Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Windows Media Player Encryption Hacked

Posted by Zonk on from the he-sure-is-a-busy-fella dept.

NubKnacker writes "Here we go again. The Register has the story about the encryption in Windows Media Player being hacked by DVD Jon. From the article: 'Jon Lech Johansen has reverse engineered a proprietary algorithm, which is used to wrap Media Player NSC files and ostensibly protect them from hackers sniffing for the media's source IP address, port or stream format. He has also made a decoder available." This has been pending for some time now. Do you see a reason to install Windows/WMP just to be able to view a webcast?"

2 of 293 comments (clear)

  1. nscdec.c by coolnicks · · Score: 5, Informative

    http://nanocrew.net/software/nscdec.c

    "VLC should have NSC support in the near future."

  2. Cool but not super cool by Psionicist · · Score: 5, Informative
    What this does is simply to take one of those files with meta info about a stream and translate it to a human readable format. The meta file looks like this:

    [Address]
    Time To Live=0x00000002
    URL=023m000000001WQ01q07G0S00w02y 0Bm1Z06y0P01b06C0Sm0k06q0QG1Z0780Rm1p06y0PW
    1q02u 0Om1l06q0Bm1f07C0OG1m06a0Bm1j0700TG1m06S0SW1X06G0P G0k06G0R01i0000
    Player Version=020m000000000MD00k0300BW0n02u0Cm0u03K0C000 00
    NSC Format Version=029G0000000008Cm0k0300000
    Channel Version=0x00000083
    Name=026G000000000UKW1b06m0QG1 X06C0OG1p07G0KW1X06G0QG1l0000
    IP Address=02EG000000000KCW0p03C0BW0p02u0Cm0k0340000
    IP Port=0x00000457
    Delivery Mode=0x00000002

    The utility translates it to this:

    [Address]
    Time To Live=64
    URL= /media/files/Cisco.asx
    Name= Demonstration Content
    IP Address=169.254.10.1
    IP Port=22593

    So you can grab the stream without using the MS program and netstat.

    The utility is more like a utility like base64 decoders (this is not base64 though) than a circumventing tool.