Slashdot Mirror
TiVo File Encryption Cracked
An anonymous reader writes "TiVo file encryption has been cracked. Details on the project can be found on the wiki. Mac and Linux users rejoice!" The project page says, "The conversion still requires the valid MAK of the TiVo which recorded the file, so it cannot be used to circumvent their protection, simply to provide the same level of access as is already available on Windows."
After reading the linked "details" article, I am at a loss to tell whether or not this will work with HD-Tivo. I've wanted to buy one of these for a long time (and they've recently hit the market, but at $700ish I can't justify the cost unless I have some way to archive my programing (and Tivo2Go is not offered for HDcontent). HD-DVD and BluRay are both non-starters at the moment, whereas HBO, Showtime, Cinemax, etc all play assloads of HD content all the time (including many movies that aren't out on DVD yet, as well as their own series such as Deadwood, Dexter, etc).
So can anyone tell me if this actually brightens the prospects of being able to use a series 3 HD Tivo to record HD shows and then archive them offline for storage? I did RTFA but the jargon about headers and address bytes and whatnot got a little heavy for me.
I am Jack's complete lack of surprise.
If I recall, the DMCA prohibits trafficing in technology to bypass security measures on copyrighted media put in place by the owners of that copyright.
The limitations on Tivo are copy protections put in place by a third party, not the owner. (I can still record the same programs on my betamax with no trouble.) Have I missed something?
Trying to use sarcasm in text-based forums does not work.
It's cool that Mac/Linux users can now access their media in the same way as Windows users have been able to. It's not *too* cool (ie: dangerous to TiVo, and by extension the implementors) because you still need your MAK key, and all it does is provide the same level of access as TiVo already provide to windows users.
... a few creative uses come to mind :-)
The crucial thing here is that TiVo took a business decision not to support Mac/Linux users. They can't really complain when those users decide to support themselves, giving themselves the same abilities that TiVo provide to Windows users...
Personally I think this is the right balance - my TiVo has been sitting in a corner since I moved house - the new cable box does everything TiVo did, and does it in HD (although the interface sucks a bit. Bad comcast). With this though, I can see a new lease of life for the TiVo
Simon
Physicists get Hadrons!
Funny, I've been doing this with my ReplayTV for years now. I made the decision to go replay instead of Tivo back then and enjoyed full access to my content, no features removed (I still have a commercial skip button that works, no pause ad's and everything works as it should and was promised when I bought it.
Nice to see that TiVO owners can catch up to the rest of us now, but a smarter decision at the beginning would have given you that choice from the start.
if someone figures out how to take a TiVo and install a linux distro on it and a mythtv install I'll be all over buying a Tivo or two to hack, but until then. I'll keep using my networked replays.
Do not look at laser with remaining good eye.
Check it out, and you'll be amazed.
I did, and I wasn't. It was a giant pain in the a** to set up and configure, it didn't work reliably, and the cost for hardware was way higher than buying a TiVo.
"Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
It hasn't been "cracked", since it still requires your Media Access Key to decode the video.
Remember what Bruce says kids: In the classic encryption scenerio, A(lice) encrypts her message to B(ob) to protect it from C(harles). With DRM, Bob and Charles are the same person!
This defeats TiVO's DRM that was used to prevent Linux and Mac users from watching shows on their PC.
Please stop replying if you have no idea what you're talking about.
It's a pain in the ass to set up and configure. I can't argue with you there. If you've done it once successfully, though (or two or three times) it becomes much easier.
However, I take issue with "didn't work reliably" and "cost was higher than a tivo."
My own MythTV works flawlessly, using a donated PIII-750 (cost: $0) for the server, and a Hauppauge 150 (cost: $60) for the tuner/encoder. There are no monthly fees. If you can show me a TiVo with lifetime subscription for $60, I'll be amazed. And tell my friends to buy it.
My MythTV also has features that TiVo will never have -- like the ability to automatically detect and skip commercials, the ability to select programs to automatically burn to DVD, and support for enough tuners to simultaneously record everything on every channel (well, in theory... I'd love to see the hardware for that!).
I like the TiVo. It's easy to use. But I like my MythTV a lot more. And I don't have to worry about what stupid decisions TiVo corporate might make -- like encrypting my videos so only I can watch them, support for the "Broadcast" flag, and wasting my storage space with advertisements.
A cloud of smug!
668: Neighbour of the Beast
"Why TiVo when you can MythTV?"
Why post on-topic when you can blatantly go off-topic and get modded up for it? This is a nuts and bolts Tivo article. It's not about considering one DVR solution over another. No other solution is even on the table here. I'm not the biggest fan of Tivo but I'm getting a bit sick of these folks who feels some sort of duty to shove in a reference to MythTV every time Tivo is mentioned. I for one won't be amazed by links about MythTV but I can't read a single DVR article that doesn't have some wonky poster extolling the virtues of MythTV. We get it. We know. Stick to the topic.
Commercial skip: Still works on the Tivo, except now you have to push a six-button sequence every couple months to get it to work.
Ads: Barely visible. They either appear on the bottom of the Now Playing screen, in which case they're optional, or it takes up an eighth of the screen during the commercial for the product being shown. In essence, the latter are only visible in the short time while you're fast-forwarding, showing you a stationary ad for a couple seconds. Those ads are exceedingly rare anyway. (I saw one for the Wii yesterday during primetime, but that's the first I've seen in weeks.)
It seems to me that many people on Slashdot, the Richard Stallman crowd especially, act like Tivo is most evil company on the planet for a few very minor faults (especially when it comes to DRM). In reality, I like Tivo because while they do pay lip service to the likes of the RIAA and the MPAA, it is only lip service. They didn't actually remove the commerical-skip feature: they just put in an easy workaround to get it. They included DRM to prevent themselves from getting sued, but it is extremely minimal DRM that is easily circumvented by the owner of the Tivo with a single DirectShow filter. If ReplayTV had paid lip service, it might still be around.
In fact, Tivo even does things that most Slashdotters would applaud, but are villainized nonetheless. Though they have a few patents, a lot of it is for innovative hardware. They aren't like some of the patent-whores who patent things invented fifteen years ago: they basically co-invented the DVR, and made a damn good one. They even use Linux and released their code under the GPL. And yet, we still hear Stallman complaining about the fact that the Tivo hardware locks you out from changing the software. What he (and many others) apparently miss is that when you buy a Tivo, you're not buying a general purpose computer: you're buying a DVR. I mean, God forbid that they prevent users from running them out of business by buying the hardware for far less than it costs Tivo to make it and loading MythTV onto it. (Yes, Tivo subsidizes the cost of the hardware, but only because you are agreeing to pay for the service.)
The key is produced through a (previously) unknown tranformation involving the MAK. Since the MAK is published, as well as the cipher, as well as the protocol.
I don't know what the intent of Tivo's DRM was, and I strongly suspect you don't either.
The DRM as implemented couldn't do what you say it was intended to do- people regularly rip from their tivo and show the results to people who don't have the MAK.
Its a wonderful piece of reverse engineering, but if you're nitpicking that people didn't break the turing cipher, I've got news for you: Nobody had to. They broke the method of creating the key.