Slashdot Mirror


Is Interoperable DRM Really Less Secure?

Crouch and hold writes "Are closed DRM schemes like FairPlay more secure than interoperable ones? Based on the number of cracks, it doesn't look like it. 'When it comes to DRM, what history actually teaches us is that one approach is no more secure than the other in practice, as they relate to the keeping of secrets. Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses.'"

189 comments

  1. +5 informative by macadamia_harold · · Score: 5, Funny

    Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo

    I had no idea that the MS licensing department was actually an orifice.

    1. Re:+5 informative by slicenglide · · Score: 1

      plus the whole, "Windows Media DRM has FEWER security breaches... yet Windows Media is licensed out the wazoo."
      Wouldn't it make sense if it had less security breaches that it be more licensed as being more trusted.
      -I still hate DRM.

      --
      John Walsh once found me while looking for some other kid. He was not amused.
    2. Re:+5 informative by thedarknite · · Score: 3, Insightful

      and here was me thinking that their licensing was forced into orifices.

      --
      A game has objectives and is competitive, anything else is just play
    3. Re:+5 informative by Mr2001 · · Score: 3, Informative

      It's not a question of licensees choosing WM DRM because they trust it more than FairPlay - Apple doesn't license FairPlay at all, so Windows Media is the only choice for a third party.

      --
      Visual IRC: Fast. Powerful. Free.
    4. Re:+5 informative by networkBoy · · Score: 3, Interesting

      True enough, but I've always looked at it as such:
      Closed DRM == one set of eyes for the "good" guys (arguably the bad guys in this case but whatever) == pwned by the freedom fighters.
      licensed DRM == several sets of eyes, eyes with different corporate mentalities, eyes with different outlooks, thus sorta like OSS == less breaches.

      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    5. Re:+5 informative by rampant+mac · · Score: 1
      Wait until you see which orifice they come knocking on when they want more money.

      I'm gonna make you squeal like a pig. Weeeeeeee!
      --
      I like big butts and I cannot lie.
    6. Re:+5 informative by Scoldog · · Score: 1

      I had no idea that the MS licensing department was actually an orifice
       
      Windows Licensing Orifice? Wonder what they print the licenses on?

      --
      This space for rent
    7. Re:+5 informative by Heembo · · Score: 2, Insightful

      This is only true over time. When you first open and then license a new DRM, more eyes could mean more BREACHES...

      --
      Horns are really just a broken halo.
    8. Re:+5 informative by cadeon · · Score: 1

      Just look at what comes out of it!

    9. Re:+5 informative by mindwhip · · Score: 1

      nononono... MS use Fidonet to distribute license information....

      WaZOO protocol
      Warp-zillion Opus-to-Opus. Fidonet's session layer protocol. Although it mentions Opus (a specific BBS from the 1980s), WaZOO is the session protocol used for the Fidonet network. Because WaZOO is much more efficient than other mechanisms (e.g., FTP), it is sometimes used for automated or batch communications in other parts of the Internet. http://dictionary.reference.com/browse/wazoo

      --
      [The Universe] has gone offline.
    10. Re:+5 informative by julesh · · Score: 1

      Closed DRM == one set of eyes for the "good" guys (arguably the bad guys in this case but whatever) == pwned by the freedom fighters.
      licensed DRM == several sets of eyes, eyes with different corporate mentalities, eyes with different outlooks, thus sorta like OSS == less breaches.


      I don't think this works for DRM. DRM is a deeply flawed concept -- in the long run, it can't work. Sooner or later, there will be a breach that's irreparable. Many eyes can't prevent this because it's a fundamental problem with the concept.

      Jobs' essay was correct, I think: when that breach occurs, it is much easier to deal with if all implementations are under your own control, than if you have to coordinate a response between all of your licensees.

    11. Re:+5 informative by DECS · · Score: 4, Insightful

      FairPlay = 2 Billion songs, 10 million movies

      MS PFS DRM = 100,000 songs sold?

      MS Zune DRM = 250 songs sold?

      Leave it to ArsTechnica to suggest that number of exploits or number of licensees somehow relates to the complexity of managing DRM across multiple vendors.

      Microsoft is also better suited to handle multiple vendors, as it already licenses OEM Windows, WinCE and various other products. Apple has only ever tried to license the Mac OS and Newton, license FireWire, and franchise iPods though HP, and license ad campaigns like Made for iPod. Apple isn't set up to license FairPlay, nor is it within its core competency.

      A riddle of warfare between Apple and Microsoft: Steve Jobs and the iTunes DRM Threat to Microsoft presents DRM as a shot across the bow of Microsoft's flagship, but suggests that, beyond DRM, "Apple is targeting another Microsoft mainstay with a missile that may cause far more damage than the iPod and iTunes together." 2007 - Apple Strikes Back chronicles the recovery of Apple over the last decade, and Apple's Open Source Assault hints at how Apple will engage Microsoft. What is Apple up to?

    12. Re:+5 informative by Anonymous Coward · · Score: 0

      MS Zune DRM = 250 songs sold?


      Are you sure you aren't exaggerating here?

      Would that many DRM'ed songs even fit onto Steve Ballmer's Zune?
    13. Re:+5 informative by Eriky · · Score: 1

      Why is DRM a flawed concept? Why can't it work in the long run? Why would any breach be irreparable? What is the fundamental problem with the concept? All important questions that you don't answer. Didn't Jobs just say it would be beter if the music companies would accept to sell their music without DRM. He never talked about fundamental flaws, breaches, or anything like that.

      DRM for music might disappear because people will object to it, but DRM can be very useful for all kinds of applications think about the corporate world, about digital documents, protection of software applications, etc. Interoperable DRM will survive. People are already working on open standards for DRM and DRM interoperability, it's only a matter of time for these standards to become mainstream.

    14. Re:+5 informative by DrSkwid · · Score: 1

      Encryption is only any good if it can withstand it's algorithm being revealed.
      Anything else and it's eventually screwed.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    15. Re:+5 informative by lupis42 · · Score: 1

      DRM is flawed because the content that is DRMed must be displayed, in full quality, in a non encrypted state, at some point in the chain, since that is the whole point of content.

    16. Re:+5 informative by TheSunborn · · Score: 2, Interesting

      DRM is a flawed concept because you have to give the key to decrypt the stuff to people you don't trust(Your customers)

      DRM is currently trying to hide the fact that each customer have the key, by hiding it deep down some complicated software, but hiding the key, don't solve the problem, that anyone really looking for it, will find it. (And once a single user have found it, it(Or the content it decript) can be shared with anyone).

    17. Re:+5 informative by Eustace+Tilley · · Score: 4, Informative

      You have been answered twice already, but I cannot resist telling you again.

      Cryptography is used so that a message from A can be read by B but not by C. With DRM, B and C are the same person.

      The message from A (the publisher) must be readable by B (the consumer) but not by C (the consumer).

      I hope you understand now why DRM is a concept flawed in its fundament.

      DRM would be useful. So would a perpetual motion machine. It is wishful thinking to believe that the sheer utility of a function means it is capable of being produced.

    18. Re:+5 informative by Eriky · · Score: 1

      But who will do this cracking? Not the average Joe. And more important, will future hardware be more restrictive and a requirement to consume DRMed media? Of course there will always be crackers, but not everyone is willing to go through all the trouble. The popularity of the iTunes store proves that statement. And with that, DRM is at least for a large part effective.

    19. Re:+5 informative by mpe · · Score: 1

      Encryption is only any good if it can withstand it's algorithm being revealed.

      Which is one reason proprietary encryption tends to be not very good.
      However actual security depends on a complete system. A good algorithm implimented badly can be worst than a poor one implimented well. There's also the problem that security is only as good as that of the weakest component.
      Usually when you use encryption you trust the recipient with the plaintext. Whereas with DRM this just dosn't hold. Instead you rely on a ciphermachine to control how it produces the plaintext. Hence all the complication to try and control what is actually a general purpose machine.
      At some point you come up against the problem that you need to be able to produce sound a human ear can hear, but no microphone can and vision that only a human eye (no camera) can see. Even most "hard" engineering problems are easier...

    20. Re:+5 informative by mpe · · Score: 1

      Why is DRM a flawed concept? Why can't it work in the long run? Why would any breach be irreparable? What is the fundamental problem with the concept?

      Because at some point you need to turn "sound" into something a human ear can hear. And "video" into something a human eye can see.
      It is close to impossible to do this in a way no machine can record. Even if someone needs to build custom microphones and cameras which closely match the characteristics of human sense organs.

      People are already working on open standards for DRM and DRM interoperability, it's only a matter of time for these standards to become mainstream.

      People have been working on making computers do all sorts of things, for over half a century. Which, outside of science fiction, do not (yet) exist. About the only way to get DRM to actually work would be magic or an AI complex enough to claim rights as a "legal person".

    21. Re:+5 informative by Eustace+Tilley · · Score: 1

      Do these questions mean that you do not agree that DRM is fundamentally flawed? Do you believe "the average Joe won't attempt to decrypt a message" is an adequate defense?

    22. Re:+5 informative by CastrTroy · · Score: 1

      iTunes isn't really as popular as they would have you believe. As of January 2007, they've sold over 2 billion songs. Britney spears on the other hand has probably sold 100 million songs just as a single artist. However sales of CDS including CDRs,Audio, and other formats are around 30 billion annually. Now, i'm not sure how much of that is accounted for by Audio CDs, but even if it's 1/10 of the sales, and there's 10 tracks on a CD, then you got about 30 billion songs sold per year.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    23. Re:+5 informative by MyOtherUIDis3digits · · Score: 1

      I had no idea that the MS licensing department was actually an orifice.

      That would explain the smell.

      --
      Ignore anything I said above, I actually agree with everything you believe - mod accordingly.
    24. Re:+5 informative by Karlt1 · · Score: 1

      "iTunes isn't really as popular as they would have you believe. As of January 2007, they've sold over 2 billion songs. Britney spears on the other hand has probably sold 100 million songs just as a single artist. However sales of CDS including CDRs,Audio, and other formats are around 30 billion annually. Now, i'm not sure how much of that is accounted for by Audio CDs, but even if it's 1/10 of the sales, and there's 10 tracks on a CD, then you got about 30 billion songs sold per year."

      You are making a faulty comparison. There are only two valid ways to compare the iTunes Music Store. Either compare it to all of the other online music stores where iTMS has 80% of the market for legal downloads or compare it as SoundScan does to other music retailers (their methodology is an album = 10 individual songs) where Apple is still the #4 music retailer in the US behind Walmart, Target, and Best Buy and ahead of Amazon. It is silly to compare the songs Apple sells to the amount of blank CDs.

    25. Re:+5 informative by drinkypoo · · Score: 1

      I had no idea that the MS licensing department was actually an orifice.

      Every department at MS is an orifice. What's more, they're all the same orifice. If somehow truth-in-advertising were enforced, just like Courtney Love's band, they would have to be named Hole. Or at least, something like that.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    26. Re:+5 informative by CastrTroy · · Score: 1

      I'm trying to compare it to the number of CDs actually sold. I couldn't get real numbers for that, but even counting the number of CD (any Format) sold, and then assuming that the CDAudio is at least counting for 10% of those sales. Apple would like you to believe that everyone is buying their music via iTunes, and it's the way the world is headed, but really not that many people are buying music off iTunes or any other online retailer. Most people still buy their music on physical media, and that isn't changing in the near future.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    27. Re:+5 informative by Anonymous Coward · · Score: 0

      So, your argument is that Microsoft's DRM isn't broken as much because no one buys the stuff that is "protected" by the DRM. That's fair. The same thing could (and is, rightly IMO) said about OSX.

      Your argument falls apart when you attack Ars simply because their website says stuff that disagrees with your shitty blog. The whole thing is ironic because you first say that the number of licensees has no bearing on the complexity of managing DRM across multiple vendors, and then go on to say that it would be too hard for Apple because they don't have experience dealing managing projects across multiple companies. Apple, of course, is set up to license FairPlay. All it would require is giving other companies the technical documentation to implement the scheme, exactly as they have to give software companies APIs and manuals to interact with OSX. Apple, of course, already has the necessary documentation. It had to be produced for their own engineers.

      Back to your slamming of Ars for a perfectly valid comparison. They simply said that Microsoft and Apple both had breaches. This proves that point that people are interested in breaking Microsoft's DRM. Apple had more breaches than Microsoft. This is relevant because the thrust of Jobs' argument was that shared DRM schemes are more insecure than private ones because third party companies would leak information about the scheme. That's clearly not been true. And, most importantly, none of Microsoft's breaches had anything to do with internal leaks of information. They were all external hacks/workarounds. Jobs' argument was that spreading around information about FairPlay would result in internal leaks to facilitate hacks. Microsoft has spread around information about its DRM system. There are on the order of a dozen companies that have access to the PlaysForSure DRM system and none of them have had leaks. In essence, Jobs trolled you and you fell for it. Hard. But what else could we expect from the person who writes roughlydrafted?

    28. Re:+5 informative by Anonymous Coward · · Score: 0

      I don't think he is saying it isn't flawed. I think he is saying that the flaws don't matter. It only has to be good enough, and difficult enough to crack, for it to be a pain in everyone's ass.

