Slashdot Mirror


Interview with Developer of BackupHDDVD

An anonymous reader writes "HD DVD and Blu-Ray were supposedly protected by an impenetrable fortress. However a programmer named "muslix64" discovered that this was not the case, and released BackupHDDVD. Now, Slyck.com has an interview with the individual responsible, who provides some interesting insight to his success."

223 comments

  1. He is obviously not a native English speaker... by kad77 · · Score: 0, Offtopic

    Just an observation.

    1. Re:He is obviously not a native English speaker... by CRCulver · · Score: 5, Funny

      Good, that only narrows it down to five billion people. The MPAA will be sure to track down this scoundrel soon.

    2. Re:He is obviously not a native English speaker... by hackstraw · · Score: 1

      Good, that only narrows it down to five billion people. The MPAA will be sure to track down this scoundrel soon.

      And how many of those 5 billion people are named muslix64?

    3. Re:He is obviously not a native English speaker... by Anonymous Coward · · Score: 2, Funny

      Two, now.

      -muslix64

    4. Re:He is obviously not a native English speaker... by Anonymous Coward · · Score: 0

      Probably none, who would name their kid that?

    5. Re:He is obviously not a native English speaker... by McFadden · · Score: 4, Funny
      Probably none, who would name their kid that?
      David Beckham?
    6. Re:He is obviously not a native English speaker... by Anonymous Coward · · Score: 0

      So he's a terrorist!

    7. Re:He is obviously not a native English speaker... by JazzLad · · Score: 3, Insightful

      muslim + x64 = muslix64Just another observation No, muslim+x64 = muslimx64. musli + x64 = muslix64

      Sheesh, and they make fun of his English!
      --
      "If you have nothing to hide, you have nothing to fear." - Every fascist, ever
    8. Re:He is obviously not a native English speaker... by Digital+Vomit · · Score: 3, Funny

      I thought the name was describing the 64-bit version of a breakfast cereal?

      --
      Modern copyright is theft of culture from everyone and it retards the progress of the useful arts and sciences.
    9. Re:He is obviously not a native English speaker... by clickclickdrone · · Score: 1

      I'm muslix64 and so's my wife!

      --
      I want a list of atrocities done in your name - Recoil
    10. Re:He is obviously not a native English speaker... by Anonymous Coward · · Score: 0

      Quick, everybody... I feel a tard-clap coming!!!

      clap...
      clap... clap... clap...
      clap, clap, clap, clap, clap, clap
      CLAPclapCLAPclapCLAPclapCLAP...

    11. Re:He is obviously not a native English speaker... by Enuratique · · Score: 1

      Or how about the most obvious:

      muslix + 64

      Perhaps he's a fan of the Kellogg cereal and has a penchant for 64 bits?

      --
      A black hole is where God divided by 0
    12. Re:He is obviously not a native English speaker... by Anonymous Coward · · Score: 0

      Dope!
      It's musli x 64, or should it be rather spelled musli*64 ?

  2. Degrading Quality May Boost Cracking by toonerh · · Score: 5, Interesting

    Unlike old DVD-Video, HD DVD and BluRay have a bit -- so far not set -- that degrades all output unless it is via an HDCP connection. This means my older Sharp 720p projector will be degraded along with all early adapter's HD gear

    This creates a powerful incentive to not just "backup" your HiDef DVD, rather to remove an onerous limitation -- it may violate the DCMA in the USA, but it is morally and legally sound to most of the world.

    1. Re:Degrading Quality May Boost Cracking by purpledinoz · · Score: 4, Interesting

      Hollywood shouldn't be worried about this hack. They really should be worried about people actually buying these discs. What are the early adopter customers with the "non-secure" HDTVs supposed to do? Throw out their HDTV, and buy a new one so they can watch HD content? It's a real slap in the face of the customers... I hope both formats fail, and a new, non-restrictive format appears.

    2. Re:Degrading Quality May Boost Cracking by RasputinAXP · · Score: 1

      I'm not sure where you get that idea, because I'm definitely not seeing any degradation on my 360's HD-DVD player over component at 1080i.

    3. Re:Degrading Quality May Boost Cracking by dreddnott · · Score: 1

      I've been wondering about this - it may be four times the number of pixels, but how much would you actually notice the resolution change from 1920x1080 to 960x540 (the purported penalty resolution of HDCP) when playing an HD-encoded film on an average-sized HDTV?

      --
      I may make you feel, but I can't make you think.
    4. Re:Degrading Quality May Boost Cracking by Lumpy · · Score: 1

      The bit doesnt degrade anything it tells the playback software to degrade the picture quality.. If the software is written to not do anything ,then the signal is 100%.. That will probably be the first cracks, patching the software playback apps or firmware in dvd players to no longer do this degradation... something that is far eaqsier than cracking encryption.

      I cant wait for the anyhd-dvd and anybluray programs to be released so we can get around the useless protections and into the product we actually purchased.

      --
      Do not look at laser with remaining good eye.
    5. Re:Degrading Quality May Boost Cracking by ivan_13013 · · Score: 1

      The mandatory player quality degradation occurs over non-HDCP compliant *digital* (DVI/HDMI) connections. They don't deem it necessary to lower the rez for analog (Component) connections.

      The main purpose of this is apparently to make it a pain in the ass to play movies, so that consumers like me will get their hidef entertainment from satellite TV and the internet, rather than their stupid discs and format-crippled players. Yay!

    6. Re:Degrading Quality May Boost Cracking by RasputinAXP · · Score: 1

      Well, I'd be the last person to ask since I have a 42" Westinghouse LCD.

      What I would most likely notice is scaling artifacts.

      If there's still an "analog hole" then I'll be plenty happy with 1080i over component or 1080p over VGA.

    7. Re:Degrading Quality May Boost Cracking by quantum+bit · · Score: 1

      Depends on the type of HDTV. If it's a CRT, sure, you probably won't notice much of a difference. With an LCD on the other hand, the difference is immediately noticeable, even on a modest sized display.

    8. Re:Degrading Quality May Boost Cracking by plover · · Score: 2, Informative

      The original poster was incorrect in his explanation. The "bit" is implemented in the software, not in the disc. In Windows Vista, Microsoft is calling it the "tilt switch". Any attempt to "subvert" the Protected Media Path is supposed to flip the bit, causing degradation of the signal. This means things like "unsigned drivers" or home-grown ripper type activity.

      --
      John
    9. Re:Degrading Quality May Boost Cracking by dreddnott · · Score: 1

      With all due respect, I don't think it's even possible to get scaling artifacts on an exact resize like that, which is mostly why I asked my question in the first place. All you would have to do to get from 1920x1080 to 960x540 is preserve 1/4th of the pixels in the image. It's still better quality than DVD video, and especially so if the new video encoding that HD-DVD and Blu-ray use is more efficient.

      --
      I may make you feel, but I can't make you think.
    10. Re:Degrading Quality May Boost Cracking by jZnat · · Score: 1

      1080i can be losslessly shrunk to be 540p (or near-losslessly to 538p), the resolution that you would get from the degredation. So, unless your source material isn't very active, the video quality is basically the same.

      --
      'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
    11. Re:Degrading Quality May Boost Cracking by Sancho · · Score: 1

      Note the 'so far not set' part of your parent's post. The bit to degrade if HDCP is not present exists in the specification and on every disc, but right now it is set to 0. Once they start producing discs with that bit set to 1 (after the format is more standardized and more people have committed to it) they will start setting the bit and you will see the degraded signal.

    12. Re:Degrading Quality May Boost Cracking by timmarhy · · Score: 1

      duh you won't see a difference at 1080i, because hd dvd is supposed to be 1080p, they are cutting you back to 960p or something and your tv is upscaling it to 1080i

      --
      If you mod me down, I will become more powerful than you can imagine....
    13. Re:Degrading Quality May Boost Cracking by westlake · · Score: 1
      Unlike old DVD-Video, HD DVD and BluRay have a bit -- so far not set -- that degrades all output unless it is via an HDCP connection. This means my older Sharp 720p projector will be degraded along with all early adapter's HD gear

      The ICT forces down sampling to 960x540. Rather better than DVD video. Your aging Sharp can - in theory - display 1280x720. But will you see any difference on screen?

      You will still be getting full theater sound, multichannel captioning, dialogue and commentary tracks, all the interactive features and extras that can be stamped into a 50 GB disk.

      ---a disk which will be readable long after the Sharp has blown its last $300 lamp.

    14. Re:Degrading Quality May Boost Cracking by uncoveror · · Score: 1

      I won't buy either, nor will you or anyone in the know, but the uneducated might. If they pay enough attention to notice that their new HD player looks no better than the old DVD player and return it, that will be the beginning of the end. When a class action lawsuit comes because the discs they bought with the player are now opened, and can't be returned as such, that will nail the coffin. Any industry or company that presumes its customers are thieves and doesn't respect their personal property rights doesn't deserve to have any customers.

      --
      The Uncoveror: It's the real news.
    15. Re:Degrading Quality May Boost Cracking by Anonymous Coward · · Score: 0

      Ok so the first cracks are to override that "trap". just like the WGA crack works and makes windowsupdate think a pirated XP is legit.

    16. Re:Degrading Quality May Boost Cracking by RareButSeriousSideEf · · Score: 2, Informative

      The mandatory player quality degradation occurs over non-HDCP compliant *digital* (DVI/HDMI) connections. They don't deem it necessary to lower the rez for analog (Component) connections. I don't think that's right (or if it is now, I don't think it will be for long). Windows XP Media Center Edition 2005 already refuses to play regular DVDs above 480i resolution when a TV-capable graphics adapter card is installed. I connect my Media Center PC to my HDTV via analog VGA. Since the graphics adapter is capable of S-Video and Component output, MCE will not play DVDs, even over VGA. The "resolution" of this issue (no pun intended) is to set your display resolution to 480i or lower. (Or allegedly use AnyDVD, DVD43, or burn clear .isos with DvdDecrypter, but I wouldn't know anything about that...)

      Media Center's PVR utility also encrypts & adds DRM to plain analog recordings made over S-Video -- on behalf of HBO, Showtime, and others. MS claims that this triggered by the Analog SGMS flag in the S-vid signal, but my own unscientific experiments suggest otherwise; if I set MCE to record a different, unprotected program, then change the channel to the "protected" program directly on the cable box (instead of through MCE's guide & tuner), I get an unprotected recording. That would suggest to me that the DRM flag is somewhere in the guide data rather than the S-vid signal.

      At any rate, if MS is already superlatively brutal when it comes to adding unnecessary DRM to legacy technology, I can't imagine they will allow unprotected full-resolution component output through Vista's content imprisonment system. No other software DVD player I know restricts the playback resolution, and no other PVR suite I know of implements SGMS or wraps S-Video recordings in DRM of any kind. I *thought* that the HDCP spec required degradation of component analog outputs, but even if it doesn't, you can bet that MS will do it anyway, if past performance is at all indicative of future behavior.

      Anyway, I hope I'm wrong & you're right, since HDTV recording from component inputs will probably be practical & affordable much sooner than many people think.

    17. Re:Degrading Quality May Boost Cracking by clickclickdrone · · Score: 1

      I read something recently where someone was talking to some HD engineers at the BBC and they said they don't think adding lines makes much difference but that they wished extra bandwidth was available for faster framerates and less compression. They showed a bit of footage running on two broadcast spec flat panels, one HD, one SD but both from uncompressed sources and the person who wrote about it said there really was very little difference, much to his surprise.
      Basically, the argument was that it's the compression most channels use that screws the quality, not the line count.

      --
      I want a list of atrocities done in your name - Recoil
    18. Re:Degrading Quality May Boost Cracking by evilviper · · Score: 1
      1080i can be losslessly shrunk to be 540p

      Not unless you also output twice as many frame per second (60FPS@540p)... which they wouldn't, of course, since the whole idea is to DEGRADE the quality.

      So, unless your source material isn't very active, the video quality is basically the same.

      No.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    19. Re:Degrading Quality May Boost Cracking by evilviper · · Score: 1
      With all due respect, I don't think it's even possible to get scaling artifacts on an exact resize like that,

      It's most definately possible. Depending on the scaling algorithym, you could expect excessive aliasing, blurring, etc.

      "Lossless" scalers don't look the best on non-exact resizing, and I doubt most HDTVs have the smarts to switch between multiple different scalers, depending on the resolution.
      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    20. Re:Degrading Quality May Boost Cracking by billcopc · · Score: 3, Insightful

      Problem is, people won't realize the High-Def either doesn't show, or doesn't matter. Even worse: they won't care. Most people get all glazy-eyed with technology, they just accept that not all movies are created equal. Others just want the fanciest, most expensive toy to show off to their sexually dominant peers.

      It used to be, when someone bought a fancy overpriced stereo, came back the next day and said it sounded cheap, you'd tell them they need fancy overpriced cables to "bring out the quality" and off they go with $400 of cheap copper and plastic. Then when they come back you tell them "you need bi-amped speakers!" and off they go with $600 of cheap paper and wood. Then when they come back, THEY tell you "my stereo is shite, here's even more money, sell me the best you got".

      With High-Def it's going to be the same song and dance. "My HD-DVD looks uglier than VHS", you need a new TV. "My HD-DVD still looks like shite", you need new cables. "My HD-DVD looks like Whoopi Goldberg's boobs", you need a power conditioner... the crappier something is, the more opportunity there is for upsale. That's why nothing ever works "just right", there's always some stupid feature that's glitched or backwards, just to make room for future improvement$. It sucks for discerning enthusiasts like you and I, because we're a minority. For every videophile that returns a crippled player on principle, there are 99 norms that will do the exact opposite and spend more money to "fix" the problem. High-Def is marketed as a luxury after all, and luxuries are supposed to cost lots of money for minimal functionality. At least that's what the retail world has been telling us all this time.

