Doom9 Researchers Break BD+
An anonymous reader writes "BD+, the Blu-ray copy protection system that was supposed to last 10 years, has now been solidly broken by a group of doom9 researchers. Earlier, BD+ had been broken by the commercial company SlySoft." Someone from SlySoft posts a hint early in the thread, but then backs off for fear of getting fired. The break is announced on page 15.
A hearty congratulations to the brilliant programmers of Doom9, including Oopho2ei - who claims not to be a "professional programmer".
Help stamp out iliturcy.
Unfortunately this will probably just mean that a ton of consumers will be SOL when they implement new encryption schemes on BluRay that aren't supported by some existing players.
The best part of all: the DMCA makes it perfectly legal to use with Linux since OEMs don't provide linux codecs.
Well done.
That being said BluRay burners are expensive enough, and the blank media is expensive enough that I'll probably still buy my BluRay movies on Amazon.com (where I routinely find cheap deals as opposed to retail stores charging $35 per movie).
http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
Sony isn't having a ton of luck building an installed base of users of BD, even after buying their competition into submission. If they obsolete their installed base they have to start over again with thet negative examples of HD-DVD and the additional strike of cyclic obsolescence against them. It would be too obvious that the purchase of their content is actually a short term lease. That would be the death of BluRay before it's even well started, and it wouldn't even buy them an additional year before it was cracked again.
It's more likely that we're nearing the end of this DRM nonsense forever. Finally!
Or am I too optimistic of their intelligence? History does weigh heavily against my hopefulness here.
Help stamp out iliturcy.
Looks like the last barrier against BR adoption has been bypassed. Cue the cheap players and burners and BR might actually rise from its coma and take the market from DVD.
I'm hoping that won't happen because a world ruled by Sorny is surely worse off. But don't fret, Sorny will do everything in its power to prevent mainstream adoption.
The common man proves that if man can make it, man can break it.
This is a lesson companies will NEVER LEARN when it comes to DRM.
Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
...start reading on page 15, it'll discuss (a) what they did and (b) how resistant it is against potential counterattacks by the BD+ people.
Mind you, the idea was not to break the underlying encryption scheme (breaking AES could still turn out being hard for the next couple of years...), but rather disable the BD+ security layer.
For reading BD+ BRs on Linux, the problem is they had to use patched firmware. This doesn't bode well for widespread adoption on Linux by non-technical users. Patching firmware is scary for most consumers, who will face the possibility of bricked drives.
The key will be to either bypass the drive's firmware with virtualization or to somehow have the firmware patch to happen safely and automatically on as many drives as possible. Hopefully something that could be done in the Linux kernel drivers for the BR drives and/or the SCSI drivers.
My blog
The content must contain sufficient information for the content to be decoded. Anything one software can do, another software can do (see Knuth, et seq). Therefore if there's an available software that can decode the encrypted content it must be possible for open software to decode the encrypted content. Removing the encryption using open software eliminates the protections against copying provided by the closed software and the game is over.
Thus DRM is a fool's errand. It always has been.
The illusion of protectability is however easy to sell for vast sums of cash to content owners who desperately want it to be possible.
Help stamp out iliturcy.
I don't really care if I can copy my BluRay disks or not (I'm too lazy to back up my movies - if I break a disk and I like the film, I get a new one).
But I would love to be able to play my legally bought films under Linux without having to reboot (or having to go to jail for that matter). Maybe one day. :)
Maybe this breakthrough will finally make BluRay a popular format, so far I haven't seen much (or any) pick up.
"The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
Skip the BD player deal, buy the Disc at retail and then download their platform shifted unencrypted movie backup through P2P*. The full BD+ library should be available within a few days, if it wasn't already.
* Even though it's inherently fair, this method may not be legal in your jurisdiction. Consult your attorney before using.
Help stamp out iliturcy.
Hoping some expert can describe how this all works to the masses out here. From a quick glance through the forum, this is what I think is happening...
BD+ movies are released with corrupted data
A conversion table is required to fix the corruption
The conversion table is built using code on the BD+ disk that runs on the BDVM.
The bulk of the work on the forum thread seems to be an effort to reverse engineer the opcodes and libraries (called TRAPs?) available in the BDVM, and to reimplement the VM.
I'm not a security or crypt expert, but I can't imagine how anyone can expect this kind of security to remain secure for 10 years.