    29. Re:+5 informative by speculatrix · · Score: 1

      DRM has been done successfully to some extent, ignoring the "analogue" hole, by NDS (News Corp) who provide Sky. However, they do this with a combination of closed proprietary hardware and active policing (they have a team of private police to investigate any attempts for hacker communities to break it).

    30. Re:+5 informative by darthgnu · · Score: 1

      That reminds me, Bram Cohen has some nice conjectures about program obfuscation.

      In short, they prove that program obfuscation is mathematically impossible.

      --
      Freedom is strength, Ignorance is peace, War is slavery.
    31. Re:+5 informative by SeattleGameboy · · Score: 2, Interesting

      You are not comparing apples to apples.

      While FairPlay only deals with download purchases, WMDRM not only handles purchased downnloads, but subscription downloads as well.

      And while it is true that the number of "purchases" by iTunes dwarfs that of any other music services, if you count the number of subscription downloads, the numbers are much much closer.

      Not to mention than subscription DRM is much harder problem than the straight purchase download DRM.

      There is only one reason Apple is not licensing FairPlay - to protect its vast market share in portable music device sales.

    32. Re:+5 informative by DECS · · Score: 3, Interesting

      Sure throw in subscriptions. 25,000 subscribers = 1 DRM key each. You don't get to count individual songs, because once they stop paying they lose them all.

      Surely you realize that Microsoft's PFS and Zune are not making money because of ultra low revenues? That's why all the stores are tanking, and none of them brag about how many subscribers they have or songs they are selling.

      Subscription/Rental DRM is harder to manage; it makes the player a less attractive product. And it's far more onerous.

      Apple had eaten up market share long before the iTunes Store opened. Most iPod users aren't even using the iTS to a great extent - 25 songs on average is not holding people to the iPod. Outside regions with a store, there are plenty of people still buying iPods.

    33. Re:+5 informative by Eustace+Tilley · · Score: 1

      I agree with him, if his position is "DRM is a pain in everyone's ass." That DRM is fundamentally flawed sharpens the pain.

    34. Re:+5 informative by Eustace+Tilley · · Score: 1

      Perpetual motion machines can be done well or ill, too, but they all fail to achieve "motion in perpetuity." Ignoring the "analog hole" for DRM is akin to ignoring the "you need to keep replacing the batteries hole" for perpetual motion machines.

      The "analog hole" is unavoidable, because the consumer's sense organs are analog.

    35. Re:+5 informative by Karlt1 · · Score: 1

      "I'm trying to compare it to the number of CDs actually sold. I couldn't get real numbers for that, but even counting the number of CD (any Format) sold, and then assuming that the CDAudio is at least counting for 10% of those sales. Apple would like you to believe that everyone is buying their music via iTunes, and it's the way the world is headed, but really not that many people are buying music off iTunes or any other online retailer. Most people still buy their music on physical media, and that isn't changing in the near future."

      That's just it. You don't have to assume anything. SoundScan, the company that has been tracking this stuff for years, has hard, published numbers. Apple outsells all music retailers in the United States online and offline except for Walmart, Best Buy, and Target. Apple outsells Amazon in music and is on a trajectory to overtake Target soon.

    36. Re:+5 informative by Kazoo+the+Clown · · Score: 1

      DRM would be useful. So would a perpetual motion machine. It is wishful thinking to believe that the sheer utility of a function means it is capable of being produced.

      Yes, but it's not wishful thinking to believe that the sheer utility of a function means that it is capable of being sold. Sales is a function of hope, not reality.

    37. Re:+5 informative by Mr2001 · · Score: 1

      But who will do this cracking? Not the average Joe. The average Joe won't have to. It only takes one person to do it, and then that person can share the decrypted file with everyone else. As long as someone, somewhere, has internet access and cracking skills, DRM will fail to prevent unauthorized copying.
      --
      Visual IRC: Fast. Powerful. Free.
    38. Re:+5 informative by Eustace+Tilley · · Score: 1
      More on why DRM is fundamentally flawed here:

      AACS took years to develop, and it has been broken in weeks. The developers spent billions, the hackers spent pennies.

      For DRM to work, it has to be airtight. There can't be a single mistake. It's like a balloon that pops with the first prick. That means that every single product from every single vendor has to perfectly hide their keys, perfectly implement their code. There can't be a single way to get into the guts of the code to retrieve the cleartext or the keys while it's playing back. All attackers need is a single mistake that they can use to compromise the system.

      There is no future in which bits will get harder to copy. Instead of spending billions on technologies that attack paying customers, the studios should be confronting that reality and figuring out how to make a living in a world where copying will get easier and easier. They're like blacksmiths meeting to figure out how to protect the horseshoe racket by sabotaging railroads.

      The railroad is coming. The tracks have been laid right through the studio gates. It's time to get out of the horseshoe business.
  2. fairplay vs. wm? by applegoddess · · Score: 3, Insightful

    Doesn't mean anything when you consider the market share of Apple vs. all of the Microsoft-licensed stores combined. Clearly people will be cracking the more-popular DRM, and that happens to be Apple's FairPlay.

    1. Re:fairplay vs. wm? by PapayaSF · · Score: 2, Interesting

      Doesn't mean anything when you consider the market share of Apple vs. all of the Microsoft-licensed stores combined. Clearly people will be cracking the more-popular DRM, and that happens to be Apple's FairPlay.

      Indeed, and let's also note that a sample size of 2 is rather small to support the conclusion that licensing a DRM system doesn't make it less secure. From a purely statistical standpoint, isn't it obvious that the more people who know about a secret, the less likely it is to stay a secret? You can't license a DRM system without telling more people exactly how it works.

      And to get conspiratorial for a moment, what if a competitor of Apple's decided to sabotage iTunes by releasing its secrets? That would be easier if there were licensees to target for espionage. Or what if the major labels set up an iTunes competitor, licensed FairPlay, then "accidentally" leaked the secret? They could then pull their music from iTunes, leaving themselves as the only legal source for the music.

      I don't think those scenarios are likely, but I tend to believe Jobs when he says he doesn't want to take the extra risk.

      --
      Q: What does the "B." in Benoit B. Mandelbrot stand for? A: Benoit B. Mandelbrot
    2. Re:fairplay vs. wm? by Anonymous Coward · · Score: 0

      No. FairPlay is always cracked for the same reasons Windows is always compromised. It's popular and was never really secure in the first place.

    3. Re:fairplay vs. wm? by Cheapy · · Score: 1

      Does that apply to viruses and Operating systems too?

      --
      Would you kindly mod me +1 insightful?
    4. Re:fairplay vs. wm? by suv4x4 · · Score: 4, Funny

      Doesn't mean anything when you consider the market share of Apple vs. all of the Microsoft-licensed stores combined. Clearly people will be cracking the more-popular DRM, and that happens to be Apple's FairPlay.

      You know, I once started thinking a lot and realized nothing ever means anything. It's all just a bunch of people arguing over unprovable hypotheses in a one-up-man-ship style and eventually spinning whatever facts they have in their disposal to reach a goal determined in advance before any analysis was done.

      Wow. I'm boring.

    5. Re:fairplay vs. wm? by tooslickvan · · Score: 1

      Clearly people will be cracking the more-popular DRM, and that happens to be Apple's FairPlay.

      I doubt that's the reason. I believe FairPlay has been hacked more often simply because it hasn't been implemented well. Apple slapped together something simply to please the record companies. Ultimately, they want to sell iPods. The more music people have, the more likely they'll by iPods.

      PlaysForSure hasn't been hacked nearly as often because Microsoft invests lots of time and money to make its DRM as unbreakable as possible. Why? Because Microsoft wants to sell you content. If everyone has a Zune and an Xbox then the content providers can sell you music, movies, and tv shows with Microsoft's DRM and Microsoft gets a cut of the action. Microsoft needs DRM to make money every time people listen to music or watch movies.

    6. Re:fairplay vs. wm? by aussie_a · · Score: 1

      Exactly. But that doesn't refute the claim that they're as (in)secure as each other.

    7. Re:fairplay vs. wm? by larry+bagina · · Score: 1

      Interesting theory... the iPod does predate fairplay, and playsforsure predates the Zune... I remember the Windows (Me?) media player using drm wmv by default when ripping CDs. That was back in 2001 or so.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    8. Re:fairplay vs. wm? by gnasher719 · · Score: 1

      '' Does that apply to viruses and Operating systems too? ''

      There is a huge difference. An operating system is supposed to be uncrackable. Many eyes looking for improvements will find cracks and fix them, many eyes looking for cracks will find cracks and exploit them. Openness both helps and hinders.

      DRM systems are crackable. What keeps people from cracking them is that the cracks are kept secret. There is no point looking for improvements, because the locations of the cracks are known (to a few people). More eyes can only make the situation worse by blabbing out the secrets. Multiple implementations can only make the situation worse, because some people will hide the secrets less well than others. Unlike an operating system, where the cleverest people decide how secure the system is, the security of a DRM system is determined by the dumbest people involved.

    9. Re:fairplay vs. wm? by julesh · · Score: 1

      Doesn't mean anything when you consider the market share of Apple vs. all of the Microsoft-licensed stores combined. Clearly people will be cracking the more-popular DRM, and that happens to be Apple's FairPlay.

      Why would people do that? The best target, surely, is the easiest one to crack (assuming price and availability are equal)? Because you don't have to crack for everyone, you just crack the content you want to release and then let everyone copy the released content.

    10. Re:fairplay vs. wm? by prockcore · · Score: 2, Funny

      I don't think those scenarios are likely, but I tend to believe Jobs when he says he doesn't want to take the extra risk.


      I find it ironic that Apple refuses to license fairplay out of fears of piracy.
    11. Re:fairplay vs. wm? by gnasher719 · · Score: 2, Insightful

      '' Why would people do that? The best target, surely, is the easiest one to crack (assuming price and availability are equal)? Because you don't have to crack for everyone, you just crack the content you want to release and then let everyone copy the released content. ''

      You will find that the Fairplay cracks were published with the goal of allowing customers who _paid_ for their music use that music without the disadvantages of DRM, and _not_ in order to allow them to make illegal copies. Since there are many more people owning iTMS songs with Fairplay DRM, there is much more reason to crack Fairplay to "liberate" that music.

      Since 90 percent of the music is sold without DRM anyway, cracking DRM in order to copy the content is not very productive.

    12. Re:fairplay vs. wm? by king-manic · · Score: 1

      Indeed, and let's also note that a sample size of 2 is rather small to support the conclusion that licensing a DRM system doesn't make it less secure. From a purely statistical standpoint, isn't it obvious that the more people who know about a secret, the less likely it is to stay a secret? You can't license a DRM system without telling more people exactly how it works.

      And to get conspiratorial for a moment, what if a competitor of Apple's decided to sabotage iTunes by releasing its secrets? That would be easier if there were licensees to target for espionage. Or what if the major labels set up an iTunes competitor, licensed FairPlay, then "accidentally" leaked the secret? They could then pull their music from iTunes, leaving themselves as the only legal source for the music.

      I don't think those scenarios are likely, but I tend to believe Jobs when he says he doesn't want to take the extra risk. Security by obscurity hasn't worked that well through out history. for instance germany didn't fair so hot in WWII with their enigma encryption. When releasing any type of encryption you must assume yoru enemies will be aware of the method and to ensure the method is hard to crack despite this. DVD encryption made the assuption they wouldn't and it was cracked easily. With this in mind if Jobs had wanted a strong DRM I think they would have done a better job. They only made "good enough" drm. The whole subject of no sub licencing it is basically hardware lock in. Their Ipods are too profitable.
      --
      "There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
    13. Re:fairplay vs. wm? by davester666 · · Score: 1

      I don't think those scenarios are likely, but I tend to believe Jobs when he says he doesn't want to take the extra risk.
      I find it ironic that Apple refuses to license fairplay out of fears of piracy.

      I know! They could wrap the FairPlay library in some kind of DRM system...hmmm...I call dibs on patenting on wrapping a DRM system with another DRM system!

      Anyway, I hope Apple sticks with it and DOESN'T license FairPlay. I'd prefer that they move to getting the 'big' music vendors to stop using DRM...

      --
      Sleep your way to a whiter smile...date a dentist!
    14. Re:fairplay vs. wm? by dwater · · Score: 2, Funny

      Marvin, is that you?

      --
      Max.
    15. Re:fairplay vs. wm? by Anonymous+McCartneyf · · Score: 1

      Actually, MS never had its own store for the original Plays4sure. It just licensed the format to other people.
      The price to license Plays4Sure to a WMA/MP3 player: $0.10 a player.
      The price to make Plays4sure WMAs, for sale or rent: one Windows OS. Making Plays4Sure WMAs is built into 2003 Server, and Windows Media Player can make Plays4Sure WMAs as well.
      MS's specialty is, of course, Windows OSes. Their MediaPlayer is almost as critical to, and central to, their OS as Explorer is. When Europe made MS sell a copy of Windows without its MediaPlayer, MS made that vs. virtually silent.
      Here is the reason we don't hear of more Plays4Sure hacks; they get mixed in with, and patched with, all the other WindowsMediaPlayer-related hacks.

      --
      There is a fine line between recklessness and courage... -- Paul McCartney
    16. Re:fairplay vs. wm? by limecat4eva · · Score: 1

      Yes, I think it does—and I'm a longtime Mac user. Pity the most vocal among us think otherwise.

