HDCP Master Key Is Legitimate; Blu-ray Is Cracked
adeelarshad82 writes "Intel has confirmed that the leaked HDCP master key protecting millions of Blu-ray discs and devices that was posted to the Web this week is legitimate. The disclosure means, in effect, that all Blu-ray discs can now be unlocked and copied. HDCP (High Definition Content Protection), which was created by Intel and is administered by Digital Content Protection LLP, is the content encryption scheme that protects data, typically movies, as they pass across a DVI or an HDMI cable. According to an Intel official, the most likely scenario for a hacker would be to create a computer chip with the master key embedded it, that could be used to decode Blu-ray discs."
It restricts data. It restricts my rights. It does not protect anything.
A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
http://www.engadget.com/2010/09/16/confirmed-intel-says-hdcp-master-key-crack-is-real/ /.'d)
(original article
"For someone to use this information to unlock anything, they would have to implement it in silicon -- make a computer chip," Waldrop told Fox News, and that chip would have to live on a dedicated piece of hardware -- something Intel doesn't think is likely to happen in any substantial way.
I think we've got a new challenge here! Props to the first person to post an easy hardware/software system for intercepting and decoding HDTV signals.
So you record the stream from the player to the display. No big difference.
Did they honestly expect that no one would get a hold of the key, reverse engineer it, or even just brute force it - when will they realize that locks only keep honest and unmotivated people out.
Now I'm finally willing to invest in purchasing Blu-Ray movies. Now that I can archive them to protect from wear and tear.
No hacker is going to give a crap about this. It's so much easier to just rip the data directly from the disk. Plus, anyone in their right minds is usually going to just get the DVD anyways if they are going rip it. Likely going to downsample it anyways since the full resolution file is obnoxiously large. All this realistically would allow for is for people to make an HDMI to Component conversion box which is one of those DMCA grey zones. The underlying technologies of DVD & Blue Ray encryptions were compromised ages ago.
Now we all need to buy new TVs and Blu-Ray players with HDCP2 support. You fuckers should have just caved and got a new 3D TV when they were trying to drive uptake the polite way.
It's the difference between copying an unmodified MPEG (or VC1) stream at whatever rate your machine can muster, or recording the uncompressed output of such a stream at no faster than real-time.
The former is lossless, smallish, and fast. The latter is lossless only if you can keep up with and store the intense datarate, or is lossy if you recompress it, and it always takes as long to record as the playing-length of the source.
Big differences. Huge, giant, overwhelming differences, in fact.
Kid-proof tablet..
Lies, deceit.
Since HDMI can transfer up to 10.2 gigabits per second of data, I don't think these "perfect digital copies" are going to be made any time soon. 1920x1080x60 + 8 channels of uncompressed audio == lots of bandwidth. More than anyone, currently, wants to store -- it'd be cheaper to buy the movie than buy the storage for a copy of it it, in the case of a direct HDMI lossless rip. And nevermind actually achieving these datarates on any commonly-available storage medium.
Unless, of course, the copies get compressed with something. And then, plainly, they're not perfect anymore.
Kid-proof tablet..
A strongly worded opinion. Well written, with references and links. It's not even a controversial topic, From what I see this is rather a majority opinion on slashdot.
Who the hell modded this flamebait?
j'ai découvert une démonstration vraiment admirable (de ce théorème général) que cette si
You know and I know, this is primarily a tool for piracy.
No, it's primarily a tool. How you use it is up to the user.
Much like a gun is a tool. You can use it for target practice, hunting, home defense - and murder. The tool doesn't get to decide how it is used. The user does. The tool is blameless.
Another point. Most people aren't pirates, and most of the people "content protection" screws with are the paying customers. It absolutely is about rights. You buy it - you own it. That's how it used to be. Now the industry is trying to change that. It is important to let those people know they are selling snake oil. That's how I see this event. It's not about a BluRay player for Linux, it's not about piracy. It's about stopping snake oil salesmen from infringing on our rights with these increasingly bogus copy protection schemes.
