that let you swipe the digital signal. Or a fake CD-RW to steal to the MP3s iTunes lets you download.

      And of course the DarkNet paper showed us all what we already knew: With DRM, you have to give the user everything needed to play the file. That includes the cryptography algorithm and the key. Thus, all DRM is breakable.

    4. Re:Whatever by Curtman · · Score: 5, Funny

      so long as you're playing via /dev/dsp you can always grab the digital signal

      Quiet you. If my next soundblaster comes with some new fangled Macrovision, it'll be your fault.

      Or would that be Macroaudio?

    5. Re:Whatever by Troed · · Score: 3, Interesting

      With DRM, you have to give the user everything needed to play the file. That includes the cryptography algorithm and the key. Thus, all DRM is breakable.

      Bollocks - you're assuming you have complete control of the execution environment. That is not the case on some platforms (cellphones springs to mind) and there are incentives (I'm sure you know the acronym) to make a "secure platform" within our normal open platforms to reach the same goal.

    6. Re:Whatever by Sentry21 · · Score: 2, Informative

      Actually, it captures it from the sound card (in Windows, you can record sound card output), so at that point, it's still digital.

      Good quality too.

    7. Re:Whatever by UnRDJ · · Score: 4, Informative

      Many sound card drives (Echo Mia, Egosys Waveterminal, Emu series, to name a few) allow internal rerouting of a digital signal to and from various virtual ins and outs. Simply playback anything through the mme driver, route that to an asio or WDM input, record, and voila. But really people, just buy the music. I know I'm going out on a limb here, but look at a service like Rhapsody. $10 a month for as much 44.1/16 music on your computer as you want. Albeit the bitrate isn't that great (im guessing 128), if you're really using kazaa for virtuous reasons such as "discovering music that you can't find in the record store because the RIAA shoves pop down your throat," then you'll buy a cd when you find something you really like. Rhapsody has a huge library of songs, stuff you would never see on mtv. It has a 30 day free trial, see for yourself. No I'm not a Rhapsody employee =), I just honestly enjoy the service.

    8. Re:Whatever by Reverant · · Score: 5, Informative
      I wouldn't be surprised if that's possible with MacOS X too, or even Windows.
      It is possible. It always has been possible. All Sound Blaster cards (after the first Live! series) have a virtual input mixer called "WhatUHear". Selecting it as an input, you can record whatever goes to the card's DAC, without actually going through the DAC->ADC process. The quality is excellent. I've been using this method to capture some nice soundtracks from several games that didn't offer the music as wave or mp3.
    9. Re:Whatever by Anonymous Coward · · Score: 5, Informative

      Actually, their drivers do contain something similar.

      For instance, I'm in the pro audio industry and folks have always claimed that a soundblasters S/N and other specs are right up there with the big boys. Of course they are -- their team is comprised of greats from around the industry including their aquisition of Ensoniq a few years back.

      What they don't tell you is that the digital outs and otherwise are disabled in the drivers. The claim is that you get 24bit in / out -- but the reality is that even if you are doing a pure pass through, that 24 bit randomly drops bits down to a signal of as low as 14.

      The strange this is this doesn't happen with the free drivers that were available for Linux nor the Mac solutions. And then someone backported one of the Ensoniq proaudio card drivers after realizing the chipset was identical and was able to bring this back to the PC by doing a little hex editing...and the audio in phenomenal (although the driver is still a bit buggy and I wouldn't recommend it for anyone that needed a serious project undertaken).

      But yeah, if Creative needed to make the industry happy, they'd throw in Macrovision in a heartbeat. Sad that your post is rated funny...

      Note: This was true several years back...I don't deal with audio interfaces as I once did, so it may not be true any longer.

      Also now, this is Off Topic, please rate it accordingly. I'm an AC and don't give a rats ass.

    10. Re:Whatever by PowerEdge · · Score: 2, Funny

      Everyone exclaims about the Analog hole. How can you stop recording something if you can hear it. I think I have discovered a solution. Blow out everyones ear drums and have their hearing replaced with a set of bionic hearing aids that conform to DRM. Through a real world ADC you can still the hear approved analog sounds in your environment, but all speakers, headphones and anything that can broadcast DRM media will be replaced with digital transmitters that interface with your DRM validated hearing aid. This will solve lots of problems! Of course, if/when the DRM is cracked and people upload hacked firmware to their ears a new specification will have to be devised and the ears upgraded. This could theoretically be applicable to our other senses. Digital Eyes, and Taste (DRM Emeril recipes).

    11. Re:Whatever by Filmwatcher888 · · Score: 5, Informative
      There is a virtual sound card program for windows. It is called VAC, the Virtual Audio Cable. It works really well, and is relatively cheap.

      The only Virtual CD Burner software I've seen is called Original CD Emulator. It creates a fake CD Burner in the same way DaemonTools creats a fake CD drive.

      If anyone knows any other software that can do the same things as these too, please post them here too.

  3. Copied Music by JohnHegarty · · Score: 5, Funny

    Oh No...

    Now the name Napster will be tried to illegally copied music... and after all the paid of the good number of that company...

    1. Re:Copied Music by JohnHegarty · · Score: 2

      eh... ment the good name of the company......

      preview....preview....preview....

    2. Re:Copied Music by binarybum · · Score: 4, Funny

      I think what he meant to say was, "all of your base belong to us"

      --
      ôó
  4. Old News by samtihen · · Score: 5, Insightful

    Oh this has been explained for a while: http://marv.kordix.com/archives/000400.html

    All that is happening is that people are grabbing the actual output of the song, and dropping it into a wav file. This will ALWAYS happen with any kind of copy protection. If you let users actually hear (music) or see (movies/tv) the content, there will always be a way to get it. At the absolute worst, people can just set up a tape recorder and grab it from that.

    Regardless, the point is that it is STILL ILLEGAL to abuse. Until you can get people to stop breaking the law voluntarily (via fair pricing and good business practices), all media/content companies will have to keep playing this game. What they need to realize is that they are always going to lose.