      --
      comma
    17. Re:fairplay vs. wm? by mpe · · Score: 1

      Security by obscurity hasn't worked that well through out history. for instance germany didn't fair so hot in WWII with their enigma encryption. When releasing any type of encryption you must assume yoru enemies will be aware of the method and to ensure the method is hard to crack despite this. DVD encryption made the assuption they wouldn't and it was cracked easily.

      There is also another problem. Enigma (and Lorenz) only had to protect information for a period of time measured in hours or days. Even if cryptoanalysis was the only threat to DVDs any encryption would have to be good for nearly a century.

    18. Re:fairplay vs. wm? by bobintetley · · Score: 1

      You know, I once started thinking a lot and realized nothing ever means anything. It's all just a bunch of people arguing over unprovable hypotheses in a one-up-man-ship style and eventually spinning whatever facts they have in their disposal to reach a goal determined in advance before any analysis was done.

      Why is this modded funny? This is possibly the most insightful Slashdot comment I've ever read!

    19. Re:fairplay vs. wm? by mcrbids · · Score: 2, Insightful

      You will find that the Fairplay cracks were published with the goal of allowing customers who _paid_ for their music use that music without the disadvantages of DRM, and _not_ in order to allow them to make illegal copies.

      The whole idea of a "goal" behind publishing or selling X or Y is just stupid. Sorry. How many gun manufacturers would there be today if they admitted publicly that ANY of their guns were manufactured to satisfy the needs of criminals? How many tobacco companies had the goal of killing their clientelle?

      If it's published or sold, it's a tool. It's not necessarily a tool for any specific purpose - you can easily use a lock pick to clean your fingernails. It's the people who USE the tool who determine its "goal". And then, it's not the tool, it's the user who is to blame.

      An example is copyright. A social tool with the "goal" of ensuring the rights of content creators to profit from their works at the expense of content consumers. But, since any tool is just a tool without any explicit goal, the CopyLeft license turns the "goal" of copyrights on its ear by making the content consumers also copyright holders.

      So having a "goal" behind DRM crack distribution is just pointless.

      --
      I have no problem with your religion until you decide it's reason to deprive others of the truth.
    20. Re:fairplay vs. wm? by Cheapy · · Score: 1

      "An operating system is supposed to be uncrackable."

      Correct me if I'm wrong, but isn't DRM supposed to be uncrackable too?

      "There is no point looking for improvements, because the locations of the cracks are known (to a few people)."

      The locations of cracks in the system are known to people OS-wise too. Is there no point in looking for an improvement the OS as well?

      --
      Would you kindly mod me +1 insightful?
    21. Re:fairplay vs. wm? by Cheapy · · Score: 1

      Finally someone who agrees with me.

      --
      Would you kindly mod me +1 insightful?
    22. Re:fairplay vs. wm? by dwater · · Score: 1

      Many a true word is said in jest.

      Seriously though, the humour, and hence the 'funny' mod, is in it's amazing cynicism. Whether or not the author actually was serious (I suspect not), is somewhat beside the point (in my opinion, at least).

      --
      Max.
  3. Hang on, you can't have it both ways... by spoco2 · · Score: 4, Interesting

    Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses. Hang on... so in this case, where it's a Microsoft product that's fairing better you apparently can being into play the 'well, it's not used on nearly as many devices as the Apple version' shtick. Yet when OSX fares better than Windows in virus threats you aren't allowed to use the exact same and just as legitimate argument that Windows is installed on VASTLY more machines than OSX, and as such is a MUCH greater target for compromise?

    How does that work?
    1. Re:Hang on, you can't have it both ways... by Anonymous Coward · · Score: 0

      "How does that work?"

      badly!

    2. Re:Hang on, you can't have it both ways... by rolfwind · · Score: 2, Interesting

      Not defending Apple's DRM, but give it a break. Apple/Linux have decent internet marketshare compared to Windows on the internet - where are the actual security breaches?

      The summary states both PlaysForSure and Apple's DRM has breach, not just the one or the other.

    3. Re:Hang on, you can't have it both ways... by applegoddess · · Score: 1

      It doesn't, and it's a preposterous argument. Jon Johansen argues that in the context of Steve Jobs' little blurb about DRM, it's not a valid argument that popularity matters, but everywhere else it does matter, and it's plain stupidity when you consider anything not in the context of the number of users.

    4. Re:Hang on, you can't have it both ways... by mrcdeckard · · Score: 1


      I think what the parent was getting at is that yes, while windows has a larger market share for desktop OS, Apple iPod (and thus, fairplay) has a larger market share as far as DRM'ed media goes.

      So yes, it would make sense from this logic that windows has more viruses, and fairplay has more cracks -- both based on market share.

      mr c

      --
      "Physics is like sex. Sure, it may give some practical results, but that's not why we do it." - R. Feynman
    5. Re:Hang on, you can't have it both ways... by toadlife · · Score: 1

      "where are the actual security breaches?

      All over the place. Rooted linux servers knock on the door of my router every day.

      If you're talking about *desktop* machines only, neither Linux nor OS X have reached the critical mass (Probably ~10-15% install base) necessary for socially engineered malware to spread. Network based worms that exploit services would be possible, but both Linux and OS X come with no daemons listening by default.

      --
      I don't always use unix-like operating systems; but when I do, I prefer FreeBSD.
    6. Re:Hang on, you can't have it both ways... by drsmithy · · Score: 1

      Not defending Apple's DRM, but give it a break. Apple/Linux have decent internet marketshare compared to Windows on the internet [...]

      _Conservatively_, Windows would have 8x - 9x the "internet marketshare" of OS X or Linux.

    7. Re:Hang on, you can't have it both ways... by julesh · · Score: 1

      Hang on... so in this case, where it's a Microsoft product that's fairing better you apparently can being into play the 'well, it's not used on nearly as many devices as the Apple version' shtick

      Hmmm...? Last figures I saw suggest fairplay only had 54% market share (it's on the register, sometime in '06, I think). That's hardly absolute dominance. OK, so it's 5 times as much as the nearest competitor, but those competitors ALL use WMA.

    8. Re:Hang on, you can't have it both ways... by intheshelter · · Score: 1
      Nor can you. Plays for Sure has low market share and has been cracked several times. In fact, I'd be willing to wager it's been cracked at a rate far above its market share percentage in comparison to Fairplay.

      Macs have a low market share compared to Windows machines. Windows machines have over 114,000+ viruses in the wild. Macs have ZERO.

      Actually this sort of makes the point of many Mac fans that security through obscurity is an overly simplistic and untrue argument. Market share does make some difference, but it is far from the only reason. When Mac fans bitch about this argument it's because "expert" columnists spew the obscurity FUD to explain away Windows poor security.

      So, this actually seems to support the Mac fans arguments to some degree. Funny how that worked out, isn't it?

    9. Re:Hang on, you can't have it both ways... by mgblst · · Score: 1

      Why is this such a logical problem for people, you can have it both ways.

      Apple can have the more secure DRM, but it is attacked more, so there are more breaches.(whatever that means)

      And Apple can have a more secure OS.

      These two things have nothing to do with each other. I don't think that this is a complicated subject, but many people here seem confused. If you only judge these two things on how many breaches they have, then yes, that is a problem. But if you judge the value of the OS, or the DRM on how easy it is to break, as most people do, then where is the problem?

    10. Re:Hang on, you can't have it both ways... by Anonymous Coward · · Score: 0

      How does that work?

      It works because Mac OS X has zero viruses. The only reason anti-virus software even exists for the OS X is to remove Windows viruses from shared files. If you think you can explain Mac OS X's vastly superior security in the virus/trojan/worm sector of computing by market share, you are deluding yourself.

      It also should be pointed out that breakage of DRM is expected to be more prevalent on a sole vendor implementation -- when shared vendor implementations are broken it is by necessity a longer process to fix it and issue that fix. During the time a fix has not been issued for all of the vendors, there is no reason for any DRM-breaker to be working on the problem: it is already broken! I also like the perception here: buy Apple, you can allegedly get around its DRM more easily since market share means more hacks. I guess the Windows equivalent would be: buy Windows, the market share argument means your computer is less protected.

      I know what platform I would rather be busy using.

    11. Re:Hang on, you can't have it both ways... by Anonymous Coward · · Score: 0

      Apple can have the more secure DRM, but it is attacked more, so there are more breaches.(whatever that means)

      And Apple can have a more secure OS.


      They are both fine conjectures. However, the facts do not support them[*] - mind you, they do not disprove them either. Hence my use of 'conjecture.' It is, however, hypocritical to assume one hypothesis to argue one of the statements and its complete opposite to argue the other.

      [*] This can be flamed to death from the 'more secure OS' angle. That's normal. However much I dislike Windows, I would still have to point that direct comparisons (which is what flames try to use) are too biased:
      • Microsoft is not handling installs of its own OS, OEMs are - in fact, M$ went out of its way to make Windows installs OEM-customizable. Should I blame them for the fact that, for instance, Acer are such cheap asses that they won't license a version of Ghost that knows to back-up NTFS partitions and instead format their WinXP laptops using Fat32 making their security a joke? By contrast, Apple does their own installs, so securing the defaults is up to them. Following this argument, if Microsoft had control of installs and enforced LUA for day-to-day use, the vast array of software that breaks when run under LUA nowadays would have been coded to work with it (in all fairness, they tried something like that with their certification program) and infection vectors would have to be quite a bit more sophisticated
      • Most Windows breaches nowadays are reverse-engineerings of the monthly patch dumps. Getting those out in the wild fast enough to catch people unpatched requires effort - and it's not yet worthwile to do the same thing for OSX.
      • On a related note, the virus generators for Windows are quite sophisticated, having had a long time to evolve, while any equivalently-sophisticated OSX viruses would require intelligent designers and we all know those are in short supply ;-)
      • One should also restrict oneself to OS-related vulnerabilities (sometimes hard to define in practice, see the whole MOAB debacle for a fine example) So while IE flaws + privilege escallation flaws would qualify, IE flaws + administrator mode would not quite make it and Outlook flaws are completely out of the run. On the other hand, to use another well-debated case here on /., OSX privilege escallation flaws that allow an attacker with a ssh access to a regular account to elevate privileges would also qualify.

      That said, please flame away < defense style="SELinux flame-retardant suit" />
    12. Re:Hang on, you can't have it both ways... by Anonymous+McCartneyf · · Score: 1

      No, the iTunes Store's competitors don't all use WMAs.
      For online music, the nearest competitor to the iTunes Store in America is eMusic. I don't believe that they use WMAs, and they certainly don't use DRM.
      The nearest competitor in Britain was, until recently, Allofmp3. They sold many formats, but I don't think they sold WMAs. They certainly didn't use DRM!
      Now, the nearest competitor with 100% approved RIAA music likely does sell WMAs with DRM. But not the absolute nearest competitor, and not every competitor.

      --
      There is a fine line between recklessness and courage... -- Paul McCartney
    13. Re:Hang on, you can't have it both ways... by Lars+T. · · Score: 1

      Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses. Hang on... so in this case, where it's a Microsoft product that's fairing better you apparently can being into play the 'well, it's not used on nearly as many devices as the Apple version' shtick. Yet when OSX fares better than Windows in virus threats you aren't allowed to use the exact same and just as legitimate argument that Windows is installed on VASTLY more machines than OSX, and as such is a MUCH greater target for compromise?

      How does that work? It doesn't - because it's wrong. Not what you think, no, that Microsoft product that's fairing better is wrong. Every version of WMA DRM has been cracked, Arstechnica just ignored the fact.
      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  4. Insecurity vs policy by Space+cowboy · · Score: 4, Insightful

    I'm not suggesting this is official Apple policy, but just because something has been cracked more times than any other doesn't actually imply much. If Apple deliberately set the bar low, then they fulfill their obligation and allow the counter-culture to flourish as much as the "official" party line. Hmmm, who would that benefit ?

    I know some very smart engineers at Microsoft, and I know some very smart engineers at Apple. Devising a hard-to-break DRM system wouldn't be beyond any of them, and iTunes really doesn't go to too much effort. I'll let you draw your own conclusions :-)

    Simon.

    --
    Physicists get Hadrons!
    1. Re:Insecurity vs policy by kfg · · Score: 5, Insightful

      If Apple deliberately set the bar low, then they fulfill their obligation and allow the counter-culture to flourish as much as the "official" party line.

      Bingo!

      Apple is doing the minimum necessary in order to be allowed to sell content. Microsoft is trying to do the maximum possible in order to sell the security system to the content owners.

      Their markets are entirely different, so their products are entirely different.

      KFG

    2. Re:Insecurity vs policy by Ahnteis · · Score: 1

      Which means that Jobs' argument against licensing the DRM is bogus -- which is the whole point of the article. (Yes, I know we aren't supposed to actually read them. Sorry.)

    3. Re:Insecurity vs policy by kfg · · Score: 1

      Which means that Jobs' argument against licensing the DRM is bogus

      Of course. It's good old fashioned Jobsian Reality Distortion Field; and always was. The author of the article has just proved that -- there is no Santa Claus.

      A lot of us have to go through that phase; those that remain are refered to as "religious fanatics" or "Apple Fanbois."

      But I repeat myself.

      KFG

    4. Re:Insecurity vs policy by Anonymous Coward · · Score: 0

      Interoperable DRM is pure double-speak. DRM is meant to PREVENT data from working with other software.

