Hack an Oscilloscope, Get a DMCA Take-Down Notice From Tektronix
An anonymous reader writes with the news that Hackaday published an article on the poor security of the add-on modules that Tektronix sells as expensive add-ons to unlock features in certain of its oscilloscopes. The reader writes: "It has come to attention of Tek's legal eagles and they now want the article to be taken down. Perhaps they can ask Google to forget that page?"
The car analogy:
"Owen says:
July 28, 2014 at 8:09 am
If you download the trial version of a piece of software you might also have to pay $500 to “de-cripple” features that are already present in the version you’ve got.
If you download a crack for it to unlock those features because the company didn’t make it difficult enough for people to get around their protection, that still doesn’t make it right.
I imagine Tektronix just rely on the fact that a lot of people that buy their expensive kit will be businesses and businesses generally have to do things by the book, so they won’t bother unlocking things they haven’t paid for, in the same way Adobe relies on business users to buy Photoshop and mostly overlooks all the home users not paying for it."
Since this is an abuse of the DMCA law Hack-a-day could have told Tektronics to go fuck themselves, but no ...
After receiving that DMCA notice Hack-a-day quickly changed the wording of the original article (without the permission of the original author, of course)
Using copyright to censor a hack which consist basically in explaining that the crippled features of the oscilloscope can be unlocked using the plain SKUs listed in the very own manufacturer page is a DCMA abuse.
No need when HAD instantly back down and alter the content of the page
Perhaps this is not intended, but a side benefit of DMCA is that the use of DMCA against a certain website will give indication of which site has backbone which site hasn't
HAD certain hasn't
Muchas Gracias, Señor Edward Snowden !
the article is safely stored in the wayback machine, and i have made a backup away from the reaches of the stupid DMCA.
yet another project ripe for the application of the streisand effect
Fear not, the original article is still available http://web.archive.org/web/201...
Have never like tek scopes that much, or Agilent. In fact my fav. Scopes are Yokogawa DLM series.
All the manufacturers do the cripple thing though. If you want free I2C or LIN or CAN or USB or UART, buy a PC scope like a CleverScope.
46137
It's an acronym for Digital Control My Ass, so you were right the first time.
My ism, it's full of beliefs.
Corporations are not people
but Solyent Green is.
My ism, it's full of beliefs.
The Google cache was taken down. The original author seems to have agreed to take down the information on his site as well, even without having been contacted him-self:
https://sites.google.com/site/...
However, they were too late. The web archive has already archived their pages. Here are the relevant links:
http://web.archive.org/web/201...
http://web.archive.org/web/201...
(not modified)
https://oshpark.com/profiles/m...
http://web.archive.org/web/201...
I'm not sure that the letter published qualifies as a DMCA takedown request, as it doesn't actually mention any part of the DMCA or any other copyright act that has been broken. I'm not sure that a short keyphrase constitutes copyright-protected matter, for one thing. And it's not like publishing the information violates the noncircumvention part of the Act, because they aren't circumventing an anticopying mechanism. They're circumventing a different mechanism entirely I suspect they're just trying their luck.
No kidding!!! What do you say at this point?
Tektronix is now owned by DANAHER corp. It is the same corp that bought Fluke and declared that nobody else can produce yellow DVMâ(TM)s. Remember the DVMs Sparkfun was importing but were seized at the border? Same company.
They gobble up good brands, and it seems the production is often sent overseas. Some folks say the quality of those great Amercian brands then suffers. Do a search and you'll see a long list of companies.
Because who bought their oscilloscopes is unlikely to have the expertise necessary to replicate this hack. It's not like they are people that work with digital electronics every day. I wonder what combination they use for their briefcase.
The DMCA doesn't mention DRM. It mentions somethign along the lines of mechanisms that prevent access to protected works (software can be a mechanism for the purposes of the act).
Personally I don't think this should qualify as infringement since it prevents use - which should not be a copyright violation - rather than duplication, but that's my opinion on what the law should be rather than what it would be when interpreted by the courts.
I agree with you, but the law has more or less been written to allow corporations to maximize profits.
In truth, I think the DMCA is so broadly written that if they had a default password of "password", their level of incompetence at security is irrelevant. What matters is they had a pretense of security.
In this case, they've locked out functionality which is already there, and are charging for access to it -- or it sounds like that.
I agree that it's your device and you should be able to do anything with it, but apparently publishing it so allow other people to not pay for already there features is a bad thing -- because it interferes with a shitty business model and involves a digital lock.
I think in general, people should just start posting reviews of Techtronix saying they're greedy bastards who sell crippled hardware and then charge ransom to unlock it.
Lost at C:>. Found at C.
A poor analogy. You would have to actually download the DLC files first, in almost all cases.
