Slashdot Mirror
'First Pirated Ultra HD Blu-Ray Disk' Appears Online (torrentfreak.com)
Has AACS 2.0 encryption used to protect UHD Blu-ray discs been cracked? While the details are scarce, a cracked copy of a UHD Blu-ray disc surfaced on the HD-focused BitTorrent tracker UltraHDclub. TorrentFreak reports: The torrent in question is a copy of the Smurfs 2 film and is tagged "The Smurfs 2 (2013) 2160p UHD Blu-ray HEVC Atmos 7.1-THRONE." This suggests that AACS 2.0 may have been "cracked" although there are no further technical details provided at this point. UltraHDclub is proud of the release, though, and boasts of having the "First Ultra HD Blu-ray Disc in the NET!" Those who want to get their hands on a copy of the file have to be patient though. Provided that they have access to the private tracker, it will take a while to download the entire 53.30 GB disk. TorrentFreak reached out to both the uploader of the torrent and an admin at the site hoping to find out more, but thus far we have yet to hear back. From the details provided, the copy appears to be the real deal although not everyone agrees.
How quaint.
Of all the things they could choose to crack, the chose Smurfs 2. That's hilarious.
So, these guys are some of the smartest hackers / rippers on the planet. They're the first to break a widely sought-after protection scheme.
And their first accomplishment is to release The Smurfs 2?
Of course the alternative to AACS 2.0 being cracked is that someone accessed the video pre-encryption. This could have been an inside job at the studio/production companies, or they could have been hacked.
Have all new movies streamed on a network to a secure consumer box that can be updated as needed.
No more disk issues. No internet, no movie. Order the movie overnight for next day playback on slow networks.
Recall the disks and release the disk released movies on streaming services only.
Domestic spying is now "Benign Information Gathering"
Using the decoders as intended and either getting an HDMI splitter/converter that can bypass the re-encrypting/authorization step, or a device which can be hacked to allow memory dumps as it runs and the whole DRM technique falls down, entirely independent of actually finding a way to crack the AACS 2.0 encryption scheme.
Doing the latter would be much more useful however, since vlc has libbluray to support bluray playback. *HOWEVER* it uses a database of previously 'cracked' session keys to allow decoding the Bluray discs, meaning if a disc has not already had the key extracted on a 'compromised' device, libbluray can't actually convince the bluray player to extract the key and decode the disc for it.
It'd take a week to download that here in Australia.
To know that you know what you know, and that you do not know what you do not know, that is true wisdom. --Scooby Doo
Slashdot is broken in multiple ways.
The mobile site doesn't display at all in Firefox. The page source shows that content was served, but it's broken enough to not display anything at all. There are features of the desktop interface, like the sliders to change comment thresholds, that simply aren't usable for mobile users.
On the desktop interface, links to older stories or to show all the stories on a previous day do not work at all. Instead, the front page is served up with the most recent stories.
All of these have been broken for several hours, and there are comments about it two stories ago. If there are issues with the server, the right thing is usually to notify users that there's a problem and it's being addressed. Nothing of the sort has been posted. I can't think of any good reason to test out changes on a production site.
If you're reading this, whipslash, this is a really bad experience for your users. Of course, you've made space to cram in more ads on comment pages, so all is well, right? Perhaps you should focus on building real value to this site instead of cramming in more ads to increase revenue in the short term. If you piss off enough users, that revenue will dry up in the longer term.
"mothersmurfer!"
From the past, we've seen plenty of linkages between 'software players' being hacked (i.e. encryption keys being grabbed from RAM) and encryption hacks. Perhaps it has to do with the recent release of the first software player being able to play UHD BD on PCs?
When the copyright term is "forever minus a day", live every day like it's the last.
that it was uploaded from an IP tied to an employee or officer of the MPAA?
... it's a blocky 320 x 200 animated gif converted to "UHD".
1. Give users hundreds of millions of decryption devices.
2. Distribute hundreds of millions of copies of multiple different encrypted messages where the plaintext unencrypted message is known.
Encryption is properly used to send a private message where someone who isn't the intended recipient of the message can't see the plaintext unencrypted message.
Actually publishing encrypted data with a known plaintext unencrypted counterpart? Then distributing hundreds of millions of decryption devices?
Yeah, not gonna work.
...how to get a high quality torrent without the disk in the first place? Definitely not from the low quality stream.