      Data does nothing on its own. To control data, you must control software. Lots of people, most disgracefully on a site like slashdot, still don't understand that... and most of all... still don't understand the implications of it. DRM is not about music and video piracy, it is about controlling software -- about putting the control of computers and the software they run under a central authority.

    5. Re:Insecurity vs policy by Eustace+Tilley · · Score: 1

      Too bad you didn't read the article.

      Jobs' argument against licensing is:

      "Apple cannot license FairPlay to others, says Mr Jobs, because it would depend on them to produce security fixes promptly."

      Insecurity of the DRM technique is a side issue. Whether or not the technique is robust, the requirement that any flaws be patched throughout the FairPlay world in two weeks precludes is a powerful argument against licensing.

    6. Re:Insecurity vs policy by Blakey+Rat · · Score: 1

      Remember the gem about how Mac OS gets fewer viruses because fewer computers run it? That applies too. How many music tracks has Apple sold with Fairplay compared with music tracks with Microsoft's DRM? Tons more.

  5. funny by ArbitraryConstant · · Score: 4, Insightful

    Funny how Apple supporters dismiss this reason when it's applied to Windows security, but when it supports Job's reasons for keeping FairPlay closed it's accepted.

    --
    I rarely criticize things I don't care about.
    1. Re:funny by applegoddess · · Score: 3, Interesting

      Never said anything to the contrary, in fact I agreed with you: http://slashdot.org/comments.pl?sid=221484&cid=179 44918

    2. Re:funny by suv4x4 · · Score: 1

      Funny how Apple supporters dismiss this reason when it's applied to Windows security, but when it supports Job's reasons for keeping FairPlay closed it's accepted.

      You've seen nothing yet. They're prepping a Chewbacca defense post as well.

    3. Re:funny by intheshelter · · Score: 1

      The moment I saw this I knew someone would make this point, and rightly so. Yet, I would say that this is not an apples (pardon the pun) to oranges comparison. Yes, market share does make some difference, but it does not explain everything. Let's take this separately. Fairplay has 80+% market share, and let's assume Plays for Sure has the rest. BOTH Fairplay and Plays for Sure DRM have been cracked. Fairplay has the vast majority of the market so yes, I would expect that the bulk of the attention would be on them when cracking DRM. Yet, Plays for Sure has had their DRM cracked and, although I don't have numbers to back me up on this, I would expect the percentage of cracks for Plays for Sure is far higher than their market share. Windows has something like 90+% of the OS market. Apple has 6+% based on some report I saw within the last week. Windows has 114,000+ viruses in the wild. Apple has zero. . . .ZERO! I think the point of most MODERATE Mac fans arguing this issue is that the blanket assumption of security through obscurity does not hold water and that most columnists that spread this argument are making an overly simplistic and ignorant statement. Market share does have something to do with it, but if that was the sole determining factor then shouldn't the Mac at least have roughly 6% of the viruses instead of ZERO? The simple fact they can't seem to wrap their mind around is that the Mac does have better security. I'm not saying it's perfect, or impenetrable, just far better than Windows.

    4. Re:funny by dr.badass · · Score: 1

      Funny how Apple supporters dismiss this reason when it's applied to Windows security, but

      Ah, "Apple Supporters", that well-defined group with absolute uniformity in opinion. Oh wait...

      when it supports Job's reasons for keeping FairPlay closed it's accepted.

      I don't think anybody has said that this supports Jobs' argument. What it does is invalidate TFA's thesis that the number of breaches by itself is a valid measure of relative security.

      --
      Don't become a regular here -- you will become retarded.
    5. Re:funny by Anonymous Coward · · Score: 0

      That's because the reason doesn't work the same in both cases.

      In the Windows/Mac security case:
      - there's money to be made: it is ridiculous to assume that evildoers would voluntarily decide not to target the (say) 5% mac users, or, if one was to stumble on a MacOs security flaw, he would *not* use it.
      - because there are so many attack venues, the 80/20% rule applies: with 20% of the effort, you'll find 80% of the flaws. Most of them will have already been closed by the vendor, of course, but the point is that if OSX was as bad as Windows, you'd expect *more* discovered flaws than the the user proportion.

      FairPlay/PFS DRM:
      - no money, therefore people trying to break in will either be guys who want to access *their own* music, and market share fully applies, or scientists doing research.
      - not too many attack vectors, most (presumably not all) of which are known, so we're in the 80% effort territory right away, it's a case of many eyes looking for the same thing. So again market share applies (albeit with diminishing returns).

  6. Red Herring by soft_guy · · Score: 2, Informative

    Not licensing Fair Play has nothing to do with making it more secure. It has to do with being able to roll out fixes to counter security breaches in a timely manner.

    --
    Avoid Missing Ball for High Score
  7. Fewer security breaches? by Incoherent07 · · Score: 4, Insightful

    It only takes one. Last I checked the FairUse4WM hole still hasn't been fixed.

    --
    This is my sig. There are many others like it, but this one is mine.
    1. Re:Fewer security breaches? by solitu · · Score: 2, Informative

      Time you checked again. It doesn't work anymore.

    2. Re:Fewer security breaches? by Don_dumb · · Score: 1

      Only if you update. I am not using WM11, I have no need.

      --
      If this were really happening, what would you think?
    3. Re:Fewer security breaches? by julesh · · Score: 1

      Which is a classic example of Jobs' point -- there are plenty of vendors out there still selling WM10 (and WM9) content, so there's no necessity to update to the latest version of the DRM, despite the fact that a fix for the flaw has been released.

      If you were using an iPod with FairPlay, however, you wouldn't have a lot of choice -- your only source of content would be iTMS, which would have forced you to upgrade by only offering content in the latest version.

    4. Re:Fewer security breaches? by Anonymous Coward · · Score: 0

      Why does he need to check again? It does work for the Windows Media 9 and 10 content still being sold by Microsoft licensees.

      Looks like Microsoft's DRM gets broken and then left broken for long stretches of time. Since it is not fixed, there is no reason to break the DRM again.

  8. It could just be poor implementation by Infonaut · · Score: 4, Insightful

    Funny how Apple supporters dismiss this reason when it's applied to Windows security, but when it supports Job's reasons for keeping FairPlay closed it's accepted.

    You're right to point out the contradiction. However, another way of interpreting it is just that FairPlay is simply not as well-iplemented as Windows Media DRM. That would be an interpretation consistent with the view that Windows gets cracked not just because of its market dominance, but also because of its flaws in implementation. Maybe Apple simply isn't as good at DRM as Microsoft, which isn't necessarily such a bad thing.

    --
    Read the EFF's Fair Use FAQ
    1. Re:It could just be poor implementation by edschurr · · Score: 2, Insightful

      People are probably simplifying it too much. That is, it's a compound of reasons. It would be difficult to posit the actually balance. However, the quality of the implementation is at least possible to evaluate.

    2. Re:It could just be poor implementation by Anonymous Coward · · Score: 1, Interesting

      IMHO, it is not that FairPlay is not well implemented, but rather it wasn't designed to be an "industrial strength" DRM in the first place. Right after iTunes (Music) Store opened, we learned that Jobs argued that DRM would be cracked regardless and it only took one person to crack it to render DRM useless. The essense of that argument backed by load of cases of failed download business won Apple the least restrictive license at that time: iTunes songs were playable on 3 computers and unlimited number of iPods, can be burned in the same playlist 10 times before you need to re-do the playlist (it's 5 computers and 7 times now) and unlimited burns to Audio CD. The DRM is there to discourage casual illegal sharing. It was a different approach from Microsoft's which was designed to satisfy content owners' desire for an unbreakable DRM because Microsoft was more interested in selling licenses for the DRM.

      That leads me to believe that Apple never tried to design a complex, industrial strength DRM to lock down content which might consume Apple's engineering and developer resources. They are not interested in spending lots of money in a hacking-patching war with hackers. Rather, it's designed to be light and easily (and cheaply) updateable.

    3. Re:It could just be poor implementation by imikem · · Score: 1

      Thank you. Good analysis.

      Apple grudgingly implemented FairPlay with the full realization that it would provide only modest deterrent value to TEH 3V!7 91R@+z. As Jobs stated in his posting, what is the real point of all this DRM garbage anyway, when easily obtained CDs with no copy protection and superior quality already exist in immensely greater number, as well as variety.

      This whole argument is like two people fighting over the food dish after passively watching someone else eat dinner off it, leaving a couple of scraps and gristly bones. Moronic and misguided.

      DRM must die. There already exist plenty of legal avenues to pursue wholesale infringers, whom DRM does nothing at all to block. And don't get me started on copyright "terms" themselves.

      --
      Perscriptio in manibus tabellariorum est.
  9. Wait by gorrepati · · Score: 1

    Isn't this why Windows is hacked more often, because it is more widely used? What did I say???? Screw it..

    --
    You will never have experience until after you needed it.
  10. More BS... by Anonymous Coward · · Score: 0

    Apple has actually been accused of being slow to fix exploits in Fairplay. And exploits currently exist for even the latest version of iTunes (see QTFairUse). Steve Jobs argument for not licensing Fairplay makes no sense on any level.

    1. Re:More BS... by julesh · · Score: 1

      Have you actually read his essay? It makes perfect sense, if you ask me. Perhaps they've found some holes tricky to fix, yes. But they still need to be able to respond quickly to a hole that the record companies demand they fix quickly (that this hasn't happened over previous holes doesn't mean it won't happen in future).

      Anyway, QTFairUse isn't a DRM crack, it's a player crack. Player cracks are almost impossible to prevent (not that DRM cracks are much harder...) without OS support. I bet Apple release an iTunes version for Vista that it doesn't work with.

  11. Does Apple.. by tylerwylie · · Score: 1

    Apple seems to update their DRM as well though, whenever FairPlay was cracked, but this can also be attributed to the fact that there are a lot more ipods than wma players. There's more harm done in breaking FairPlay than Windows DRM hell.

  12. Who has the best BAD IDEA? by IBitOBear · · Score: 4, Insightful

    It's like that thing were people propose a truly horrific law because they know they will be "forced to settle" for a merely terrible law.

    No Digital Restriction Management is good. NONE of it.

    I am not anti-encryption.
    I am not anti-artist.

    But any scheme that involves someone "selling" or "giving" me something so provisionally that they can then just take it back is simply a BAD IDEA.

    The next step down this road is the one where some Bad Actor gets to send people threatening letters and blackmail that is "unprintable", "read only once", "no screen shot", "read only for 1 minute", watermarked to prevent your camera from taking a picture of the screen. Leaving you, in turn, with no proof for a complaint and then leaving the police with no clues while they are pondering over your corpse.

    Eh, so what, at least some music executive is *sure* to get to split the full 99-cents that he ripped off the consumer for, in the name of an artist who got a bill for overages in production.

    Oh, wait... which kind of Illegal Prior Restraint (commonly misspelled DRM) was good again?

    It is _NEVER_ helpful to repeat the artificially biased question as if it represents something worth answering.

    The question, as stated, presumes facts not in evidence, namely that the DRM that is harder to break is in any possible way "Better".

    --
    Innocent people shouldn't be forced to pay for inferior software development.
    --"Code Complete" Microsoft Press
  13. What a silly question by shaitand · · Score: 3, Insightful

    Since there are no effective DRM schemes out it seems silly to evaluate which are 'more secure'. What do you do; count the ways available to bypass the DRM? There are easy cookie cutter utilities to crack them all.

    1. Re:What a silly question by dido · · Score: 1

      Right on. The DRM problem on a general-purpose computer is, from a security standpoint, completely impossible. If I have absolute control over my entire computer, and this is still possible today because systems like TCPA haven't been forced down everyone's throats, then any attempt by anyone to restrict what bits I can and cannot copy is doomed to failure. And once I have done it, I can publish my break to the world if I so desire. These people might as well go on rolling a huge boulder up a hill, only to have its weight defeat them just as they are approaching the top. The task of DRM is equally futile. The only way that has a snowball's chance in hell of success would be to ban the general-purpose computer entirely (e.g. a TCPA-based media console), and it is doubtful that they will ever succeed in making such a thing happen, especially as the ban would have to be international in scope and there are some places (e.g. China) that don't care a whit about these matters.

      --
      Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    2. Re:What a silly question by donaldm · · Score: 1

      From the Article "I've left out all manner of obvious circumvention techniques such as burning to CD or recording an audio stream, since those are not true cracks". Well it may not be a true crack in the Authors eyes but it still effectively gets around any DRM because if you can see or hear something then that something can easily be copied to a distributable media that is effectively DRM free. This is very simple to do although it may be slightly inconvenient and you will most likely loose some quality depending on your recording equipment.

      The only way DRM can work is if every consumer is forced to have a special DRM chip in their head and it would be interesting or horrifying to see if the consumer would accept this blindly or fight against it.

      --
      There ain't no such thing as proprietary standards only proprietary formats. Standards are by definition open.
    3. Re:What a silly question by ajs318 · · Score: 3, Informative

      The only way DRM can work is if every consumer is forced to have a special DRM chip in their head and it would be interesting or horrifying to see if the consumer would accept this blindly or fight against it.
      Under Thatcher, nobody would ever have stood for such a thing. There would have been rioting in the streets, people burning effigies, punk rock benefit gigs and all sorts. People who had the brain chips fitted would be on the receiving end of flying bricks crudely scratched with "SCAB". We'd be out marching with placards, chanting "Maggie Thatcher's GOT one, [name of major Brain Chip proponent] IS one". Decrepit coaches would be brought out of retirement to ferry Flying Pickets around, and enterprising kids would be hard at it poking holes in old oil drums to make braziers to flog to the striking workers.