      --
      -Billco, Fnarg.com
  3. Investment in DRM vs. Investment to crack by Anonymous Coward · · Score: 5, Funny

    Anyone have a cost estimate for producing the AACS DRM? I'm guessing the crack didn't cost nearly as much.

    Mij

    1. Re:Investment in DRM vs. Investment to crack by billster0808 · · Score: 3, Funny

      I don't know how much it cost to create, but the cost to crack it was just 8 days of work, and probably a case or 2 of Mt. Dew.

    2. Re:Investment in DRM vs. Investment to crack by Iphtashu+Fitz · · Score: 2, Insightful

      I'd be willing to bet that the cost to produce AACS was pretty high in the grand scheme of things. AACS was created by a consortium consisting of IBM, Intel, Microsoft, Panasonic, Sony, Toshiba, Disney, and Warner Brothers. Granted that huge corporations like those can afford to throw tons of money and resources at a project like AACS, but the bottom line is that it probably cost a pretty penny. Consider the person-hours involved in just high level meetings among all those companies to hash out the AACS specification. If you get one person from each of those 8 companies to spend one full week of work (assuming 8 hour days) just on hammering out the specification then you're talking about 320 person-hours. Assuming those people have average annual salaries of $80,000 (SWAG) and work 40 hour weeks then that's over $1500 a week for their salaries, or $38/hour. 320 person-hours at $38/hour equates to $12,160.

      Now obviously I'm pulling all these numbers out of you-know-where, but the point is that these companies invested a lot of manpower and a lot of time to create AACS. It may not seem like a lot to their respective bottom lines, but it does add up to a lot of salaries paid specifically on AACS, and most likely a lot of investment in hardware for development, testing, etc. It certianly wouldn't have been an insignificant ammount if you could do a full audit of all their books. I'd say (another SWAG) that the total cost of developing and implementing AACS would be somewhere in the neighborhood of $5,000,000 when you include hardware & software design/development as well as the salaries, etc. of the people involved.

    3. Re:Investment in DRM vs. Investment to crack by Loconut1389 · · Score: 1

      The cost, if he gets sued/arrested, will probably be commensurate with development costs- if the movie industry has it their way.

    4. Re:Investment in DRM vs. Investment to crack by Anonymous Coward · · Score: 0

      I can't wait to see the story on the news: Police spent most of the day in a standoff with a suspect holed-up in the cereal aisle of a local grocery store. The suspect, a Mr. John Doe Muselix, is wanted for computer crimes. The suspect is described as a rectangle about a foot tall and very crunchy even in milk.

    5. Re:Investment in DRM vs. Investment to crack by Anonymous Coward · · Score: 0

      Don't forget to factor in the cost of the near-endless delay that AACS caused the hardware companies. HD-DVD and Bluray could have been released 3 or 4 years ago... but for repeated paranoia, nit-picking and power-games over AACS. The end result? 4 years of lost sales for the hardware companies (massive licensing fees, increased component costs... and legal controls on the HW companies); 4 years of lost sales for the entertainment maggots; and a finally, and least of all, a big fuck up the ass for the consumer.

  4. I'm glad he's not by Weaselmancer · · Score: 4, Interesting

    If he was a native English speaker, he'd probably be in a country that has some sort of DMCA-type law. And he'd probably be in custody by now.

    --
    Weaselmancer
    rediculous.
  5. Server Bombed by FST · · Score: 5, Informative

    Well, the server is being bombed now. Here's the text from the page if you don't want to wait for 5 minutes per sentence.

    The next generation of optical disc technology holds the promise to change the way we interact with and store digital media. Perhaps the most exciting change is the arrival of High Definition (HD) video, with its glorious 1920x1080 pixel resolution. It's a quantum leap forward in terms of watching digital content, as its vast resolution reveals a quality never seen before in such fine detail.

    Because of the rapid escalation of digital file-sharing - especially of video files - Hollywood has been working around the clock to protect HD content. This is especially relevant for one of its primary delivery mechanisms - HD DVD and Blu-Ray discs. These next generation discs, with capacities of 30 gigabytes and 50 gigabytes respectively, have their content protected with an array of DRM (Digital Rights Management.) Both are protected with a scheme called AACS, or Advanced Access Content System. This DRM is a great leap forward compared to the weak CSS, or Content Scrambling System, that currently "protects" DVDs. Thanks to Fox, Blu-Ray has an additional layer of protection, called BD+, although most discs have yet to support this protection.

    Although Hollywood has constructed enough DRM architecture to rival the Pyramid of Giza, it has long been suspected that it would be only a matter of time before HD DVD and Blu-Ray content protection were compromised. Convinced the golden DRM egg had been laid, it seemed that nothing could penetrate the great AACS wall. And to this day, that great wall still stands.

    But why crash through the main gates of Constantinople when you can just pick the lock of a long forgotten rear entrance?

    On December 26, 2006, a member of the Doom9.com forums named muslix64 introduced himself as circumventing the content protection - not the copy protection - of HD DVD. Additionally, he made available an open source program named BackupHDDDVD. At the time, this program was a command line program that bypassed the content protection - providing the individual successfully obtained the title and volume keys associated with the HD DVD. Once the individual has the keys, the AACS protection can be sidestepped, and the HD movie content can be extracted. According to muslix64, it took all of eight days to successfully circumvent HD DVD content protection.

    Much of the more difficult work, such as extracting the keys, has been alleviated as the once encrypted information has proliferated online. To understand where this stunning turn of events is heading, Slyck.com spoke with muslix64, who agreed to a PM (private message) interview.

    The mainstream media tends to have many labels for you, i.e. hacker, cracker, pirate, etc., in response to your efforts. What would you call yourself and what would you label your efforts?

    I'm just an upset customer. My efforts can be called "fair use enforcement"!

    What motivated you to help circumvent the content protection scheme associated with HD DVD and Blu-Ray?

    With the HD-DVD, I wasn't able to play my movie on my non-HDCP HD monitor. Not being able to play a movie that I have paid for, because some executive in Hollywood decided I cannot, made me mad...

    After the HD-DVD crack, I realized that things where "unbalanced" by having just one format cracked, so I did Blu-Ray too.

    Explain how decrypting the device and volume keys are critical to your success. Could you explain the difference between the two?

    The device keys, are the keys associated to the player.

    The volume key, is the key associated to the movie.

    I don't care about device keys. I do care about volume keys, because by using volume keys instead of devices keys, I totally bypass the revocation system. There is no "volume key revocation". There is content revocation, but I really doubt they will ever use it. If you use device keys, they can revoke them. Having the volume key means that you can decrypt ti

    --
    46487 466780 252994 376409 96920 39622 205366 244315 622115 512361 668040 63608 259203 955314 811176 652718 166330 23922
    1. Re:Server Bombed by Gentlewhisper · · Score: 1
      After the HD-DVD crack, I realized that things where "unbalanced" by having just one format cracked, so I did Blu-Ray too.


      I am sure Sony will feel very thankful that they are not forgotten :]
    2. Re:Server Bombed by Aeon+Infinitus · · Score: 1

      That's a great article. We already know that no matter what approach is used it will ultimately end up cracked. And I think he's right that the more open the software, the easier it is to use. I know I've purchased MANY CDs after downloading and listening to music. Media outlets just need to catch up with the times and stop struggling against something futile. ;)

  6. AACS Easier to Crack Than CSS by jizziknight · · Score: 5, Funny

    So technically speaking, it was easier to bypass AACS than CSS. Oh, the irony. It figures that the more complicated the DRM, the easier it is to crack.
    --
    Everything I say is a lie. Except that... and that... and that, and that, and that, and that... and that.
    1. Re:AACS Easier to Crack Than CSS by CastrTroy · · Score: 5, Informative

      Well, he didn't crack it in the same way. With DECSS, you can crack any disk by just putting it in a drive and running the program. With the AACS crack, you have to run some other player and extract the title key out of memory, probably by using a debugger or something. The CSS crack was harder because they actually cracked every disk, and reversed the encryption. The AACS crack doesn't accomplish the same thing. Although you can still decrypt disks, you can't just make program that does it automatically.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    2. Re:AACS Easier to Crack Than CSS by Sycraft-fu · · Score: 4, Interesting

      Ya, perhaps sidestep is a better term than crack. In all likelihood the cryptosystem itself can't be broken, it's AES. While we can never say for certain there's not an unknown weakness in a system, AES is one of the most studied ones out there and thus far it remains secure enough to use for classified data.

      So, like the author said, you don't attack it you go around it. Obviously if the movie is being played back at some point things are being decrypted and you can get your hands on that key. That's precisely what he does. The player uses its key to decrypt the key that the volume is encrypted with. He then nabs that key and uses it to decrypt the volume.

    3. Re:AACS Easier to Crack Than CSS by russ1337 · · Score: 5, Insightful

      And if that doesn't work, I'll put an HD video camera in a dark box with a 52" HD Plasma and hit the record button.

    4. Re:AACS Easier to Crack Than CSS by iminplaya · · Score: 1

      Yeah, that picture ought to look great...on a 5 inch black and white screen.

      --
      What?
    5. Re:AACS Easier to Crack Than CSS by SatanicPuppy · · Score: 4, Insightful

      I don't know why they bother. CSS was "easy" because the encryption didn't change, so once you'd broken it, it was done, unless they wanted to break the standard.

      With AACS they "learned" something and used much beefier encryption, and mutable keys...Which makes the keys vulnerable. Some bright boy notices this, breaks the weak security on the keys, and voila! The system, while not broken, is seriously compromised.

      It's all pointless though. The companies pushing the DRM have far fewer resources than the people who want to view the content, and the content itself cannot be truly secured because it's meant to be viewed! So they're just throwing away money, and, as Muselix64 himself cogently pointed out in the "interview", the turnaround for fixes from the companies is so long, that there is effectively no way they can stay ahead of the crackers.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    6. Re:AACS Easier to Crack Than CSS by morgan_greywolf · · Score: 1

      It's the whole classic problem of the fact that with these discs, you basically have to include the encryption key on the disc. So the licensed player has to know where to find it. At some point, it has to be in memory to decrypt the disc. So, since you have both the encrypted data and the key used to decrypt it, you can have at the unencrypted data all you want.

      No matter how you slice it, all DRM can be cracked because the user's computer, at some point, has the encryption key in memory. That is, until Trusted Computing is made mandatory and getting at the keys in memory will be impossible because the 'Trusted Computing' stuff won't let you at it. :)

    7. Re:AACS Easier to Crack Than CSS by Daemonstar · · Score: 1
      Although you can still decrypt disks, you can't just make program that does it automatically.
      Funny, that's what's being worked on right now buy guys over at the Doom9 Forum; although, at the moment, you do still have to have a (broken) HD-DVD player to grab the Vuk from memory.

      I have posted a modified version of BackupHDDDVD . . . [that] can also get it's own keys from memory if WinDVD is playing. . . If they select the memory option, they are prompted to press ENTER when WinDVD is playing. Once the memory dump is completed, the user is free to close WinDVD and the key is retrieved automatically.
      Obviously, they're still working on cleaning things up and fixing some problems with the decryption process on certain HD-DVD's, but it's getting there, slowly but surely. :)
      --
      I don't reply to Anonymous posts; if you have something to say to me, identify yourself or I won't reply.
    8. Re:AACS Easier to Crack Than CSS by InsaneGeek · · Score: 1

      If you are going to do that, why don't you just record the down-rezed to 480p content coming out of it? That's the same resolution as today's dvd and will look a million times better than a camcorder on a tripod.

    9. Re:AACS Easier to Crack Than CSS by Anonymous Coward · · Score: 0

      Mpeg4 looks like blocky pixelated ass yet it is extremely popular for file sharing.

    10. Re:AACS Easier to Crack Than CSS by Anonymous Coward · · Score: 0

      > Ya, perhaps sidestep is a better term than crack. In all likelihood the cryptosystem itself can't be broken, it's AES. While we can never say for certain there's not an unknown weakness in a system, AES is one of the most studied ones out there and thus far it remains secure enough to use for classified data.

      AES is fine, but the key management of their overall system isn't. If we can get our hands on enough player keys, we can subvert the master key authority. I believe it will take something on the order of 42 player keys, at most, but you should read the analysis someone published a while back instead of taking my word for it. I believe it can be found via Google.

    11. Re:AACS Easier to Crack Than CSS by rmckeethen · · Score: 2, Funny

      Obligatory Star Trek quote:

      "The more they overthink the plumbing, the easier it is to stop up the drain."

      --Chief Engineer Montgomery Scott, Star Trak III

    12. Re:AACS Easier to Crack Than CSS by karnal · · Score: 1

      Star Trak III sounds like a cheap version of exercise machine.

      --
      Karnal
    13. Re:AACS Easier to Crack Than CSS by Emetophobe · · Score: 1
      If you are going to do that, why don't you just record the down-rezed to 480p content coming out of it? That's the same resolution as today's dvd
      The point is to watch the movie in HD (i.e 1080p). Why would anyone spend thousands on a HDTV, HD-DVD player & HD-DVD movies just so that they can watch the "down-rezed to 480p content". If he wanted dvd resolution, he wouldn't have bought a HDTV or HD-DVD setup.
    14. Re:AACS Easier to Crack Than CSS by Tim+C · · Score: 1

      That is, until Trusted Computing is made mandatory and getting at the keys in memory will be impossible because the 'Trusted Computing' stuff won't let you at it. :)

      There's no such thing as impossible in this context, merely "prohibitively difficult". If TCP is implemented, someone will subvert it. If that's too hard or unwieldy, someone will subvert the secure path. If that's too hard, someone will rip open a TV and capture the raw audio and visual signals as they're sent to the speakers and display.

