Satellite TV Hacker Tells His Story

Wired is running a story about Christopher Tarnovsky, the man who was accused of working for NDS, a company owned by Rupert Murdoch's News Corp., to sabotage a competitor's satellite TV system. Wired had a chance to speak with Tarnovsky and get his description of how the smart-card hacking war developed. Quoting: "Tarnovsky, who was known online as 'Big Gun,' says Ereiser offered him $20,000 to fix cards that were killed by ECMs, and he agreed. Each time NDS created a countermeasure, Tarnovsky would analyze the code and find a way to circumvent the countermeasure. He did it while working full-time as a software engineer for a semiconductor company in Massachusetts. 'I'd be at work and I'd check the IRC (channel) to see if they'd launched their Thursday countermeasure yet,' he says. 'It was like a chess game for me. I couldn't wait for them to do a countermeasure because I would counter it in minutes.' It wasn't long before NDS came courting. Tarnovsky had a contact at the company to whom he'd begun passing information about holes in its software, even supplying patches to fix them."

Comments

Motivation

[sqrt(2)]

It was like a chess game for me. I couldn't wait for them to do a countermeasure... Anyone developing software designed to keep content locked down needs to realize that this is the kind of person they're up against. It's hard to beat that kind of motivation. Forcing an arms race is almost always going to be counter-productive to protecting your business, this company figured that out.

Re:Motivation

[Darkness404]

Everyone knows that locking-down content is utterly futile, in comparison to the provisions of a well-implemented digital rights management system.

Oh yes, as if DRM is unbreakable! One quote that I have heard (don't remember where) but it was "The only DRM that doesn't get cracked are the ones that no one cares about the content on them". Just about every DRM scheme known to mankind has been broken in some way or another. Honestly, the less DRM/locked-down-content we have, the less problems you have and the less people are going to be out to crack/hack it (just look at the PS3, because Sony made installing Linux on it very easy, there has been a smaller effort to crack it compared to say, the Wii)

Re:Motivation

[zappepcs]

I think that you are right. One of the groups who benefits the most are the companies that want to apply DRM to their content. Some will learn up front how much the arms race will cost them. Others will learn what is probably the point at which they should stop trying, and yet other still will learn that it is a futile business tact, and that modifying their business plan is both cheaper and garners more and loyal customers.

Additionally, with the arms race comes better code, not simply for the DRM, but for the operating systems and applications that work with the content. It is indeed evolution of both content, DRM, and code in general. The arms race in this case (not that of nuclear arms) is the catalyst of evolution, and betterment for all users in the long term. I would never call such hackers bad, simply the opposite side of the DRM coin that MUST exist, as without it, the other side cannot exist either.

Try keeping all the coins in your pocket/drawer/whatever so that you only ever see the heads side sometime. It's far easier to just allow any side to show in it's turn. It kind of makes things like pockets, coin purses, piggy banks work well.

Re:Motivation

[donweel]

Using a hacker of this caliber is a double edged sword. If you don't keep him busy and entertained he's going to start looking for something else to do.

Re:Motivation

[Stellian]

Anyone developing software designed to keep content locked down needs to realize that this is the kind of person they're up against. I don't understand why people insist DRM is an unattainable notion. It must be all those faulty software DRM schemes that were all eventually broken. Well guess what, hardware DRM is alive and kicking - and working, when implemented correctly. Hardware hacks are orders of magnitude harder to perform than software ones.

Economically, there are two trade-offs in DRM:
1. the cost of the hardware manufacturer to implement the DRM scheme, compared to the cost of the content he's trying to distribute
2. the cost for the DRM wannabe hacker (cracks, mod chips etc.), compared to just buying a legit copy.

There's no logic fault in saying that, for a certain type of content, with a certain cost, these two tradeoffs allow a DRM system to survive. That is, to cost small enough to implement as to not increase the cost of the content significantly, and high enough to circumvent, that the users rather pay than circumvent. This is not the same as "unbreakable", especially for the types of passionate hackers like Mr. Tarnovsky, but that's irrelevant.

Note that the 2. cost can benefit tremendously from an economy of scale, if it's enough for a single user to circumvent and distribute to all others. For example when the content is in a platform independent format (distribute decrypted music), or when the DRM system is implemented in software (distribute software crack).

This is not the case with, say, live High definition TV. Maybe someone can hack his topbox and have unlimited access to live Sports coverage, but he can't feed that content to me fast enough to be useful. So I need to hack my own topbox, and that could cost much more than the subscription to the sports channel.

Also, this is not the case with a console game, where I need, again, to perform my own hardware hacks. A mod chip costs significantly today, and when the GPU, CPU, RAM and DRM chip will be integrated on a single dye, a mod chip will be impossible, and one would need to hack his own silicon.

Re:Accountability?

[arazor]

Never. Because crimes are only for the poor.

Re:Accountability?

[icegreentea]

Why would Murdoch go on trial? NDS (the Murdoch company) was found guilty only of theft of satellite signals and fined like 1500 dollars. There was no proof for piracy or the like. If you want to put Murdoch on trial for something like that, that one of his many many companies did, then you're expecting the sky. No one is dumb enough to try that. There's zero chance of Murdoch actually being found guilty of anything related to this. Hell, I'm willing to wager that Murdoch himself might have actually been ignorant of this.

Re:Accountability?

[clang_jangle]

Silly rabbit -- It's criminal charges which are only for the poor.

Re:Accountability?

[Free the Cowards]

That's pretty much the whole idea of having a corporation.

Re:The Video Shows the Holy Grail of Sat Hacking

[Dun Malg]

Makes me think he could also dump the ASIC, something even in the heyday of DTV hacking, was never accomplished. You can't dump an ASIC--- that's the very reason they exist in this application. It's not code, it's an Application Specific Integrated Circuit. It's essentially an unknown array of logic gates. The best you can do it try to reverse engineer it, and short of an electron microscope, you probably couldn't.