      Under Blair, there would just be a bit of polite tutting and moaning, followed by total passive acceptance. The Working Classes (who mostly think they aren't working class anymore just because [1] they have mobile phones and DVD players and [2] a whole new social class has grown up beneath Working) would even be saying things like "Well, it's probably a good thing. I mean, I've been looking for ages for a reason to cut down the amount of media I copy, or even give it up altogether; so I mean, this chip-in-the brain thing is a good idea really."

      Talk about licking your arse and calling it chocolate .....
      --
      Je fume. Tu fumes. Nous fûmes!
    4. Re:What a silly question by digitig · · Score: 1

      Surely all it would take is for DRM media not to be playable on general purpose computers? And it doesn't matter whether China cares or not: I don't think China is a significant market driver because as I understand they do much of their own hardware and don't buy much software because of rampant piracy (last time I was in China I couldn't find legal versions of any software). If the USA mandated Treacherous Computing or the major suppliers of software and content started to insist on it then I reckon the general purpose computer would be dead within a few of years outside of museums and hobbyists bedrooms.

      --
      Quidnam Latine loqui modo coepi?
    5. Re:What a silly question by DrSkwid · · Score: 1

      You mean something where the manufacturer has total control over the hardware such as the Xbox and Xbox 360 ?

      cracked and cracked

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    6. Re:What a silly question by mpe · · Score: 1

      You mean something where the manufacturer has total control over the hardware such as the Xbox and Xbox 360 ?

      Even if someone were to build a video player which was entirely self contained (only connector being an IEC to supply power) which could not be examined in any way it still wouldn't stop people being able to pirate content played on it.
      Were anyone to build such a device it would probably be more useful for screening EM radiation...

    7. Re:What a silly question by Ernesto+Alvarez · · Score: 1

      Surely all it would take is for DRM media not to be playable on general purpose computers?


      And how would you do that? They don't call them GENERAL PURPOSE COMPUTERS for nothing. Emulating another device is definitely within the powers of a GPC.

      If the USA mandated Treacherous Computing or the major suppliers of software and content started to insist on it then I reckon the general purpose computer would be dead within a few of years outside of museums and hobbyists bedrooms.


      That would include places like universities and research labs. So, we have two scenarios:

      1. General purpose computers really disappear from all these research institutions and the US takes a big research penalty. China, Europe, Japan and everyone else close the technology gap on the US (if any), go beyond and suddenly nobody cares anymore about the US (and therefore hollywood).

      2. There are exceptions made, and these places get the real stuff. Piracy still happens a lot, centered on univesities and other high budget, low security, free places, just like 25 years ago.

      Unless the US manages to make lots of other countries use TC, that move is as good as a poison pill. China is not going to stop making GPCs just because the US says so, if others are willing to buy them. Even if they do make TCs for the US market, I doubt they will put much effort in making them tamper proof, unless they pay them for it (meaning that a TC will be more expensive than a GPC).
    8. Re:What a silly question by digitig · · Score: 1

      Surely all it would take is for DRM media not to be playable on general purpose computers?


      And how would you do that? They don't call them GENERAL PURPOSE COMPUTERS for nothing. Emulating another device is definitely within the powers of a GPC. It would depend on the strength of the security built into the hardware. Yes, any security can theoretically be cracked and so emulated on a GPC, but with good enough security it could be a pretty unlikely scenario.

      If the USA mandated Treacherous Computing or the major suppliers of software and content started to insist on it then I reckon the general purpose computer would be dead within a few of years outside of museums and hobbyists bedrooms.


      That would include places like universities and research labs. So, we have two scenarios:
      Why would universities and research labs need computers without TC? Perhaps a very very few niche activities, but for the general work of a university or lab the TC computer would work just fine and be no hinerance to research. And if the TC computer is the mass-market commodity item and the GPC is the special build then the TC is likely to be cheaper than the GPC despite the extra complexity.

      Unless the US manages to make lots of other countries use TC, that move is as good as a poison pill. China is not going to stop making GPCs just because the US says so, if others are willing to buy them. China will stop making GPCs if there is no significant market for them. There will be no significant market for them if they don't do what the public want. If the public wants to play DRM that needs son-of-Palladium then the GPCs won'd do what the public want.

      Even if they do make TCs for the US market, I doubt they will put much effort in making them tamper proof, unless they pay them for it (meaning that a TC will be more expensive than a GPC). Now, that is a good point, but it's not a question of whether those wanting DRM pay for it -- the rogue suppliers could happily take the money and still not put the effort in (ever had your auto serviced?) It means that the TC advocates will need to keep tight control of the hardware.
      --
      Quidnam Latine loqui modo coepi?
    9. Re:What a silly question by Ernesto+Alvarez · · Score: 1

      Why would universities and research labs need computers without TC? Perhaps a very very few niche activities, but for the general work of a university or lab the TC computer would work just fine and be no hinerance to research. And if the TC computer is the mass-market commodity item and the GPC is the special build then the TC is likely to be cheaper than the GPC despite the extra complexity.


      Those "niche activities" would probably be all of the activities of computer science schools. Sure, the guys in accounting can be easily restricted, but the students?

      At the very least, those will be TC, but enabled to run any program made by the students, so there you have a place to run craking programs. Even in most extreme situations, even if you only allow the minimum set of educational tools, how long do you think it'll take for a key to get leaked (industry insider or engineering student with electron microscope, CS student loading an embedded device's firmware on an emulator/debugger) and a drm-decoder implemented in the university's universal turing machine?

      You see, a GPC MUST EXIST if you are to teach computer science. The turing machine is the most basic there is to teach, and everything a computer can do, a turing machine can, by definition. Given a GPC, you can do anything you want, even if computer security is airtight, the keys will be leaked from an embedded device (firmware running on an emulator on a GPC). The cracking tools are there, and you cannot destroy them if you want to teach computer science and engineering. You might make it harder, so hard that it is a challenge (wouldn't be the first time) but people are going to take shots at that, and one will eventually succeed.

      In fact, people will be attracted to it because it would be an interesting challenge. Have you seen how many wacky projects are loose on the Internet? Intercal was made because it was a challenge, just for fun. Computer scientists and computer science students are also hard to deal with. They will leave computers untouched until someone tries to restrict them unreasonably (us really, since IAACS), then crack it until it is useful again. I've seen it happen at the university more than once.

      By using TC, you are making it harder to retrieve the keys, in that, you're 100% correct. But once those keys are retrieved, or the protection mechanism is found weak, the media will be cracked on the same machines used to teach computer science.

      China will stop making GPCs if there is no significant market for them. There will be no significant market for them if they don't do what the public want. If the public wants to play DRM that needs son-of-Palladium then the GPCs won'd do what the public want.


      China will probably make multi mode computers that can behave as GPCs or TCs, in order to get BOTH markets, just as they make multi region dvd players. Making only TCs will mean they will not be able to sell computers to certain buyers interested in GPCs (governments and military, not wanting foreign restrictions in its computers, universities and big corps interested in doing research, other countries not interested in TC and people like myself). Anyone thinking that they might eventually need a GPC would buy those computers instead of the TC only models (except the novice buyers seeking the cheapest one at walmart, they might end with single or multi purpose ones, because they didn't pay attention).

    10. Re:What a silly question by digitig · · Score: 1

      You see, a GPC MUST EXIST if you are to teach computer science. The turing machine is the most basic there is to teach, and everything a computer can do, a turing machine can, by definition. Given a GPC, you can do anything you want, even if computer security is airtight, the keys will be leaked from an embedded device (firmware running on an emulator on a GPC).

      I think that's where we disagree; a Turing machine doesn't have to be able to do everything the computer can. Specifically it doesn't have to be able to access the full range of peripherals. A Turing machine emulation that could only handle ASCII representations of the program and only send ASCII representations of the 1's and 0's on the output to stdout would still be a Turing machine (we're both ignoring the requirement for infinite storage, of course), but would not be able to access memory-mapped devices and would need an astonishing fluke to be able to crack anything else with just those two characters (one could do anything with 1 and 0, but not with '1' and '0'!)

      Ok, that Turing machine emulator would be a pretty rotten teaching tool for anything other than teaching Turing machines, but I think my argument shows that the Turing machine argument for needing a GPC doesn't hold.

      --
      Quidnam Latine loqui modo coepi?
    11. Re:What a silly question by Ernesto+Alvarez · · Score: 1

      But that turing machine can still send and receive bits, even if they are written as something else, they can be reencoded by a simple mechanism. That means that it should be possible to program a turing machine to speak SCSI (although it makes everything more difficult). A TC could also be connected to it, following orders from the TM, too. So, in the end, it can use periphericals.

      Anyway, even with only a basic stdin and stdout it would be fine. In order to crack a disk, you probably just need the future equivalent of an iso image, something the TC is probably willing to provide, since it's encrypted (and can be read from the bus if it isn't so willing).

      BTW, I didn't mean to say that the turing machine would be the only tool, but one of many. I only mentioned it because something so innocent looking to outsiders (read legislators) can be turned into a cracking machine. Imagine what you could do by combining the tools from the computer science and engineering departments.

      The point is that even under such extreme situation, that really complicates teaching, the tools for cracking are available anyway. A possible way of getting rid of the tools would be to teach computer science exclusively on paper, and even then it only takes one bright hacker (in the old sense) to start rebuilding the tools.

    12. Re:What a silly question by digitig · · Score: 1

      But that turing machine can still send and receive bits, even if they are written as something else, they can be reencoded by a simple mechanism. That means that it should be possible to program a turing machine to speak SCSI (although it makes everything more difficult). A TC could also be connected to it, following orders from the TM, too. So, in the end, it can use periphericals.

      Perhaps you missed my suggestion that the Turing machine should only be able to output two ASCII characters, '1' and '0'. Sure, somebody could take that sequence and reencode it, but the reencoder would have to be installed outside the sandbox if the Turing machine is the only thing inside it. I suppose it might be possible to speak SCSI using just '1' and '0' (rather than 1 and 0), but it would be a crack worthy of a Turing award! And there is still the issue of peripherals using DMM.

      I realise that the Turing machine was just an example, but my point is that on a TC almost anything needed in a university could happen just as well in a sandbox on a TC.

      The point is that even under such extreme situation, that really complicates teaching, the tools for cracking are available anyway.

      I don't see anything that is complicating teaching. I have a postgraduate degree in computing and there was nothing -- nanti, zilch, nada -- on my course that needed or even was enhanced by the fact that it was on GPCs. Perhaps some doctoral research needs a GPC, but I doubt much of it does. And all but a small subset of that could be strongly quarantined

      Don't take me for a fan of TC; I don't like the idea of losing the capabilities I have at present, but the academic argument for opposing it just doesn't seem to hold water.

      --
      Quidnam Latine loqui modo coepi?
    13. Re:What a silly question by Ernesto+Alvarez · · Score: 1

      I don't mean to say directly that it would be impossible to teach sciences on a TC. My point is more subtle, it's that TCs and certain things (like programming languages) don't mix well, because the latter can subvert the former (converting the TC into a GPC).

      And I've never thought you were a fan of trusted computing, it's pretty clear that we only disagree on certain economic aspects only.

  14. Security through obscurity never works, however... by strider44 · · Score: 1

    DRM can only be secure through secrets and confusion so it's pretty necessary.

  15. Wrong question by j235 · · Score: 1, Insightful

    What you should be asking is "Is any DRM really secure?" It doesn't matter how open the DRM scheme is, if there are holes, an enterprising cracker can find them.

  16. Hang on, get your terms right by Senjutsu · · Score: 2, Informative

    The interoperability that Jobs said was less secure, the interoperability that Norway wants, isn't offered by Microsoft's WMV either. Norway is demanding that Apple allow fairplay encrypted files to be converted into files DRM'd under Microsoft's PlaysForSure(OrNot) DRM model or anyone else's, not that they start licensing FairPlay.

  17. Because WMV sucks by kerouacsgp · · Score: 3, Insightful

    "Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses"

    Hmmmm.... could it because no one really cares about downloading wmv files? The point is that if the product sucks, no one will bother even to break into it.

    1. Re:Because WMV sucks by Zontar_Thing_From_Ve · · Score: 1

      "Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses"

      Hmmmm.... could it because no one really cares about downloading wmv files? The point is that if the product sucks, no one will bother even to break into it.


      Windows Media has certainly been hacked, but the hacks involve getting a legal license first and then removing the DRM. One of the alt groups on Usenet late in 2006 posted the WMV version of Terminator 2 that was released a few years ago in yet another DVD repackaging of the movie, but without the DRM. The WMV version of the film was the theatrical release (no extra footage) encoded in high definition with WMV and with some really restrictive DRM where you only had 5 days in which to watch the movie and if you lived outside of the US and Canada, you couldn't get a license at all. You can do a web search and find a lot of angry reviewers who complained bitterly about the restrictions on the WMV high def release of the film, but it's now possible to watch the film with no DRM thanks to the work of some hackers.