I haven't been to this particular tracker but can guarantee most regulars will have seedboxes. The original seeder included. Any member of the site will probably be able to have it on their home computer within a couple of hours. Gone are the days of spending up to a week just to download a 700mb avi.
"...it will take a while to download the entire 53.30 GB disk"
It'll sure be a bitch to split it and burn it onto 78 CD-RW discs but less of a bitch for 7 DVD-RW discs.
DRM and Copy Protection are useless against the greatest hacking minds of the internet. Its pointless to spend money on these technologies. There are other ways to protect content and insulate profits. Ways that are far more effective. The Steam approach of LightDRM has worked better than most others, and even Kid-Gloving Infringers has had moderate success. Bugging the game, or gimping the difficulties or weapons has also been very effective for some studios. DRM is intrusive to the people who BUY the game, and typically does NOT interfere with the hacker community at large, who will just strip off the DRM and play the game with a much more streamlined experience than most DRM providers can typically offer. DRM, or at least the current DRM approach, is dead. New methods should be investigated and tested. We all know that these people deserve to be paid for their work. DRM just makes everything cost more. A lose Lose for Devs and Gamers!
This torrent appears to be the actual disc itself -- .m2ts files and BDMV\STREAM directory etc. It looks like the full 72.5 Mb/s source movie at the identical quality as the retail UHD disc, minus the DRM -- you could burn this puppy back to a UHD disc and play it on your player (assuming the player will play these UHD discs without DRM), or, more likely, use your favorite software player. Or, you could use Handbrake and compress it to the bitrate and container of your choice. But it looks like the real deal.
Really???? This is too much.
https://www.totalresumes.com.au/
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 is my guess.
UHD Blu Ray uses HEVC, so it technically is highly compressed video. Judging by the typical HEVC encoding, I'd say uncompressed would be ~600GB or more.
For the mere price of $8.49 you can purchase a legit copy from Amazon. While the technical feat is impressive, I think we would all be better off if people stopped being cheap and just purchased media.
just make shitty movies that arent worth pirating. Brilliant!
Blu-Smurfs?
> This will last until people can't tell the difference between a format's video and their natural vision.
I predict it'll last much longer than that. Consider the audiophile scene. People spend hundreds, even thousands of dollars on simple cables for digital, when it can be easily proven that any non-cable will deliver bit-for-bit identical data. They insist on clearly reproducing frequencies four times as high as they can hear.
Ok, let's be clear on something. No matters how perfect your protection is, if it's on my screen, I can record it. I can output the signal and the audio on a HD recorder and there's no protection that will protect you from that.
Now, to my point, why the pirate even bother to pirate this encoding? I mean, why would I pirate the BlueRay image full of ads and pointless menu when I can download a perfectly fine and cleaned .AVI with all the Subtitles/Audio integrated?
Or am I missing something?
Elok
I really wonder why they mandated new drives for the UHD BD spec, when HVEC is much smaller than H264 anyway it could easily fit on dual layer BDs...
Systems like PS4 Pro (or even PS4 since it can do 4k at 30/24Hz) could easily play them if it weren't for the drive requirement
Twinstiq, game news
Bring back kernel releases and stories about SCO!!!!
mkv and mp4 are containers, not video formats.
UHD Blu Ray uses HEVC, so it technically is highly compressed video. Judging by the typical HEVC encoding, I'd say uncompressed would be ~600GB or more.
At least this is one application where HEVC really makes sense.
I really hate when I download a torrent of Blu-Ray or even DVD quality and it's encoded in HEVC. I have older devices that handle mpeg4/x264 like a champ but they really choke on HEVC because they don't have hardware decoding support for HEVC/x265. I mean, x264 is the *native format* of Blu-Ray, why re-encode it like that? At DVD, 720p, and 1080p resolutions the file size difference is negligible. If there were a big file size difference I could at least understand it.
I mean this is the torrent scene so I'm not exactly going to demand a refund, but the observation that some people go very much out of their way to do things that make no damned sense, it just blows my mind.
Having had a kid's DVD become unreadable the other day, not having been able to take a backup of it because of the "let's break the DVD in subtle ways so it can't be ripped, but can be played" scheme, I welcome anyone who cracks down on these stupid schemes.
If there was a Kickstarter or similar funding scheme, I'd donate to it (well, perhaps checking the local laws first).
For now, I've resorted to never again buying a DVD from that publisher again.
Yes, I could buy a streaming solution, but, and this surprises me, a couple of similar incidents over the past years, have made me realize that for things I do care about, and I probably care about these kid's movies for the next 5-10 years, it's better if I own the media myself.
