Cost Analysis of Windows Vista Content Protection
David Gerard writes "Security researcher Peter Gutmann has released A Cost Analysis of Windows Vista Content Protection, a detailed explanation of just what the protected-content paths in Windows Vista mean to you the consumer: increased hardware cost and even less OS robustness. 'This document analyses the cost involved in Vista's content protection, and the collateral damage that this incurs throughout the computer industry ... The Vista Content Protection specification could very well constitute the longest suicide note in history.'"
Our company did last year, cities of Vienna and Munich did, French parliament did, it should work out very nicely for you too. Our former XP users love KDE.
No need to put yourself through pains when you can improve security, save money and achieve a good deal of vendor independence all at the same time. Why support the Microsoft monopoly by paying ridiculous prices for bug ridden software with DRM restrictions, when you can run Free software on the industry standard (and thus inexpensive) hardware?
Knowing everything I know now, I only regret that we did not migrate to GNU/Linux sooner.
It really doesn't matter. Before long each new Dell and every other new computer will be shipping with Vista. It could be the worst operating system ever, and within a few years everyone will be using it. There is virtually no way for Vista to fail, given the circumstances.
This so-called analysis was written by thinking of a conclusion first, then filling in the blanks. There are no citing of references to support his claims.
This is just simply a political blurb.
Every time I see an analysis of what DRM means to the consumer, I see all this crap about how it's going to make things more expensive and lower quality. And that's true - SOME things will be more expensive and lower quality.
But these analyses never stop to consider HOW MUCH will be more expensive and lower quality, or exactly what changes we're discussing. What will be lower quality and more expensive is the DRM-protected content. And DRM sucks. People will complain. Vendors will eventually listen.
At the moment, we have a lot of content providers who refuse to provide any content without DRM because they can't imagine making a profit otherwise. DRM gets them to provide something instead of nothing. Historically, unprotected content outperforms protected content; because you spend nothing trying to stop people from stealing it, you recover more revenue than you were losing to theft anyway. If we just let providers choose, they will eventually make the right choice. We can't force them to make the right choice NOW, because they won't make it. They'll provide zero content.
That's the false dilemma. Everyone seems to think the choice is protected content or unprotected content, but it's not - it's protected content or NO content. Fighting the protected content is not going to get you what you want. You have to let the providers make their stupid DRM plans and try them, so they'll see for themselves that it's stupid.
Microsoft cheerleader, blue flag waving, you got a problem with that?
Content Protection is a explicit opt-in from content providers.
Its not mandated by the OS.
Migrating a different OS doen't give you access to the protected content.
The Vista Content Protection specification could very well constitute the longest suicide note in history.
If hysterical stuff like this is the best the anti-Microsoft forces can come up with (and this guy isn't the first one, just the latest in a long line of hysterical essays), it's pretty clear that Microsoft ain't that bad as a company, despite what some people want to believe. Maybe, just maybe, if you have to resort to that kind of rhetoric, maybe your position isn't that strong?
Disclaimer: I don't hate Microsoft. I am, however, frequently annoyed by their mediocrity, and unbelievably frustrated that someone doesn't have the balls to start a company dedicated to making an absolutely, positively 100%-compatible Windows clone based on a Unix-like operating system.
Sometimes it's best to just let stupid people be stupid.
But, but, but... what about the high cost of retraining everyone to use all these new weird applications that don't make as much sense as Windows applications!!!? What about the steep learning curve since Linux is just inherently harder to use!!!? What about the fact that when the user tries to hit some valid work related site that needs to access media like Powerpoint, Flash 9 and higher, Windows Media Video, and the like that they won't be able to or will have a reduced quality end-user experience compared to MS Windows??? I've seen the Xine plug-in for Firefox and it doesn't work right. Instead of embedding the content in the browser as it should it pops open a new window and only about 20% of the time does the content actually play!! What about the fact that unless you've got a few gurus on your staff, when there's a problem there's NO ONE to go to for support once the problem is out of your league? Forums? HAH! Yeah, you've got a down critical situation with your users and you're going to fart away valuable time on forums where you may or may not get an answer in a day? A week? A month? A year? Never? The only answer if to get Windows Vista because it was built for real work and not for geeks with no life. Got that?