    1. Re:Old News by jxyama · · Score: 5, Informative
      >All that is happening is that people are grabbing the actual output of the song, and dropping it into a wav file. This will ALWAYS happen with any kind of copy protection. If you let users actually hear (music) or see (movies/tv) the content, there will always be a way to get it. At the absolute worst, people can just set up a tape recorder and grab it from that.

      you are absolutely right, however, the difference here is, napster is a subscription model. (with a free trial to boot.) so the circumvention of the DRM means you get as many songs as you want for little or no money. music download sites, like iTMS or MSN, you have to pay first, then crack it all you want... so media/content companies aren't quite "losing" there to the same degree...

    2. Re:Old News by R.Caley · · Score: 2, Informative
      I think that from a legal standpoint it is slightly harder to abuse analog copying, since you inherently lose quality, bolstering your fair-use defense.

      Unless you want to keep uncompressed audio, you will lose quality using this hack.

      You should look up fair use, it is much more restrictive than you seem to think it is.

      --
      _O_
      .|<
      The named which can be named is not the true named
    3. Re:Old News by Anonymous Coward · · Score: 3, Funny
      If you let users actually hear (music) or see (movies/tv) the content, there will always be a way to get it.

      Not if you build the copy protection into the user...

    4. Re:Old News by cccc828 · · Score: 2, Informative

      > Regardless, the point is that it is STILL ILLEGAL to abuse.

      Where? Here in Austria it is perfectly legal to make a copy of any CD/DVD for private use. It is even legal to use Filesharing networks for _downloading_ music.

      So, no it is not illegal to make a copy of DRM polluted files.

    5. Re:Old News by radja · · Score: 2, Interesting

      last time I checked (about 90 minutes ago), it was still completely legal to copy from radio, copy from TV, or copy from napster (at least here in the netherlands).

      --

      No one can understand the truth until he drinks of coffee's frothy goodness.
      --Sheikh Abd-Al-Kadir, 1587
    6. Re:Old News by Khomar · · Score: 3, Insightful
      Regardless, the point is that it is STILL ILLEGAL to abuse. Until you can get people to stop breaking the law voluntarily (via fair pricing and good business practices)

      I think the point your getting at here is that we live in an imperfect world. The fact is that there will always be someone who will break the law. In order to stop all crime, you have to place very strict, cumbersome laws and practices -- and even then someone will find a way around them(we humans are quite resourceful when it comes to finding new and devious ways to circumvent authority). The key is finding the balance between discouraging crime and maintaining the usability and popularity of your product to your customers.

      It has been my experience that it is much better to lean toward ignoring piracy for the sake of our law abiding customers rather than to hurt everybody to stop the few bad apples. Our customers end up being much happier, and we also get fewer support calls. Win-win.

      --

      I believe in de-evolution. God made the world perfect, man fell, and its been going downhill ever since!

    7. Re:Old News by MeanJeans · · Score: 2, Funny

      What does moral relativism have to do with this? I would say nothing.

      --
      =====
      imagetweak.netWeb-based image t
    8. Re:Old News by Wylfing · · Score: 2, Insightful
      "Until you can get people to stop breaking the law voluntarily (via fair pricing and good business practices)"

      Yes, heaven forbid we ask people to stop breaking the law because it's WRONG.

      But I forgot, in today's society of instant gratification and moral relativism, anything can be justified by our wants.

      I was doing the old WTF? as I was reading each of these comments. The only thing "wrong" with the Napster technique is that people are abusing a free trial period. There is nothing unethical in dumping the output of a piece of software to any device you like. If someone sends you a Word file that they wrote, and you dump its contents to a PostScript, that is NOT unethical behavior.

      Now if you're refusing to pay for a legitimate copy of a commercial work, that's one thing. But directing your computer to use a different output stream is NOT wrong.

      --
      Our intelligent designer has never created an animal that we couldn't improve by strapping a bomb to it.
    9. Re:Old News by miu · · Score: 2, Insightful
      Yes, heaven forbid we ask people to stop breaking the law because it's WRONG.

      There is NO moral force behind intellectual property laws that have been improperly manipulated in such a way as to deprive the public of rights forever. A temporary monopoly is a chance to make a profit, a perpetual monopoly is a license to steal from the public domain.

      --

      [Set Cain on fire and steal his lute.]
    10. Re:Old News by MartinG · · Score: 4, Insightful

      The law is there to uphold the beliefs of society. If enough people are breaking a law, who is that law representing exactly? In those cases, it is that law itself that is wrong. History teaches us that the most effective way to get rid of unjust laws is to ignore them.

      NB. I'm making a point about laws, not about my opinion on current intellectual property laws.

      --
      -- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz .@adgimnoprstu
    11. Re:Old News by pla · · Score: 2, Interesting

      Yes, heaven forbid we ask people to stop breaking the law because it's WRONG.

      Yes, many people do consider the law wrong in this case. Not your meaning, but your choice of phrasing came out all too conveniently ambiguous.

      The problem here involves the length of copyright, and the sources of "real" creativity...

      First, publishing and distribution have become much easier and cheaper than when the idea of copyrights first entered the law. As a result, you don't need word of mouth and 20 years of slow trickle to get a new book/album/whatever out to the public, it takes hours to months. The vast majority of the profit that will eventually derive from sales, comes in within a year or two. So, considering that, why has the duration of copyrights increased rather than decreased? At present, I would say that even a decade should suffice.

      But, the standard comback goes, why shouldn't the "creator" of a work get to keep copyrights forever?

      That goes back to my comment on the source of creativity. People do not create new content in a vacuum. They do so as part of a specific culture, with a cultural heritage on which to draw (and theoretically contribute to). As an example, how much "modern" music have you heard that uses, almost verbatim, one (or more) of the voices of Pachelbel's Canon in D? So, if you play classical music on an electric guitar and rap to it, does that really count as a "new" song for which you deserve royalties for the next few centuries? Going further, the entire style of music that people will tolerate (and buy) depends heavily on the culture as well. How do you think the same audience that hissed at Brahm's 1859 Leipzig performance of his first piano concerto (now "generally regarded as one of his most romantic works"), would have reacted to, say, Metallica? Or how do you suppose the puritans would have received Ozzy (I suspect "warmly", in the bonfire sense). Artistic creations depend on their culture to have value. They represent miniscule additions to that culture, not giant leaps that would warrant such enormous legal protections. Or to put it another way, they don't have value because of their uniqueness, but precisely because of their almost total lack of uniqueness, with a tiny grain of novelty thrown in.


