Slashdot Mirror


Draconian DRM Revealed In Windows 7

TechForensics writes "A few days' testing of Windows 7 has already disclosed some draconian DRM, some of it unrelated to media files. A legitimate copy of Photoshop CS4 stopped functioning after we clobbered a nagging registration screen by replacing a DLL with a hacked version. With regard to media files, the days of capturing an audio program on your PC seem to be over (if the program originated on that PC). The inputs of your sound card are severely degraded in software if the card is also playing an audio program (tested here with Grooveshark). This may be the tip of the iceberg. Being in bed with the RIAA is bad enough, but locking your own files away from you is a tactic so outrageous it may kill the OS for many persons. Many users will not want to experiment with a second sound card or computer just to record from online sources, or boot up under a Linux that supports ntfs-3g just to control their files." Read on for more details of this user's findings.
Re — Photoshop: That Photoshop stopped functioning after we messed with one of its nag DLLs was not so much a surprise, but what was a surprise: Noting that Win7 allows programs like Photoshop to insert themselves stealthily into your firewall exception list. Further, that the OS allows large software vendors to penetrate your machine. Even further, that that permission is responsible for disabling of a program based on a modified DLL. And then finding that the OS even after reboot has locked you out of your own Local Settings folder; has denied you permission to move or delete the modified DLL; and refuses to allow the replacement of the Local Settings folder after it is unlocked with Unlocker to move it to the Desktop for examination (where it also denies you entry to your own folder). Setting permissions to 'allow everyone' was disabled!

Re — media: Under XP you could select 'Stereo Mix' or similar under audio recording inputs and nicely capture any program then playing. No longer.

5 of 1,127 comments (clear)

  1. This reeks of user error by Sc4Freak · · Score: 5, Interesting

    I suspect that the user upgraded to Win7 beta from XP - because ever since Vista there has been no "Local Settings" folder. In Vista, the old "Local Settings" folder which existed in XP was relocated to AppData\Local.

    In the location of the old Local Settings folder is an NTFS junction, which merely redirects to the new AppData\Local location. Windows Explorer doesn't handle these junctions correctly and instead of redirecting you, will erroneously give you an "Access Denied" message.

    Also, programs have always been able to insert themselves as exceptions into the Windows Firewall. Many applications which require internet access and which are blocked by the firewall will ask you if they can create a firewall exception for themselves. So programs have always been allowed to insert exceptions into the firewall - it's not a requirement that the program has to ask you first.

    If a program is already running on your computer then it means the firewall is no longer responsible for stopping that application in any way - the firewall only protects against outside threats.

    It's also far more likely that your modifications to the DLL broke something, which would explain why CS4 no longer worked. Why jump to the inane conclusion that Microsoft/Adobe are plotting against us all in some wild conspiracy?

  2. Unsourced FUD by Anonymous Coward · · Score: 5, Interesting

    A guy gets on here and makes a bunch of unsourced statements about MS and everyone laps them up like mother's milk.

    It's funny how the most recent scuttlebutt has been about how Windows 7 is really just Vista SP3 and is no different from Vista and boy isn't it amazing how MS just keeps putting out Vista with a different name.

    Yet apparently, this OS that is just another version of Vista is so radically different that it changes the very nature of hardware access.

    Fully aware that the Nazi's will mod this down into invisibility, but had to post it anyway, for pete's sake people, get a life.

  3. Re:Yes, and no. by Z34107 · · Score: 5, Interesting

    It seems that the problem was that Windows was cooperating with the app vendor to lock out such hacking attempts.

    No, it doesn't. It seems that the "hacked" DLL is broken. Or, at incompatible with how Photoshop is expecting to link with it. Or doesn't exactly mimic the expected entry points. Or doesn't initialize the same global variables correctly. Or is referenced differently by the Windows 7 kernel. Or did work through some black magic but is now broken through a new security model. Etc.

    DLLs are "dynamic link libraries." They're .lib files that live in memory and can be used by multiple programs simultaneously. Using them is relying on Windows to compile your program for you; change them at your peril. This is a Windows 95-era problem.

    But, more evidence that this article is unresearched garbage.

    And then finding that the OS even after reboot has locked you out of your own Local Settings folder ...