I think a quote from a famous internet wordsmith is in order here:
gadgetophile.com
I don't really care if I can copy my BluRay disks or not (I'm too lazy to back up my movies - if I break a disk and I like the film, I get a new one).
Clearly you have no children living with you.
When information is power, privacy is freedom.
I'm sick of my VirtualBox/WinxP/AnyDVD-HD setup. I'd MUCH rather a native Linux command-line tool to automate the process when inserting the disc. ;-)
Thank you to all developers! Great work!
A lot of people are just not buying content - even though they would like to buy content - because they know that money spent that way is wasted and they don't want to throw their money away again.
At the risk of my karma, I'm going to mention that no one I know seems to fall into your generalization of people not buying Blu-Ray discs or players because of DRM. The most commonly cited reason for discs is lack of ubiquitous players (in cars, portable players, friends houses, etc) and the most common reason cited for players is the expense of a Blu-Ray mechanism. In fact, breaking the DRM makes Blu-Ray riskier for investors and therefore likely will increase costs (higher risk means higher cost) in the short term.
All in all, because Blu-Ray is 10x the bandwidth of any online "HD" movie source (and I use that term loosely for online offerings) and because online DRM is so much worse, I don't see it going away. Instead I see it likely to win over DVD-- DRM or not-- but not until manufacturing costs ramp down due to better technologies and economies of scale.
Consider this. Is a DRM-free H.264/AAC mp4 file more convenient, or is a DRM-laden disc that you can play in your car, computer, PS3, portable system, or friend's house by carrying around a 16 gram disc? I suspect for geeks it's the former, but for most consumers it's the latter, and it's really just about making players ubiquitous. The odd player out is, of course, the iPod. It's the one thing that is both ubiquitous and doesn't favor the disc. If the Blu-Ray consortium came to some agreement with Apple there it would go a long way towards gaining acceptance.
E pluribus unum
Except bank vaults don't also vastly decrease the usefulness of banks for legitimate customers...
no one I know seems to fall into your generalization of people not buying Blu-Ray discs or players because of DRM.
We shall see. Most people don't know really why they're not trusting of innovation in content technology. The advantages of open content though are immediately obvious and so when the content owners open up the content it starts flying out the door.
All in all, because Blu-Ray is 10x the bandwidth of any online "HD" movie source (and I use that term loosely for online offerings) and because online DRM is so much worse, I don't see it going away. Instead I see it likely to win over DVD-- DRM or not-- but not until manufacturing costs ramp down due to better technologies and economies of scale.
"Never underestimate the bandwidth of a station wagon full of backup tapes." Technology has passed this one by, but the truth of it remains. Content providers would do well to sell the right to the content separately, and let people figure out how to get the content on their own. If they must, they can offer content at kiosks you take your external hard drive to. The tree huggers should like the idea of transport-media free content distribution at the very least - that's less mylar disc in the landfill.
Consider this. Is a DRM-free H.264/AAC mp4 file more convenient, or is a DRM-laden disc that you can play in your car, computer, PS3, portable system, or friend's house by carrying around a 16 gram disc?
For the car and portable system a downrezzed movie that fits on an 8GB SDHC card are sufficent, and that form factor is considerably more convenient than a disc that doesn't even fit in your pocket - and is too fragile to carry that way anyway. People do this on their EEE all the time. A 360GB external 2.5" USB drive is bigger and heavier but smaller than a BD with case so it still fits in your pocket, is less susceptible to scratching, fits multiple movies on one disk, and has many other advantages.
Open content means you can make backups. You can convert to your target platform. You can move your content to where you want it and any technology that can play it will continue to play it for all time. DRM content does not have any of these advantages. Most importantly that last one.
Help stamp out iliturcy.
Direct link to announce: http://forum.doom9.org/showthread.php?p=1207578#post1207578
I own over 500 DVDs, I love to collect movies and my favorite shows and I look forward to collect BD as well, but I will never support any kind of "protection" that punishes a honest person. I travel all over the world and I often pick up movies from other countries, why shouldn't I have the right to play them back at home, in my living room? The region protection was stupid and any protection is stupid because it doesn't keep pirates away but just honest people like myself who paid dearly for their discs. If my DVD Player had not been unlocked I would not have spent a good chunk of that money on DVD. And I'll go even further: I should be able to send my original DVD of movie XY (not related to Kyle ;) ) and upgrade for a reasonable cost to the same movie on BD, after all it's movie studios that pushed the new standard.