[DISCLAIMER: The poster called 'eno2001' does not believe in what he stated above at all and is merely parodying the typical lies and misconceptions about GNU/Linux that come from the anti-Linux crowd. The poster called 'eno2001' expects many good responses to the false arguments presented above from the pro-Linux community. All anti-linux sentiments will be laughed at unless you're really good at what you do. The 'eno2001' has spoken.]
-"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
Google's Super Secret Search Algorithm: SELECT @search_results FROM internet WHERE @search_results = 'good'
Every touted improvement in Vista exists to make Microsoft's life and the life of their media and hardware partners better and more enriched. It is not, I repeat, not for your benefit or enjoyment. Recently MS stated this would be last 'turn of the crank' for an OS like this. I agree. This is because the only logical step next would be to lease you the OS and the hardware, only, and bar you from doing anything on your own with it. Since that's not bound to fly, yet (let's see how they react to Google) then the alternative is to lock you into their content, at least.
I think the point was more on the lines of, if you want to play blu-ray discs all you need to do is buy a blu-ray player.
But in reality that $2000 LCD monitor you have isn't going to help because it can't tell the video card that its a protected device, well you need to go buy a new monitor.
Wait that $500 video card can't detect trusted monitors, better go buy a new card that can.
Oh yeah, and that all digital surround sound system, well it isn't going to work at all so you need to go buy an analog one.
I think what Microsoft is doing right now is analogous to the old practice of offering a product at a higher cost initially just so you can then negotiate down to the price you really want.
... well why finish the sentence. "Most intelligent consumers" probably accounts for a very small percentage of the total consumer base.
You might claim it is apples and oranges. I think it's not. They design the product with more restrictive DRM knowing the consumer will not want ANY DRM. Then they 'listen' to the consumer by removing some, but not all of it. Thus arriving at a middle ground, but really closer to their originally planned position. This serves to possibly give them what they want while simultaneously making them look good in the eyes of the consumer.
Of course, most intelligent consumers decry
TLF
I do not respond to cowards. Especially anonymous ones.
Thats incorrect. Degradation is recommended by the HD standards only if the content provider has opted-in for content protection but the hardware used doesn't provide a complete protection path to the display.
So non-opted content will display with full fidelity regardless of whether a non-secured or secured mechanism is used to display the content.
Yes, he tends to be a bit outspoken at times. He's also a veteran contributor to the security field and tends to know exactly what he's talking about. So before dismissing what he has to say, you owe it to yourself to check his reasoning.
Parity: What to do when the weekend comes.
In the article, he a section on the potential hazard of Vista disabling video resolution in medical imaging applications. Leaving aside any issues of playing CD's in a work computer, I can see one outcome of this. The first time a blown diagnosis can be blamed on this, the malpractice lawyers will be heading after Microsoft. It's something they've got to be salivating over: The ultimate deep pockets! (cue theme from Jaws)
Simply put, MS could have made their life a LOT easier if they had put in support for a new product class - the Media Accelerator.
Imagine a card that had a couple of SATA interfaces, a video pass through input, and an audio pass through input. The card would have its own OS/firmware, and it'd be easy to control from an external software API.
Unprotected input would flow into it, but only it could generate video/audio for protected media. It'd automatically substitute its own video/audio for protected stuff.
This way, if you didn't care about "protected media", your computer and OS wouldn't be encumbered. If you did, you'd pop a couple of hundred for the Media Accelerator, and go from there.
Of course, this would have benefited the rest of the non-MS industry, too. Guess it is a bad idea.
jh
Content protection in Vista will not hurt Microsoft or their sales. Two reasons for this. Consumers are not educated enough to understand digital restrictions management. They will interpret it as “just how it works” and deal with it one way or another. Claiming these impedences to copying will damage Vista is similar to claiming that content scrambling of movies will damage the DVD market. The second reason comes from established expectations. People appear used to dealing with technology not working how they want it to or think it should. Crashing computers and malware are just part of life. Pretty soon, the inability to copy files will become subject to the same perception. That is, not being able to copy media will be seen as a technical limitation or just another failing on the part of the industry. People will buy it all the same because the water is being brough to a boil slowly and we all seem to have such ridiculously short-term memories.