      If that's too hard, someone will just train a high-quality camcorder at the screen, place a microphone near the speaker and get it that way.

      No DRM system can prevent a determined and skilful enough adversary, as long as that content is intended for consumption by human senses. To do that, you'd need to employ guards to watch viewers to prevent them from copying it, which isn't going to happen any time soon.

    15. Re:AACS Easier to Crack Than CSS by mikearthur · · Score: 1

      Nothing is easier to crack than CSS!

      I've managed to crack Slashdot's. You just do view source, and find the URL in the tag!

      Then you can download the CSS and use it for your own site! Man that was easy...

    16. Re:AACS Easier to Crack Than CSS by InsaneGeek · · Score: 1

      Probably because at 480p it will still look better than any consumer-grade HD camcorder re-recording the content. Additionally he can than just rerun the 480p pristine content through a scaler and get 1080p on his HDTV setup. If you have thousands upon thousands to burn I suppose you could buy a pro camera and get better but it would seem rather crazy to do that and most likely still not look as good as the 480p original content going through a much cheaper scaler.

    17. Re:AACS Easier to Crack Than CSS by Randall311 · · Score: 1

      So what's stopping someone from taking the AES encrypted string on the disc and reverse engineering it using the decrypted disc keys that are floating around the internet now thanks to BackupHDDVD? I don't know a whole lot about AES, but it seems to me that if you have the encrypted string and the decrypted string then you can reverse engineer it. Brute forcing something like this could take years, but when you have the unencrypted keys that should change the whole game.

  7. The best thing he could do now. by BlahSnarto · · Score: 1


    Is disappear.

    Because the shit they pulled with others who have
    come out with a exploit / hack (decrypting encrypted PDF's to decss)
    have gotten it in the pooper :( ..

  8. Like a dog chasing it's own tail by bcmbyte · · Score: 5, Insightful

    It sure seems to me that the media companies chasing the people finding holes in their impenetrable fortress' is much like a dog that chases his own tail. Every once in a while he gets it, but then it hurts and he lets go, and then he off again chasing his tail. The time and money they spend protecting their stuff might be better spend on an ad campaign, or better yet drop the prices of the content so that maybe, just maybe they will sell a few more..

  9. Media Industry just can't get anything right... by Disharmony2012 · · Score: 1

    It seems DRM is on the way out? I wonder how easy it will be to circumvent other DRM aside from various media formats...

  10. Xenophiliac? by kad77 · · Score: 0, Offtopic

    Some mod got their undies in a bundle over an inductive inference to muslix64's native language?

    Sadly, you're probably correct regarding the US HS point.

  11. Worst interview ever? by Alphager · · Score: 3, Insightful

    It seems the interviewer knows _NOTHING_ about the subject:

    [...]if an individual were to download "Serenity", and play it successfully on his or her Power DVD player - and never updated the software - would it be immune from any Hollywood counterattack?

    You can play an unencrypted movie wherever you want; an update of the encryption-scheme will not magicalle re-encrypt the movie. DUH!

    Do you see Microsoft Vista's implementation of HDCP being an obstacle to playing compromised HD movies in high definition?

    An unprotected movie does not require HDCP; HDCP has _NOTHING_ to do with this.

    1. Re:Worst interview ever? by Anonymous Coward · · Score: 0

      In a way, it's kind of a good thing to have an interviewer with about as much knowledge as a Joe Six-pack who actually learnt how to use DVD Shrink, etc. After all, they would make up a fair percentage of the user base. Now if you could get those people to read the interview, they might actually learn something from those otherwise stupid questions...

    2. Re:Worst interview ever? by Loconut1389 · · Score: 1

      I think the interviewer was asking, with an encrypted disk, once powerdvd has ascertained the title key via its player key, and you never upgrade (eg never get a newer revocation list) that you could still play the disk forever- eg the revocation lists are worthless anyway.

      Obviously, once unencrypted, you can do what you like.

    3. Re:Worst interview ever? by Anonymous Coward · · Score: 0

      Out of all those questions, you could only find two that you didn't like? Seems like someone's baby formula was a bitter this morning.

    4. Re:Worst interview ever? by SydShamino · · Score: 4, Informative

      You can play an unencrypted movie wherever you want; an update of the encryption-scheme will not magicalle re-encrypt the movie. DUH!
      An unprotected movie does not require HDCP; HDCP has _NOTHING_ to do with this.


      I don't think you read these questions the same way muslix64 did. You are incorrect, because the content industry could force future versions of PowerDVD to automatically downgrade the video quality of any unencrypted video it played. This would be a "Hollywood counterattack" that does not re-encrypt the video like you assumed. Likewise, because an unprotected movie does not require HDCP, Microsoft could force all video played on its operating system to be downgraded unless HDCP is enabled.

      I know, neither PowerDVD nor Microsoft would ever actually do this. Even if they did, there are alternative open-source players, and alternative open-source operating systems, to which these changes would never be made. This is exactly what muslix64 says when he replies "Or you can use open-source player, like VideoLan, if a player like PowerDVD become more restrictive about playing decrypted movies."

      --
      It doesn't hurt to be nice.
    5. Re:Worst interview ever? by Sandcastle · · Score: 1

      Do you see Microsoft Vista's implementation of HDCP being an obstacle to playing compromised HD movies in high definition?

      I think he missed a great chance to emphasize a point here... Vista's HDCP will only be an obstacle to playing UNcompromised HD movies in HD!

      This is what would hit home hardest with most less technical users...

      --
      The fact that a fish swims in water does not make it an expert in fluid dynamics. GogglesPisano (199483)
    6. Re:Worst interview ever? by wall0159 · · Score: 1


      While I agree with your post, it would be possible for watermarks to be inserted into the movie. The player could then detect these, and refuse to play it.

      Then you'd have to use VLC to play it ;-)

      however, if the watermark was detected at a lower level (maybe a post-Vista operating system with TPM, if MS ever makes one) then that could possibly prevent even VLC playing it (in Windows).

      Then you'd have to use Linux ;-)

    7. Re:Worst interview ever? by Kjella · · Score: 1

      I know, neither PowerDVD nor Microsoft would ever actually do this. Even if they did, there are alternative open-source players, and alternative open-source operating systems, to which these changes would never be made. This is exactly what muslix64 says when he replies "Or you can use open-source player, like VideoLan, if a player like PowerDVD become more restrictive about playing decrypted movies."

      Technically, what's the difference between a decrypted movie and an authored movie? Nothing AFAIK. So if they do that, HDTV camera owners can't make their own discs. Now that'd seriously be shooting themselves in the foot.

      --
      Live today, because you never know what tomorrow brings
    8. Re:Worst interview ever? by SydShamino · · Score: 1

      Exactly. And the first doctor who tries to play a video of an MRI scan or somesuch, and has the resolution downgraded, would be able to sue the company into oblivion (if the offending company was small like PowerDVD) or pay off his college loans immediately (if the offending company was Microsoft).

      --
      It doesn't hurt to be nice.
  12. Encrypted by Anonymous Coward · · Score: 0, Funny

    This comment is rot26 encrypted. By reading this comment, you have violated the DMCA.

    1. Re:Encrypted by dreddnott · · Score: 1

      If you guys thought that was tough to crack, try rot39 on for size!

      Guvf pbzzrag vf ebg39 rapelcgrq. Ol ernqvat guvf pbzzrag, lbh unir ivbyngrq gur QZPN.

      --
      I may make you feel, but I can't make you think.
    2. Re:Encrypted by Iphtashu+Fitz · · Score: 1

      Zber nccebcevngryl:

      Guvf pbzzrag vf ebg(13*a) rapelcgrq. Ol ernqvat guvf pbzzrag, lbh unir ivbyngrq gur QZPN.

    3. Re:Encrypted by Quaoar · · Score: 1, Funny

      Thanks guy. You just summoned "that which cannot be named" and doomed us all. I was looking forward to an afterlife not filled with thousands of gibbering mouths, but nooooooooooo...

      --
      I'll form my OWN solar system! With blackjack! And hookers!
    4. Re:Encrypted by Anonymous Coward · · Score: 0

      Rira zber nccebcevngryl:

      Guvf pbzzrag vf ebg(13*(2a+1)) rapelcgrq. Ol ernqvat guvf pbzzrag, lbh unir ivbyngrq gur QZPN.

    5. Re:Encrypted by michaeldot · · Score: 1

      Zber nccebcevngryl:

      Guvf pbzzrag vf ebg(13*a) rapelcgrq. Ol ernqvat guvf pbzzrag, lbh unir ivbyngrq gur QZPN.

      Rkprcg vs V gnxr lbhe pbzzrag, syl gb n pbhagel jurer gur QZPN qbrf abg nccyl, qrpelcg gur pbzzrag, ernq vg, erghea naq cbfg.

      Vg vf bs pbhefr n engure grqvbhf jnl bs ercylvat gb pbzzragf.

  13. And the best part is... by DrYak · · Score: 4, Informative

    This can't be stoped. It's not like the first DeCSS that used stolen Xing keys and could only work for as long as the keys weren't revoked.
    This uses the keys specific for the DISC, which can't be changed anymore.

    And the best part : In order to decrypt the movie and play it, every player *HAS* to have the volume ke in memory or SIMD register for a short period of time. No matter if players key are revoked, version upgraded, bugs fixed, etc... This technique doesn't rely on any bug that can be patched. It only rely to the fact that, whatever player you choose, at one moment it needs the volume key - which you can then grab and share on the net.

    There's no way to patch this.

    This is one more proof that the fundamental mechnics of the DRM - ie.: providing both the crypted data and the key in the same place - is flawed. You can't protect a content from the one who bought the disc. If data must be decrypted on the buyer's computer, then nothing cab prevent it from being circumvented.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
    1. Re:And the best part is... by purpledinoz · · Score: 4, Funny

      You underestimate the movie companies. The next step is to encrypt the the data on the disc, and throw away all the keys. This way, no one can decrypt it. Not even the pirates! There is one side effect though, no one can watch the movie either. Oh well, it's a fair compromise.

    2. Re:And the best part is... by mrchaotica · · Score: 4, Informative
      And the best part : In order to decrypt the movie and play it, every player *HAS* to have the volume ke in memory or SIMD register for a short period of time. No matter if players key are revoked, version upgraded, bugs fixed, etc... This technique doesn't rely on any bug that can be patched.

      Hence Treacherous Computing. You really think Microsoft and the content industry haven't thought of this? Sooner or later Windows is going to start encrypting memory and running non-"Trusted" programs in a sandbox that prevents them from accessing the hardware directly, specifically to prevent this kind of attack.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    3. Re:And the best part is... by purpledinoz · · Score: 1

      Can you imagine the huge hit on performance that would be? Every memory access has to be accompanied by a decrypt, every memory write accompanied with an encrypt. It will set back PC performance by many years. Plus, it'll have to be done in hardware, which is out of Microsoft's scope.

    4. Re:And the best part is... by arodland · · Score: 3, Informative

      The hit isn't that bad if you have dedicated encryption hardware, which clearly exists. And Microsoft aren't the only ones in on this thing. AMD, Intel, Infineon, and IBM are all TCG partners.

    5. Re:And the best part is... by diegocgteleline.es · · Score: 2, Interesting

      And the best part : In order to decrypt the movie and play it, every player *HAS* to have the volume ke in memory or SIMD register for a short period of time.

      Which is why Windows Vista adds a special type of processes: "protected processes": You can't look at the memory of those processes, you can't debug them, you can't do *anything* to them. Not even the antivirus software can look into them. And because the kernel can't load unsigned drivers, you can't do kernel tricks to jump the protections. Microsoft will use it to "protect" the processes that handle the DRM data or the final video. Not even the administrators can start them, your binary must be "microsoft certified" in order to get that spcial "protected process" flag.

      (And yes: if hackers manage to run protected processes without getting a certificate from microsoft, the windows platform will get some funny viruses that can't be deleted by AV software)

    6. Re:And the best part is... by Firehed · · Score: 1

      So by the time we're all being screwed over by the TC in Vienna (IIRC), we'll have how many other dozens of operating systems that can run the exact same hack without worrying about this sandboxing?

      I think it's a horrible idea too, but I think that Hollywood might have finally realized by the time that something like you suggest could happen that DRM is pointless and serves no purpose other than to screw over customers - especially their early adopters, who they make a ton of money off. Signs are pointing to 2007 being the death of DRM - I think it's optimistic, but certainly before 2012 or so.

      --
      How are sites slashdotted when nobody reads TFAs?
    7. Re:And the best part is... by mrchaotica · · Score: 4, Informative

      Linux is already able to encrypt swap and I haven't heard anything about that slowing the computer down too much. Besides, some CPUs already have hardware-accelerated cryptography engines anyway. Finally, all new computers will come with a TPM, if they don't already. Although I don't think it's strictly required that the TPM be a cryptography accelerator, it makes sense for it to be.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    8. Re:And the best part is... by mrchaotica · · Score: 1
      So by the time we're all being screwed over by the TC in Vienna (IIRC), we'll have how many other dozens of operating systems that can run the exact same hack without worrying about this sandboxing?

      Theoretically, none: Vienna and whatever version of Mac OS exists then will both be "Trusted[sic]," and all Free Software operating systems won't have legal HD disc playback software.

      I think it's a horrible idea too, but I think that Hollywood might have finally realized by the time that something like you suggest could happen that DRM is pointless and serves no purpose other than to screw over customers...

      Well, we can always hope. On the bright side, since the MPAA jumped the gun by allowing HD-DVD and Blu-Ray discs to be played on non-"Trusted[sic]" systems already, we won't really be entirely screwed until the next generation of "Ultra HD" media comes out.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    9. Re:And the best part is... by Planesdragon · · Score: 1

      And because the kernel can't load unsigned drivers...