And he's not cracking encrypted data files, he's putting in a cheat code, which happens to be the name of the DLC, because the company are morons.
No kidding!!! What do you say at this point?
All of the manufacturers now ship devices fully kitted and use licenses to unlock/enable additional features. It's less expensive to manufacture one SKU, and then differentiate models by selectively enabling features.
At least one of the Chinese manufacturers has know about these hacks for quite a while and apparently isn't doing much about it. I expect that they are allowing this to obtain more market share from the hobbyists as I doubt most commercial operators would void warranties.
Tek is essentially selling a software package as a value add, and they'll charge what they can until Agilent/Keysight one ups them with less expansive software.
In the immortal words of Socrates, who said; 'I drank what?'
Ever read the Dictionary Act? You know, 1 US Code 1? It disagrees: http://www.law.cornell.edu/usc...
Help Brendan pay off his student loans
I disagree.
To me, they've sold you a fully functional product, and only for extra money will they 'license' you to use all of the features.
So, imagine you've bought a car, it's got an awesome radio and a turbo charger and a backup camera. They're hooked up and working, just not active unless you shell out a bunch more money.
This is saying we'll give you the rest of the functionality of the device we've sold you if you'll hand over more money.
This is intentionally making a crippled product, and then gouging your consumers to get the full version.
I see this as just rent seeking, and a business model based on upgrades.
I don't see this as legitimate business, I see it as gouging the consumer and getting found out that your "upgrades" are doing nothing more than unlocking functionality you already have.
Lost at C:>. Found at C.
Yes. You may be able to guess the password, but based on the "reasonable man" test, I think most people would assume that you weren't meant to guess it. I don't have a problem with this in principle. I do have a problem that it seems to allow companies to extend the reach of copyright.
My way of seeing it is that anyone who buys the oscilloscope has a legally acquired copy of the software. They just can't access it. Actually accessing legally acquired software should not be illegal. It's not like there's a business model that would be unsustainable without the protection. If they don't want people to use the software, then don't give them the software. If they pay extra then provide the software.
I agree with your desscription of it being "crippled". This is essentially a law criminalising repair. In the physical world, if I were to sell off faulty stock (which is legitimate as long as I was honest about the fact that it was faulty), I would not be able to use the law to prevent them from repairing it, even if the buyer was competing with my repair business.
Back in the day, a lot of manufacturers sold different types of VHS recorders, some with more "features" than others. It turned out that all the "buttons" were there behind the plastic faceplate, and it was just the faceplate itself that determined which were the cheap/feature-less models and which were the more expensive models.
And of course, simply prying off the plastic revealed the extra features.
So, back in the day, would that be a DMCA violation? Would that be theft? Would the IP police be busting down my door and holding a gun to my head for removing a piece of plastic???
'Cause that's what we're headed towards, boys and girls.
If telephones are outlawed, then only outlaws will have telephones.
Old tube scopes turned on faster than the shitty new ones from Techtronix
In my company, one of our products comes with a useful database. The license clearly stipulates that the database and its updates are only allowed to be used with the product. It is a kind of courtesy to make that product more user friendly. For integration into big central systems the database is available separately with different licensing schemes. Predictably, in the end we had to encrypt the database to enforce compliance, as too many customers (it must be said: less so in western countries) would not care to follow the license. Just because you technically can do something, doesn't make it right, esp. if it is not allowed according to the license.
So if Chrysler sold a car without working air-con and without a working stereo, but if you pay $3000 they will enable them, and then someone discovers that the technological measure is they don't put a fuse in the fuse box, and then you stick a fuse in there, is that a technological measure protected by the DMCA?
It varies from person to person....
Is it weird in here, or is it just me?
This is unfortunately an old practice that has been going on for decades.
I bought a US made digital scope over a decade ago the TDS220. With it I bought the communications module providing serial RS232, Parallel centronics, and HPGIB interfaces. With it I could connect an HP Laser printer, or Epson Dot Matrix printer and produce hard copies with a limited library of printers. Ths goal was to print to my PC. Then I found out that capibility was bundled in an expensive software package which was extra. Due to my low volume, I could not justify the expense, so to post documentation online, I used an HP 1100 laser printer and a Cannon flatbed scanner.
Tecktronics did not offer a simple driver just to capture the image on a PC.
Needless to say, that was the last Tektronics scope I purchased. Any future purchases would include a built in USB interface, with nessarry software as part of the TCO when shopping. I won't be burned twice by the batteries not included sales games.
As a scope, the scope works fine as long as you don't want a screenshot directly transferred to a PC. For what I paid to obtain the communications module without any communicaitons software was a huge letdown. The printer module was only a little cheaper. Without the software, that is all this module can be used for. Let the buyer beware.
If you want to buy Made in America, the Americans need to knock off selling cripple ware. It is a bad model and is a huge customer turn off.