I do have a Magnatune subscription, because I feel I can trust those people, but I'd never trust someone in the cahoots with the big media corporations.
If all you care about is extracting the audio and video from a disc, it's not hard, provided you have the right equipment.
You can go the analog way and use expensive equipment to sample every pixel that appears on your screen as it plays.
You can go the digital way and disassemble your TV and monitor the signals that go to each LED in the display as the disk plays.
Audio capture is trivial by comparison.
Sure, it's expensive, but I'm sure there are several commericial-scale pirates that either have equipment like this or they could get it or make it themselves if they wanted to.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
It is displayed on a screen? so just framegrab this. Your BD player is plugged via HDMI to your TV, all the DHCP stuff is handled there and it's ok, there in the TV the signal is converted to LVDS and there is a big flat ribbon that goes to the LCD matrix. Just here, insert a smal PCB that have a t-con in (and t-con out if you want to see what you will grab), on the PCB there is an FPGA and enough RAM to have 2 frames in memory (~16MB for 1080p), every clock time export the last frame to a PC via a pci-express card, while the new frame is being filled in memory (double buffering). On the PC feed the frame to an encoder like ffmpeg and you have your video.
"Science will win because it works." - Stephen Hawking
The extra colour and dynamic range with 4k, and even more so with 8k is really nice, but to get much out of it you need a dimly lit room and a TV capable of reproducing it.
Similarly with audio you need a dedicated room and to then sit in the sweet spot while listening.
Huh... nope. 8k and 10bits colour isn't the equivalent to 200$ monster digital cables and 192kHz sample rate.
- Ears have some physiological limits due to how physics work (your ears can hear very approx in the 20-20'000Hz range. your body can also feel vibrations in the 1-100Hz. There's no receptor in a human body capable of reacting to 90kHz).
- Physics of digital signals, and a whole bunch of signal processing science (e.g.: error correction) means that in the digital world, sometime a bit is just a bit, no matter the concentration of gold and diamond powder (sic!) in the cabling it goes through.
No matter the dedicated audio room you're sitting in, you'll never be able to hear ultrasounds (directly. though ultrasounds can cause distorsions in the audible range on some equiement), and monster cables will change nothing to the SPDIF link.
The "cinephile" equivalent of an audiophile insisting on 200$ monster cables and 192kHz rates,
would be a guy who insist on movie formats that not only record Red, Green and Blue primary colours, but also infra-red and ultra violet (i.e.: insist on frequencies/wavelenghts for which the human eyes doesn't have any receptors) and on buying a $10'000 silver screen to project projecting onto which, that should also perfectly reflect x-rays, gamma rays and microwaves (completely irrelevant given what is transmitted by the light of the beamer).
No matter if the movie room is dimly lit or not, insisting on wave-lenght outside the human range (like ultra-violets) is useless, as is insisting on a screen optimized for something completely irrelevant.
The same way, no matter the dedicated listening room and it's sweet spot, a human ear lacks receptors for 96kHz sounds.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
I never understood why you couldn't just capture the encrypted key and feed it that and let it do it's thing.
And that's exactly how it was done with the very few generations of movies.
Some BlueRay player (i think WinDVD ?) stored they decryption key in an insecure memory location, and hackers used to tap there to find which key is used to decrypt a specific BlueRay.
Movie industry noticed and revoked the keys for that player (meaning newer disc produced after that where encrypted with a selection of keys for which the player had no corresponding keys).
Cue-in cat and mouse game, until hackers managed to find the master key that sits at the top of the whole encryption pyramid.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
if it's on my screen, I can record it.
Yes, as in "record it with a camera".
I can output the signal and the audio on a HD recorder and there's no protection that will protect you from that.
Not exactly.
Nowadays, the output signal is *digital* (HDMI mostly with standalone players, and HDMI mostly with computers).
There's an encryption standard HDCP which is supposed to protect this data during its transit to the screen.
In theory, you should NOT be able to directly hook-up the output to a recorder, that recorder will only see an ecrypted stream that only the screen can decrypt.
You can only use a *cam* to record the actual screen as suggested above, not the stream itself.
In practice, HDCP is done poorly. Its current form is cracked and can be bypassed, so the only actual real-world is not stopping pirate, but only failing in weird ways for legitimate users.