      Sure it can. You just need to tell it to, and they don't make that especially easy.

    10. Re:And the best part is... by jZnat · · Score: 1

      So then we'll just run the programs in WINE or ReactOS or something (which would probably work perfectly by the time a Windows OS came out that enforced that).

      --
      'Yes, firefox is indeed greater than women. Can women block pops up for you? No. Can Firefox show you naked women? Yes.'
    11. Re:And the best part is... by Anonymous Coward · · Score: 0

      This uses the keys specific for the DISC, which can't be changed anymore.

      Can't they just release a v1.1 encrypted with a different key for the next print run? That'll get broken as well, of course...

    12. Re:And the best part is... by Sancho · · Score: 1

      In 64-bit Vista, you have to enable this functionality at boot. You cannot permanently enable it (i.e. every time you reboot, you have to re-select that option) and I'm sure that the 'protected' software won't run in this mode.

    13. Re:And the best part is... by Dahamma · · Score: 1

      This can't be stoped. It's not like the first DeCSS that used stolen Xing keys and could only work for as long as the keys weren't revoked.
      This uses the keys specific for the DISC, which can't be changed anymore.


      But they can minimize the damage. They can revoke the PC HD-DVD player, and then republish the movies with a new title key. That way the only compromised content is the few thousand HD-DVDs that have been sold for those titles so far.

      If they really want to stop this in the future, they just revoke all PC HD-DVD players that don't use some sort of hardware security (like, say a PCMCIA add-on card for your laptop, HW support in your video card, etc) to do the key management and decryption. You might think that would slow down the adoption of HD-DVD (not being able to play it on a PC) but I think a lack of studio content has slowed adoption a lot more than lack of players - tighter security might give the studios more confidence to start publishing more movies...

    14. Re:And the best part is... by swillden · · Score: 1

      Although I don't think it's strictly required that the TPM be a cryptography accelerator, it makes sense for it to be.

      I don't think any of the TPMs on the market are accelerators. The TPM is designed to provide secure key storage and system state attestation, not bulk encyryption/decryption. It's designed to securely store the key, bound to a particular system state, and then provide that key to the system to do bulk encryption/decryption on the main CPU.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    15. Re:And the best part is... by Anonymous Coward · · Score: 0

      umm. .. thats coz noones computer swaps any more..

      # free
                                total used free shared buffers cached
      Mem: 2072344 1981400 90944 0 216544 1102452
      -/+ buffers/cache: 662404 1409940
      Swap: 2097144 540 2096604

      wow.. I bet those 540 bytes sure took a long time to encrypt...

      especially for editing 4kb text files containing all yer seekrits.

    16. Re:And the best part is... by mrchaotica · · Score: 1

      I am aware of that. I was just saying that it would be a the logical place to put a cryptography accelerator.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    17. Re:And the best part is... by swillden · · Score: 1

      I am aware of that. I was just saying that it would be a the logical place to put a cryptography accelerator.

      Assuming the TPM got a faster connection to the main system, yes. The TPM in my Thinkpad is sitting on a slow USB bus, which makes it a pretty poor place to put an accelerator. If connected via USB2, or, even better, on the PCI/PCI-X bus, then it would be a logical place to put a hardware 3DES or AES co-processor.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    18. Re:And the best part is... by ncc74656 · · Score: 3, Funny
      Can you imagine the huge hit on performance that would be? Every memory access has to be accompanied by a decrypt, every memory write accompanied with an encrypt. It will set back PC performance by many years.

      ...and this would be different from any other Windows release how, exactly?

      --
      20 January 2017: the End of an Error.
    19. Re:And the best part is... by try_anything · · Score: 2, Interesting

      I wonder how much money is being made off DRM by companies like Microsoft that know it will never work. When the guys with the money (the media companies in this case) want something impossible, and want it badly enough, smart tech vendors can make a lot of money by playing along.

    20. Re:And the best part is... by Workaphobia · · Score: 5, Funny

      Fool. Bruce Schneier could still watch it.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    21. Re:And the best part is... by cpt+kangarooski · · Score: 1

      Sure. When Bruce Schneier wants plaintext, he just squeezes out of the ciphertext with his bare hands.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    22. Re:And the best part is... by mrs+clear+plastic · · Score: 2, Interesting

      Good.

      If the movie companies do an 'encrypt and throw away the key`, that would be great.

      To be frank with you all, I am quite discouraged with the quality of the product that Hollywood is putting out now. No, not discouraged; appalled is more like it!

      To put it bluntly, this stuff is not even worth the raw material in the darn DVD itself.

      Lets take those permanently locked DVD's and burn them in a boiler to make steam to run a turbine to generate electricity for that community theater where some really decent stuff is performed!

      Luv

      --
      Cleara
    23. Re:And the best part is... by Baricom · · Score: 1

      Sorry, but I'm afraid your thinking of Chuck Norris.

      Bruce Schneier doesn't need physical strength. He simply does the AACS in his head.

    24. Re:And the best part is... by Baricom · · Score: 2, Funny
      Sorry, but I'm afraid you're thinking of Chuck Norris.
      Sorry about that. I may be a grammar Nazi, but at least I'm an unbiased one. ;)

      Slow Down Cowboy! Slashdot requires you to wait between each successful posting of a comment to allow everyone a fair chance at posting a comment. (That is, unless you're Chuck Norris.)
    25. Re:And the best part is... by cpt+kangarooski · · Score: 1

      No, that one is listed on the Bruce Schneier facts page. Which doesn't mean that he needs physical strength, just that Bruce Schneier can defeat any cryptosystem with his brains or his brawn. So we're both right about what he can do.

      --
      -- This and all my posts are in the public domain. I am a lawyer. I am not your lawyer, and this is not legal advice.
    26. Re:And the best part is... by Baricom · · Score: 1

      Hehe, I didn't realize there actually was a Bruce Schneier Facts page.

      There goes my evening. :)

    27. Re:And the best part is... by Anonymous Coward · · Score: 0

      Yes, the project name for that was... PALLADIUM ?

    28. Re:And the best part is... by evilviper · · Score: 1
      This can't be stoped.

      Yes it can.

      It's not like the first DeCSS that used stolen Xing keys and could only work for as long as the keys weren't revoked.

      Actually, yes, it's just about the same thing this time around.

      This uses the keys specific for the DISC, which can't be changed anymore.

      Already-published DVDs would continue to work with DeCSS forever even if the key was revoked for future discs, just as current highdef disc keys will. It's being able to grab future keys that is in question.

      It only rely to the fact that, whatever player you choose, at one moment it needs the volume key - which you can then grab and share on the net.

      It relies on the fact that the key is EASY to get. Once they start obfusticating the key in-memory, this will stop working.

      If data must be decrypted on the buyer's computer, then nothing cab prevent it from being circumvented.

      Technically true, BUT you certainly CAN make it ridiculously difficult to do.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    29. Re:And the best part is... by IamTheRealMike · · Score: 2, Interesting
      There's no way to patch this.

      Oh pish. Of course in theory you can always extract the key from any player, in practice it's possible to make this so hard to do nobody can manage it. This is the approach satellite TV vendors have used - of course they keys are somewhere inside those smartcards or devices, but good luck to you if you try and extract them. The fact that most software players suck at protection is no news, for as long as there will be software HD-DVD/BluRay players, there will be leaked title keys. However, the point is that whilst it's easier to crack software players it's also easier to update/upgrade them, so the cost of a player revocation is much lower.

      So what do creators of players do? Well, there are variety of techniques you can use to obfuscate the keys, make it harder to extract them, make it easier to update in the case of breaches, and so on. These techniques have been used successfully by Blizzard and Microsoft - Windows Media DRM is "self healing" and whilst tools to extract the keys do occassionally surface, they tend not to work for long. Blizzards "Warden" anti-bot software is pretty good at both detecting software modifications and preventing them from working, again the trick is to make online updates very easy.

      Finally, there are hardware/software features being developed that can hide information inside the hardware so extracting the keys becomes a matter of hardware cracking rather than software cracked (look at LaGrande) which is a much harder problem fewer people are able to do.

      AACS itself is just a piece of mathematics that makes it plausable for every key in the world to have its own player key, and to revoke those keys with linear storage cost. AACS itself has not been broken. Badly written players have been, but that was always going to be a problem. This guys issue is that if he distributes his crack, the chance of the studios figuring out which player he attacked increases, at which point they can revoke it (probably they can already guess, there aren't that many around right now). If he doesn't distribute the crack then the system relies upon him purchasing every title released and extracting the keys at home, which just doesn't doesn't scale. Sure a few titles might be lost, but who cares when thousands are published every year ....

      I think the guy is pretty naive, in mixing up theory and practice like this. He says:

      If you can play it, you can decrypt it! There is nothing you can do about it. The only thing they can try is to slow people down.

      Well, like I said, satellite TV seems to disprove this. The box itself can play any channel (ppv movie channels for instance) but it's pretty hard to decrypt that stream if you haven't paid for it. So hard in fact that in the case of DirecTV I think it only happened once. The HU card was broken (at ridiculous expense, cost and risk), so they rolled out the P4 cards and the system has been secure ever since. Sky Digital in the UK was never broken at all. If the movie guys are determined eventually they'll just go the route digital TV companies did and ban software/pc based players.

    30. Re:And the best part is... by zdzichu · · Score: 1

      That's what TPM chips are for. Happily, they currently have too low bandwidth to decrypt HD stream in realtime.

      --
      :wq
    31. Re:And the best part is... by elrous0 · · Score: 1
      Chuck Norris doesn't need to decrypt a movie. When he wants to see a movie, the actors show up in person to recreate it for him live.

      And he only likes classic b&w movies.

      And all the actors STILL show up, including the dead ones.

      -Eric

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    32. Re:And the best part is... by kthejoker · · Score: 1

      I realize that picking on Hollywood fare is the ultimate tempation of low-hanging fruit, but as a counterexample, if you saw just one new movie every week in 2006, you could've seen:

      The Departed
      The Good Shepherd
      Idiocracy
      Children of Men
      The Good German
      Letters from Iwo Jima
      Little Miss Sunshine
      Thank You For Smoking
      When The Levees Broke
      Casino Royale
      Wordplay
      An Inconvenient Truth
      The War Tapes
      Borat
      Half Nelson
      Brick
      The Last King of Scotland
      Requiem
      The Devil and Daniel Johnston
      Inside Man
      United 93
      The Descent
      Slither
      Clerks 2
      The Fountain
      The Illusionist
      The Prestige
      Stranger than Fiction
      Marie Antoinette
      Wicked Little Things
      V For Vendetta
      Cars
      A Scanner Darkly
      Fast Food Nation
      Notes on a Scandal
      Friends With Money
      Who Killed The Electric Car?
      Catch a Fire
      Hollywoodland
      Blood Diamond
      Apocalypto
      The Road To Guantanamo
      This Film Is Not Yet Rated
      The Painted Veil
      Down in the Valley
      Lucky Number Slevin
      10 Items or Less
      Fur
      The Breakup
      Monster House
      Scoop
      Tenacious D and the Pick of Destiny

      So let's see: Scorsese, Eastwood, Woody Allen, Sofia Coppola, Andres Cuaron, Chris Nolan, Aranofsky, Mike Judge, Steven Soderbergh, 2 Spike Lees, 2 Richard Linklaters, Kevin Smith, Pixar, James Bond, some of the best documentaries ever, great performances by Jack Nicholson, Cate Blanchett, Mark Wahlberg, Denzel Washington, Morgan Freeman, Robert Downey Jr., Nicole Kidman, Will Ferrell, Judi Dench, Robert DeNiro, Steve Carell, Adrien Brody, Kate Winslet, Forest Whitaker, Clive Owen, Aaron Eckhart, Edward Norton, Hugh Jackman, Ryan Gosling, and in short, one of the most original years Hollywood has had in years.

      And just outside of Hollywood you can of course find Pan's Labyrinth, Venus, The History Boys, The Queen, Volver, Babel - all with Hollywood stars and Hollywood money involved, too.

      Not every one of those movies might be your cup of tea, but to suggest that Hollywood doesn't provide *any* entertainment is disingenuous at best, and outright self-denial otherwise.

    33. Re:And the best part is... by sacrilicious · · Score: 1
      Fool. Bruce Schneier could still watch [encrypted movies for which nobody retains the keys].

      Not if the movie's encrypted with a one-time pad! ;)

      --
      - First they ignore you, then they laugh at you, then ???, then profit.
    34. Re:And the best part is... by Workaphobia · · Score: 1

      I remind you that the universe exists because Bruce Schneier needed a reference platform. Anyway, http://geekz.co.uk/schneierfacts/fact/126.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
  14. What it does and doesn't do by goombah99 · · Score: 1

    As I understand this it extracts the title or volume key from the PC memory. One could have gone after the upstream player keys since they are in memory too but then if they ever figured out what player you were using from the crack then all future titles and disks would remove that player key. That would of course break every player with that key, but it's not so bad with PC players as it would be with physical players, since the company with the broken player could offer a downloadable software upgrade. In any case that's moot for now since it's the title key that's being extracted from memory.

    Now at some point the hddvd autorities will figure out which one of these PC players that is exposing the title key to attack. At that point the software will be upgraded to better obscure the title key. While in principle the title key will still be lurking in memory somewhere they can probably figure out a way of making is really hard to extract. e.g. self modifying code. Non determinsistic algorithms, and putting parts of it inside protected areas of Vista's kernel. This will make it so all future players will have a difficult time being exploited to grab the title key. I suspect they can pull this off even though it will be a moving target. Apple for example has managed to keep Hymm broken, and it uses the same attack.