That's why I love watching things like this happen. I love it when people who are clearly in the wrong (both philosophically and mathematically) get called on their hubris. It fills me with joy.
Weaselmancer
rediculous.
It's the difference between copying an unmodified MPEG (or VC1) stream at whatever rate your machine can muster, or recording the uncompressed output of such a stream at no faster than real-time.
The former is lossless, smallish, and fast. The latter is lossless only if you can keep up with and store the intense datarate, or is lossy if you recompress it, and it always takes as long to record as the playing-length of the source.
Big differences. Huge, giant, overwhelming differences, in fact.
Maybe I'm missing something here. It seems to me that you don't need to re-encode the huge data stream on-the-fly. The only thing you have really have to do in real-time is buffer the raw data stream to some persistent storage. After that, you can re-encode it however you like at your leisure.
I'm too tired to do the math and calculate how much storage a full Blu-Ray disc stream would require. Whatever it is, though, It only takes one guy with a hard disk array and an Internet connection and the media's toast.
This does open the way for a way around older highres LCDs not being hdcp compliant.
All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
It has already been done, there were HDCP exploits before AACS was cracked which allowed people with DVI/HDMI input cards to make perfect digital copies for reencodes. It took a quite hefty raid array and hundreds of GB of space - and the input cards were rare and expensive too, but it could be done and was done. Or so I read about on a forum I visited ;)
Live today, because you never know what tomorrow brings
They've already had trouble selling HD technology. Were they to just invalidate everything and declare you had to buy new stuff this would not only lead to lawsuits, but just difficulty on the consumer market. If someone already has their TV and Blu-ray player they aren't going to rush out and buy a new one. The content producres will release for what people have, or they'll get no business, thus they'll keep making older formats.
You might notice that DVDs aren't gone, nor for that matter are CDs. The media industry loved the DVD-Audio idea because they had better protection (CPPM) and of course CDs had none. Problem was they couldn't move DVD-A players. Very few people outside of audiophiles bought them. As such the content kept being produced for CD because it was that or have almost no sales.
As I said, Blu-ray is proving to be somewhat of a hard sell as it is, since all it offers is a better picture (DVD offered a ton of better features). If they just said "Nope, you have to buy all new hardware," it would be a total non-starter. People wouldn't buy the HDCP2 players, since they'd have HDCP1 TVs and they'd want them to work. Thus electronics companies wouldn't be interested in selling HDCP2 players. Since people wouldn't have HDCP2 players, you couldn't make discs require HDCP2 or nobody could play them.
Things can be forced on consumers only in certain circumstances. All the encryption on Blu-ray worked because nobody really noticed, it was just a part of the format. Likewise HDCP wasn't something most people encountered problems with only the early adopters got fucked. However you now have a massive installed base of HDCP TVs, and growing every day. Try to screw that over and it just won't work. Your shit won't sell and if it won't sell, companies will stop making it.
It seems to me that many media companies are in denial about a simple fact--you can't share a secret with a million people and expect them to keep it.
Want to send your account password to your bank? One sender, one trusted recipient, and a world of potential eavesdroppers. That's a problem crypto can solve.
But if the final destination of your precious content is every Joe's TV, iPod, and computer screen, any "encryption" you have between here and there is fundamentally futile. It only takes one of those Joes to start seeding it on BitTorrent, and the more annoying you try make the DRM, the more likely people will be to simply use that as their source instead of paying you.
Besides, after all that work designing and implementing a complex DRM scheme, every single frame of that movie you just sold me is gonna be rendered to my computer's framebuffer. Which gets sent to the display driver. Which is... drumroll... whatever I felt like installing. In theory, I can make my own driver that writes an AVI. So even in theory, DRM is broken.
It's the same kind of denial that leads companies to think streaming video is meaningfully different from just giving me a file to download. If you're sending the bits to my computer, you cannot possibly control what I subsequently do with them.
IMO, the RIAA could make so much more money if they just accepted filesharing as fact and focused on monetizing it. They should look at the bright side--way more people are listening to way more music now than they did back in the day when songs came in plastic cartridges and brick-sized Walkmen roamed the earth. Organize some shows. Sell some merchandise. Sell me a DVD that has awesome-quality 24K soundfiles on it. Get your song on the next Rock Band.