Why bother.
"Not an actor, but he plays one on TV."
I dont think anyone is really afraid of that. All evidence suggests its just w2k/XP all again. Those wore also supposed to be the holy grail of computing but showed to be just minor improvements in some areas and degradation in others. I love DRM because it will drive people towards free systems. Afraid isnt the right word, rather a smug smile. The FSF etc should just ignore DRM and let Windows Vista users smack into the wall in a couple of years time. In the meen time extensive work should be done in improving OSS instead. Why spend any time trying to educate Windows users about DRM? They will find out soon enough, just tell them Linux is without theese restrictions instead.
HTTP/1.1 400
Thanks for the clarification. What are the odds a content provider won't opt-in for protection? In any case, I can't really make any justification for Vista (or high-def DVD) at this point -- especially if this article is accurate.
My guess is that the tighter DRM proponents squeeze, the more things will slip through their fingers -- to paraphrase someone I heard somewhere, sometime ago...
It must have been something you assimilated. . . .
A classic, absolutely classic instance of the thesis which Olson demonstrated in lots of case studies.
All special interest groups will find it in their interests to impose on society costs hundreds, thousands, millions of times greater than the benefits they receive.
In the present case, Big Content, to protect its rents, is imposing measures which will end up costing the US and the West enormously more than any benefits to Big Content.
But they don't care, of course, because even if we are all worse off, they are a little better off.
And so, you discover if you examine economic history, that revolutionary convulsions every 50 years or so benefit economic performance, by abolishing encrusted priveliges of various groups. And this is why 19c France in constant turmoil outgrew 19c stable Britain. And why the post civil war South did so well in the 20c... And why Germany grew so fast in the fifties.
And why the US is falling into paralysis today....
Think - up to this date os'es were mainly the basic framework to run programs on them. Even in that state, phletora of exploits, hacks, a million ways to hamper or exploit usage of a computer have surfaced in the last 15 years.
Now they are putting strong elements integral to os that are able to block, modify, permit or limit usage of some elements of os, software, 3rd party software, and even hardware. They are this way decreasing the workload of hackers/exploiters - now they just need to find a way to exploit the mechanism already present there.
Its no guessing that this will make using computers with vista both a pain in the ass, but also a security risk.
Read radical news here
The content has to be degraded UNLESS the rendering device (e.g. your HD projector) correctly answers an HDCP cryptographic challenge and agrees to play by the system/content's rules.
a l_Content_Protection
http://en.wikipedia.org/wiki/High-Bandwidth_Digit
One of the onerous 'features' I'm surprised the author just barely touches on is the Revocation List. Say you buy yourself that top-shelf Samshiba (fictional electronics company) HD plasma screen. Later, a disgruntled employee leaks Samshiba's master keys, or a weakness is found in their chipset's HDCP implementation. Samshiba is now added to the certificate revocation list. Any disc manufactured includes the most recent CRL, so playing any disc released after that date will permanently brick your display according to the standard (or at least cripple it to low-def, even if you then pop in an older movie that "used to work fine before"). Since the additions to the CRL have now permanently propagated to your player (also according to the standard), it will also brick any other Samshiba display you attach to it (no matter if you're playing an old movie).
Caveat Emptor is not a business model.
SOOOoo...this system makes it's way out into the marketplace, and soon after, content providers are providing "high quality" deliveries via wire or disc, and for the most part, the systems slowly go through an upgrade process to conforming hardware, finally letting the "high" in quality reach the user. Balloons fall, confetti flies and whistles and claps abound - you are running a "trusted system"
In a country far far away, a series of specifications, hardware manufacturers and technology folks band together to build the impossible: To make a machine decrypt the "high quality" content and push it to a jack. Nothing more, nothing less. They use a non-MS embedded OS and cook their scheme into an IC and viola! We have an unencumbered HD-DVD/BluRay player.