    But that does not solve the problem. Those old players will still exist and run. So they can still be used to extract the title keys. The only way they can beat this is if there is some way they can cause those old players to break on new movies. How might they do this?

    Well here's an approach. just mangle the title key or move its location on disk. Now all the new players are told how to unmangle so they can play the disks, and of course they can still play the old unmangled disks. The people screwed by this are all the people who own exisisting DVD players. these are now broken.

    But can they be upgraded? for example were they smart enough to allow the DVD players the ability to be reprogramed in firmware. Perhaps for example they could release some DVD that could be poped in the machine and it would reflash the firmware. That woul dmake this kind of breakage less painful to fix. Not painless however after millions of these are deployed. But at this stage pretty doable.

    If they were smart they'd shut the whole thing down now when there's too few players in the wild to matter. change the system to make the title keys stealthier, then start over.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:What it does and doesn't do by Sancho · · Score: 1

      There is no 'making the keys stealthier and starting over'. The problem with this sort of DRM, as has been noted many, many times, is that the decryption key and the cyphertext are distributed to the end-user. It doesn't matter how obfuscated they make it--if it can be read by the PC, it can be extracted by the PC.

      Trusted computing may make this harder--I'm not sure whether it will make it impossible, however.

      I think the reason Hymm failed is because DVD-Jon stopped working on breaking iTunes DRM in that direction. The same techniques should still be possible to replicate, however there are really only a handful of people in the world with the knowledge and ability to do that, and there are apparently NO people with the knowledge, ability, and drive. Otherwise, Hymm would work.

    2. Re:What it does and doesn't do by Troed · · Score: 1

      No - lots of people could make (and have made) key extraction from iTunes long after hymn stopped working. There's however no point in releasing anything, since myFairTunes6 and QtFairUse6 are used instead to de-DRM your purchased music.

      The actual changes that need to be done to extract the unencrypted frames when a new version of iTunes is released is simply less than to wade through a new version of the key obfuscation layer.

  15. Who cares!? by Anonymous Coward · · Score: 0

    I don't care whether he's a native English speaker, this guy is the shit.

    I would suck his dick if I wasn't a lesbian.

    1. Re:Who cares!? by Anonymous Coward · · Score: 0

      If Videolan is open source and it can play HD-DVDs and such, can't the disc's key just be VERY easily extracted from there?

    2. Re:Who cares!? by r3m0t · · Score: 1

      It only plays unprotected HD-DVDs. You take protected (AACS'd) HD-DVDs, use BackupHDDVD, and then you can play the resulting unscrambled files in Videolan.

      It's time to say "scrambled" instead of "encrypted"...

  16. So let me get this straight... by gillbates · · Score: 4, Insightful

    If I understand it correctly, my output resolution will be degraded unless I buy a MPAA-approved display device?

    Why would I bother upgrading from DVD if I'm not going to get any better quality?

    Tip to Hollywood: Deliberately crippling technology doesn't boost sales. As far as I'm concerned, there's no point in buying into this. Why would I bother to spend a lot of money for something that won't work with my existing equipment, and likely won't work in the manner I intend to use it?

    --
    The society for a thought-free internet welcomes you.
  17. I love this guy... by LukeCage · · Score: 5, Insightful

    After the HD-DVD crack, I realized that things where "unbalanced" by having just one format cracked, so I did Blu-Ray too.

    Bless you, muslix. Now the two formats can compete as true equals where it counts: in the ease of supplementing your legitimate media collection with illegal copies of things that you "kind of like".

    Let's not pretend that there is one type of pirate. There are many levels of pirate, and by far the most common type (at least in my experience) is the "pirate" who buys plenty of legitimate media, but occasionally supplements their colleciton with an illegal copy of something that they don't care enough about to pay full price for. You can see the popularity of this line of thinking by watching people paw through the "bargain bin" at any major retailer. These are the movies that no one liked enough to pay full price for, but still maange to sell. This is more of a problem, as I see it, with the uniform pricing structure of DVDs. Let's not pretend that "Batman Begins" and "Sisterhood of the Travelling Pants" are worth the same amount of money to most people. They are simply not, and should be priced differently from the get-go. Sadly the media companies instead try to rake in bucks from the "gotta have it now" super-fans crowd by artificially inflating the price; the side-effect is piracy. I would wager that the media companies gain more money then they lose by this process; the convenience of the consumer does not enter into the equation (these companies have demonstrated, repeatedly and without a doubt, that the convenience of the consumer is a very, VERY low priority to them).

    Of course I am deliberately discounting bring up That Guy. You know That Guy. He is the guy with the huge collection of pirated movies for the sake of having them. To be fair, unless That Guy has a lot of friends (and usually they do not) they are no real threat to media companies. That Guy would not have purchased the movies anyway, and his collection is (to put it bluntly) a dick-measuring contest to make himself feel better anyway. Every That Guy that I have ever met has had movies of laughably bad quality in their collection; their love is not for the cinema but rather, like a dragon, they hoard the wealth for it's own sake rather than an appreciation for it. And that might be the dorkiest thing I have ever written.

    1. Re:I love this guy... by goombah99 · · Score: 2, Funny

      Is THAT you, there "that guy". You were pretty cagey about your proclivities up until you mentioned the dragon.

      --
      Some drink at the fountain of knowledge. Others just gargle.
    2. Re:I love this guy... by symes · · Score: 1

      great post! for myself there's about three or four dvds on my shelf for which i paid full price - everything else is bargain basement. i tend to have a first viewing in the cinema and, if i like the film, i'll make a mental note to buy the dvd when it is at a reasonable price comensurate with how much the movie entertained me. i really wish that the movie industry would at least try pricing pirates out of the market - i realise it's not possible to stop all pirates but releasing dvds below £7 would be seriously attractive to the majority of those currently downloading and the sort of price dvds end up at anyhow.

    3. Re:I love this guy... by Anonymous Coward · · Score: 0

      Sadly the media companies instead try to rake in bucks from the "gotta have it now" super-fans crowd by artificially inflating the price; the side-effect is piracy. I would wager that the media companies gain more money then they lose by this process; True. The media companies aren't stupid or ignorant. They know people's buying patterns much better than most people do themselves. If a particular pricing strategy is used, it's because it will maximize profits from sales. While it may backfire for occasional titles, on the whole it brings in more money than any alternative strategy. As piracy becomes more widespread, however, it's possible that consumer habits will change enough that the optimal pricing strategy becomes something entirely different.
    4. Re:I love this guy... by Kjella · · Score: 1

      Let's not pretend that "Batman Begins" and "Sisterhood of the Travelling Pants" are worth the same amount of money to most people. They are simply not, and should be priced differently from the get-go. Sadly the media companies instead try to rake in bucks from the "gotta have it now" super-fans crowd by artificially inflating the price; the side-effect is piracy.

      Wait, now it's uniform pricing that's causing piracy but when Apple pull a "99 cents for everything" with their music store it's not causing piracy?

      The simple truth in any economics is that unless you can perfectly price discriminate, there'll always be people willing to pay, but not willing to pay enough to make it profitable. Let's say I have a DVD, which retails for $10, let's assume $0 cost for simplicity. Now, I can drop the price to 9$, gaining 9$*(customers willing to pay between 9 and 10$), but I lose $1*(all customers willing to pay 10$+). Guess what? Even if you're willing to pay 9$, it might not be proftiable to take your money. You are in short a cheapskate.

      Oddly enough, people take that and conclude that because they're willing to pay $X and not the actual retail price (and those who just lower $X until they can use that argument) then they can just take it. Well, it doesn't work that way. With property it's the owner that decides the price, and with copies it's the copyright holder that decides the price. Wether it's the self-interest of the producers (capitalism) or the state (communism) which sets the price, it's not the individual who can dictate ultimatums like "Give me the price *I* want, or I'll take it". Not in anything but anarchy, anyway.

      --
      Live today, because you never know what tomorrow brings
    5. Re:I love this guy... by mgiuca · · Score: 2, Insightful

      There is also the type of "pirate" who doesn't do anything which was illegal before DMCA. He's the pirate who:

      • Doesn't give movies to his friends.
      • Doesn't get movies off his friends.
      • Doesn't download movies.
      • Rents movies he wants to watch once, and watches them once.
      • Buys movies he wants to watch many times, and watches them many times.

      He's the "pirate" who pays hollywood what they are entitled, and benefits by enjoying the movies he wants to watch.

      He is, according to the MPAA, a "pirate", because when he did buy a movie, he bought it once. He isn't going to re-buy it to put it on his iPod, he's going to rip it, reencode it and save it on his iPod. He isn't going to re-buy it on his PSP, he'll do the same thing. If his disc gets scratched, he won't buy another one because he made a backup. He watches his movies in any operating system he wants, not just the ones which paid the hollywood license tax.

      He also thought some of the songs in the movies were pretty good, so he extracted the audio, cut it, and put it on his iPod. And his favourite clips are sitting on his computer so he can watch them whenever he wants without going to find his disc.

      He's the guy who indulges in what ironically used to be known as "fair use", and who would now be forbidden from it, were it not for heroes like this muslix dude.

    6. Re:I love this guy... by sulfur_lad · · Score: 1

      One more comment about That Guy: he's even less of a threat to the media corps because he never actually watches or listens to all the crap he downloads. He's a hoarder. He's got tons of crap and it's all immaculately organized, but because there's so much, there's no physical way (in this time continuum) that he'd be able to get through all of it unless he took some time out from downloading. Technically the media companies haven't lost any money on him because he never even sees any of it! The only people that lose out to the hoarder are the guys selling the bandwidth. They could be selling him out to the AA's purely because they're peeved at the amount of crap going down his wire.

      Oh, That Guy's mom loses out too. She never gets grandkids because That Guy spends all his time lookin' thru tubes on teh intarwebs and never meets that special someone. :)

    7. Re:I love this guy... by LukeCage · · Score: 1

      There's no way in today's retail market to negotiate with the seller on a per-unit basis. If there was, you can bet that they WOULD do exactly that - negotiate with each person for what they are willing to pay. And they already do. In the business community, they call this person an "account manager" and you can call them up, get quotes, negotiate, and generally get a much more flexible system then our traditional retail system. Of course, these are big customers with big needs and big accounts; they aren't going to do this over a DVD.

      I am not saying that people pirating a movie because it costs too much are correct in doing so; I am saying that there are three alternatives: pay whatever the media company wants to charge you, do nothing, or get it for free. There's no fourth option, and that contributes to piracy. I am not endorsing that behavior, simply noting it.

    8. Re:I love this guy... by Anonymous Coward · · Score: 0

      Every That Guy that I have ever met has had movies of laughably bad quality in their collection...

      This is true, but not necessarily for the reasons you describe. I know a couple of "Those Guys" and they have some utter crap in their collections, but these films are mostly for the purpose of trading. Just because they don't like a particular film, doesn't mean that they won't meet someone at a LAN party who does like that film. "That Guy" can then swap a copy of his shitty film for a copy of a film he actually wants.

      Futhermore, since most people think the film is rubbish, they don't bother to download or share it, so it is quite rare. So if/when they meet someone who actually wants the film, its perceived value is higher.

  18. You have to wonder... by shades66 · · Score: 1

    ... if this encryption scheme was made intentionally easy to bypass/break after all think of all those MPAA lawyers that would be out of a job if these formats were 100% un-crackable.

    --
    ---- There are 10 types of people in the world. Those that understand binary and those that don't
    1. Re:You have to wonder... by Desipis · · Score: 1

      Same could apply to those who designed the system in the first place.

  19. Why upgrade from DVD? by Petersko · · Score: 1

    "If I understand it correctly, my output resolution will be degraded unless I buy a MPAA-approved display device? Why would I bother upgrading from DVD if I'm not going to get any better quality?"

    Devil's advocate here - don't label me pro-DRM.

    If you're buying movies anyway, and the movie IS enforcing the downgrade requirement, then you won't see much difference from DVD... until you upgrade your television at some point in the future - at which time magically all the HD movies suddenly become viewable in their full glory.

    Of course that assumes you buy a TV before they stop including HDMI ports on them.

  20. Russian dolls. by DrYak · · Score: 4, Interesting
    running non-"Trusted" programs in a sandbox that prevents them from accessing the hardware directly, specifically to prevent this kind of attack.


    Yes, and how Windows it self will know that it isn't running inside a "simulated" trusted computer (the TC chip is virtual and part of the emulator) running inside an actual regular computer (with no chip to prevent you from running whatever you want ?) ...or running with a root kit hidden it self inside, like the Sony's one ? Treacherous Computing may work on the paper, but Microsoft isn't exactly known for perfect implementation of security tools. Root kits WILL be available.

    For this to work you actually need TC-enabled computers. There aren't currently enough of them.
    So either Microsoft pisses of its customers with something like "HD DVD & BD can only played on Windows Vista running on special mother boards. The rest of 80% of you just can't play them at all" (and currently customers are already pissed enough because they can't always play in full HD when they don't have display systems that *are* getting popular those days). Or either microsofts accepts to let some player run outside it's protected models and you don't even need a virtual machine or root kit to extract the needed data from memory.

    As said by another /.er : stoping to provide the decryption key is the only way to avoid circumventing protection... but won't be implemented for very obvious reasons.
    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
    1. Re:Russian dolls. by mrchaotica · · Score: 1
      Yes, and how Windows it self will know that it isn't running inside a "simulated" trusted computer (the TC chip is virtual and part of the emulator)

      Unless I'm mistaken, the TPM is itself is signed. Windows can check that to figure out whether the TPM it thinks exists really does or not. Or in other words, to "simulate" a TPM you need to get the Trusted Computing Group's private key.

      For this to work you actually need TC-enabled computers. There aren't currently enough of them. So either Microsoft pisses of its customers with something like "HD DVD & BD can only played on Windows Vista running on special mother boards.