      So, does this justify pirating music? That depends... Do you believe you have the right to access your own culture; or, do you believe that others have the right to lock your own culture away from you and make you pay to experience it?

    12. Re:Old News by Alsee · · Score: 2, Insightful

      The idea...

      Just because their "idea" is XYZ is not reason enough to say there is anything wrong with WXY.

      Or are you in the same delusional world as Jack Valenti who thinks using a VCR is copyright infringment and Ted Turner who thinks that going to the bathroom during a TV commercial is theft?

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  5. Sounds like it's time for the RIAA... by spezz · · Score: 2, Funny

    ...to close the barn door

    1. Re:Sounds like it's time for the RIAA... by A+Drake+Man · · Score: 2, Interesting
      Napster beat 'em to it. They now limit the number of downloads using the Free 14 day offer to 11 megs... Right below the "Download Napster" button ;)

      So it appears that they are at least a MITE worried about the old "non-profit" days of Napster coming back...only with a MUCH better search engine, and all with the SAME quality!

  6. Free? by danormsby · · Score: 4, Funny

    I thought all music downloaded from the internet was free?

    --
    Omnis amans amens
  7. Aw Crap by Sentry21 · · Score: 5, Informative

    The jig is up. I was hoping I'd finish my 14-day trial before anyone found out about this. Oh well, I got 8 gigs already, and I can get more today.

    I use a program called tunebite that plays the files back and records them to MP3, as well as copying over album/artist metadata from the tags.

    Hopefully I can get everything copied before they fix it (if they ever can fix it).

    1. Re:Aw Crap by KiloByte · · Score: 4, Interesting
      The trick is, they can't fix that.

      Possible workarounds for them:

      subverting the system (MS can do that) to allow locking the soundcard We can simply code a virtual soundcard driver. restricting Janus to work only if your soundcard has a driver signed by Microsoft's key (at the cost of breaking it for many people) We can use cards with extended functions. blocking all cards with such "extended functions" when Janus is in use At the cost of some quality, we can use the analog route, by simply plugging the card's speaker output into some other device.
      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
  8. Oh dear by Ckwop · · Score: 5, Insightful

    "The DRM (digital rights management) is intact. Basically, people are just recording off a sound card. This is nothing new and people could do this with any legitimate service if they want to use a sound card," she said.

    "This kind of attack has been around for a long time and it's just because of our higher profile that it has sparked such interest," she said.

    But isn't this the point? All it takes a little software tool and suddenly everyone can do it. You can't just "ignore" attacks - because the attackers certainly wont.

    Simon.

  9. Who thought, it would take Slashdot this long? by mi · · Score: 3, Informative
    to post the story?

    "Growsing about rejected submissions" my behind -- I submitted a better worded snap with more informative links two days ago...

    WinAmp has pulled the plug-in in question from their site, it seems...

    --
    In Soviet Washington the swamp drains you.
    1. Re:Who thought, it would take Slashdot this long? by pla · · Score: 2, Informative

      You can Get it here, about ten lines down, the "Output Stacker".

      Oddly, this doesn't seem to have appeared on thousands of mirrors across the web yet, so please, take pity on Marv and, if you can, mirror it and post a link here.

  10. That Napster business plan in full by Deep+Fried+Geekboy · · Score: 4, Funny

    1. Launch DRM'd subscription-based music service. Nobody joins it but RIAA backs your model and you get lots of good music.
    2. Wait for DRM to be cracked, in, ooh, three or four days.
    3. Your subscriptions suddenly rocket
    4. PROFIT!

    --

    I'm not wrong. You haven't thought about it hard enough.

  11. That's not a crack by harlows_monkeys · · Score: 3, Insightful

    Sticking something on the output of the media player that saves a copy of the bits is not a crack.

    1. Re:That's not a crack by sdMMk · · Score: 2, Insightful
      Damn right. This is the degree of technology that makes the slashdot front page now - it's like some MSN channel.

      NOT flamebait but FACT.

  12. Are we not just talking about the analog hole by cmiller173 · · Score: 3, Insightful

    Isn't this just a plugin to WinAmp the grabs the output stream from napsters software going to the sound card and "records" it? As far as I can tell you would still have to manually name/tag the files unless your happy with generic names. Also, a five minute song will take five minutes to capture. OPh and it captures as an uncompressed wav so you would need to convert it to your prefered format.

    1. Re:Are we not just talking about the analog hole by natemc · · Score: 4, Informative

      get the LAME output plug in, it will create and tag an mp3 for you

  13. Re:Damn...must not be very high quality songs... by avgjoe62 · · Score: 4, Funny
    Seriously, though, who didn't see this coming?

    Uhm... Napster?

    So much for the business model...

    --

    How come Slashdot never gets Slashdotted?

  14. I wouldn't say cracked by Daath · · Score: 4, Informative

    It's not actually been cracked - They can't make real digital 1:1 copies of the songs - What they do is record from the sound card. That's not so bad if you just want to burn them to CD, but if you want to re-encode from WAV to Ogg or MP3, the quality will deteriorate further...
    You can do this will *all* DRM media, nothing new here - It's only because it's Napster (woohoooo) that people think it's revolutionary. It isn't.

    --
    Any technology distinguishable from magic, is insufficiently advanced.
    1. Re:I wouldn't say cracked by Kjella · · Score: 3, Insightful

      Well, depending on how you look at it. They are 1:1 digital copies of the same wav output that'd go to your speakers. If the WMA format was open, you could probably (with a lot of effort) create a "reverse engineer" encoder which would reconstruct the original compressed file, sans DRM.

      You can do this will *all* DRM media, nothing new here - It's only because it's Napster (woohoooo) that people think it's revolutionary. It isn't.

      Actually, no. The big news here is because it is a subscription service. I.e. you take a temporary copy, and make it a permanent one. It has a completely different impact on the business model than say Hymn and the iTMS.