    Here's what actually happened. Open a command prompt under Windows 7 (doesn't even have to be an administrator command prompt) and navigate to your user profile. (C:\users\username). Type in dir a:l. Those of you following along at home will notice that Local Settings is a reparse point - the "real" location where all of these files reside is at AppData\Local. (They're similar to *nix hard links.)

    Vista (and evidently Windows 7) use reparse points to make sure legacy (or poorly-coded) programs don't break. Install a 32-bit program on 64-bit Windows and it will magically end up in Program Files (x86) instead of Program Files.

    There are security permissions associated with these. No 32-bit process will ever make it's way to the 64-bit Program Files folder even if Administrator with a capital-A Himself launched that process with his UAC-emblazoned blessing. The same thing is true for that Local Settings reparse point.

    So, why did his foray into Local Settings fail? Explorer.exe is supposed to know about AppData\Local and is barred from the legacy backdoor. Why couldn't he set privileges or take ownership or use his crappy Unlocker program? You can't take ownership/set privileges/whatever on a reparse point; that has to be done on the folder it links to. All of those actions would have succeeded (or have been unnecessary) on AppData\Local.

    Interestingly enough, the command prompt can use the Local Settings reparse point. Navigate to c:\users\username . The command cd Local Settings will succeed (even on a non-administrator command prompt.) The command mkdir loltest will succeed and show up in a directory listing. But double-clicking on the Local Settings "folder" in the Explorer shell will fail. But, the loltest folder will show up in AppData\Local even though it supposedly created inside Local Settings. I wonder why the command prompt use the Local Settings reparse point, but the shell can't.

    As for degraded record quality while playing back? I called it "crappy audio drivers" when Vista was first released. Lo, Creative fixed it, however slowly. Have faith, or turn down the sample rate in the control panel.

    --
    DATABASE WOW WOW
  4. Don't notice iTunes DRM? by ratboy666 · · Score: 5, Interesting

    True Apple Story -

    I bought my wife an iPhone. First Apple product I've purchased in a LONG time. Makes for a lovely phone -- but we can't access the "Apple Store" and also can't put media onto the device. We use Solaris and Linux.

    I get iTunes running under Wine, and sign up for the Apple Store. This allows my wife to buy from the Apple Store. Yeah!

    Now, my wife wants a case for the device. She purchases a case; all seems good for a couple of days. But... the phone begins to behave "oddly". It turns the screen off, but leaves calls connected, and other (more minor) ailments.

    We book an appointment to the Apple "Genius Bar". We are told we MUST attach the iPhone to a computer at least once; that the problem is the "old software". Ok, we explain that we have no computer capable. Answer: well, then use someone elses.. "Will you do it?". Answer: no.

    My wife works as a librarian -- she has a circulation desk computer with Windows XP. Downloads and installs iTunes, plugs in the iPhone, and is asked "Do you want to sync automatically or manually?". That's really it! She chose "manual", because she didn't want to put all of her personal photos on that computer. Bad mistake... "Are you sure you want to upgrade?" "Yes" --- and BOOM! All the data is GONE. Just... vaporized... She calls Apple Support "Oh, yes, that would happen; there is nothing that can be done".

    Miserable, miserable, miserable... Complete data destruction without even a "are you sure" dialog. And it's all iTunes fault. Why do we use it? DRM. The Apple iPhone databases CANNOT be updated without anything else. We have a perfectly servicable application (Amarok) that we use for playback, but it no longer works to load music. Gotta use that iTunes shitware. Even a self-booting DOS or Linux disk for updating, *or* a failsafe firmware updater...

    And, as a final added insult -- the Genius Bar was wrong. The problem was that the iPhone 3G requires specific cases, and the case being used was wrong (it was an iPhone case). Go figure. I'm still buying a "Mac Mini" as an accessory to the iPhone, but still -- this is what DRM does. Locks out people who could possibly do a better job of it.

    --
    Just another "Cubible(sic) Joe" 2 17 3061
  5. Re:Yes, and no. by dark_requiem · · Score: 5, Interesting

    Quick bit of research and I can probably tell you exactly why the dll wouldn't work. It was probably amtlib.dll, which is involved in activation, and either he's running 64 bit Photoshop, and he used the 32 bit hacked dll, or vice versa.

    That wasn't worth posting, and definitely isn't front page material. Screens, links, more than two paragraphs, any evidence or information at all? Clearly just an "Oh, shiny!" headline to catch the eye, but no substance.