      To be honest, that's exactly what I was expecting to happen -- I'm really surprised that PC HD-DVD and Blu-Ray players have already been allowed to exist.

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    2. Re:Russian dolls. by glebfrank · · Score: 1
      Unless I'm mistaken, the TPM is itself is signed. Windows can check that to figure out whether the TPM it thinks exists really does or not. Or in other words, to "simulate" a TPM you need to get the Trusted Computing Group's private key.
      ...Or have a real Trusted computer available, and institute a Man-in-the-middle attack.
    3. Re:Russian dolls. by a.d.trick · · Score: 1
      Treacherous Computing may work on the paper, but Microsoft isn't exactly known for perfect implementation of security tools. Root kits WILL be available.

      That makes me wonder if, sometime in the not so distant future, root kits will actually become a good thing.

    4. Re:Russian dolls. by Cheesey · · Score: 1

      It is not the TC module that is signed. Rather, the TC module contains a private key, which is not externally accessible. It is this key that is used to sign messages containing information about your machine state, allowing software on your machine to demonstrate a "trusted" status to software on other machines.

      If we can get at the private key inside a TC module, then we can make an emulated TC for a virtual machine. We can trick applications into thinking they are running on a trusted system.

      I suspect that differential power analysis might be a useful technique for doing this. Apparently it is effectively impossible to prevent an encryption device leaking information through the power it consumes: this is why commercial encryption devices usually come in sealed black boxes that also contain heaps of power filtering. There is little space for power filtering on a CPU die, so we'll probably be able to work out the private key by making the TC module sign something repeatedly, while an ADC captures information about power consumption. It's not a simple attack, but this might be the price of freedom in the future.

      --
      >north
      You're an immobile computer, remember?
    5. Re:Russian dolls. by Cheesey · · Score: 1

      ...Or have a real Trusted computer available, and institute a Man-in-the-middle attack.

      Not as easy as you'd hope. To do that, you'd need to be able to intercept messages between the CPU and the TC module, which are built into the same chip. It wouldn't be enough to simply intercept network messages, or messages on the bus. It's cryptographically resistant to that sort of attack.

      The TCPA consortium have put a lot of effort into securing your machine from you. As I understand it, the only attack vector is to try to extract the private key from the TC module, which may be possible using a power analysis attack.

      --
      >north
      You're an immobile computer, remember?
  21. I AM a lesbian, you can suck mine by Anonymous Coward · · Score: 0

    Have at it

  22. When will the *IAA learn? by Luscious868 · · Score: 3, Insightful

    The *IAA wastes so much time, energy and ultimately money on various DRM implementations and the end result is always the same. The DRM is eventually cracked so those who want to pirate material can and do yet the DRM is cumbersome enough to upset and turn off a certain percentage of legitimate customers.

    My roommate purchased an HDTV a few years ago before the HDCP standard emerged and he recently bought a Playstation 3. He was seriously pissed when he found out he couldn't watch Blue Ray Discs at the highest resolution because his TV wasn't compatible.

    Things like this only serve to alienate legitimate consumers who are already inclined to pay for the product. The pirates just wait for the DRM to be cracked.

    1. Re:When will the *IAA learn? by TeknoHog · · Score: 1

      My roommate purchased an HDTV a few years ago before the HDCP standard emerged and he recently bought a Playstation 3. He was seriously pissed when he found out he couldn't watch Blue Ray Discs at the highest resolution because his TV wasn't compatible.

      Did he actually try this out? I had the impression that no current discs have the Image Constraint Token set, so there would be no downgrading for now.

      --
      Escher was the first MC and Giger invented the HR department.
    2. Re:When will the *IAA learn? by Anonymous Coward · · Score: 0

      The PS3 needs HDCP for the highest resolution no matter what you are doing, even if it is just running Linux.

    3. Re:When will the *IAA learn? by TeknoHog · · Score: 1

      The PS3 needs HDCP for the highest resolution no matter what you are doing, even if it is just running Linux.

      Care to point out any definitive sources?

      AFAIK, HDCP is only required for ICT discs which are not yet available, and possibly never will. You should be able to use HDMI-DVI adapters or analog connectors to get the highest resolution. Of course, it's possible that the PS3 is doing something more restrictive than what the HDCP/ICT spec requires, but why would it do that?

      --
      Escher was the first MC and Giger invented the HR department.
    4. Re:When will the *IAA learn? by r3m0t · · Score: 1

      It's Sony. They get to:

      1) HDCP protect their own movies playing on the PS3
      2) Sell their Sony Bravias to people burned by the requirement

      Look at the other post on this story from somebody who describes Windows MCE's ridiculous "protection" of analog content.

      Also: http://davenet.scripting.com/2001/04/30/strategyTa x

    5. Re:When will the *IAA learn? by hobbesx · · Score: 1
      My roommate purchased an HDTV a few years ago before the HDCP standard emerged and he recently bought a Playstation 3. He was seriously pissed when he found out he couldn't watch Blue Ray Discs at the highest resolution because his TV wasn't compatible.

      Please remember that the quality degradation usually talked about is not a case of compatibility, but that quality is being deliberately broken to punish the end user. Although I'm not sure this is the problem in your friends case, since there's other PS3/HDCP issues out there...
      --
      This rating is Unfair ( ) ( ) Fair (*) Funny
      Sigh... If only. Modding would be so much more fun.
  23. new, non-restrictive format by nurb432 · · Score: 1

    Dont hold your breath. I dont see them going backwards, only forward, with even more restrictive technology.

    --
    ---- Booth was a patriot ----
    1. Re:new, non-restrictive format by Karzz1 · · Score: 1

      "Dont hold your breath. I dont see them going backwards, only forward, with even more restrictive technology."

      FTA: There are indications now that DRM is being considered for obsolescence.

      Also... it appears as though some media companies are considering abandoning DRM.

      --
      Beware of he who would deny you access to information, for in his heart he dreams himself your master.
    2. Re:new, non-restrictive format by Anonymous Coward · · Score: 0

      No they are not. None of those companies is considering abandoning DRM -- they may say they are considering releasing some MP3, but that's nothing at all like abandoning DRM. Even the technology companies like Intel, Microsoft and Apple are *INSANELY* pro-DRM. This is why DRM is going nowhere.

      The likes of Apple/Microsoft believe, fundamentally, that digital information should be made to work like a physical object, i.e. be made uncopyable, or copyable only when authorised. This is what "Trusted Computing" is all about, and what the TPM that Apple installed in their Intel-based Macs is for (OSX Leopard will have heavy duty support for it, so will Windows when their "NGSB" ships with longhorn etc). The TPM will provide the hardware to allow technology companies, like Intel, Sun, IBM, Microsoft etc etc etc to enforce a software lock-down, and only send data to trusted (approved) hardware and software. The hardware was explicitly designed to allow the enforcement of DRM on a supposedly open PC.

      All of these companies are quietly shipping PCs with TPMs installed... which are mostly unused at present. But all of your worst nightmares of secret code, surveillance and control are only a software update away, once your PC has been capped with a TPM. Now say thank you to Mr. Jobs and Mr. Gates for their bountiful gift of technology.

    3. Re:new, non-restrictive format by nurb432 · · Score: 1

      Yes, i have heard of that, but I dont believe that 'consideration' is anything more then marketing spin coming from those companies.

      Until i see it actually happen, i wont buy it.

      --
      ---- Booth was a patriot ----
    4. Re:new, non-restrictive format by Firethorn · · Score: 1

      Heh, speaking of which, my wait for buying a HD solution came far quicker than I imagined. I set the resolution that I wouldn't buy it until it had been hacked/opened to the point that encryption wasn't a factor.

      --
      I don't read AC A human right
    5. Re:new, non-restrictive format by Baricom · · Score: 2, Insightful
      I dont believe that 'consideration' is anything more then marketing spin coming from those companies.
      That could be, but I'm hoping it's something more than that.

      From what I can tell, there's three camps of consumers when it comes to DRM:
      1. The camp that can't stand it, won't buy it, and goes without the content.
      2. The camp that doesn't like it all that much, but buys it anyway.
      3. The camp that won't pay no matter what you do, and pirates the content instead.
      I know the recording industry is losing out on sales thanks to DRM because they're losing me. I just discovered an amazing album on iTunes, but I'm not going to buy it because of the DRM. If FairPlay wasn't there, I would have just spent $9.90 to download an out-of-print album. I have heard other Slashdotters express similar sentiments.

      Lifting DRM seems like a win-win-win-win scenario to me. The hold-outs like me will suddenly start buying music, the existing paying customers will be happier that they can move their music back and forth, and some of the pirates might start paying now that the convenience is there. I don't think they'll lose anybody to the lack of DRM, because piracy is ubiquitous - if you want a song for free, it's out there. The recording industry makes more money because at least as many people are buying, if not more. About the only company that loses in this scenario is Apple. The recording industry could give them an ultimatum - no DRM or no music - and Apple would lose the lock-in that managed to defeat the recording industry last time they renegotiated the contract.

      Lately, the prevailing theory for why DRM is present is not that it stops piracy, but that it locks content to one format so consumers have to buy it again and again for different platforms. That's a nice theory, but I question whether it truly works that way. When was the last time you remember somebody doing that? For example, I've never seen anybody buy a DVD of a movie they already have on VHS. (Admittedly, I could be living a sheltered life.)
    6. Re:new, non-restrictive format by truedfx · · Score: 2, Interesting
      From what I can tell, there's three camps of consumers when it comes to DRM:
      1. The camp that can't stand it, won't buy it, and goes without the content.
      2. The camp that doesn't like it all that much, but buys it anyway.
      3. The camp that won't pay no matter what you do, and pirates the content instead.
      Your second camp can be divided into the group that doesn't like it all that much, but buys it if the DRM can be bypassed, and the group that doesn't like it all that much, but sucks it up and deals with it. I consider them very different groups.
    7. Re:new, non-restrictive format by hearnz · · Score: 2, Insightful

      Absolutely. I have no problem with paying what I regard to be a fair price for music/movies/whatever - but I refuse to buy something if it has DRM on it that will restrict my use of it. This would make me either camp 1 (or maybe 3...) - except I'm quite happy to pay for DRM-protected content if I can't easily buy a non-DRM version, AND I can easily strip the DRM from what I buy. If it is more convenient for me to pay a few bucks to quickly and easily find a high-quality version of something I can use freely, than it is for me to hunt down a decent-quality pirated copy, I am more than happy to do so.

      I pay, I download, I strip the DRM, then I use how I please. It may be technically *illegal* anywhere that has DMCA-type laws, but frankly anyone who says it is *wrong* can bite my shiny metal ass.

      My preference is, and will always be, in order:
      1. Pay a *fair* price to quickly and easily buy a legal, DRM-free version
      2. Spend time/effort to find a pirated/cracked copy
      3. Buy a DRM-infected version and remove the DRM

      I utterly refuse to buy DRM content if I do not already possess the means to remove it easily and permanently.

      DRM will never stop piracy (to quote mulix64: "If you can play it, you can decrypt it") - all it does is inconvenience paying customers, turns some otherwise-paying customers to piracy, and presents only a trivial obstacle to piracy.

      As soon as the MPAA/RIAA realises there are many people out there with the same views, the sooner they will start making better profits from online sales, WITHOUT pissing off their customers.

    8. Re:new, non-restrictive format by monsted · · Score: 1

      From what I can tell, there's three camps of consumers when it comes to DRM:

            1. The camp that can't stand it, won't buy it, and goes without the content.
            2. The camp that doesn't like it all that much, but buys it anyway.
            3. The camp that won't pay no matter what you do, and pirates the content instead. You forgot:
            4. The camp who doesn't give a crap, as long as it looks good on their new TV.
            5. The camp who doesn't give a crap, as long as my 'illegal' player will kill the protection and play it anyway.

      Personally, i'm a 5. Consequently, i haven't bought any of the HD medias yet.
    9. Re:new, non-restrictive format by soliptic · · Score: 1

      Broadly agreed, except I would amend to this:

      1. The camp that doesn't know about it, and buys it anyway. 2. The camp that can't stand it, won't buy it, and goes without the content. 3. The camp that doesn't like it all that much, but buys it anyway. 4. The camp that won't pay no matter what you do, and pirates the content instead.
      At present I still think the vast majority of consumers are in my group 1. Let's be honest - if I didn't read slashdot I would barely know about DRM yet alone understand why it's so stupid and broken. I've seen a tiny amount of coverage in the Guardian's technology supplement, but nothing beyond that.

      I think as time goes by, and DRM starts popping up in people's lives more (for example: someone's HDD dies and they can't get their iTMS purchases back off their ipod onto a new computer easily, someone buys a HD movie and it doesn't work on their early-adopter projecter, etc), the people in group 1 will split and feed into all of the other groups. I wish I could honestly say a lot turn into group 2, but I don't think most people are that principled. More likely ~75% of them will become group 3, ~25% group 4, and just a tiny % becoming ideological refuseniks.
    10. Re:new, non-restrictive format by Fred_A · · Score: 1
      5. The camp who doesn't give a crap, as long as my 'illegal' player will kill the protection and play it anyway.

      Personally, i'm a 5. Consequently, i haven't bought any of the HD medias yet.

      As am I, along with, I suspect, a lot of users of so called "alternative" systems. I certainly wouldn't buy any DVDs if it wasn't easy to bypass the embedded protection of that format. And for the online music stores, I find the CD to be a working alternative that suits me and doubles as a fairly durable backup that I can convert to pretty much any format. So I haven't really explored that area, even though it might be possible to strip the DRM (or not, I really have no idea).