The market for this is illegal - in certain countries. But no matter, since once tapped on the above device, said port burns a new HD-DVD/BluRay disc, without licensing scheme. Some Volks-haXXor posts code to read port, strip tags from the raw stream, and pump back into a disc. Cheers from the masses, "it's been hacked!". Said streams make their way onto existing distribution mechanisms (torrent,p2p,the corner cart downtown) and you've got (wait for it) THE STATUS QUO.
Currently, only the tech-enlightened really got through the ever-lowering hurdles to download copyrighted content. Scare tactics and ethics keep most people in the DVD isle of the buy-it stores. I'm sure that will stay the same.
So, we'll simply have the MS bundled-systems with their crazy bugs, people complaining and conforming media for high quality. On the flip side will be folks not so much skipping the DRM in Windows, but getting non-DRM content to begin with. Windows has simply gone the way of the yes-man for DRM enforcement, leaving you with two choices: Lower audio/video resolution or playing only proper discs. Guess what you do with your big collection of "improper" discs: Play them on Linux. It could reinforce the sentiment that "Linux is for hackers, aka criminals" but I doubt that'll fly for long.
MS, like the media players before, will have to allow for "personal" content to be played at "high quality" eventually, since consumers are also media generators. Like now with audio, if you can get source content out of the DRM shackles, making it look personal, the entire SYSTEM from disc to monitor is bypassed quietly.
I'm prepared for a long period of relative component stagnation, while all this DRM for Vista gets sorted out. I doubt the legacy cards and peripherals will go away anytime soon.
Just in case you are not aware... Blu-Ray is a sony format. They also make consumer electronics... you know the things used to play these discs. You dont have to have Vista to play a Blu-Ray disc. You just have to have it to play the disc on a computer... Remember, this is all about NEW formats. If you want to change, you have to accept thier rules. If you dont like the rules, just stick with what you have. Vista has no affect on this. It is all about the MEDIA, not the OS.
Actually, the odds are pretty good for current HD media, because the publishers want more market penetration before they tighten the noose.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
You know, this point is apparently harder to understand than you realize. After all, even some people who aren't affiliated with the publishing industry still support DRM, because they mistakenly think it'll help them "protect" their own data. They fail to understand that that doesn't require DRM, but works perfectly well with plain encryption (in which the owner knows the key).
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
You get to talk to frequently talk to lovely ladies in India and swap very long strings of digits with them. Isn't re-activation fun? And if it is a stressful day at work, just hold the phone up to your ear while you rest and tell anyone that bothers you that you are on hold with Microsoft - you should be able to get away with an hour at a time before anyone gets suspicious. What fun! Every disaster recovery plan gets to add a few hours to acoount for waiting on hold to get new activation numbers for each rebuilt system.
Yes DRM sucks, but who honestly thinks that it is unreasonable to require new hardware and new drivers for new technology.
Raising hand.. Of all the media players I have, I have no wish to replace it all. I buy compatible content and leave the other stuff on the shelf. What ever happened to the consumer is right?
I have a DVD player that can play MP3's. I have a CD player that can play MP3's. My car is the same. Winamp works just fine on the Windows PC's with MP3's. Banshee works just fine on Linux with MP3's. I just bought a flash player. I noticed there are 4 incompatible DRM formats and there is not a single portable player that will play more than one of the DRM formats. All the DRM formats are incompatible with everything except a Windows PC. (I don't have an apple.)
My decision to buy a flash player was based on not the ability to play DRM in any format, but cost, ability to play MP3's, the ability to drad and drop, the ability to expand with a card slot, and the recording abilities for both FM and Voice. I picked up a flash player for under $40 and it does not support any DRM format which is fine with me. What is not fine with me is the limited selection of legal MP3's online.
For those who need to know, the player is a Coby model MP-C751. Drag and drop from any PC. Plays MP3's and unprotected WMA files. Has FM tuner built in. Records from mic and FM as MP3's.
You may not like the specification, but you have the option to use it or not. If Vista didn't support it, you wouldn't have that option at all. So, again, where is the problem here?
If you play premium content, outputs get turned off or severly degraded. This is applied globaly, not just the premium content. Expect your VOIP or video game to go to crap if you browse a website with premium content.