A couple of weeks ago, I went to Lollapalooza 2010. It was awesome, worth every penny of the $180 I paid. How did I decide to go? I found a bunch of the lesser-known artists on Youtube, and liked what I saw. They earned their cash. The record execs, trying to prop an obsolete business model with lawsuits, did not.
No it doesn't. You're still making a choice to break the law.
Coercion is not a choice.
An unjust law is a crime unto itself. There is no doubt that the DMCA is an unjust law. The complete ban on breaking encryption is just plain wrong and is a product of lawmakers not understanding technology.
Good-bye
No he isn’t. He’s being forced to go to extreme lengths to exercise his fair use.
Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
Hint: the DMCA exception clauses allow for bypassing restrictions for the purpose of interoperability, which is exactly what you're doing. Your actions are 100% legal, per the DMCA itself. :)
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
Somewhere, right now, in a corporate office somewhere, the wrong heads are rolling.
and it always takes as long to record as the playing-length of the source.
Judging by this I take it you haven't ever encoded a x264 file before. If it could be done in real time frankly I'd be quite happy. Given how it takes about 8+ hours on my quad core machine for 1h of 1080p footage I don't think you'll hear anyone complain.
Content protection ONLY "screws" people who have the content legitimately.
A copyright violator isn't "screwed" by not having access to something they haven't got the right to. The only people who can get screwed are the people who parted with money and may be unable to use the product in a legal, desired way.
Once it gets past the paying customers, the content protection has been removed anyway.
(By the way, I originally wrote "owners" in the title but corrected myself...)
Help! Help! I'm being repressed!
Right. The motion picture industry is now doomed to quickly go bankrupt and shut down, just like the fashion industry, which has no copyright protection whatsoever, did. Oh wait...
I've abandoned my search for truth; now I'm just looking for some useful delusions.
It matters for those of us making legitimate backups of our optical media libraries.
-1 raving lunatic; +6 subGenius... Things even out...
"Introducing the new SUPER HD format! We know your 40 year old eyes that need glasses can't tell the difference, but we need to implement a new copy protection scheme, so you all need to rebuy your movie collection on new hardware. Don't need new hardware you say? You do now! We just sent the bricking code to your system when it called home!"
I used to think the future would be all awesome and shiny and utopian. So far I've been dead fucking wrong, so now I'm erring on the side of "extremely cynical and jaded".
15K disks don't provide high sequential throughput. Their high rotational speed is offset by reduced density and platter diameter. Their purpose is to provide low latency for more random access.
Right, now all I need is for someone to build a complete HDCP stripper, emulate/strip BD+ completely, supply cheap BD-R/RW drives and media, give me a few cheap HDMI cables, a new "HD-ready" TV, and a free voucher for the BluRay version of every movie that I already "own" on DVD and I'm ready to join the HD era.
Hell, I still can't see the extra pixels at my comfortable viewing distance (so I "must be blind"), but I have to get with technology apparently. Apparently my 1440x900x32-bit display, fed via a VGA cable, or SCART, or composite, is "obsolete" and not as good quality as me having a digital cable, despite decades of viewing to the contrary. Apparently being able to watch *anything*, not having to worry about where I bought the disk, not having to fight with new cabling that does a lesser job of simply putting some images on my screen, and being able to backup all my movies is "old-hat". Oh, and I have to pay an extra X amount per month, plus new decoder hardware, in order for them to send me a slightly higher quality signal down my aerial/satellite dish/cable. In the case of FreeView, that means second-generation hardware too. Not wanting that apparently makes me "cheap".
I don't own Blu-ray hardware, don't own "HD ready" kit, and I don't miss it. My normal computer monitors have been "HD" for decades, you just want to add fancy definitions and restrictions so that it's "Movie Industry HD" instead of "HD". When you solve these problems, you'll see the boom in HD adoption that you are desperately hoping for.