The truth shall set you free!
My way of seeing it is that anyone who buys the oscilloscope has a legally acquired copy of the software. They just can't access it. Actually accessing legally acquired software should not be illegal. It's not like there's a business model that would be unsustainable without the protection. If they don't want people to use the software, then don't give them the software. If they pay extra then provide the software.
Exactly this!
I have personally used the MSO series of 'scopes. And I am certain that there wasn't a EULA that I had to click-through when the scope first powered-up. I'm sure there is one along with the Warranty and other info; but, I am pretty certain that, under the "Shrink Wrap" Licensing precedents, I would have not "signed" anything simply by using the 'scope, anymore than I agree to licensing of the applications that are embedded in my TV set, simply by turning it on.
So long as you are not creating a "Derivative Work", nor "Reselling" that firmware, there simply is no Copyright issue here. Tek is DEFINITELY abusing the DMCA here, as well as simply trying to cover-up for a sloppy attempt at what is nothing more than a cost-saving measure.
In fact, they would have had a much more defensible position if they took Hackaday to court for "circumventing security measures of a computing device" (or however that bit is worded in 18 USC...?). But DMCA "Takedown Notices" are hardly EVER challenged, and take only a lawyer-letter with scary language.
On one hand, some people might say they paid a huge amount of money for a product that had this (locked) functionality built in, and they have the right to hack it. On another, it's not a trivial amount of effort to write the software that does the analysis, so I could see why a company wants to protect its intellectual property. Otherwise, why would they bother? They would have to ship the device at a higher price to cover the cost of developing the features.
I think the solution here is for the companies to implement reasonable security. Cisco is famous (at least lately) for shipping crippled hardware that is fully capable of performing the functions that are unlocked by various licenses. They implement it as a soft key that ties in with the device serial number (i.e. pay your money, go online to Cisco, give them the license code and your serial number, and they give back another code to enter into the device. And presto, instant feature. Another example I have right here at work is an IBM DS3500 disk array. There are feature keys for everything -- volume snapshots, remote copy, SSD support, increased number of hosts, and a very mysterious, strangely named "Turbo Performance" option [1]. So this is nothing new -- my disk array is running the base configuration and I'm fully aware the controllers in it are shipped with these capabilities. It's weird having to buy $10K pieces of paper, but I see why they do it.
It seems like Tektronix was relying on security through obscurity and they assumed no one would try to build hardware keys to work around their feature protection. HP recently did something similar with the ProLiant and Integrity server line that Oracle/Sun did a while back -- they simply stated that no firmware upgrades would be available on their machines without a warranty or service contract. As someone why buys old hardware for fun, it makes it difficult to get it to the last firmware that HP released for it. But, fixing firmware isn't free, so there's that angle as well. I think the HP/Sun/Oracle stuff is aimed more at forcing you to buy service from them, so it's a little different.
[1] Side note - even the reseller who sold us the device couldn't tell us what Turbo Performance did. After a lot of digging, I figured out that this option is used when you add tons of disk shelves to the array, and it lifts an artificial performance cap on the controllers.
> IANAL
If you were a lawyer, you might start by reading the law (statute). ... ... extend to any idea, procedure, process, system, method of operation, concept, principle, or discovery
102 . Subject matter of copyright: In general
b) In no case does copyright protection
from http://www.copyright.gov/title...
Also 499 U.S. 340, 345 "[n]o author may copyright his ideas or the facts he narrates."
If the wording of the statutes are unclear, you would look at how the court has interpreted it. Feist v Rural was a Supreme Court case in which someone made an unauthorized copy of somebody else's phone directory. A list of phone numbers is simply facts, not a work of original authorship, the defendant claimed, and the court agreed.
http://en.wikipedia.org/wiki/F...
The court ruled "In no event may copyright extend to the facts themselves".
http://caselaw.lp.findlaw.com/...
However, the information is itself a DMCA violation, in that it explains how to circumvent a technical protection scheme. This doesn't look like a DMCA takedown notice to me, but an invocation of what I consider one of the really bad parts of the DMCA. The DMCA takedown system is not well understood, and is controversial, but it's by far the best part of the act.
Note: I'm not a lawyer. Anybody relying on what I say without consulting a real lawyer is a doo-doo head, and deserves what he or she gets.
"When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
Yeah, this is basically the same deal from the early 2000's where people could use a pencil to allow overclocking on a few AMD chips. I don't recall AMD issuing take-downs, or suing anyone for distributing said trick.
If you decide as a company to intentionally gimp products to create price differentiation, expect people to find workarounds. You are creating 'value' out of thin air at the expense of the customer. They are simply taking it back.
In short; whine less, figure out better ways to increase revenue, and don't be a dick to your customers.