Member of WIPO? Then yes you do.
Subj.
Nah, this DRM nonsense is just starting to heat up. There's a new Copyright Czar on the job now, and Hollywood will throw more cash than ever at lawmakers to try and shore up their busted protections. This will continue since US export numbers are propped up by Hollywood's entertainment distribution network. They'll see this as a "must-protect" industry. In the end they'll fail, but anyone who thinks the supporters of DRM are about to give up should think again.
They estimated that it'd last for 10 years. It took the Doom9 forum people 5 _weeks_ to hack it. That's like, less than a hundredth of the estimate (i.e. 5/520).
I wonder. They must not have heard that architectures with an obfuscated instruction set are also reverse-engineerable? I distinctly remember reading an article on the Transmeta VLIW machine's opcode and instruction packet format... and that one has never been officially released at all.
A hearty congratulations to the brilliant programmers of Doom9, including Oopho2ei - who claims not to be a "professional programmer".
I mean, it seems their programmers did it first, and then helped out the Doom9 people by providing hints here and there.
Not to diminish the value of the doom9, who gave us an open solution to the problem, but let's not forget the other guys.
Warning: Opinions known to be heavily biased.
When Slysoft did this in March. I've had those versions of AnyDVD and CloneDVD for several months. Why is this news? Seriously, not trolling here, but even the submitter mentions this and links to the original Slashdot article on it.
Because their software is open. Their developments are contributions to the pool of human knowledge. Slysoft's achievement is also deserving of praise, but they while they showed us it could be done (which most of us assumed), these developers showed us how.
Help stamp out iliturcy.
What? Cracking DRM has NOTHING to do with the 'analog hole'.
Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
What's to stop you putting that DRM-free file onto a 16 gram disc...
Or onto a memory stick for that matter...
Or a portable hard drive that will store a large number of movies...
DRM-free gives you a lot of freedom, you can do whatever suits you best, your choices are not taken away from you.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
Yes, look at the success of the ipod...
Does anyone still use portable CD players any more?
I doubt it, big clunky device with a spinning disc inside that skips the music when it's jolted too hard, and only stores 80 minutes of audio unless you carry around a big stack of equally clunky discs for it.
Compare that to an ipod or similar device, which can store hours of audio on a device little bigger than a credit card in some cases.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
I am proud of having been a contributor of the Doom9 forums. Go and pay you tribute: they demonstrated to the industry once again that DRM is a sick idea and will NEVER work.
P.S. Now I can go and buy a BD recorder. Just as I did with the first DVD Writer after deCSS.
Consider this. Is a DRM-free H.264/AAC mp4 file more convenient, or is a DRM-laden disc that you can play in your car, computer, PS3, portable system, or friend's house by carrying around a 16 gram disc?
Now there's a false dichotomy. Why can't we have a disc containing the DRM-free H.264 file?
"The content must contain sufficient information for the content to be decoded. Anything one software can do, another software can do (see Knuth, et seq)."
From the copy of "Beneath Apple DOS" (copyright 1981) that happens to be on my shelf, page B1;"It seems reasonable at this time to say that it is impossible to to protect a disk in such a way that it can't be broken. This is, in large part, due to the fact the diskette must be bootable; i.e. that it must contain at least one sector which can be read by the program in the PROM on the disk controller card. This means it is possible to trace the boot process by disassembling the normal sector or sectors that that must be on the disk."
So they have been flogging this dead horse for 27 years. High marks for persistence, low marks for, well, everything else.
if I break a disk and I like the film, I get a new one
You are exactly the kind of customer that all big movie and music companies would like every customer to be. DRM is a way to make that happen. That way, they can make customers pay for the same content multiple times, growing their profits by leaps and bounds. While you pay through your nose, they laugh all the way to the bank.
Anyone want to package this tool up with the PS3 mplayer vo driver for the PS3 Ubuntu Intrepid release?
--
make install -not war
It's more likely that we're nearing the end of this DRM nonsense forever. Finally! Or am I too optimistic of their intelligence? History does weigh heavily against my hopefulness here.
Intelligent or not, either they will cave to market pressures, or the format will vaporize and another will take its place.