      There are a lot of misconceptions about Microsoft audio and video codecs by Microsoft haters. I work as a Unix system admin and I'm no fan of Microsoft, but their video and audio codecs do not suck and are actually one of the few things they got right. WMV is fine and in fact, one of the possible HD codecs in use for BluRay and HD-DVD is VC-1, which is based directly on WMV. If you think WMV sucks, then either you've seen it badly encoded or you are just bashing Microsoft for no good reason.

    2. Re:Because WMV sucks by Lars+T. · · Score: 1

      "Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses"

      Hmmmm.... could it because no one really cares about downloading wmv files? The point is that if the product sucks, no one will bother even to break into it.


      Windows Media has certainly been hacked, but the hacks involve getting a legal license first and then removing the DRM. Isn't that odd - all the "hacks" of FairPlay work the same way!
      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  18. Re:Security through obscurity never works, however by QuantumG · · Score: 1

    Or, ya know, hardware. Which can be made tamperproof by suicide mechanisms.

    --
    How we know is more important than what we know.
  19. Security through Obscurity by flaming+error · · Score: 5, Insightful

    Does Swiss Cheese have more holes when its package is opened or when it is closed?

    1. Re:Security through Obscurity by Mike1024 · · Score: 1

      Does Swiss Cheese have more holes when its package is opened or when it is closed?

      Well, some obvious examples of licensed DRM schemes being cracked are DVD, Blu-Ray and HD-DVD.

      It is my understanding that all three were cracked due to poorly implemented software players; for example DeCSS used code reverse-engineered from Xing, and HD-DVD was cracked by trying the entire contents of memory as the volume key, until the volume key was found.

      Seems to me 'crap coding in third party players' has caused several DRM schemes to fail. It seems reasonable to want to avoid suffering the same fate.

      One obvious argument here is "but what about hardware players? Surely they're secure, just like hardware DVD players are". It's true that you can't read the code off the DVD player under your TV, but Apple likes their iPods to be software-upgradable. This is useful if the DRM scheme changes, as has happened in the past. But I know of at least one embedded system that had its software become public after a firmware upgrade was sniffed as it was performed. Granted, you could encrypt firmware updates, but you would still be vulnerable to the 'crap coding by third parties' problem others have experienced.

      In summary, keeping FairPlay closed helps protect apple against bugs in third party implementations.

      [conspiracy theory]And Microsoft, Apple's main competitor in the DRMed MP3s arena, would have a clear economic incentive to create crap, easily cracked implementations in order to fuck with Apple, unlike Apple, who have an economic incentive to create hard-to-crack implementations.[/conspiracy theory]

      Just my $0.02,

      Michael

      --
      "Goodness me, how unlike the FBI to abuse the trust of the American public." -- The Onion
    2. Re:Security Through Obscurity by Anonymous Coward · · Score: 0

      I don't really believe that, of course - but it was nice to turn the whole security through obscurity argument around for once so Windows fanboys could see how freaking STUPID it is. Have you noticed that Apple fanboys are using this stupid argument and getting modded up? In fact, this stupid argument is getting modded up more by Apple fanboys than Windows fanboys. Does this make Apple fanboys STUPIDER than Windows fanboys?

      "Stupid is funny." --Harrison Ford's observation about Farrelly brothers movies

  20. Does it really matter? by gd23ka · · Score: 2, Interesting

    DRM is in of itself not secure because it will get cracked wide open each and every time
    somebody comes up with a scheme. Take the digital broadcast / subscriber card hacker arms
    race. They are already light years ahead of whatever Apple or Microsoft are cranking out
    and they will be well prepared if "trusted computing hardware" comes out.

    These people have phisticated lab equipment and are capable of cutting the chips wide open,
    manipulating chip fuses, patching rom masks etc. They will extract Disney's latest singing
    and dancing monkey mascot together with the accompanying mermaid from any and all DRM scheme.

  21. To Be Fair... by Hobbex · · Score: 1


    What Jobs seemed to be claiming wasn't that having fewer implementations would make it harder to crack (he admitted that it can always be cracked), but rather that it made it easier and faster to release new versions when the old ones had been cracked.

    1. Re:To Be Fair... by R3d+M3rcury · · Score: 1

      ...and, from his article, this is important because if Apple does not fix such problems in a "few weeks time", the record companies can pull their content.

      So, if the record companies feel Apple should license FairPlay, they should be willing to adjust this timetable.

  22. Jobs' statements seem contradictory by nobodyman · · Score: 1, Interesting
    Jobs' statements seem to boil down to this:
    "We want music without DRM. But we can't license FairPlay, 'cus hackers would... remove the DRM. The DRM we claim we dont really want. Yeah."
    Yeah I'm being trite, but I still find think it's a contridiction to campaign for DRM-free music while claiming that you're worried about your DRM being compromised.

    My hunch is that Fairplay is less about iPod lock-in and more like Zune lock-out. iTunes is your classic loss-leader* as it really only exists to add value to the iPod, which they make a tidy profit on. That being the case, there's no upside for Apple to sell at-cost music for devices they don't sell. The model would have to change, and I suspect that 99-cent downloads would become a thing of the past.

    *Yes yes... i know that $0.99 downloads are more profitable than CD sales, but that's only for the MAFIAA. Apple only makes a few pennies off of that $0.99
    1. Re:Jobs' statements seem contradictory by julesh · · Score: 1

      Jobs' statements seem to boil down to this:

              "We want music without DRM. But we can't license FairPlay, 'cus hackers would... remove the DRM. The DRM we claim we dont really want. Yeah."


      Did you actually read what he said? What he said was more like, "if we license FairPlay, when hackers work out how to strip the DRM we won't be able to release a new version to stop them quickly enough, and the record companies will shut down iTMS."

    2. Re:Jobs' statements seem contradictory by prockcore · · Score: 1

      Did you actually read what he said? What he said was more like, "if we license FairPlay, when hackers work out how to strip the DRM we won't be able to release a new version to stop them quickly enough, and the record companies will shut down iTMS."


      It wouldn't shut down, the major labels would pull their music and iTMS would have the same music that eMusic currently has.

      If Jobs hates DRM so much, and if iTMS really does "just barely break even" as mac users like to claim, then why not just drop the major labels and go with eMusic's indie-only model?

      I don't see the motivation of keeping the major label's music on the store.
    3. Re:Jobs' statements seem contradictory by julesh · · Score: 1

      If Jobs hates DRM so much, and if iTMS really does "just barely break even" as mac users like to claim, then why not just drop the major labels and go with eMusic's indie-only model?

      Because they'd lose the market share that less them sell 5 times as many downloads as their nearest competitor, and drives the sale of iPods, which is where they make their real profit. Besides, they made $452 million in the last quarter due to iTMS. iPod sales (of which they'd lose about half if they stopped selling popular music through iTMS, I reckon) made them $1,559 million.

    4. Re:Jobs' statements seem contradictory by Lars+T. · · Score: 1

      Did you actually read what he said? What he said was more like, "if we license FairPlay, when hackers work out how to strip the DRM we won't be able to release a new version to stop them quickly enough, and the record companies will shut down iTMS."


      It wouldn't shut down, the major labels would pull their music and iTMS would have the same music that eMusic currently has.

      If Jobs hates DRM so much, and if iTMS really does "just barely break even" as mac users like to claim, then why not just drop the major labels and go with eMusic's indie-only model?

      I don't see the motivation of keeping the major label's music on the store. Gee, maybe because he sees the iTS as a service to iPod customers and not as a means towards world domination? Nah, that can't be it.

      Not to mention that there is pretty little point in doing exactly what eMusic does - not to mention that you would then complain that they were ripping of eMusic.
      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  23. How about neither? by Anonymous Coward · · Score: 0

    I believe I read Apple didn't support DRM in the first place. Didn't Our Lord Steve say that he would be fine with no DRM at all?

  24. Digital Data = Copyable by domukun367 · · Score: 2, Insightful

    It seems to me, when looking at the big picture, that digital data is being distributed to customers. Digital data is exactly copyable, due to its nature.

    Now this digital data is encrypted, however if it can be decrypted (i.e. played!) then the encryption can be broken. It might prove to be difficult, but it will be broken.

    There are two possible ways that the big content distributors can go:

    (1) Get rid of DRM and change your marketing and pricing model so that it is convenient and cheap enough for most consumers to just by the media through the channels that they provide.

    (2) Remove digital data distribution and instead distribute media in the form of a sealed, enclosed device (with speakers, no other outputs) that only plays the media that you have purchased.

    Option (1) is the logical conclusion to most people and the neolithic companies will eventually (maybe in 10 years?) realise this and go with it. Option (2) is just not feasible, due to cost, space and sound quality issues.

    --
    Please don't send a Word document when a text file will do the job.
    1. Re:Digital Data = Copyable by Technician · · Score: 1

      (2) Remove digital data distribution and instead distribute media in the form of a sealed, enclosed device (with speakers, no other outputs) that only plays the media that you have purchased.

      Just like my toddler's toys. The duck goes "Quack" the cow goes "Moo"

      --
      The truth shall set you free!
  25. You missed a bit by Space+cowboy · · Score: 5, Insightful
    Quite an important bit, actually.

    Apple had to sign over the right for the record-labels to pull their entire catalogue from the iTunes store, if a breach happens and Apple don't fix it in a timely manner.

    Jobs doesn't care about DRM, but (because he's sane) he doesn't want to lose the iTunes store either - here's his nightmare scenario:

    • Apple licence fairplay to all who'll pay the fee
    • Some no-mark MP3-player company pays the fee, gains the licence, but screws up and somehow the encryption codes are made public - a bit like the first crack of DVD's was because some no-mark company screwed up their encryption key
    • Apple release a fix
    • No-mark company doesn't release the fix for *their* client-base, maybe there's no firmware update...
    • Apple lose all their iTunes songs from the "big 4".


    Now Apple can try and pin liability on No-mark company, but at the end of the day, the iTunes store contract is between Apple and [insert record label], and if fairplay is compromised, [record-label] are fully entitled to pull their catalogue...

    See it now ?

    Simon
    --
    Physicists get Hadrons!
    1. Re:You missed a bit by Budenny · · Score: 2, Interesting

      See it now?

      Not really. First, they would be careful who they licensed in such a case - bonds posted and so on.

      Second, if you imagine the size of this in the real world, the record companies might have the right to withdraw the catalogue, but that would increasingly seem self defeating. All that would happen is, Apple would have to fix it going forward. Maybe by withdrawing the license? Maybe by firmware updates for everyone else. Don't start arguing there are no technical solutions, there will be.

      Whatever the spin, there can be no serious doubt that the point of Fairplay as implemented is to lock in users to a combination of Apple software, the Apple music store and the Apple players. This is why sooner or later it will crash. The longer it goes, the worse the crash will be.

    2. Re:You missed a bit by dangitman · · Score: 1

      Not really. First, they would be careful who they licensed in such a case - bonds posted and so on.

      If they were too careful, they would probably be targets of anti-trust litigation. Apple has already been targeted by European countries over their DRM. What if some country threatened legal action if they didn't license their DRM to everybody, or if they were deemed to charge too high a price for it?

      Why should it even be Apple's business to get into some licensing mess if they don't want to? Your comment shows just how problematic licensing can be. Why waste time with all that crap, when you could focus on making a better product instead?

      Don't start arguing there are no technical solutions, there will be.

      That's an assertion with no basis in evidence. Particularly as piracy and licensing are social/political and business issues. Not every social/political or business issue has a technical solution, as much as geeks wish there were.

      Whatever the spin, there can be no serious doubt that the point of Fairplay as implemented is to lock in users to a combination of Apple software, the Apple music store and the Apple players

      Why can there be no doubt about this? From day one, jobs has been opposed to DRM. If the record labels didn't demand it, it wouldn't exist in iTunes. What is your evidence that Apple wanted DRM in the first place? I doubt that Apple ever expected to have an industry-leading role in this. The success of the iPod surprised everybody, including Apple and their fans.

      --
      ... and then they built the supercollider.
  26. Re:Security through obscurity never works, however by Tharkban · · Score: 1

    and won't be bought by me.

    I'm going to go out on a limb and say enough people will object to autodestructing chips that hardware manufacturers will not produce them.

    --
    Tharkban (It is a signature after all)
  27. Does licensng DRM lead to success? by mveloso · · Score: 4, Insightful

    Again, this question isn't the right question. DRM is not interoperable. Using the word "interoperable" is deliberately confusing, because DRM by definition isn't interoperable. It's a method of restriction, not an operatable thing per se.

    The operative word is "third party licensed."

    Audible.com is licensed to multiple vendors. How have those vendors done? Besides the iPod, Audible.com's DRM is licensed to a number of other players. Has it been a major factor in anyone's purchase? Possibly, if they want to listen to audible.com content.

    WMA/Plays for Sure is licensed to multiple vendors. How have those vendors done? The market has spoken.

    Zune WMA isn't licensed. The market is in the process of working out how the Zune is doing, but the prognosis isn't good.

    FairPlay isn't licensed. The iPod is doing great.

    The iPod is reallly a good example of what's called a "Network Effect Monopoly." People buy iPods because it has the most accessories. The iPod has the most accessories because people buy iPods. Etc etc etc. eBay is the same: people sell on eBay because the buyers are there. The buyers are there because everyone sells on eBay. Ad infinitum.