And in actual practice : nobody gives a damn about the latest cookie-cutter soulless movie. Chances are high that I'll be too busy doing some interesting outdoor sport (or some indoor one) rather than trying to see how I could pirate a copy of Smurfs 2 (what, they even made a *second* one ?)
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
DRM is an endless game of Whack-A-Mole; you can spend millions of dollars creating what you think is the perfect copy-protection scheme, and some kid in East Asia will crack it in a week or two and tell the rest of the world how to do it.
JUST GIVE UP. Bytes want to be FREE, stop preventing them.
You can't stop the signal, Mal. One way or another people will find a way to share files and NOTHING you do can stop it.
Stop wasting time and money on DRM and just accept that there will be some pilfering of bytes. You'll sleep better at night. Oh and by the way if no one wants to pay for your 'content' then it obviously wasn't very good to start with; try harder next time instead of putting a gun to people's heads and forcing them to hand over their wallets. YOU are the thieves, MPAA/RIAA, not the people.
when HVEC is much smaller than H264 anyway
Yeah but not by that *much* (though it depends on the quality of both encoders - x264 is incredibly better visually than nearly everything else).
At least, not given the quality/bitrate that the industry has decided to use for Ultra HD (where it makes sense or if it's mostly a placebo is an entirely different can of worm).
Also HEVC is patent minefield (and thus hardware HEVC/H265 decoding isn't as widespread as AVC/H264), so perhaps they also want to keep a door open for content producers that can only afford the MPEG patent pool for H264/AVC and would prefer to keep that codec.
Of course, next-next generations codecs like AOMedia's AV-1 are right around the corner, with even better performance, less patent encumbremenent (xiph and google are onboard), and lots of industry supprot (youtube and netflix - ie. a huge chunk of all watched content - are behind it. As are most current hardware constructors), so perhaps will end up soon with actually smaller files (and thus smaller discs or - more likely - even smaller file to torrent)
it could easily fit on dual layer BDs...
And this movie is a nice example : it's 53GB, it DOES NOT fit on 50 GB dual layer BlueRays. You would need more layers, that would drive the price of pressing discs up (i.e.: less obscene margins for the industry).
Instead UHD discs have slightly higher densities: the dual layer goes up to 66GB (so you can fit this 54GB movie on 2 layers only).
Systems like PS4 Pro (or even PS4 since it can do 4k at 30/24Hz)
Thus it would depend it the movie is 24-30 fps or 48-60 fps, and/or if there's (alterning frame) 3D.
But yeah...
could easily play them if it weren't for the drive requirement
Now the big question :
are there really that many differences between vanilla and UHD blueray disks ? or is it only a slightly higher surface density ?
I would suspect that it's only a slight difference of density, and that it should be in theory possible to reflash the drive itself with an upgraded firmware that change the behaviour of the servos of the head and the focus assembly.
(The same way it was possible to obtain a little bit higher density with floppy drivers. Except that these where directly controlled so the controlling software actually ran on the PC's main CPU, no flashing required, just a device driver).
Not that any manufacturer is actually going to release such an upgrade (it's much more lucrative to have the users re-buy a new more expensive device which is actually the same device as before (no R&D costs !) but with slightly different constants in the firmware and a different model number written on the box).
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
- Ears have some physiological limits due to how physics work (your ears can hear very approx in the 20-20'000Hz range.
And that's optimistic, for a young person. At the age when people have money for this stuff, a 45 year old man can generally hear up to about 4,000 Hz or so. Maybe barely hear 8,000 if they are lucky. So this 45,000Hz stuff is just plain stupid.
Even if the tech to build Blu-Ray players is finally out, it's still illegal to sell them, and still illegal to play the movies. People who don't have time for such hassles are going to keep pirating, until the publishers totally get rid of the DRM so that there's nothing to crack. Who has time for this nonsense?
This demo doesn't impress me, no matter how good Sony wants it to sound.
I saw the movie title.
If you're gonna do an experiment, why go for something that unpopular?
Any recent Marvel offerings in 4K would be a better initial target.
Breaking the encryption on Smurfs 2 is like counterfeiting a 1 lira note.
At that point the data is unencrypted, as it's set to drive all the individual pixels of your display. All the recorder has to do is collect the values of those pixels and store it again for later playback.
(NOTE: that you'll not find trace that drive all the individual pixels, but only lines and columns of a matrix, and the display is scanned.