The truth shall set you free!
As far as I am aware, Vista is the ONLY OS available (soon) that will play Blu-Ray or HD DVD's. However the reality is that the computer is NOT the main delivery system for this type of media. In fact, it is a minority compared to DVD players, and will most likely be but a small % of the market for HD or Blu-Ray players. The reality is that more people watch video on Televisions, and dedicated devices, than do on computers (despite a bias on slashdot). Microsoft has gone the extra step to allow people to acess Blu-Ray and HD video content on a computer using Vista... but they didnt set the requirements. Just because it is simpler to meet the standards with a VCR like device, than with a computer, does not mean that Vista is going to fail, because people dont want to buy the new hardware for thier machine. There is NO additional cost for this feature... only the option to use it if you have the requirements. The fact that you can actually view the media, but at a degraded quality, back to 'normal' shows that in fact, this is just a benefit... not an expense.
Do you know multiple people some of whom learned Windows first and some of whom learned Linux first so that you can objectively state which is inherently easier to learn? I do. And the evidence I have seen is in Linux's favor when no predisposition to Windows is involved.
But neither I nor you can discern the truth about the matter until a sufficient body of people have learned each way and we can compare the ease of their progress. Just because it may be hard for you to adapt your biased skills to Linux doesn't mean it's inherently more difficult to learn Linux outright.
My father-in-law and now some of his older friends are set up with Ubuntu and they have a way easier time than their friends who use Windows. And all of these people are new to computers. I set up my FIL with Ubuntu initially and gave him some lessons over VNC. He has now installed Ubuntu on several people's computers at a retirement home in Portland all on his own. And even being a nontechincal guy he was able to get them on a better foot than they were using Windows. So there. Ubuntu is easier for your grandma when you're not there to clean out her spyware. And old people love the Beryl Cube effect.
While Windows development starts over with a complete rewrite every couple of years, open source will just keep steadily building on itself and get better and better and better with each passing year. It's quite fun to watch (and even more fun to participate in).
Parent replied:
That's incorrect if you're using digital connections (e.g. DVI, HDMI) and commercial BluRay/HD DVD discs (almost all of which use AACS). If you try to play almost any commercial disc using a digital connection and you don't have HDCP protecting every step of the playback process, then it probably won't play at all. However, it probably will play back in full resolution over analog connections (e.g. VGA, component) because most commercial discs have not implemented ICT yet. When ICT is implemented, then the image (over analog connection) will be degredated to a lower resolution. Did that make sense?
To clarify, the rules are different for digital and analog connections. The rules are also different for AACS and ICT.
AACS (Advanced Access Content System) is the encryption system that's currently used by almost all commercial BluRay/HD DVD discs and requires HDCP everywhere (video ouput/input, driver, playback software) to playback (at any resolution) over digital outputs (e.g. DVI, HDMI). The disc probably won't playback at all over a digital connection that isn't fully protected by HDCP. Here's a link with a good explanation: The Authoritative BD FAQ: VIII. Device Connections
ICT (Image Constraint Token) is the DRM system that currently is not used by commercial discs but, when it is implemented, will degrade the resolution if analog connections are used.
You're much more likely to run into DRM problems on a computer/LCD than on a set top box/digital television. All BluRay/HD DVD set top boxes (except XBox 360) have all the DRM requirements built-in and all digital televisions have (at minimum) high-def analog inputs. On the other hand, most high-end computer/LCD setups today are connected with a DVI connection that doesn't have HDCP in either the video card or LCD. These computers (with incomplete HDCP implementations) won't play the movie at all using a digital connection (it will just display an error message). These same computers can playback HD content over a VGA connection (if ICT hasn't been implemented), but that would require changing the LCD connection from good digital to inferior analog. Who would want to do that just for watching HD movies?
More AACS/ICT/HDCP explanations:
HD Video Playback: H.264 Blu-ray on the PC
Review: Sony BWU-100A Blu-ray Recordable Drive
TO START
PRESS ANY KEY
Where's the 'ANY' key? I see Esk, Kitarl, and Pig-Up...