    Will licensing FairPlay change this? No. If Apple licenses FairPlay to hardware makers, it'll make the iTMS even more dominant. If Apple licenses FairPlay to other stores, it'll make the iPod even more dominant in hardware. If it licenses FairPlay to everyone, then Apple will sit on the dominant DRM system, period.

    As I said before, there isn't one thing that makes the iPod successful. But of those things, DRM is definitely not one of them.

    1. Re:Does licensng DRM lead to success? by melikamp · · Score: 1

      Great post. I was laughing at "interoperable" too.

    2. Re:Does licensng DRM lead to success? by intheshelter · · Score: 1
      I think the other side of the coin that no one is mentioning is that using Plays for Sure hardly meant that it would, indeed, PLAY FOR SURE. I've heard so many horror stories about how different devices would not work with different stores and they all used Plays for Sure.

      The tightly controlled Apple solution works, and works well, and that is why they are leading the market too. Plays for Sure never seemed to work well and people get frustrated when it doesn't just work.

  28. Re:Security through obscurity never works, however by rdebath · · Score: 1

    No contest, hardware makers provide guarentees. An auto destruct process is likely to amplify a spin doctored FDIV bug into a flaming death Lithium battery bug. They're not stupid, they're in the business of making nearly bug free products so they don't get too many defective returns. Unlike certain software houses.

  29. Number of cracks indicates popularity by osu-neko · · Score: 1

    At least, first and foremost, it indicates popularity. There might be a secondary impact based on strength, but how you'd determine how big that is is a mystery to me. The large factor will drown out the smaller ones.

    --
    "Convictions are more dangerous enemies of truth than lies."
  30. iPod is doing great, but Itunes not by Anonymous Coward · · Score: 1, Insightful

    They've sold what 100 million or more iPods, and 2 billion iTunes.
    So 20 tracks, or 2 albums per iPod, sold to people who are into music (because they bought an iPod!)

    So for all the hype iTunes isn't a success, it's only looks successful because the other DRM heavy stores flopped so badly.

    So I fully agree with your last comment. That DRM wasn't the reason iPod succeeded. I think iTunes isn't the reason it succeeded either, if it was they'd have sold much more music than 2 CDs worth, it's the cool small neat stylish iPod itself that succeeded.

    1. Re:iPod is doing great, but Itunes not by Anonymous Coward · · Score: 0

      The "let's license Fairplay" crowd should be careful what they wish for. What's to stop Apple from licensing Fairplay but then keeping the iTunes store as iPod only? Sure you can buy their music but if you want to get it on your Zen or, god forbid, Zune you will have use another program, wave the rubber chicken, etc. It's the iTunes/iPod combination that has made the iPod dominant. While other's claim to make better players, they are still only hold single digit market share? Are there better digital stores? Has Yahoo, Urge, Rhapsody--combined-- sold anything close to 2 billion songs? I don't think so.

  31. No user base for WMA cracks by iamacat · · Score: 1

    Why would DVD Jon or anyone want to develop a crack that only benefits a minority of users and applies to audio format that is non-standard even after decryption. iTunes is the most popular download service and Apple has geek appeal. Its no surprise that there are more cracks.

    1. Re:No user base for WMA cracks by julesh · · Score: 1

      Why would DVD Jon or anyone want to develop a crack that only benefits a minority of users and applies to audio format that is non-standard even after decryption.

      Because:

      (a) hardware players that support WMA are cheaper than those that support AAC. If all you care about is yourself, and you don't have an iPod, why would you pick FairPlay?
      (b) if you want to release stuff, rather than just crack it for your own use, why does it matter what format it comes from... you'll want to transcode to MP3 (which is the only format supported on every player) anyway. At this point, you'll just crack whichever scheme is the easiest to crack.

  32. Neither are secure. by Jessta · · Score: 1

    Closed DRM schemes like FairPlay are not more secure than interoperable ones. Generally because both aren't secure.
    They both attempt to accomplish something that is impossible.

    Security requires communication between two or more trusted parties, if any of the parties are not secure then the communication isn't secure. With all DRM schemes there is only one trusted party, the content producer. The other party being the consumer who can't be trusted.
    Without 'Trusted Computing'(trusted by the content producer not the consumer) DRM is impossible.

    --
    ...and that is all I have to say about that.
    http://jessta.id.au
  33. Microsoft ? Good ? In the same sentece ? by DrYak · · Score: 1

    Maybe Apple simply isn't as good at DRM as Microsoft,


    You're implying that Microsoft is good and anything else appart leveraging a monopoly ?
    In light of a long past of being able to suck in anything they managed to make ?
    With a long history of making the most easily cracked OS and whose product are the most targeted on, even when Vista is still in Beta and has a lower market share than Linux, or when IIS couldn't ever dream about reaching Apache's widespread ?

    You must be kidding.
    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  34. Stupid by phoenixwade · · Score: 1, Troll

    That is only true if Apple supporters are doing so. Something I didn't read in TFA (or the comments for that matter). I'm an Apple supporter, yet I don't apply this reasoning to either the DRM or the OS comparison. I haven't seen a lot of Apple supporters, much less ALL of them, comment in any form on the closed nature of Fairplay, or even commenting on DRM much at all. It wouldn't surprise me in the least to find that most "Apple Supporters" have no idea what Fairplay is, even.

    Your remark, as far as I can see, is not only unsupported, it's erroneous. Just the musings of a fanboi troll looking to start "Yet Another MS v Apple thread" as if there weren't enough of those around /. already to amuse anyone for years of reading.

    --
    A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
  35. Re:Security through obscurity never works, however by QuantumG · · Score: 1

    They suicide when you try to open them.. I didn't think I'd have to explain that.

    --
    How we know is more important than what we know.
  36. It is all about control by NoPhD · · Score: 1

    The issue is not whether you can license it or not. The issue is whether letting other license it makes it harder to update it. If you only have one group of devices to update it is easier to maintain control....That sounds like lock in. Isn't that what we are all are talking about. You miss the point totally if you think that breaking the DRM is the point. The point is not if you can break the DRM. DRM will be broken. The point is how fast you can fix it. Revolving secrets in DRM was acceptable to the record companies. The secret revolves after you fix it from being broken. You can fix it faster if you don't have it licensed all over the place. Go to apple and read the post from Jobs. He has got it right.

  37. No, no no!... by karot · · Score: 2, Informative

    ...Don't encourage them by implying that DRM can be licensed and is a legitimate option.

    DRM is bad bad bad, and is broken whether licensed or not. Don't use it, that's the answer :)

    --
    Enjoy Y2K? Roll-on Year 2037!
  38. uh.. DRM is EVER secure? by Lord+Bitman · · Score: 1

    You can't get less than "no security"..

    --
    -- 'The' Lord and Master Bitman On High, Master Of All
  39. a question by PopeRatzo · · Score: 1
    from TFA:

    'When it comes to DRM, what history actually teaches us is that one approach is nomore secure than the other in practice, as they relate to the keeping of secrets.


    I'm confused, isn't DRM about protecting a copyright instead of "the keeping of secrets"? What is TFA trying to say here?
    --
    You are welcome on my lawn.
  40. DRM is 'logically' infeasible. by hAckz0r · · Score: 2, Insightful
    To achieve this concept of the mystical DRM you need three things: 1) Encrypted playable data, 2) the magic key, 3) the algorithm for applying that key to the data and sending it to the computers hardware. The problem is that you have to give the user all three components in order for them to play the music or watch the movie, otherwise its unusable. The producer of the DRM has but one goal, to keep the owner from knowing or accessing one or more of these components while still being able to put the three together when and how needed.

    Whats wrong with this picture? Logically, if you can put them together in order to play the media you can 'read' the unencrypted data, and if you can read it you can copy it. The "magic" in DRM is simply the "how" that they keep you from knowing how to put them all together. Its nothing but a secret designed to prevent you from accessing your own computers data while playing the media. Everything else is nothing but hype with smoke and mirrors. The only people that truly benefit from the distribution of DRM are the ones designing, producing, and selling it the DRM itself, not the media that it encodes. The Media boardroom executives at the major studios are just not smart enough to realize the hype that they are being fed by these DRM designer companies. Bottom line, you can't make a DRM that is unbreakable so it prevents nothing so far as the goal that it is being sold for. Its a sham and it needs to be recognized for what it is.

    To the professional black-market vendors all the DRM smoke-and-mirrors is merely a speed bump because they just physically copy the whole disk/file bit by bit and bypass the need to even decode the data, it's the user needs to do that and their player will happily do that for them. Making the much sought after DRM-free Internet down loadable version of the file is a little harder, but then you only need one pissed-off geek to put it out there and the game is over. Just one. Thats something that the all the Board Room Exec's should all think about. How much has the price of what they produce gone up due to the DRM they have uselessly added to their product? How many fewer people have purchased their product due to the DRM making it more expensive and in many cases completely unusable? If there is one thing I know is that the bottom line in their check book is what matters, and they are being duped by the technology vendors just like the snake oil salesmen of years ago.

    1. Re:DRM is 'logically' infeasible. by hAckz0r · · Score: 1

      And I see that Apple has the same thoughts this morning. Right now they may be the one company that can actually do something about it too! If they can make that happen I will start buying from iTunes the very next day.

  41. Less Secure Because it's not Licensed? by Anonymous Coward · · Score: 0

    Windows Media DRM has had fewer security breaches than Apple's FairPlay, yet WM DRM is licensed out the wazoo: there are more than a dozen companies with WM DRM licenses


    Could it be possibly that FairPlay gets cracked more simply because it isn't licensed? It would seem to make sense to me that more people are interested in cracking it than an interoperable scheme simply because people would want to use their legally purchased songs on say their iriver/zen/nomad/[insert favorite interoperable media player here]. I know my interest in removing the FairPlay DRM has nothing to do with piracy or anything but the fact that i bought a song off of iTunes and just want to be able to use it in linux and/or on my iriver clix.
  42. Re:Red Herring -- binary, not source... by anon+mouse-cow-aard · · Score: 1

    Article is way off the mark because it does not take into account the different corporate goals... MS is not "open" because it is licensing it's DRM, it is simply fulfilling the extend and extinguish and platform hegemony objectives...

    MS is licensing an entire platform, so having their DRM on every possible platform is already a goal. They only need to license binaries for the platforms they support already (Windows, mobile, etc...)

    Apple if they want to license to non-Apple platforms has two un-palatable choices: Distribute as source, or support binaries on all kinds of unknown platforms (ie. Symbian, linux, Palm, in addition to all the MS flavours.) It's clearly in complete opposition to Apple's strategy of controlling the platform to provide the best end user experience.

  43. Security Through Obscurity by thedbp · · Score: 3, Interesting

    Ahem. This is going to feel mighty good.

    The only reason that PlaysForSure isn't cracked all the time is because no one really uses it on a large scale. Since Apple dominates the DRM music field, and most DRM'd music sold is from Apple and includes FairPlay, then of course people are going to attack FairPlay more than PlaysForSure. If it were the other way around, PlaysForSure would be just as insecure as FairPlay.

    I don't really believe that, of course - but it was nice to turn the whole security through obscurity argument around for once so Windows fanboys could see how freaking STUPID it is.

  44. Closed, non-interoperable DRM isn't a DRM by webrunner · · Score: 1

    It has nothing to do with rights, it's just a pissing match between companies to lock each other out.

    It's CMM - Corporate Monopoly Management.

    The ones pushing proprietary DRMs probably could actually care less about piracy.

    --
    ADVENTURERS! - ANTIHERO FOR HIRE - CARDMASTER CONFLICT
  45. Mod parent down! by Anonymous Coward · · Score: 0

    Only on slashdot such FUD gets modded insightful. WMV is for VIDEO, not audio, and if you look at some decent codec shootout (like doom9's), you'll see it rivals the very best (very good results), and it's also what's used for Blu-Ray and HD DVD (under the VC1 name). Audio wise (WMA files), look at the latest listening tests from hydrogenaudio - it scores as good as ogg vorbis and AAC @ 192kbps!

    I stick to the non-DRM'ed mp3 format, but saying Windows Media sucks when it's basically as good as anything else...