Movie companies: The deal in the past was always "I give you about £20, you let me watch that movie wherever I take the disc/tape, on whatever hardware I want, and I promise not to copy it". That sufficed for about 40 years. If you're not willing to keep up your end of the bargain any more, then I won't keep up mine. My morals and job require me not to break the last promise, so I just won't give you the £20 (which is creeping closer to £40 now) OR watch your movie. Deal? Last time I went to the cinema was over a year ago, and that was because I was passing, was bored, was with someone and we needed to fill a few hours until the restaurant opened. The movie we saw was a heap of crap but wasted a few hours. I can't even *name* any movies that come out in 2010. I don't feel I've missed out, though.
People are confusing this master key that breaks HDCP, saying it can help decrypt Blu-Ray discs. That's not the case: Blu-Ray is encrypted with AACS, which has a similar concept of device keys derived by a master key. AACS has a mechanism of revoking compromised device keys. Getting the AACS master key would bypass that mechanism, and would be great news.
This key isn't the AACS master key This is an HDCP key, which would allow one to create a "unauthorized" device that can connect to HDCP-encrypted HDMI and succesfully decrypt the HD stream.
HDCP has been known to be nearly broken since 2001, in that obtaining the device keys of 40-50 devices is enough to calculate the master key.
Misleading titles? Inflammatory blurbs? Keep in mind that Slashdot is a tabloid.
Intel is manning up and admitting that something terrible just happened. It is the smart thing to do. If they had hemmed and hawed and delayed admitting the key was genuine then all their customers who had bought in on this DRM scheme would have gotten pissed off and felt jerked around.
Look at the metric shitload of bad press BP got when they tried to lie and evade regarding their recent oil leak. I believe the people responsible for that are no longer with the company.
It is interesting that someone would question why on Earth Intel would step up and do the right thing that will be best for the company in the coming weeks and months. I think this is because we have come to expect large corporations to act with all the integrity and intelligence of a retarded dinosaur after it has had its brains knocked out by a piece of asteroid shrapnel. Apparently real engineers continue to work at Intel and for some unknown reason, at least one of was placed in a position of authority.
We don't see the world as it is, we see it as we are.
-- Anais Nin
>But your work in someone else's hands, given validly cannot.
>Unless government get involved in what you do with your stuff in your home in private.
In your fantasy world, if I lend my buddy a lawnmower and he never gives it back, I should have no legal recourse.
It's always a long day... 86400 doesn't fit into a short.
Once we start talking about parallel imports, we have a problem. Intellectual property is only as valuable as the customer is willing to pay. But at the same time, it has base costs. If we talk about academic textbooks, the customer in India, Kenya or Peru is not willing or capable of paying as much as the customer in the US or the UK. So we cut the price in their region so that they can afford it, and this gives them access to education. If import protections didn't exist, the publishers would have a straight choice between losing their developed-world profits by selling at developing-world rates, or losing their developing-world profits by selling at developed-world rates. The big money's in the developed word, so if we were to ban import protection on IP works, education in the developing world would suffer.
Of course, the opposite is true in the case of Hollywood cr*p -- if that wasn't available, education would improve, but you've got to take the rough with the smooth.
HAL.
Got them moderator blues I blieve I walk out the do', With these mod-points I been gettin', I 'most never post no mo'
I don't have a blue-ray player yet, so this is just about DVDs for me.
I rip the DVDs I own because so many of the DVDs are filled with tons of crap that frequently you are not allowed to skip through or over. Commercials. FBI warnings. And frequently, many of the main menus are actually a little animated "movie" before it "solidifies" into the actual menu, and you have to wait for it to finish doing its song and dance before you can hit play.
It's easier to rip the content to a hard drive, and then when I sit down to watch a movie it goes straight to the movie.
Another thing that's great about ripping movies, especially children movies, is I can set up a play list on the computer and let it go all day long for the kids, without having to stop what I'm doing to change out discs.
Before people freak out about the "all day long" we only let our kids watch TV on the weekends, and seldom do they actually watch the TV all day long.
A work that expires before its copyright never enters the public domain and thus enjoys eternal copyright protection.