      I expect to continue doing just the same with the new media as they appear. If I can use them in a convenient (even though it's sort of borderline illegal when there's some copy protection involved), I'll buy them, if not I'll just do without.

      IMO category 5 is much larger than it seems.
      --

      May contain traces of nut.
      Made from the freshest electrons.
  24. Seems like a decent guy by Bralkein · · Score: 4, Interesting

    Since the DRM on these new formats is so insulting, I'll always be happy to see it suffering setbacks like this. However, I'd be slightly less happy if the person who cracked it was just some guy who wanted to be able to get everything for free and impress his mates by giving them free movies. Assuming this muslix64 character is telling the truth, he seems like a decent sort. His story is just that he wanted to be able to use his own purchased movies in the way that he wants to, in his own home. So consider him thoroughly endorsed!

    On a different subject, this still leaves Linux (and BSD, ReactOS, Haiku etc., etc.) users in a spot of bother. I don't understand if having a movie key would allow you to watch something on the disc even without the right player software to access the HD-DVD/Blu-Ray drive, but even if you don't need special software it still looks like extraction of the movie keys can only be done with Windows software, and presumably OSX software in the future. I'd still really like to see a proper, Free Software, libdvdcss-style crack for these formats. I'd like to think it's only a matter of time...

    1. Re:Seems like a decent guy by TheLinuxSRC · · Score: 1
      On a different subject, this still leaves Linux (and BSD, ReactOS, Haiku etc., etc.) users in a spot of bother. I don't understand if having a movie key would allow you to watch something on the disc even without the right player software to access the HD-DVD/Blu-Ray drive, but even if you don't need special software it still looks like extraction of the movie keys can only be done with Windows software, and presumably OSX software in the future. I'd still really like to see a proper, Free Software, libdvdcss-style crack for these formats. I'd like to think it's only a matter of time...


      From the article:
      Additionally, he made available an open source program named BackupHDDDVD...
      My 2 programs are only "proof of concept" software. Right now, the community's contribution is vital. They will bring this software to higher level. I just tell people it was possible and I made the demonstration.


      Also, following the links of the original announcement produces this forum article that has links to the original source code buried within. The authors development was done with Java, however he only meant to provide the means -- it is up to other developers to implement this in a "transparent to the end user" way.
    2. Re:Seems like a decent guy by TheLinuxSRC · · Score: 1

      I hate to respond to the same comment 2x, but I think I misunderstood what I read. :-$

      I completely missed:
      "like extraction of the movie keys can only be done with Windows software, and presumably OSX software in the future."

      You are correct, you need a Windows(tm)(C)(All rights reserved) player from which to capture the key.

    3. Re:Seems like a decent guy by Magada · · Score: 1

      There will be no such crack. AES is solid. The TPM concept is solid. Together, they mean that you will no longer control the hardware and software you buy - unless, that is, you forgo big-business media and software. Is that so bad?

      --
      Something bad is coming when people are suddenly anxious to tell the truth.
  25. I'll bet... by tkrotchko · · Score: 2, Insightful

    It seems likely to me that MS has a trick to allow protected processes to be debugged. It's either a secret mode of Vista, or they have debug builds of Vista that allow this type of snooping to take place.

    I mean, in the perfect world, you develop non-protected, and then you turn it into a protected process once it's been debugged. But back in the real world, certain programs will break and you'll only be able to debug in "protected" mode.

    If Hollywood is bright, they'll just ignore this. The DVD is certainly exploitable (in fact, in hindsight, it was trivial), but last I checked they make a ton of movies from selling DVD's. I fail to see this is any different.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
  26. LATENT TPC by goombah99 · · Score: 2, Insightful

    How do you know that Intel has not been putting a TPC module in every CPU for the last five years? They've had this ring architecture for a decade, could there not be one more ring they never told us about? in five more years they could turn it on and surprise! every computer less than a decade old is TPC complient. The remaineder still run but can't use the new OS or must run in a reduced privledge mode.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:LATENT TPC by Anonymous Coward · · Score: 0

      That is the most unlikely thing I have ever heard of. You are an idiot, and should cease communicating.

    2. Re:LATENT TPC by Louis+Guerin · · Score: 1

      ===
      How do you know that Intel has not been putting a TPC module in every CPU for the last five years? They've had this ring architecture for a decade, could there not be one more ring they never told us about? in five more years they could turn it on and surprise! every computer less than a decade old is TPC complient. The remaineder still run but can't use the new OS or must run in a reduced privledge mode.
      ===

      Two words: CLASS ACTION.

      L

    3. Re:LATENT TPC by TheGavster · · Score: 2, Insightful

      Intel, like all corporations, likes money. I see it far more likely for them to use the space for a few more K of L1 cache than to implement some secret doomsday circuit so that someone else can make money.

      --
      "Because Science" is one step from "Because old book". Try "Because of my experiment testing my falsifiable assertion".
    4. Re:LATENT TPC by NaDrew · · Score: 1
      How do you know that Intel has not been putting a TPC module in every CPU for the last five years? They've had this ring architecture for a decade, could there not be one more ring they never told us about? in five more years they could turn it on and surprise!
      Nah, in order to do that they'd need to charge everyone $1.99.
      --
      Vista:XPSP2::ME:98SE
  27. Who would name his kid that? by Anonymous Coward · · Score: 2, Funny

    Someone who likes muesli and Intel architecture but isn't so good at spelling?

  28. Ah here's something they can do... by goombah99 · · Score: 1

    Actually I'm wrong. here's how they can fix their problem fairly well.

    Those old players that arebeingused to extract the title key can have their player keys revoked. That will bust some limited number of players too. Now without those player keys the old players cant decode the title keys. So they have to migrate to new players. If those players are stealthier then they may not be able to figure out how to extract the title keys.

    Finally what if the new players were to get some of their executables right off of the DVD itself. Then they could make it very difficult to have a universal method for subvering the player to get the title key.

    --
    Some drink at the fountain of knowledge. Others just gargle.
    1. Re:Ah here's something they can do... by 3vi1 · · Score: 1
      Finally what if the new players were to get some of their executables right off of the DVD itself.


      You assume that all DVD players/computers use (and will always use) a specific subset of processors.

      Also, The only executable on the DVD could be a decryption routine. Having access to the code for disassembly actually makes the crackers job easier (vs. what is stored in a DVD players ROMS).
    2. Re:Ah here's something they can do... by goombah99 · · Score: 1

      The idea is this. If the DVD contains executable then this can vary. Therefore the location in memory and the kind of obfuscation used to hide the title key can vary between movies and there could even be 10000 different ones for the same title. They could even determine which executable ran by the player key. This would mean that every title key recovery would have to be cracked by a different attack, and the result would not even be universal since it would only work on say 1/10000th of the dvd's of that movie.

      Now as for it only running on a subset of processors this is not a big deal. If it only ran on intel 386 how much bussiness for PC players would they lose?

      Moreover any other processor could run an emulator or the code itself might be compiled java or a script. it does not need to be blazingly fast.

      --
      Some drink at the fountain of knowledge. Others just gargle.
  29. Don't attack the crypto... by FooAtWFU · · Score: 1
    Ya, perhaps sidestep is a better term than crack. In all likelihood the cryptosystem itself can't be broken, it's AES.

    Like they say: you don't attack the cryptography. You attack how it's used.

    --
    The World Wide Web is dying. Soon, we shall have only the Internet.
  30. DRM Cracking Quiz by Compulawyer · · Score: 4, Funny
    To paraphrase from an old law school joke:

    Q: What is the fastest way to crack a DRM scheme?

    A: Label it as uncrackable.

    Thank you, thank you. I'll be here all week. The 9:00 show is completely different from the 7:00 show. Be sure to tip your bartenders and waitresses.

    --

    Laws affecting technology will always be bad until enough techies become lawyers.

    1. Re:DRM Cracking Quiz by Anonymous Coward · · Score: 0

      I hope you didn't tip your comedy coach.

    2. Re:DRM Cracking Quiz by amosh · · Score: 4, Insightful

      I don't mean to flame your .sig... but you've got it exactly wrong. Laws about tech will always be bad, until enough techies become lawyers.

      Hmm, person X is a lawyer. She makes mid six figures and works 80 hours a week. She have a staff to handle IT issues. Her motivation to 'become a techie' is...? I, on the other hand, got sick of the fact that other people were writing the rules that controlled my industry. So I left off being a netadmin and now I'm in law school. You want the laws to be sane? Start writing them, rather than leaving that to people who don't have a clue, and don't have the slightest reason to care.

    3. Re:DRM Cracking Quiz by Compulawyer · · Score: 1

      Not to flame your flame of my sig, but it works both ways. I went to law school first then entered an MS in CS program. Now I do patent law. I think we agree on the core concept though - technology-related laws should be written by people who actually understand technology.

      --

      Laws affecting technology will always be bad until enough techies become lawyers.

  31. Um, not quite by Anonymous Coward · · Score: 0

    Rather, That Guy is just taking advantage of the education exception to the DMCA to learn more about computers, copyright, and digital restrictions. The thrill of the hunt is for the sake of learning to be a better hunter.

  32. Quantum Leap again...... by frogstar_robot · · Score: 1

    So HD Video is the smallest possible step forward then? Given all the hi-def kit that people have already bought that isn't compatible with the copy-protecto-flibberty-fuck I suppose "quantum leap" is a fair description.

  33. DCMA? by antdude · · Score: 0

    Defense Contract Management Agency? [grin]

    --
    Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
  34. Linux HDDVD/BR Software Player by Pikoro · · Score: 4, Interesting

    How about a player for linux?

    Since, based on the past, none of the studios will license a key for a linux player, I propose we create a player that, as part of playback, incorporates this "crack".

    To get around this, the player will prompt for the disc key before playback. Then, the disc is decrypted as playpack is performed, thereby bypassing the "Player Key".

    --
    "Freedom in the USA is not the ability to do what you want. It is the ability to stop others from doing what THEY want"
  35. Producer countermeasures by dfsmith · · Score: 0

    I haven't looked at the HD-DVD protection scheme in detail, but if it's like DVD then the content producers (CP) do have a way to retaliate. All HD-DVD players I've seen so far have a network connection on them "for updates", so....

    • On a new HD-DVD title, the CP revokes the keys of the compromised player type.
    • As soon as the compromised player tries to run the new HD-DVD, it gets disabled.
    • The disabled player gets a software update to "correct" the keys-in-memory problem (either over the update port, or new firmware is supplied on the new HD-DVD).

    So old discs can still be played, but new content retains protection on all players (vulnerable and non-vulnerable).

    1. Re:Producer countermeasures by swilver · · Score: 1

      I then put back a mirror image of my partition, and voila, it plays old content again. And no, I won't allow it to access the internet.

  36. That's why they have not, and will not, enable by SuperKendall · · Score: 4, Insightful

    You have found the very reason why they have not enabled the flag and will not for years to come - way too much old equipment and way too many customers to be pissed off.

    In the technical rounds it was easy enough to add the flag, but once the marketing people realized what it would do they nixed the use of it.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:That's why they have not, and will not, enable by yago2k · · Score: 1

      Who says they haven't enabled the flag?

      The precise reason muslix64 wrote BackupHDDVD is because he could't see his legally purchased HD-DVDs in his legally purchased HP HD-DVD drive because his legally purchased HP Monitor lacked HTCP.

  37. Re:Like a dog chasing its own tail by Anonymous Coward · · Score: 0

    It's not it's, it's its.

  38. If you use device keys, they can revoke them by buss_error · · Score: 3, Insightful
    I don't care about device keys. I do care about volume keys, because by using volume keys instead of devices keys, I totally bypass the revocation system. There is no "volume key revocation". There is content revocation, but I really doubt they will ever use it. If you use device keys, they can revoke them.


    Which is why I will never "upgrade" to HD. When my lowdef stuff stops working, I'll simply opt out of the rat race and not buy anything. Books are still good.

    I will not pour thousands of dollars into a HD system only to have some jerk in a corner office somewhere decide that my investment constitutes a risk to his profits, and be able to take it away from me without consequence, without my consent, and without buying me new geegaws. F'em. They don't generate ANY content I'd be willing to pay that much to watch.

    But that's just me. Feel free to pour $BUCKs into their profiteering maws if you wish. It's your money... well, your's and mostly THEIRs, since they can decide to take it away from you.

    --
    Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
  39. I am not impressed! (not a troll, I promise) by Anonymous Coward · · Score: 0

    muslix64 isn't exactly a brilliant hacker here. Anyone who's in the software cracking scene knows about fravia's now defunct site and +ORC's set of DOS tutorials. We were ripping keys from memory in encrypted states years ago on the PC, and years before that on even older hardware.

    That said, I am not impressed with what this person has done.

    The HD-DVD and BluRay camps should start blacklisting the keys that they've given out to WinDVD and PowerDVD. There should be no software decoding of HD content until set-top boxes have saturated the market somewhat.

    What will muslix64 and friends do when WinDVD starts using Armadillo to protect their software? What will they do when WinDVD requires a hardware dongle to run that contains a portion of the software's code, in an encrypted format itself?

    There are crackers out there who can take care of such things, but it's just a matter of revoking keys again, and updating WinDVD and PowerDVD.

  40. Re:I'll bet... by Fulg · · Score: 2, Interesting
    It seems likely to me that MS has a trick to allow protected processes to be debugged. It's either a secret mode of Vista, or they have debug builds of Vista that allow this type of snooping to take place.
    Well, there's this:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    ...which already allows one to "hijack" any executable and replace it with another, on a retail system (it's still there in Vista). No idea how/if it will work on a protected executable, though. It would certainly be an interesting experiment, but I don't have such a system here.