  46. I'm Tired of the DRM Articles by Luscious868 · · Score: 2, Informative

    DRM is a huge pain in the ass for consumers and digital distribution of media that uses it is never likely to take off in the same fashion as it's physical medium counterparts unless it's easy to use and not very restrictive like Apple's FairPlay. Part of what makes FairPlay acceptable to me is the ability to burn purchased content to a CD that I can then take with me and listen to in any CD player that I wish. If FairPlay didn't have this ability I wouldn't use it. Likewise I'll never buy a "digital download" version of a movie or TV show unless I have the ability to burn that movie or show to a DVD. IMHO anything with DRM that doesn't let you burn to some kind of physical media that can then be played back on other devices (players, portables or other PC's) is essentially a rental and isn't worth it. I think most consumers agree which is why I'm tired of these DRM articles. A huge factor in any media format leap is convenience. Does anyone here really think that either CD's or DVD's would have taken off as they did if they didn't involve huge leaps in convenience for consumers? Quality played a part sure, but I'd argue it was the convenience of CD's and DVD's that really caused them to take off. Being able to leap back and forward between tracks instantly and not having to flip back and forth between sides was a huge factor in moving from tapes to CD's. Likewise the ability to skip back and forth easily through movies (and not having to rewind tapes to watch them) was a huge factor in the move from VHS tapes to DVD's. Not to mention never having to worry about a bad tape or VHS player destroying your music or movie. A poster on Slashdot said something a while back that I completely agree with. Everyone is looking at HD-DVD and Blue-Ray, freaking out about the DRM, and wondering which will be the next big thing in video and I think they are off the mark. All that HD-DVD and Blue-Ray offer over their DVD counterparts is more space and HD content. Newsflash, most consumers don't have an HD TV and won't anytime soon. Even when there's an HD TV in every home, HD TV's are expensive and most homes have more than one TV anyway so most consumers would then probably have one HD set in the living room and regular TV's elsewhere. I think some kind of hybrid DVR / Apple iTV kind type of box with a price point of around $200 bucks would be poised to be the next big thing in video. Consumers want a leap in convenience more than they want a leap in quality because at this point the leap in quality requires a large investment in expensive new hardware to pay real dividends. Why pay thousands of dollars for one brand new large HD TV in the living room and a bunch of HD-DVD's and/or Blue Ray discs (when you probably already own the content on DVD) who's improvements in quality can only be seen on that one expensive large TV in the house when you can spend between $600 and $700 dollars and have set top box hooked up to each TV in the house that lets you record, share with the other boxes and play back content recoded by the DVR and/or download, share with the other boxes and playback movies and TV shows that you've downloaded from the Internet. IMHO that latter option makes a lot more sense than shelling out all that money for a new HD TV set and bunch of content in HD that I've already paid for just to get better picture quality. My point is that convenience sells. DRM that isn't convenient won't sell and DRM that is convenient will. The box that I spoke of above could be DRM'd to the hill as long as I could share the content with the other boxes, have a backup system or the ability to re-download content that I paid for if I lost it and as long as it had a simple interface and "just worked" it would be a hit much like the iPod / iTMS combination. The RIAA and MPAA are to stupid to get it that and I have no doubt they'll DRM consumers to death and turn them off to digital distribution completely if they are left to their own devices. All they have to do is look at Napster. Napster didn't offer higher quality. Napster offered the con

    1. Re:I'm Tired of the DRM Articles by drinkypoo · · Score: 1

      DRM is a huge pain in the ass for consumers

      That's very true. Your no-carriage-return DRM has proven highly effective in preventing me from reading this message.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:I'm Tired of the DRM Articles by Anonymous Coward · · Score: 0

      Dude, you ever hear of paragraphs?

  47. Secure? by Dachannien · · Score: 1

    Why are we using the word "secure" to indicate whether a DRM scheme has been cracked or not? A cracked DRM scheme has no negative security implications for the user, but calling it "insecure" makes it sound to Joe Sixpack like it's dangerous, when in fact, a cracked DRM scheme is a good thing.

    Also, a DRM scheme being a little bit cracked is like being a little bit pregnant. Either it's cracked or not. CSS, for instance, is cracked (weaknesses in the scheme allow keys to be recovered through brute force). FairPlay (afaik) isn't cracked, but various implementations of it have been.

  48. dmca drm link by Anonymous Coward · · Score: 0

    correct me if i'm wrong, but hasn't the dmca legislation afforded the opportunity for things like drm. I'd like to see the dmca thrown in the trash can. 1984,.. controlling what you see. It would be nice if lawmakers required a bright green star sticker labeled drm ontop of goods sold with drm.

  49. Not a question of interoperability vs. security by RetiredMidn · · Score: 2, Interesting

    Whether a DRM scheme (or any other software implementation) for that matter is more or less secure because of interoperability is in the margins; security is a question of implementation, not licensing. (Some have made the point that open schemes are subject to more scrutiny and more likely to identify flaws early; perhaps so, but I still argue that the difference is probably marginal.)

    The point Jobs raised in his essay is that it's harder to propagate fixes to software that is broadly licensed across many vendors, which in turn means that vulnerabilities remain in the field longer. He also asserts that this could threaten the agreement between Apple and music companies, although you might want to add salt to that to suit your tastes.

  50. There is no such thing as open interoperable DRM by elgaard · · Score: 1

    All DRM systems are closed.
    And their only purpose is to hinder interoperability.

    DRM systems are closed towards content creators and distributors.
    DRM media are closed towards users.

    I do not care if iPod and Zune Restrictions systems are "interoperable"
    because there will be no interoperability with my Linux computer.

  51. Re:Security through obscurity never works, however by Tharkban · · Score: 1

    Yeah, I got that.
    But it makes the chips inherently less reliable, and hardware vendors know that. Things that might not previously cause damage, can now accidently trigger the autodestruct and make the chip useless.

    What would you make autodestruct anyway? The way around hardware DRM is through mod chips usually. So if your intent is to place a chip on the motherboard, it's not much of an issue if the chip you want to replace autodestructs.

    --
    Tharkban (It is a signature after all)
  52. Quit abusing the word "secure" by Sloppy · · Score: 1

    The more interoperative it is, the more secure it is, because the less likely that the user will suffer a Denial Of Service. But of course, that's still not anywhere as secure as having no DRM at all.

    Security should always be defined in terms of how much or how little the user gets screwed. When you equate crack-resistant with "secure," you accept a perverted values system.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  53. Re:WM DRM problems. by Technician · · Score: 1

    It's not a question of licensees choosing WM DRM because they trust it more than FairPlay - Apple doesn't license FairPlay at all, so Windows Media is the only choice for a third party.

    There may be lots of licensees, but the consumers are ignoring it for the most part. Some consumers have been bitten by the format and avoid it entirely.

    Don't flame me for FUD. I am relating facts. You are free to repeat the process to verify the problem. You will need an RCA Lyra flash player, a Windows Computer and some other computer with any OS.

    My son is an example. He has an RCA Lyra. It plays MP3's and WMA files. He was at a friends house and did what kids do. He copied a few songs onto the player using drag and drop. The player was in the Flash Drive mode, not the DRM Sync mode. Some songs would play, some would not. This should not be a problem. The protected songs that won't play are simply considered broken due to DRM and should be deleted. This is where things got very sour very quickly. You can't delete the broken songs from anywhere except from the computer that put them there! The player won't delete them, the home computer with Windows can't delete them, and even a Linux box can't delete them. Permission is denied. Who in their brain dead design decided you can't delete files you can't play?

    I found about it because at first my son just thought the files were in the wrong format and asked help converting them to MP3. They are songs and should play. I let him know about DRM (he didn't know) and told him to delete them. This is when we found out the true nasty implentation of DRM in the Plays for Sure format. Since there is no way to tell on the PC if the files are DRM WMA or WMA and the potential for problems, we have moved away from anything WMA. Because my son had to go back to the friends house to remove the files from the player, his friend also learned the evils of DRM gone bad. Plays for Sure doesn't and won't delete either. MP3s play for sure.

    The solution was to RE-Rip in MP3. (middle school boys, no credit card, no online store sales) The defualt settings in some bundled media players for ripping CD's is bad.

    --
    The truth shall set you free!
  54. Wrong argument by mmeister · · Score: 1

    This is the argument that RIAA wants us to have. The reality is that DRM treats all customers as likely criminals.

    My collection of music is more than 13,000 songs bought legally (and mostly CDs over the past years). I've made a few mix CDs here and there, but I'm not a pirate and am sicking of being treated like one. My online music purchases are relatively low due to this fact alone.

    I have more than 5 machines, so even FairPlay restricts my usage. MS's PlaysForSure/Zune DRM seems even more draconian.

    Steve Jobs is on the right track by pointing out the idiocy of the recording industry (whether or not he has ulterior motives). I read that EMI is considering non-DRM tracks for sale online. RIAA has been asserting its rights at the expense of our rights (not unlike the Patriot Act). It is doing it under the guise of piracy, but ultimately it is about control and more importantly money. RIAA wants DRM so that it can control what you do with the music you bought.

    DRM and interoperable DRM are interesting topics for things like subscription services (where for $10/mo you get access to the entire library of music), but for bought tracks, it is the wrong argument.

    And finally, let me say Bravo to the open market. The more RIAA tries to tighten its grip, the more sales plummet for the music they hock. This, of course, only causes RIAA to stick its head farther up its ass and tighten more. The ultimate result will be the end of RIAA, it'll just take some time for everything to implode. Hopefully then, the artists will get their rights back (as a bonus).

  55. Re:Red Herring -- binary, not source... by soft_guy · · Score: 1

    But Microsoft ISN'T licensing the DRM in Zune. Sure, they license Plays4Shit, but who cares? They already obsoleted it when they came out with Zuma!

    --
    Avoid Missing Ball for High Score
  56. Exactly! by Orig_Club_Soda · · Score: 0

    "There are more than a dozen companies with WM DRM licenses"

    Yet every doorknob out there rants whines and complains about Apple as if Apple is the only answer. The only problem with Apple is that its is the preferred solution, not the sole or best solution.

    Just read up a few stories where EMI is targeting Apple... Doorknobs!

  57. Fairplay weak on purpose? by Anonymous Coward · · Score: 0

    Given Steve Jobs' recent remarks regarding DRM, specifically his desire to see the recording industry open up and sell their music without DRM restrictions, it makes me wonder if Apple's Fairplay DRM is intentionally week and simply suffices as a facade to placate the recording industry. As a purchaser of music from Apple's iTunes, wouldn't you feel better knowing that Fairplay is easily cracked and stripped from the music you own. Isn't that really a feature rather than a bug. None of us here know why Fairplay isn't that good, maybe they're incompetant, maybe they simply weren't willing to spend the money to create a really good DRM system, maybe they consideer DRM to be a passing fatuation and don't want to expend the resources on it. Either way, in the end, it's actually better for consumers that Fairplay sucks.

  58. DECS is Daniel Eran, spammer for his blog by Anonymous Coward · · Score: 0
    For those that haven't figured it out, DECS is Daniel Eran, writer/spammer for that shitty blog roughlydrafted. Digg is not falling for Daniel Eran's crap anymore. I'm surprised Slashdot is still falling for it.
  59. Or do they? by Anonymous+McCartneyf · · Score: 1

    You do realize what these conjectures say?
    The first conjecture says this: for any axiom system, a machine X can be built that takes a statement in that system and a string; for any proven statement P, a string $p can be constructed such that the pair, when entered into machine X, returns "true"; and that any false statement R will return "false" no matter what string is entered. Problem with this: if your statement is "The Godel statement is not provable," is there a string $g that will return "true"?
    The second conjecture says that a black box can be built so that an untrusted user of the box can tell what the outputs should be from the inputs--but nothing else. Turing proved that there could be no such machines.

    --
    There is a fine line between recklessness and courage... -- Paul McCartney
  60. Fixing cracks by Anonymous+McCartneyf · · Score: 1

    Before Apple writes an iTunes/Quicktime for Vista that doesn't work with QTFairUse, Apple has to write an iTunes for Vista that works with Vista.

    --
    There is a fine line between recklessness and courage... -- Paul McCartney
  61. No, I'm not kidding by Infonaut · · Score: 1

    You must be kidding.

    Is any person capable in all areas or incapable in all areas? Is any company?

    What do you think of the XBox? Is it a seaming piece of crap?

    --
    Read the EFF's Fair Use FAQ
  62. Exactly, the XBox by DrYak · · Score: 1

    What do you think of the XBox?


    Exactly. The XBox.

    It's a nice exemple of a supposedly "uncrackable" device, using Trusted Computing-like encryption and key exchange to ensure that only licensed code could be runned on the machine.
    According to Microsoft, no luck for either pirates or home-brewers... ...and it turned out to be completly bugged, easy to crack, and with or even without mod-chips every user is able to run opensource video players or linux, and pirated games are common.

    The XBox 360 itself is going the same way.

    Microsoft has always sucked at security. XBox is a nice proof, (and for now, still inoffensive, at least until bot-nets of XBoxen start to appear), just as any other DRM attempt from them even for music.
    If there isn't such a widespread of cracking of microsoft DRM protected music, it's just because nobody is interested : you can't botnet it. I mean, yet. If Zune manages somewhat to be more popular than now, maybe you'll see trojanised musci files used to turn Zunes into WiFi-scanning/SPAM-spitting zombies.

    Is it a seaming piece of crap?

    I wasn't impressed at all by the Xbox.
    It was nothing more than a somewhat decent PC stuck inside a huge oversized plastic shell, and with some proprietary weirdness (strange USB connectors, crazy partition format) clumsily thrown in the way. Nothing revolutionnary at all. It just made PC-gaming more widely accessible.
    Its only good point is, being somewhat Windows 2k and DirectX based, it was easy for all the Windows-only gaming shops to diversify and produce games.
    That, and the Live network made it somewhat successful.

    The Xbox360 is finally something that start to look as a good gaming platform, but (just like the PS3) it's basically like everyone else in the market, with all specs turned up to eleven. Nothing real inventive there either.

    I really hope that the Wii will be able to bring something new to this stagnating world.

    As put by my brother : We have bought more games for previous consoles each, as for GameCube/XBox together. Just to show how much there isn't something really interesting out there.

    So to conclude. No it isn't a huge pile of shit. Its protection sheme is one. But whole thing is just a big bland thing laking interest.
    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]