      --
      Live today, because you never know what tomorrow brings
  15. Impact? by tuomasr · · Score: 4, Insightful

    So what's the point? The main thing of Napster is that you can legally download songs off the internet. Circumventing copyright protection schemes is illegal, at least here in Finland. So why not download the songs illegally in the first place? Of course there's the RIAA-factor but if you don't share, is there a problem as getting caught propably isn't that likely.

    1. Re:Impact? by joNDoty · · Score: 2, Interesting

      I'd say the biggest issue, and one that not many people are focusing on, is that once you unsubscribe from Napster, the music is no longer yours. I didn't realize this at first. I saw their superbowl commercial where the napster dude held up that sign and made it seem very much like napster's downloads give you the same rights as iTunes' downloads. They don't! If you ever end your subscription, you don't have the right to listen to those thousands of songs on your HD anymore. I think this hack appeals to the users that realize this after they've already subscribed.

  16. Are There Actual Napster Subscribers? by Anonymous Coward · · Score: 2, Insightful

    I've never heard of anyone actually using Napster.

    Do such people really exist?

  17. Well, its come full circle. by GatesGhost · · Score: 4, Funny

    napster just keeps finding a way to provide free music. lol. talk about irony.

  18. Re:If you don't have time to RTFA... by harlows_monkeys · · Score: 4, Informative
    Until recently, music subscription services have been somewhat restricted in their ability to transfer songs they provide to portable players, while Apple has sold millions of portable iPods by allowing users to buy songs from iTunes and store them on iPods

    Divide the number of songs sold on iTunes by the number of iPods sold, and it works out to only something like 5 or 10 albums per iPod. Unless people are buying much much bigger players than they need for some reason, it looks like people are mostly putting things other than iTMS music on their iPods.

  19. Broadcast flag has been cracked by RandoX · · Score: 5, Funny

    Apparently, users have been sitting in front of their TV with a camcorder...

  20. It's a matter of time by ragingtory · · Score: 2, Insightful

    I see this as a matter of time. Sure - I could route the stuff through Winamp - but is that worth my $15 a month? The reason I'd pay to download music (apart from supporting artists, etc) is to save time. I could download it from Kazaa - but with all the polluted files - I'd just as soon pay my $1 a song or $15 a month or whatever and save myself the effort of sorting through the files.

  21. listen up MBA know-it-alls! by 10am-bedtime · · Score: 2, Insightful

    good administration (remember the "A" in "MBA"?) requires understanding how to meld the ideal (scamming --er-- making lots of money from your suckers --er-- clients/consumers) w/ the real (in this context, the fact that digital anything is infinitely reproducible w/ infinitessimal cost).

    when you forget that and start thinking that the "M" stands for "marketing", you lose. your loss may be immediate or it may be drawn out, but in the end that is not where you want to be. sure, a few years in $lopping it up in the trough before it all goes to shit is a worthy aspiration -- if that's what you believe, fine.

    if technical people (those more rooted in reality than you) tell you it's not going to fly, do everyone a favor and listen to them. maybe you will stop being such pompous jackasses w/ a little practice.

  22. Napster v.s. iTunes by thenextpresident · · Score: 5, Funny

    Hehe
    iTunes: $0.99 per song.
    Napster: 14 day free trial: All the songs you can download and copy to MP3.

    Hrm... =)

    --
    Jason Lotito
  23. Not cracked by Mr_Silver · · Score: 5, Informative
    The DRM wasn't cracked, simply the output of the file was redirected back into a WAV (or MP3) without any DRM - akin to doing a tape to tape copy.

    Napster have already responded on their site (link in top right) and basically said the same thing. They also rightly pointed out (i think, as i've not tried) that this would be a 1:1 copy, so a 60 minute album would take you the same amount of time to copy - which isn't going to be much fun to do lots of.

    Apparantly rumour has it that Steve Jobs contacted music executives, pointing them to the site and the Napster CEO countered by pointing out several sites which showed you how to do the same with iTunes files. I'm not sure how true this is.

    Interestingly enough, the Winamp plugin required to do this - Output Stacker - was pulled from the winamp site. Which I find a little odd, since there are perfectly legal uses for the plugin - so I don't understand why they're playing censorer (to be safe?)

    If anyone knows where to get it from, it would be appreciated since Googles cache shows no homepage and a Google search of the author gives only a set of links to a non-working winamp.com URL.

    --
    Avantslash - View Slashdot cleanly on your mobile phone.
    1. Re:Not cracked by Sentry21 · · Score: 2, Informative

      Try Virtuosa or Tunebite (which is what I use).

  24. Napster (and everything else). by spankers · · Score: 2, Funny

    Golly... you mean it's possible to record the output of the soundcard. Wow... everything's cracked then.. including /. editors for posting this story.

  25. What they actually mean is... by Kjella · · Score: 5, Insightful

    ..."we're powerless to stop it".

    Don't think it isn't being worked on, just not by Napster. You can read more about Secure Audio Path here. Of course, the next step is a simple loopback-cable to another sound card (your input will be disabled while doing secure playback). The next step is to add a broadcast flag to the signal, only to have people circumvent it. Then they'll go for Secure Digital speakers. Then people will record with a high-fidelity microphone. And some time after they ban A/D converters, we will win (or the digital society we've made will collapse, whichever comes first).

    Kjella

    --
    Live today, because you never know what tomorrow brings
    1. Re:What they actually mean is... by glindsey · · Score: 2, Funny

      Of course, we all know the eventual solution to closing the "Analog Hole"... make everyone deaf. Everybody wins... until they start imposing DRM on sign language.

    2. Re:What they actually mean is... by SimReg · · Score: 2, Interesting

      Wouldn't this put a slight damper on the abilty for a PC to act as a recording studio? If you wanted to add a new track to a previously recorded track, you'd have to playback while using the input.

  26. Not possible according to Microsoft by Husgaard · · Score: 2, Interesting
    They have Secure Audio Path to protect against attacks like this, and give the impression that this is used with all sound drivers.

    Unfortunately after DMCA it is illegal to demonstrate that this is not the case.

    The music industry should sue Microsoft for misleading them to publish millions of songs in a basically unprotected format.

  27. And Apple... by gmajor · · Score: 3, Funny

    Steve Jobs reportedly e-mailed record company executives a link to a blog detailing the hack. He apparently wants to paint Napster as an insecure service, no different from its original form all the while portraying iTunes as secure (PlayFair anyone?)

    Ruthless business tactics IMHO, dare I say reminiscent of the Redmond giant. I wish he'd let consumers decide which service is better rather than try to sabatoge Napster with his industry connections and FUD.

    (Disclaimer: Heard this as a rumor - I wasn't exactly CCed on Steve's e-mail - but I had no reason to disbelieve the source).

    1. Re:And Apple... by eboot · · Score: 4, Informative

      The difference is Napster offer 14 day trial, meaning that you an download as much as possible and rencode at the same time, meaning you can download, with a reasonable amount of effort, a thousand free songs. In iTunes you can burn 'perfect' recordings of downloaded songs without any audio 'trickery' but you still have to pay for them! So Jobs can call them out on this, but he still shouldnt. Nobody likes a snitch!

      --
      Two tears in a bucket. Motherfuck it.
    2. Re:And Apple... by loraksus · · Score: 2, Insightful

      Oh come on, even if this were true, napster came out a couple days ago and said they were going to take out Apple / iTunes.
      If you declare war, you can't really bitch that the other side just spanked you.

      --
      1q2w3e4r5t6y7u8i9o0pqawsedrftgthyjukilo;p'azsxdcfv gbhnjmk,l.;/
  28. Napter CTO responds by graiz · · Score: 5, Informative

    A response from the Napster CTO taken from the homepage of Napster.com:
    ----

    It has come to our attention that there are a number of inaccurate statements posted by various sources on the Internet regarding the security of Napster and Napster To Go. As Napster's CTO, I would like to officially state that neither Napster To Go, Napster, nor Windows Media DRM have been hacked. In the interest of providing the most accurate information to consumers, the following is some background on the subject.

    There is a program that allows a user to record the playback of tracks directly from the computer's sound card. This process can be likened to the way people used to record songs from the radio onto cassette tapes, but instead of capturing the music on a tape, the file is converted into a new, unprotected digital format. This program does not break the encryption of the files, which can only be recorded one at a time making the process quite laborious. It would take 10 hours to convert 10 hours of music in this manner. It is important to note that this program is not specific to Napster; files from all legal subscription and pay-per-download services can be copied in this way.

    We hope that the information provided above clarifies the matter and puts questions regarding the security of Napster and Napster To Go to rest. Napster's mission is to provide consumers with a legal environment in which they can experience and discover the world's largest collection of digital music. We believe that artists should be compensated for their work and intellectual property rights should be respected. While we acknowledge there are always going to be those who do not share our belief, we remain committed to providing the most enjoyable and flexible digital music experience for those who do.

  29. Sorry, not legal to abuse anywhere. by samtihen · · Score: 3, Insightful

    No, it quite certainly is still illegal to abuse. A subscription to Napster gives you the legal right to use the songs you want for as long as you pay a subscription to Napster. You are not paying for the song; you are paying for the right to RENT the song.

    http://www.napster.com/terms.html

    Even if it was illegal, dont try to pretend that it still wouldnt be IMMORAL. Does it really matter if your country doesn't have specific laws keeping you from doing this?

    Does the artist of the song get paid? No? Well, arent you kind of screwing him/her over? I think the answer is clear.

  30. Comment removed by account_deleted · · Score: 2, Funny

    Comment removed based on user account deletion

  31. Output Stacker plugin URL by buro9 · · Score: 4, Informative

    Output Stacker plugin has been pulled from the WinAmp site, but you can still get it in their forums.

    The details on the plugin are cached here, this is the PULLED page:
    http://64.233.183.104/search?q=cache:zsalMv FLX6QJ: www.winamp.com/plugins/details.php%3Fid%3D86033+wi namp+output+stacker+plugin&hl=en&client=firefox-a

    This thread lists where it can be found NOW:
    http://forums.winamp.com/showthread.php?thre adid=3 5627

    And this contains the plugin:
    http://forums.winamp.com/attachment.php?p ostid=159 3266

    Google is a wonderful thing when companies wish to backtrack like that.

    The plugin has tons of geniune uses... pulling it, well yeah I understand AOL/Time Warner's motives... but they're kinda dumb.

  32. refreshing look by Dr.Opveter · · Score: 2, Insightful
    From the article
    "The bottom line is that people are always going to find a way to get around the system...

    True that. I can hear it, i can copy it. I can see it, i can copy it. It takes one person to copy it, millions can get it. Period.

    --
    Sample this!
  33. Hey, what do you expect... by skids · · Score: 5, Funny


    Before you criticise the craftwork, consider the medium.

    You don't expect a pile of burning tires to be stacked neatly, do you? That's about the same as expecting coherence and grammar in a slashdot post.

  34. I told them. I TOLD them. by geophile · · Score: 2, Funny

    Don't use SHA-1

  35. People are forgetting the real purpose of DRM by Anonymous Coward · · Score: 2, Insightful

    From the article...
    "A spokeswoman for Napster said that such endeavours were nothing new and the company was not too concerned.

    'The DRM (digital rights management) is intact. Basically, people are just recording off a sound card. This is nothing new and people could do this with any legitimate service if they want to use a sound card,' she said.

    "This kind of attack has been around for a long time and it's just because of our higher profile that it has sparked such interest," she said."


    As all Slashdot readers know, truly effective DRM is damn near impossible. It's all cosmetic fluff to convince the copyright holders that their rights are being protected. The people who are willing to pay are given a chance to pay, and the people who want to ride for free are going to continue that practice. The size of the paying vs. non-paying community is determined more by price than by DRM. I think the online music industry is still squandering most of the revenue that might be achieved with lower pricing. Drop the price to $5/month and my music budget increases from $0 to $60 per year. Until that time, I am satisfied with music I bought years ago plus what I hear on the radio.

    Notice how some of the biggest players in the DRM industry are the companies with the most feeble security products. In essense, DRM is the final frontier for security technology that is not good enough for any other purpose; a virtual "dumping ground" for code.

    Sure enough, the DRM industry is helping the music industry -- just not in the way it appears at first glance. A combination of fantasies are being satisfied at the same time. RIAA is convinced that DRM will eventually stop piracy, the DRM vendors have a continous market for "upgrades" as each layer is cracked, while the continuous circumvention of DRM ensures plenty of interest in online music. Nothing would kill the industry faster than loss of interest. The music industry would have committed commercial suicide by now if they had been given any serious DRM weapons. Fortunately, the can't hurt themselves all that much because all they have are DRM toys.

  36. Google digging gave a link... by Gopal.V · · Score: 2, Informative
    I still found the output stacker on Winamp.com [yeah, slashdot it out of existence].

    I don't listen to pop music (only Enigma, Eminem and a few others) - and I don't have the bandwidth to pull it off Napster. But how hard it is to really hook up something like Mp3 Recoder and do this with WMplayer (I record webcasts from clients).

    Google is a REALLY dangerous tool against censorship. But that all said, you can't just supress information - Information wants to be free.
  37. Why do they even try by CastrTroy · · Score: 2, Insightful

    Why do they even try to put DRM on downloaded music? Everytime they do it, it's cracked. So, they are going through all this trouble for nothing. It doesn't stop the music from being leaked to P2P networks, because even if it was unbreakable, one person could purchase a CD, rip it, and put it on the network. One copy is all you need. If people really wanted to make copies of the music for distribution, they'd be much smarter to just go out and buy a CD. Higher quality, and infinitely easy to copy.

    --

    Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
  38. Its not a crime by adeydas · · Score: 3, Informative

    Well according to Napster, this is not a crime. Quotting from the article: "The DRM (digital rights management) is intact. Basically, people are just recording off a sound card. This is nothing new and people could do this with any legitimate service if they want to use a sound card".

  39. Re:Really lossy? by wed128 · · Score: 4, Interesting

    yes. MP3, Ogg, and WMA all take away different parts of the waveform in their quest to be smallest. Therefore, transcoding from one to another results in the waveform being mangled more and more.

  40. I saw it coming! by ImaLamer · · Score: 5, Funny
    I was going to submit this story with the headline:
    Napster is Back!
  41. Analog Hole by Sir+Holo · · Score: 2, Interesting


    They are recording the output, en route to the speakers. This is called the analog hole. (If you can hear it, you can record it.)

    There is a strong effort by content companies to close the analog hole. How? By controlling access to analog-to-digital conversion hardware through new laws.

    That's right, it may one day be illegal to use a D/A converter any way you want.

    Read the top article here.

  42. New key developments by flowerp · · Score: 4, Informative
    New key developments:

    -If you use the "Out-lame" Winamp plugin in the Output Stacker in place of "Out-disk", you can convert straight to MP3. It still encodes no faster than realtime, but this is a great way to conserve space. WAV(Out-disk) is still recommended if you are burning CDs and want to keep as much quality as possible. I can confirm that this all works.

    -You can run multiple instances of Winamp at once, each converting its own song. Each instance's playback will not interfere with any of the others, illustrating the fact that this is not simply recording the music off of your soundcard. Doing this, you can get FAR MORE than 252 full 80 minute CDs within 14 days. I can confirm that this works.

    You can transcode(MP3) or decode(WAV) X albums in the time it takes for the longest track on the album to elapse. And since you're not limited to only tracks from one album at a time, you can trans/decode as many tracks as instances of Winamp your computer will run limited only by your computer's resources.

    Quote from Napster's official statement: "It would take 10 hours to convert 10 hours of music in this manner."

    With the updated methods, you can convert 100 hours or 1,000 hours or 10,000 hours of music in 10 hours. The only limit is your computing resources.

    --
    --- Eat my sig.
    1. Re:New key developments by DA-MAN · · Score: 4, Informative

      How do you run multiple WinAmp instances? I tried and it just jumps to the current instance.

      CTRL-P and go to "General Preferences". Once there, click on "Allow multiple instances" and voila.

      --
      Can I get an eye poke?
      Dog House Forum
  43. it's good enough by Alien54 · · Score: 2, Insightful
    It seems that most people don't care that much about the lossy aspects of even just using low bit rate MP3s.

    seriously, for most folks, the sound will be plenty good enough. but for audiophiles and perfectionists ....

    --
    "It is a greater offense to steal men's labor, than their clothes"
    1. Re:it's good enough by redJag · · Score: 5, Funny

      for audiophiles and perfectionists ....

      Turns out they don't care since they'd never purchase that low quality of music in the first place eh? :)

  44. Mounting lobbyist costs for the RIAA by smchris · · Score: 2, Funny

    Considering the Chinese didn't have very good luck stopping the opium trade with crucifixion, it looks like the RIAA will have to spend big money on Congress now to get some _really_ tough penalties in force.

  45. Press Release by SomeOtherGuy · · Score: 4, Funny

    I have just cracked LP copy protection. I have plugged my record player into the line in button on my sound card, dropped the needle and clicked "record". This is a banner day. Hail to me. I am off to crack my camcorder next.

    --
    (+1 Funny) only if I laugh out loud.
  46. Re:*I* call bollocks on *you* by Herbmaster · · Score: 4, Insightful

    The thing is always in the hand of the user. With some tools, I can completely re-flash my cell phone. If I'm smart, I can even make the modifications I did stealth from the POV of the cell phone company. This is and will always be true, unless you start making appliances that explode when you open them. Or when you try to make any "illegal operation" with them.

    ...Or until you persuade the government to criminilize attempts to defeat your DRM. Then you can make your DRM encryption as weak as you want, and let the police pick up the slack for your laziness/technological shortcomings.

    --
    I'm not a smorgasbord.
  47. Expected by nurb432 · · Score: 2, Informative

    Any high profile DRM will be attacked on sight.

    Its just the way of the world now.

    --
    ---- Booth was a patriot ----
  48. Re:Damn...must not be very high quality songs... by ultranova · · Score: 2, Interesting

    Actually, wouldn't this boost the value of music bought by neo-Napster for the consumer, and thus increase sales ?

    "Oh no, our DRM has been broken ! Now all the people who want to burn their own CD's or just down't like DRM will consider us a viable choice of getting music from ! Oh, woe are us !"

    Of course, it's possible that the record labels will pull their music now...