    This trick is quite handy to stop services that you don't have rights to, by replacing them with dummy executables... *cough* corporate USB port disabling software *cough* :)
    --
    gcc: no input sig
  41. Bruce Schneier said it best by enos · · Score: 1

    I remember one conversation I had at a Crypto conference, early in my career. It was outside amongst the jumbo shrimp, chocolate-covered strawberries, and other delectables. A bunch of us were talking about some cryptographic system, including Brian Snow of the NSA. Someone described an unconventional attack, one that didn't follow the normal rules of cryptanalysis. I don't remember any of the details, but I remember my response after hearing the description of the attack.

    "That's cheating," I said.

    Because it was.

    I also remember Brian turning to look at me. He didn't say anything, but his look conveyed everything. "There's no such thing as cheating in this business."
      -- Bruce Schneier

    There are HD movie torrents. Whoever says the system isn't broken is in denial. The system was supposed to stop pirates. Pirates have no trouble with the current exploits, so the system is broken. How it's broken is irrelevant. The only people who might care are the honest people who bought the discs and got burned by the DRM. So the studios get none of the benefit, all of the costs, and angry customers.

    --
    boldly going forward, 'cause we can't find reverse
  42. On the doom9 forums... by Anonymous Coward · · Score: 0

    there are rumors suggesting he's Canadian... Since there is evidence in his interview of some of the typical grammatical mistakes that Francophones make when speaking/writing English (using the word "his" when you want to say "its" for example), there's a good chance he's from Quebec. A good chunk of Quebec's population is distributed within two cities (Quebec City and Montreal)... Since his English is reasonably good, I'm gonna guess he's not from a rural area or Quebec City, where English is rarely spoken at all. So, just going by the numbers, I'm would speculate he's probably from the Montreal metro area. Anyway, the point is, Canada is a country *with* DMCA-type laws, so I suspect that he's not exactly home free if discovered.

    And before you mod me down for giving the MPAA/authorities a lead, keep in mind there are literally a million people out there that could have arrived at the same hypothesis given the publicly available... ah nevermind, I'll just take this post AC.

    1. Re:On the doom9 forums... by Anonymous Coward · · Score: 0

      He is from Bruxelles, Belgium.

    2. Re:On the doom9 forums... by Anonymous Coward · · Score: 0

      If that's the case, he could be arrested for breaking the Belgian implementation of the EUCD. That stupid law is even worse than the DMCA

  43. Obligatory Futurama response: by Dachannien · · Score: 1

    Fry: Eeee! Now say nuclear wessels!

  44. If the capability exists, it will be used. by Kadin2048 · · Score: 1

    You have found the very reason why they have not enabled the flag and will not for years to come - way too much old equipment and way too many customers to be pissed off.

    So basically... "We're going to hold this gun to your head, here, but don't worry -- we're not going to use it! It's just easier to put the gun there, now, than it would be to do it later...but we don't want to deal with the mess it would make if we used it, so just forget it's even there. Trust us!"

    No, thanks. I think that as the media companies become more and more desperate, as it becomes painfully obvious that DRM just doesn't work, they're going to pull out all the stops and go down fighting. If they have a way to make every non-HDCP television in the world suddenly explode, they'll do it; it's just a question of when, and what level of desperation it will require.

    Don't ever question what a broke junkie will do for a fix, and don't ever question what an obsolete corporation will do to protect its business model. Even when doomed, both will do ridiculous, irrational, self-defeating things in order to delay the inevitable for as long as possible. You probably don't want either one in your living room.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    1. Re:If the capability exists, it will be used. by SuperKendall · · Score: 2, Interesting

      So basically... "We're going to hold this gun to your head, here, but don't worry -- we're not going to use it! It's just easier to put the gun there, now, than it would be to do it later...but we don't want to deal with the mess it would make if we used it, so just forget it's even there. Trust us!"

      We don't have to trust them. We have Blu-Ray/HD-DVD backup. I am just explaining what will happen, and why.

      No, thanks. I think that as the media companies become more and more desperate, as it becomes painfully obvious that DRM just doesn't work, they're going to pull out all the stops and go down fighting.

      Why would they? They will have seen the music industry cave to DRM free formats by that point and realize what large sums of money are to be gained by leaving things as they are.

      Don't ever question what a broke junkie will do for a fix, and don't ever question what an obsolete corporation will do to protect its business model.

      Don't ever think that a company will give up a large pile of money shoved in front of its face. That's the predictive model I use.

      --
      "There is more worth loving than we have strength to love." - Brian Jay Stanley
  45. the key is part of the encryptio by foo23 · · Score: 1
    I don't agree that this is a lesser way of getting to the content. Protection is not only the fence, it is also the key to the door. If you can't properly protect the key, the fence is not worth noting.

    As Cory Doctorow put it (in his talk to the Microsoft Research group to be found on craphound.com):

    ... Cryptography - secret writing - is the practice of keeping secrets. It involves three parties: a sender, a receiver and an attacker [...]. We usually call these people Alice, Bob and Carol. [... A few explanations of cipher, ciphertext and key] In DRM, the attacker is *also the recipient*. It's not Alice and Bob and Carol, it's just Alice and Bob. So Alice has to provide Bob - the attacker - with the key, the cipher and the ciphertext. Hilarity ensues.

    This is why DRM is bound to fail ... they always will have to provide the key. The algorithms for encryption themselves should be rather safe.

    1. Re:the key is part of the encryptio by Anonymous Coward · · Score: 0

      The names are wrong. Carol would be an additional legitimate sender. An eavesdropper would be called Eve.

      http://en.wikipedia.org/wiki/Alice_and_Bob

  46. Exactly... by cyclomedia · · Score: 1

    If movies were £2 a Disc and not £20 a disc then they'd suddenly find themselves selling a bucket load more. We're witnessing a slooooow move towards this: Batman begins came out simultaneously in 2 disc (toys!) and 1 disc (just the movie) editions.

    It's unlikely to happen any time soon though because the exec's attitude at MAFIAA affiliates just isn't there yet. Hence the annual iTunes arguments about price, they currently want the ability to charge extra for premium tracks ... "premium" meaning "the new britney spears track" where they expect a bunch of consumers to want to pay more for it to get it ASAP than wait a month or two to get it at the usual $.99. By advertising these as "exclusive" and "VIP" they want to create a bizzarro false market where the only difference in the content is when exactly you get it... i.e. milking the happy consumers who want to be "cool" because they have the latest VIP exclusive britney release on their iPod and can brag to their clique who are obviously cheap because they dont want to fork over the cash.

    Basically dumb-assed consumers hold plenty of the blame because they think that buying a pair of trousers for £200 is somehow better than getting a pair for £20 (or in my case: £2 from a charity shop, thank you very much) because having some other guy's name tattooed across your butt is so much cooler than saving cash and basically having warm legs.

    oops, i ranted, i did have a point somewhere back there

    --
    If you don't risk failure you don't risk success.
  47. DVD Upgrades.. by nurb432 · · Score: 1

    I have seen many people ( including myself ) 'upgrade' their tapes to DVD as the tape aged and quality starting to drop. Its getting harder to find anywhre local to buy replacement tapes ( new that is ).

    But you are right, its not about piracy, its about content control: Who gets to view what/when/where.

    --
    ---- Booth was a patriot ----
  48. Spot On by boot1973 · · Score: 1
    This is spot on. What the Media companies seen unable to comprehend is that REAL pirates (i.e. those that make large numbers of copies to sell on*) don't care about quality. Sitting a camera in front of a HDTV screen (or Cinema screen) is more than adequate for their needs. All the copy protection does is stop individuals making backup copies or transferring them to alternative medium. How much does this save the industry? Next to nothing I suspect. It's doubtful that they even get the costs it to to implement the copy protection back.

    This then beg the question as to why the bother but I'll leave that to the conspiracy nuts.

    *Ok There not REAL pirates.. they rarely go "Arrgghh" for a start.

  49. No legal open source player - ever. by pacinpm · · Score: 1

    It's sad there will be no legal (read: MPAA approved) software open source player for HD content. If it is software and with open source it breaks all DRM schema. Such player can alway be modified to write decoded movie on disk instead to play it on screen. Closed source programs have some security by obscurity (not much as Muslim64 proved) and some legal security (cracking them is illegal in some countries). Realeasing player with keys to decrypt HD-DVD on GPL licence leads in a stright way to tools that could be used to copy content. No content producer will go this way. The only way I see is closed harware channel for HD content: encrypted disk read by HD-player, encrypted stream transmitted to PC and in encrypted form to graphic card and (again encrypted) to HD-screen. No software part on PC should ever see unencrypted content. Unfortunately encrypted hardware tunnel is very similar to closed-source approach. Open source and DRM just do not match.

    1. Re:No legal open source player - ever. by SpooForBrains · · Score: 1

      The only way I see is closed harware channel for HD content: encrypted disk read by HD-player, encrypted stream transmitted to PC and in encrypted form to graphic card and (again encrypted) to HD-screen. This is exactly what HDCP is.
      --
      "The dew has clearly fallen with a particularly sickening thud this morning"
  50. In its current state by SpooForBrains · · Score: 1

    either you would (after buying a movie) hit a site somewhere with a list of keys, and grab the one for your new movie (there will be SOMEONE with a Windows machine buying new movies and sharing the keys, just 'cos they can) or there's a server somewhere somewhat like CDDB storing a database of keys. Then your player would check the server on playback for a key. You could synchronise offline if you want to watch on the move.

    Far from ideal, and maintaining the key servers in the face of constant lawsuits would be a tough task, but thepiratebay and co prove there are people out there more than willing to perform this service. Yeah, it would be illegal, but so is playing DVDs on Linux right now.

    --
    "The dew has clearly fallen with a particularly sickening thud this morning"
  51. Shenanigans! by elrous0 · · Score: 0
    With the HD-DVD, I wasn't able to play my movie on my non-HDCP HD monitor. Not being able to play a movie that I have paid for, because some executive in Hollywood decided I cannot, made me mad...

    I'm sorry, but I've got to call "shenanigans" here. AFAIK, no HD-DVD movies (or Blu-ray, for that matter) have ever been released with this "protection bit" enabled. I know that personally because I watch HD-DVD movies all the time on my Xbox 360 add-on through my component connection (without HDCP) and they DO NOT downconvert.

    -Eric

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
  52. Re:I'll bet... by Anonymous Coward · · Score: 0

    It seems likely to me that MS has a trick to allow protected processes to be debugged. It's either a secret mode of Vista, or they have debug builds of Vista that allow this type of snooping to take place.

    Yes, they have CODE THAT IS SIGNED BY MICROSOFT. It's all about the keys in the world of trusted computing -- who used their key to sign your code. Not signed by the right organisation? Not Trusted... not allowed access. Currently, this sort of stuff has to be done in software -- but it can now be done in hardware... inside a chip that self-destructs if tampered with (a TPM, there's one in every Intel Apple Mac).

    To quote an Intel engineer at a talk about 8 years ago: the next challenge in security is making a computer secure AGAINST ITS OWNER. That was back when Intel, Microsoft, Compaq, IBM etc etc started the Trusted Computing initiative and began plotting to ensure that every computer in future would be crippled to ensure that software would always remain under central control.

  53. OT: Incomplete sig by VP · · Score: 1

    Your sig is missing a significant piece:

    7 November 2006 - the day Americans forgot 11 September 2001 and remembered 4 July 1776.

  54. No titles with ICT flag enabled yet. by SuperKendall · · Score: 1

    Who says they haven't enabled the flag?

    I have not yet heard of any titles that include it - then again I can't find a good list either. The first few may have had it but all new titles come without the flag, after Sony pledged not to use it and other studios followed suit.

    The precise reason muslix64 wrote BackupHDDVD is because he could't see his legally purchased HD-DVDs in his legally purchased HP HD-DVD drive because his legally purchased HP Monitor lacked HDCP.

    That may have been an additional restriction of the player beyond the ICT flag though. I read the interview with him as well; it was not specified.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:No titles with ICT flag enabled yet. by yago2k · · Score: 1

      http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_c ost.html
      According to this guy, there are several reports of people that can't watch HD media on their monitors if they aren't HDCP compliant. Isn't that a sign that ITC has already been activated? Is there anybody that has non-HDCP that can watch HD-DVD or BD? These are not rhetorical questions, I'm genuinely curious.

  55. You assume a trusted computer. by DrYak · · Score: 1

    As I understand it, the only attack vector is to try to extract the private key from the TC module, which may be possible using a power analysis attack.

    You assume a computer that can actually be trusted.

    You just generate your own key pair, put the private in your emulator, inject the public into Windows, and as the computer isn't trusted Windows has no ways to know that in fact it's modified and its keys doesn't correspond to a genuine trusted chip.
    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
    1. Re:You assume a trusted computer. by Cheesey · · Score: 1

      Right! You can build your own network of trust, using whatever keys you want. This is the good side of TCPA.

      But TCPA includes "remote attestation", in which an online service is able to validate the state of your machine before, for example, sending you a DRM'ed music file. Now, that service could choose to trust the key you made yourself, but it doesn't have to. It will probably only trust keys that have been signed by the TCPA consortium. If you don't have one of those keys, you're not "trusted" - you could be using your own TC module with the intention of defeating the DRM.

      The whole thing is really, really nasty. See http://www.cl.cam.ac.uk/~rja14/tcpa-faq.html if you haven't already.

      --
      >north
      You're an immobile computer, remember?
  56. Need further info by SuperKendall · · Score: 1

    According to this guy, there are several reports of people that can't watch HD media on their monitors if they aren't HDCP compliant. Isn't that a sign that ITC has already been activated?

    Not necessarily, it could be the player being evil and simply restricting playback for all HD content on a non-protected path, flag or no. I could easily imagine such players being built.

    I am not saying the flag is not there, it may be - but it does not have to be to have that effect. Either way it sucks to be sure.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley