Slashdot Mirror


iPod Cracked, But Does it Matter?

Bennett Haselton writes "The Associated Press is writing that "DVD Jon", known for breaking the copying restrictions on DVDs, plans to market a method for breaking the copy protection on songs purchased from iTunes Music. What's missing from the story is the fact that converting iTunes music into unrestricted formats like MP3 is already trivial. In principle it's impossible to prevent music from being copied anyway, because a user can always play a song through an audio output jack and use another device to record the sound; there are several other methods that work by reducing the same principle to practice. Bottom line: there's no reason yet to get excited about the iTunes-cracking technology (and, indeed, no reason to buy an iPod), when you can already convert songs this way." Bennett's full article on the subject is available below.

According to an Associated Press story, "DVD Jon" Johansen is planning to market a technology for cracking the copy protection on songs purchased from Apple's iTunes Music Store.

This technology will probably be much discussed in the press as the release date draws nearer, but it's a case of using a flame thrower to kill a fly. It's already possible to convert Music Store songs to MP3 without even using any functionality outside of iTunes.

Apple doesn't make this easy to find, of course, and in fact tries to make it look impossible -- if you set your preferred import format to MP3, then right-click on a song in your iTunes "Purchased songs" list and click "Convert selection to MP3", you get the error: "[song name] could not be converted because protected files cannot be converted to other formats". But you can easily burn a series of songs to a CD, then select the songs on the CD and import them into MP3 format. (Of course, if you don't like wasting a writable CD each time you convert your songs, then wait until you've purchased a few more songs and convert them all at once.) All of this is based on core iTunes functionality, which won't go away unless Apple decides to stop letting users (a) burn CDs or (b) import CD songs as MP3 files, neither of which is likely.

But suppose Apple does manage to block this path. (The easiest way I can see would be to write a hidden code on each CD burned from protected songs with iTunes, so that iTunes would refuse to re-import that CD into an unprotected format. Users could re-import the songs with another application, but at least they'd have to open two programs!) You can still use a program like Total Recorder that can capture any sound output on the computer and save it to an MP3 file.

And even if it ever becomes possible for the audio playback application to seize control of the operating system in order to stop programs like Total Control from working, you can always connect a portable MP3 recorder to the audio output of your computer.

It's a common misconception that if a copy-protection algorithm gets broken, it must be because the encryption was too weak or the algorithm was flawed. But the Achilles heel of any such copy-protection scheme is that in order for the content to be playable, the playback program has to "break" the encryption every time, in order to play it. If the content is encrypted using a key, the key has to be stored on the user's computer where the playback program can find it. (If you didn't have to store the key along with the encrypted content, you could use encryption algorithms that are believed to be impossible to break with today's computers, by 15-year-old Norwegians or anybody else.) But even though every copy-protection algorithm is breakable in principle, it's usually easier just to capture the content as it's played back, which is what the previous examples do.

Logically, I think the only algorithm that would help to fight music piracy would be one that embeds a unique "fingerprint" or "watermark" in each downloaded copy of a song -- in the audio itself. A good fingerprint would have these properties:

  • it should not be noticeable enough to interfere with the user's enjoyment of the song
  • it should not be possible to copy the song in a way that destroys the fingerprint, without degrading the song quality and diminishing its value
A good example is the "cap code" dots that appear in certain frames of a movie; these are supposed to be unique to each movie theaters so that pirated movies can be traced to the theater where they were filmed off the screen. This, of course, doesn't make the film traceable to the individual pirate who filmed it, but it makes the movie theater accountable, and incentivizes them to prevent piracy. Unfortunately the "cap code" dots tend to fail the first criteria above -- people do find them annoying, to the point where they're nicknamed "crap code". (It would also be easy to remove them from pirated copies, but few people bother, since the cap code only gets the movie theater in trouble; it doesn't incriminate the individual movie pirate.) We can only hope that any fingerprints embedded in song files are a lot less intrusive.

In the meantime, don't get taken in by the hype around a new way to "crack" the existed restrictions on copy-protected song files. They were never really protected.

21 of 370 comments (clear)

  1. DRM sucks, news at 11 by tomstdenis · · Score: 4, Insightful

    Is anyone really surprised by this?

    DRM is such a futile idea that the only way it would be possible would be to lock down consumer electronics so badly as to make them virtually function free.

    We call that the theatre or a live performance.

    Tom

    --
    Someday, I'll have a real sig.
    1. Re:DRM sucks, news at 11 by gEvil+(beta) · · Score: 5, Funny

      Trying to make music uncopyable is like trying to make water not wet.

      Behold the ice cube! : p

      --
      This guy's the limit!
    2. Re:DRM sucks, news at 11 by elrous0 · · Score: 4, Funny

      And I shall offer comptetition with my new patent-pending innovation: "steam" -Eric

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    3. Re:DRM sucks, news at 11 by tomstdenis · · Score: 5, Funny

      Shut up Bruce.

      Besides DRM is more than just copy protection. it's "rights" protection, like I have the "right" to only permit you to view that DVD on Tuesdays between 9pm and 930pm. I have the "right" to stop you from sharing the DVD, i have the "right" to stop you from backing it up or using clips for fair use purposes. I have the "right" make the media only work in select markets and then lock down the number of different players...

      Effective, I have the "right" to make you my bitch. Squirm all you want, I'll cry foul and get the Federal government to lock up more kids!

      Tom

      P.S. note the quotes around "rights"

      --
      Someday, I'll have a real sig.
    4. Re:DRM sucks, news at 11 by Raptor+CK · · Score: 4, Funny

      If the end result of DRM was that I'd have a live band following me at all times, I'd be all for it.

      --
      Raptor
      "Procrastination is great. It gives me a lot more time to do things that I'm never going to do."
    5. Re:DRM sucks, news at 11 by igny · · Score: 4, Informative

      Wrong, it is energetically favorable to have a thin film of liquid on top of ice regardless of the pressure.

      --
      In theory there is no difference between theory and practice. In practice there is. - Yogi Berra
    6. Re:DRM sucks, news at 11 by eldepeche · · Score: 5, Informative

      That isn't at all what copyright means. Copyright regulates distribution, not use. If I buy a record, I do not have the right to make bootleg copies of it and hand them out or sell them. If I buy a book, I can't photocopy all the pages and staple them together and hand them out, or type it all into a text file and upload it onto my website. The copyright holder can, and can grant the right to do so. Before you accuse people of not understanding copyright law, you might want to know the definition of copyright.

      The concept of fair use is mostly separate from copyright, because it is use and not distribution. If I buy a record and make a tape recording (or a digital one) so that I can listen to it on a portable player, copyright law has nothing to say about it because I'm not distributing it. If I buy a book and type all the content into a text file so I can read it on my laptop, that's fine.

      The two areas come into conflict mostly due to the DMCA. Until this law came into force in the US, and its sibling pieces of legislation in other countries, DRM was annoying, as it inhibited place-shifting (fair use), but easily circumvented. The DMCA made it illegal to circumvent copy protection, so that, in theory, a person could be prosecuted for removing DRM in order to use a digital file on a portable player different from the intended one. In practice, it allows manufacturers of printers to sue manufacturers of replacement cartridges.

      Anyway, I mostly just wanted to tell you that you don't know what you're talking about. I can't tell if you're joking.

    7. Re:DRM sucks, news at 11 by berashith · · Score: 5, Insightful

      This is how my wife felt, until she tried to watch a DVD that she owned, on a tv she owned, using a laptop that she had purchased the DVD drive in for the purpose of watching movies (this was several years back). When she wanted to use a large screen and not hunch over the laptop, a simple S-video cable out to the tv showed the desktop of the laptop. Unfortunately, all of the content in the dvd playing program came out black. When I explained that this is DRM and its uses, that the maker was more worried about the potential of her making a vhs copy than her ability to watch the movie unless she went out and purchased their "approved" hardware, she changed her mind quickly.

      I don't dislike DRM because I like free stuff. I dislike DRM because it artificially limits me. Before an argument about license and legitimate restrictions comes up, remember that I have to pay again if I lose or break my copy. The media companies need to decide that I own something, or that I license something, and give the rights to the consumer that correspond to the situation. They cant limit me based on the situation and change the rules only with the concern of screwing me for every penny.

    8. Re:DRM sucks, news at 11 by Doctor+Memory · · Score: 5, Interesting
      But if my DVD goes bad then it's my problem
      Yep, just like if you dropped a vinyl album and it broke.

      Or if I want to play my DVD on a device that uses a different format, too bad for me.
      Yep, just like if you wanted to play your vinyl album on your 8-track player. Or your wax cylinder on your Gramophone. Imagine if the Beatles had been around earlier, how many times would you have had to buy The White Album by now?

      Seriously, I don't think the media companies are restricting people's usage any more than they used to, it's just that people want more from their media because the potential is greater. You might as well complain that you can't listen to satellite radio on your car's AM radio even though you purchased a subscription...

      Hopefully, once they've figured out their One True DRM, it'll be incorporated into everything, so I'll be able to copy shows from my TiVo onto a DVD so my daughter can watch them in the car. And yeah, I realize that if there wasn't any DRM I could probably do that today, but that's not the point. The industry is fixated on curbing piracy, and I'm not a pirate, so I say the sooner they get something they're comfortable with in place, the sooner I can start lobbying for digital medium independence. Once the DRM BS is settled, we can start agitating for our rights under fair use again, and have a better argument ("Hey, as long as it's protected, I can copy my own DVDs onto my media server and watch them from a hotel in Bangkok, right? I mean, I purchased the right to view them, didn't I?").
      --
      Just junk food for thought...
    9. Re:DRM sucks, news at 11 by Anonymous Coward · · Score: 4, Insightful

      Well, I am a pirate, and DRM doesn't stop me doing anything. The only time that DRM has had any negative effect on my experiences on using content is when I purchased the content legally. At this point, I don't pirate media to avoid the costs (I WANT to support the artists financially, though certainly not the Ass.s of America), I pirate media to avoid the problems that come with obtaining it completely legally. If it were an option, I'd send ten bucks in cash to the artist after pirating their album in order to show my support for them, but make it clear that I don't support the policies of their label (not to mention, they'd actually see some of the money from the 'sale').

      DRM doesn't do shit to prevent copying - small or large scale. The hardcore pirates aren't phased in the least by DRM, and most people looking to send someone a few songs now will just burn a CD rather than being bothered by crap upload speeds and email antivirus, and in doing so strip the DRM from the tracks. The only thing it accomplishes is making sure that Joe Public has to buy another iPod (or PlaysForSure device, or Zune) when their current one dies, and stick with the same brand. It's not a damn thing more than vendor lock-in, and all of the media companies know this.

      I understand where they're coming from and that they want to protect their content. I have plenty of things that I'd want protected too. But unlike them, I've realized that treating (potential) customers like criminals in order to try keeping a couple sales drives them to steal an unprotected leaked/cracked version of what I currently have, and will encourage them to buy from other vendors that have an equivalent product without being so draconian about it.

  2. Bullshit! At least the editor(!) might RTFA! by mstroeck · · Score: 5, Informative

    He is going to market a way for COMPANIES OTHER THAN APPLE to create copy-protected content that is playable on the iPod. None of the crap you just wrote is in any way relevant to what he is up to.

    1. Re:Bullshit! At least the editor(!) might RTFA! by elrous0 · · Score: 4, Funny
      Geez, I know this is /. But you think at least the SUBMITTERS could RTFA.

      -Eric

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    2. Re:Bullshit! At least the editor(!) might RTFA! by zeromorph · · Score: 5, Interesting

      Yeah! The point actually is that he is going to commercialise his hack. And that is something more newsworthy than the fact that you can copy DRMed material through a digital-analog-digital conversion.

      And if he (or they i.e. DoubleTwist) is really doing that - what will Apple do to him/them in court?

      DoubleTwist seem to be pretty sure about not being sued, but I can't imagine Apple not taking them to court. And thyen will any mp3-player manufacturer buy it before the whole issue is settled?

      --
      "Hannibal's plans never work right. They just work." Amy/A-Team
  3. But you lose quality by kill-1 · · Score: 5, Insightful

    You lose quality if you first convert audio from digital to analog, and then sample it again. But in the age of "CD quality" 128 kBit MP3s and crappy PC speakers, who cares about audio quality anyway...

    1. Re:But you lose quality by mgabrys_sf · · Score: 5, Informative

      Audio Hijack from Rogue Amoeba. There - no analog conversion. Was that so hard?

    2. Re:But you lose quality by pla · · Score: 5, Informative

      Audio Hijack from Rogue Amoeba. There - no analog conversion. Was that so hard?

      The grandparent post has the right idea, but either misspoke or misunderstood the real problem...

      Even with "perfect" fidelity analog (or in the case you offer as an alternative, bypassing the analog step completely), playing and recompressing to MP3 will still cause a loss of quality, for two reasons.

      First, AAC throws away slightly different "unneeded" parts of the sound than MP3 (or Ogg, or whatever lossy format you want to use) does. This means you have a serial reduction in quality with every generation of transcoding. You can avoid this problem by transcoding to a lossless format ("lossless" at the same sampling rate and number of bits per sample, anyway, since no truly lossless encoding exists, not even in analog)... But doing so gives you a much larger file with the same (lossily compressed) quality as the AAC you started with.

      Second - and your suggestion may get around this, if the sound hardware allows it - Resampling an audio stream will virtually never capture the exact same moments in time, with the same exact starting point. Thus, even reencoding with the exact same encoder as the original will still result in the same sort of quality loss you see from transcoding.


      Thus, if you consider the convenience of downloading compressed audio as worth the loss of quality compared to buying a CD (for almost the same price new, and actually less if you buy used) and ripping it yourself to something like FLAC - At least keep the original and never, ever transcode it. That means, if you want to really "own" your collection, you have the sole option of directly stripping out the DRM. Any other method will sacrifice quality for the convenience.

  4. iPod Cracked? by Meatloaf+Surprise · · Score: 4, Insightful

    I read most of the article and it discusses breaking drm on music purchased on iTunes. Can someone explain what this has to do with cracking the iPod?

  5. Oh Bennett by gEvil+(beta) · · Score: 5, Informative

    It's clear that Bennett didn't even bother READING the article that he's supposedly using to back up his claims. Nowhere in that article does it talk about DVD Jon (or his company) selling a tool to crack the iTunes encryption. However, what it does talk about is DVD Jon's company selling a tool that will allow other music retailers to encrypt songs that they sell in the format that is used by iTunes and the iPod.

    Remember kids, Reading Is Fundamental!

    --
    This guy's the limit!
    1. Re:Oh Bennett by tabdelgawad · · Score: 4, Informative

      I don't know about TFA, but here is the first paragraph from a similar story on the BBC website:

      http://news.bbc.co.uk/2/hi/technology/6083110.stm

      [Begin Quote]

      The code that prevents music downloaded from Apple's iTunes store being played on any portable player other than an iPod has been "cracked".
      Apple has not commented on claims that Jon Lech Johansen has "reverse engineered" the FairPlay system.
      Prominent hacker Mr Johansen has made a name circumventing software used to restrict the use of digital media.
      His company, DoubleTwist, said that it planned to license the code to other digital music player manufacturers.

      [End Quote]

      Perhaps that's why the company is called *Double*Twist. It will allow both iTunes tracks to play on non-iPods and non-iTune tracks to be encrypted using Apple's DRM and therefore be playable on iPods.

      --
      Imposing Libertarian views on everyone online since 1992.
  6. crack still matters by theStorminMormon · · Score: 4, Interesting

    One common misconception I've come across on Slashdot a lot is that security is either open or shut. An algorithm is either secure or broken. This is not how security works, and a couple real-life examples demonstrate this. You lock the doors on your car, but someone can still just break the window to gain access. But this doesn't mean locking the doors is meaningless, it makes it harder (or more risky) for a thief to gain access to the contents of your vehicle.

    The same thing applies with iTunes. The question isn't "is it possible to strip DRM", but "how easy is it to strip the DRM". I don't think, for example, that being able to burn to a CD or capture audio output is practical for most people. I have over 40 GB of music. A lot of it is burned from my CD collection, a lot of it is from my wife's collection, and some of it is downloaded from iTunes. So I've got well over 8,000 files and of those a couple hundred are DRM-protected. I honestly don't know which at this point. For me to DRM-strip them using either of those methods is going to be like a day-long project that, frankly, I don't have time for. In addition to that, I'm not sure about the sound-quality degradation in converting from MP3 to audio CD and back to MP3. Or about going from digital to analog back to digital. In any case, it would be pain in the butt to go through my entire library, and I may not be able to practically avoid some quality degradation. Yeah - DRM is already "broken", but at what cost?

    If the result of DVD Jon's crack is a program what will go through my iTunes library and batch process the files to strip any DRM automatically, then we have something on our hands that matters. In addition, there are a lot of additional potential applications for DRM-stripping to make music automatically portable across various music players. If my library was nothing but vanilla MP3s with no DRM, then it wouldn't realy matter if I accessed it with iTunes (for an iPod) or Windows Media Player (for various wannabe iPods).

    The effect of DRM is not to make it impossible to move your music around, it's to make it inconvenient. Convenience is not a side-issue for digital music. It's the issue. Otherwise we'd all just carry around CD players and 500-disc CD wallets. The digital music industry exists because of convenience, so any approach that not only circumvents DRM but does it painlessly is a significant improvement over DRM-skirting strategies that require additional effort from the consumer.

    -stormin

    --
    The Southern Baptist Convention has creationism. On Slashdot, we have porn.
  7. wow, new low by oohshiny · · Score: 4, Insightful

    Not only did both the submitter and the editor get wrong what the guy was actually planning on marketing, the whole thing was followed by an uninformed and irrelevant rant about watermarking. What's the problem, guys? Are mere dupes getting boring?