    --

    Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

  49. The Real Reason this was Reported by syntap · · Score: 2, Interesting

    Everyone with any computer audio recording experience knows that the reported Napster crack is as old as sound card input/output. But the source of the story was Engadget.com, which is basically a heavily pro-Apple electronics product news/review site.

    The timing of this not-new-news release, right when Napster's new monthly flat-fee subscription service debuts, was no accident. It was meant to hit Napster on Wall Street, and as of this writing in early trading it's already paltry stock price is down over 2% on the news.

  50. Output Stacker Download by slewfo0t · · Score: 2, Informative

    Since I know that the Output Stacker won't be available for long... I have posted it on our website. It is available here for download... http://forums.grtg.org/index.php?showtopic=214 - Slew -

  51. Re:*I* call bollocks on *you* by Sarastrobert · · Score: 3, Insightful

    ...Or until you persuade the government to criminilize attempts to defeat your DRM. Then you can make your DRM encryption as weak as you want, and let the police pick up the slack for your laziness/technological shortcomings.

    Well, this doesn't exactly help alot since copying the music is already illegal (copyright infringement) providing you can not claim fair use.

    I'll make an analogy.

    Stealing bikes is forbidden according to law. But some people still steal bikes fully aware that it is illegal. So bike owners install locks on their bikes to prevent theft. But some bike thieves will just bash or pick the locks and still steal the bikes.

    So, lets assume that BOAA (Bike Owners Association of America) puts some serious lobbying money towards making it illegal to circumvent bike locks. Will this stop bike thefts? Bike thieves are already breaking the law, so what makes anyone think that they will respect the latter law when they already disregard the former?

    I call bollocs on the Lawmakers...

    Disclaimer: I am not actually comparing stealing bikes with downloading illegaly copied music, I do it just to prove a point

  52. Re:Specialist Subject: the Bleeding Obvious by yeremein · · Score: 4, Insightful

    The upshot of all which is, it's trivially easy to capture data meant for the sound card; and there is no place for any kind of security through obscurity, because everyone needs to know at some level how to send data to a sound card.

    Not so fast. Microsoft is already a step ahead of you with Secure Audio Path. Essentially, Windows Media DRM can require a digitally signed audio driver which accepts encrypted input. It simply won't talk to an "untrusted" driver (such as TotalRecorder).

    That said, the Napster representative in TFA is incorrect about the type of exploit this is. The audio isn't being captured by a "rogue" sound driver (or an analog loopback, which is what she makes it sound like). It's being redirected to disk via a Winamp output plugin. Ordinarily, Winamp will refuse to write to a disk writer plugin given a DRM'd input file, but the Output Stacker plugin sends audio to *both* the DirectSound driver (the "primary" one, which is kosher for DRM'd audio and is the one Winamp sees), _and_ the secondary driver, which is a disk writer plugin.

    The upshot is, if you want a means to remove encumbrances from legally acquired media, download Winamp and Output Stacker now before Nullsoft "fixes" this "exploit". But don't share anything you decrypt online, or you'll only vindicate the suits who press for DRM to prevent file sharing.

  53. This Rumour Confirmed UNTRUE by Anonymous Coward · · Score: 3, Informative

    I have spoke to a friend within apple who has told me they are aware of this rumour, it is NOT true, and it is apparently being spread by people like gmajor(look at his several replies acting as if the "email" is a fact) as some sort of FUD campaign (maybe gmajor does the astro???). I have to admit though, he had me at first...we all know between running sucessful companies and coming up with innovative products steve is busy RABIDLY FOLLOWING BLOGS!!! UZ PWNED!

  54. Re:Damn...must not be very high quality songs... by untaken_name · · Score: 2, Funny

    You think?

    I think so too. I also think the way it was phrased was ambiguous. I think that's why I made the joke.

  55. Um... duh? by Audigy · · Score: 3, Insightful

    Christ almighty, way to make a mountain out a molehill.

    As long as any type of music is taking an analog path out to the listener's ear, it will ALWAYS be possible to "crack" ...just route your soundcard's line out to the line in jack, creating a loopback, and have fun with your audio recorder program.

    That's not cracking, it's common sense.

    Talk about your sensationalist journalism... I was expecting to read some article about a batch processor that strips the DRM from the MP3 files, not requiring decoding and re-encoding again.

    --
    [an error occured while processing this directive]
  56. Re:Damn...must not be very high quality songs... by untaken_name · · Score: 3, Funny

    "CDs" it is plural

    It's always nice when someone doesn't get the joke. It's even better when they reply with broken English. It's best when they're trying to correct me using broken English while missing the joke. Thank you, sincerely.

  57. Who it thier right mind by fozzmeister · · Score: 2, Interesting

    would purchase any music at 96kb/s (stream) or 128 (download), unless it was your average cheesy pop. My sis had a few 128's and there is one particular song that we both like (NERD - Almost Over Now, Jason Nevins Mix, which is def _not_ the song I would pick for testing quality), she listened to my 192kb/s and said its not very different, the i put her's on again to listen too and you could actually see the "oh shit that does sound like crap" in her.

    Im sure the 128 of Napster is probably equiv to about a 160, but that really still isn't good enough, particularly when you consider that your buying a crippled version (Which is fine if they could guarentee that there will always be mp3 players, portable and computer based) and to keep your going to have to burn/rip which is going to kill all definition that the original song had. If I buy something digitally I expect to be able to keep it,

    I'd rather donate $2 per track to the artist and download off a dodgy P2P app than pay any music company $1 and be forced to re-buy it when they decide that its time for a new music tech and for everybody to re-buy thier old music.

  58. Re:Quality by cens0r · · Score: 4, Insightful

    Please remove vinyl from your list. A well taken care of record on a good turntable with a good phono pre-amp can often sound superior to the CD of the same music.

    I still prefer CD's because of their ease of use and portability, but when I'm sitting alone in my main listening environment, I definately perfer the sound of vinyl.

    --
    Jack Valenti and Orrin Hatch will be first up against the wall when the revolution comes.
  59. Will I? by hummassa · · Score: 4, Insightful
    Yes.
    will you be able to extract the DRM-protected content on your memorystick?