And there are benefits to a pirating marketplace. I am one of those people who would never buy a movie, but would rent/copy if the means are available to do so, rather than download. By doing so I am supporting the format and at least paying a royalty. I don't want the box or any extra crap anyway, just the movie to put in a binder, so I'm saving the cost and waste of the packaging, which are the most expensive components to manufacture (printing the artwork is #1).
I don't see why they don't just authorize the copying of rentals. Suppose a movie rental generates 30-40% as much revenue as a movie purchase for movie studios and the format developer. The format developer gets another piece when I purchase the blank media to copy onto. The studios could compel rental companies to let them track rentals to form a database of consumer activity that could be sold to marketing companies. Distribution costs would also come way down. Add those revenues and savings together plus a small rental fee hike, and you end up with the same revenue as hard-copy purchases, all without stuffing landfills with unwanted discs and cases.
Also, by owning a playback device of the movie format, I become a welcome recipient of bought movies as gifts. Over the years I think I've been bought about 30 DVD's, more revenue they would never have gotten if I did not support the format.
Think about it. Did DVD reach its peak profitability before or after CSS was cracked? I believe I'm one of a large enough market segment that will never buy a Blu-Ray player until I have the means to copy them, nor will I upgrade to an HDTV until then. I bet a movie media format cannot survive without supporting us, and TV manufacturers should really get behind this.
War as we knew it was obsolete
Nothing could beat complete denial
- Emily Haines
>I don't know why the hacker community keeps bothering with breaking these DRM schemes.
It's an extremely rewarding intellectual pursuit. Some people do crosswords, some do pure math. Reverse-engineering, to me, is the pinnacle of engineering. The purest form.
There's never just one reason, nor one idea of whether or not it 'helps' the format (in this case), but you don't do it if you don't enjoy it, cause the pain (frustration) and suffering (hours and hours of tedious work) during the bad parts... you don't suffer through that if you don't get the high when you break through.
These DRM schemes especially are like challanges, calling you out. "Here's what we want you TO NOT DO.", nay, "Here's what you CAN'T DO."
Such challanges seldom go unanswered. It's human nature to answer the call.
(Good work, Oopho2ei et.al, I applaud you)
Belief is the currency of delusion.
The purpose of DRM isn't to stop copying altogether - it's to increase the difficulty to the point where the amount of copying is trivial.
... and you're going to claim success for DRM after this insightful observation?
Somebody will be along shortly to mod you funny.
Help stamp out iliturcy.
Second, you need to understand what the remedy is for a patent holder whose patent is violated. There are no "patent police" who go out and look for patent violators. Patent owners have to keep their own vigilance, and when they think their patent is being infringed the remedy is to sue the infringers. The result of such a suit is usually an injunction to force the infringer to stop selling his competing products. (Probably the most famous case of this was Polaroid v. Kodak, where Kodak was forced to abandon their entire line of Polaroid-like instant cameras, of which they had sold millions.)
Now bearing this in mind, exactly what would Sony or Fox or whoever get by suing Doom9? They aren't making money off of this, they just gave it away. Injunctions notwithstanding it's almost impossible to stop the dissemination of software whose authors have deliberately tried to make it available for free. There are no profits to seize, and any effort to show a dollar amount for damages would be very iffy. Patent infringement is not fraud and is not criminal, so there is no risk of anybody going to jail. All in all, there's not much the patent holder can do in this case except suck it up and go on to the next project.
Brackets contain world's first nanosig, highly magnified:[.]
For one thing, copying DVD's has been and continues to be incredibly trivial for anyone to do.
And so is downloading HD content from the Internet. And still far more people just drag their external HDD over to a friend's and sneaker net it home. It's quicker and more convenient. One day soon the common man will discover the mysteries of the VPN.
Some people collect lint. Some others collect video and audio content -- far more than they would ever use -- not because they really intend to enjoy it, but oddly enough because they enjoy the practice of collecting and cataloging it. Some of these folks like to show off their collections, share them, and have the latest thing that's not yet generally available.
Last, you mention 4TB NAS devices as if every home on the block has one. I can assure you they do not.
They sure keep a lot of them in stock at Walmart, Frys, Office Max, and every department store I've been in lately. I would think they wouldn't do that for such rapidly depreciating merchandise unless it was moving quickly. Do you have figures? Citation please.
Help stamp out iliturcy.
It's not just a river in Egypt
Help stamp out iliturcy.