    I repeat: YES, I will.
    If it's on *my* memorystick, I will extract it. If it requires a closed software to play it, I'll install such closed software under a hacked version of QEMU that instead of playing some stream writes it into a file. Digitally.
    I guess Akio Morita did not know what he was getting into when he had the CD/DAT idea "let's write everything digitally in the media".

    Repeat after me: there is no DRM. It's cryptographically infeasible. One of the pillars of crypto is that the key must travel between Alice and Bob by a secured mean, so that Eve cannot get a hold of it. When Bob is schizo and Eve is the same as Bob, Eve has the key, so Eve has the message. Pristine. Not even quantum crypto can give a real DRM.
    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
    1. Re:Will I? by Troed · · Score: 2, Insightful

      Please tell me how you'll be able to extract the information from your memorystick when you just reflashed your phone, erasing the cryptographic key needed to decrypt the content.

      We're back to you being able to run software on your phone, while still being able to access the key. To do that, you probably need to circumvent the cryptographic checks that are in place to see if the software you're trying to run/flash is signed with the correct key.

      So, again. Please tell me the private signing key used for signing Xbox games. That we found bugs in the Microsoft implementation (bunnie found a key travelling in cleartext, myself and Franz found out they used TEA for hashing which it's not good for) only means that that implementation wasn't good enough - a new one might be.

      In the end you'll discover that you need to extract 1s and 0s from a physical chip with LOTS of security in place - security which will cost you a shitload (and I really mean it) of money to build equipment to circumvent.

  60. Napster was right by EvilStein · · Score: 3, Funny

    Now it really IS cheaper than iTunes. :)

  61. Only true for lossless codecs by NickSD · · Score: 5, Informative

    This is only true for lossless codecs. This won't work for any lossy codec. You can't go from MP3->WAV->MP3 for example without quality loss. Same with WMA, AAC, and pretty much all the popular lossy codecs. For more information, see this discussion on HydrogenAudio.

  62. Why Bother? by Junior+Samples · · Score: 2, Interesting

    There's nothing on Napster that can't found elsewhere on the internet without charge. The free choices are usually encoded at a higher bite rates. They're not encumbered with Digital Rights Management and the overall quality is usually better.

    Don't waste your time with crippled audio formats. If you really like the stuff, go buy the CD and rip it yourself.

    If you are going to pay $15 a month for a subscription, you are probably better off with XM Radio (which is also rippable).

  63. Re:One more time... by Otto · · Score: 2, Informative

    I recommend any beginners book in crypto - most of what you wrote above is utter nonsense.

    To be fair, so is most of what you wrote.

    The point here is that you're talking about two or three different things simulataneously. The XBox, for example, doesn't have DRM. It has various protections, I grant you, but calling these DRM is a bit outside the usual scope of the term.

    Getting back to the original post you made:
    Please tell me the private key used for signing Xbox games. I'm well aware that we (my wording here is intentional, and a giveaway) managed to circumvent it anyway, but all things are most definitely NOT hackable.

    Why would you need their private key? The answer is that you need the private key in order to create a game to play on a stock, unmodified, XBox. Realistically, this capability has very little to do with the hackability of the XBox itself. You can hack the XBox up down and sideways without the private key, you just can't create a game to play on a non-hacked XBox without it.

    You're free to reflash your cellphone, but will you be able to extract the DRM-protected content on your memorystick?

    One way or another, yes, you will. If you can read the memorystick, then you can try attacking the encryption directly. If the memory stick doesn't actually contain the decryption key (say it's in the phone), then you can disassemble the phone, hook it up to a chip reader, and find/extract the decryption key. Don't care for that? Then rewire the phone's audio headphone output to go to a computer's line input and analog record the thing. Easily enough done.

    Whatever, the point is that somehow, someway, if you can hear it, you can make a copy of it. And furthermore, if you can hear it, then it's possible to make a *perfect* copy of it, although it may not be feasible or may be quite difficult to obtain the necessary keys (not everybody is up to disassembling their hardware and using EPROM readers and such).

    DRM, broadly defined, is the attempt to use technology to separate the acts of experiencing content and copying content. Since the content must be accessible to experience it, it's impossible to also make it inaccessible for copying purposes. There's no real-world difference between the two. They can make it as difficult as they like with the use of custom hardware and proprietary formats and such (although taken too far they run the risk of losing their customers), but it cannot be made impossible.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  64. Bollywood's copy protection scheme by PsiPsiStar · · Score: 2, Funny

    Bollywood has a method of preventing their movies from being copies which is virutaly foolproof.

    They produce mostly Hindi musicals.

    --

    ___
    It's the end of my comment as I know it and I feel fine.
  65. Re:Specialist Subject: the Bleeding Obvious by Dirtside · · Score: 2, Interesting
    From MS's Secure Audio Path page, that you linked to:
    Secure Audio Path provides a much higher degree of protection to audio content by making it virtually impossible for untrusted applications or audio drivers to access the unencrypted audio bits.
    (emphasis mine)

    I love that they admit that SAP doesn't make it actually impossible for untrusted applications to get access to the unencrypted audio. Just virtually impossible. And of course it only takes one dedicated person to figure out how to weasel through that tiny sliver of opportunity afforded by "virtually impossible," and SAP is blown wide open. Just like every other DRM scheme. Ever.

    Of course, people like to trumpet Palladium and such things as the ultimate cure, without realizing that A) you still have access to the physical hardware, and B) does anyone really think Microsoft -- Microsoft -- is going to be able to implement such a complicated security scheme without making any mistakes that allow people to hack it?

    --
    "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
  66. Re:OK, no problem... by yeremein · · Score: 2, Informative

    I'll get a simple cable and connect the sound card output to it's input. Then I'll record the songs. Of course I'll loose some quality if it's an analog output, but is it really that significant? I don't know, I haven't tried...

    There will be a loss of quality from the D/A->A/D->recompress process, but it might not be noticeable if you have a good sound card and you have the volume levels set appropriately so as to maximize the signal-to-noise ratio without clipping.

    Don't think the RIAA doesn't have their eyes on that method too, though. They'd like to see mandatory watermark detection in all analog-to-digital converters in order to plug the so-called "analog hole". See the EFF's Endangered Gizmos list for more info.