Also, in *active matrix*, the display doesn't directly drive the pixels, but drives active component (transistors+capacitors) in the cell which are then in charge of keeping their corresponding pixel in its desired state between scans)
On an OLED display : yes, basically it makes 3 different type of protein fluorescent in an electric field, one for each R, G, B. You get one signal for each.
On a modern LCD display : not exactly, what you see is an LCD grid (pixels going on or off) overlaid over an RGB LED light source (That's how the obtain good constrast ratio : in the darker region of the image, the LEDs of the backlight are turned down or off).
So for each pixel, you get and R, G, B signal giving what fraction of the backlight should be allowed through, and for each region a LED signal (usually multiplexed: most modern RGB LEDs have a driver directly in the package) telling how much backlight that region of the image should emit.
So you either need to integrate those signal together (determine the composition of light at a given position, given the nearby LEDs in that region ; and then filter by the state of pixels in the LCD grid).
Or you go and disassemble an OLED instead.
Or you simply record it with a cam and let the integration be done for you by the screen.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
There's dozen "On Screen" recorder software. So if I can read BlueRay on my computer, what kept me from recording the screen?
Probably depends on how the display is composited by the desktop on your screen. And how the real-time video compression hardware used by the recorder is playing along with the video decompression hardware used by the media player.
You might end up with a grey rectangle instead.
(see the problems of taking a screen shot of a video player that appeared 15 years ago when the first video acceleration overlay started to appear in Super VGA cards. Only much more complicated due to increased complexity of modern hardware and modern compositing desktops)
(Or if you go with the software solution :
depends if the OS allows the recorder software to access the screen buffer of the software player, and the player still accepts to play in such an OS.
Be ready to have to fumble around with an OS that implements DRM "secure computing", requiring a gpu device driver that implements "secure path" (i.e.: video-buffer memory protection) and a player that requires ton of signed code.
You might end with a "content cannot be player currently on your computer" pop-up.)
At that point, it's easier to get a second machine, a box that scrubs HDCP away (e.g.: a vew HD splitter), and a HDMI to USB3 lossless grabber (magewell).
Or go for the whole "disassembly" approach mentioned above by another poster.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
> 10K is an easy limit for most according to the charts I saw.
I can only guess the charts you saw didn't account for age, and maybe you're counting the range that we can only barely hear if it's really loud. For the same detection rate you get for 1 watt at 2K, you might need 1000 watts at 10K.
easy fix for that, don't download stuff.
One sneaky idiot with an HD webcam can copy the entire film, and post it to a Russian website. Encryption scheme defeated.
Not to worry, this is not coming to your TV or computer. For $7.00 per month, we can already watch just about any damned thing that we want, legally, at any time on any device. Netflix and Amazon can worry about the DRM. Live TV also shows up on the major network sites for free soon after it airs. The big studio films just become another tile that I may click on or ignore. They are becoming irrelevant.
No need to defeat AACS, just strip HDCP 2.2 and capture the 4K output in its digital form. People have been torrenting Netflix and Amazon 4K content for quite a while. I bet it sure beats that cam torrent of Star Wars Rogue One I watched where the person sitting in front of the camera got up twice during the movie to go to the bathroom.
Makes me wish someone would continue development of Requiem for removing DRM from iTunes content.
but the point is the data is there, unencrypted, it's a matter of tapping the signal, and pretending you're the display.
The problem is that, in practice, in the name of making this as dead-cheap as possible, component tends to be highly integrated.
So you have a single chip being fed the encrypted HDCP signal in, and directly spitting the desired signal out.
(Much cheaper to make a device than having different chips for each stage of the signal processing talking to each other)
So the unencrypted data you refer is actually between 2 cores inside a highly integrated chip.
That's also why you won't find screens with the exact unusuall feature set that you would like as a geek.
Because these features aren't done by mixing-and-matching chips with discrete functions,
but because the screen will basically use a single integrated chip for everything, and chip maker make chips with the most commonly needed features in.
(I'm oversimplifying. You'll still find some signal converters. e.g.: the chip only accept 3 HDMI inputs, so you need to add 1 DP-to-HDMI converter, 1 VGA-to-HDMI ADC (yup analog-digital-analog wrecks the quality, but that's the cheapest they managed to make it), but basically manufacturer are going to keep the chip count as low as possible. It's very likely that the decryption-core will be integrated tightly with the display core).
just have a word with the manufacturer to obtain some part. As they're all in China I'm sure you will be able to find one that can sell you the parts
Yup, given that there are genuine reasons to have a separate discrete HDCP stage (mostly to split signal between displays), you're sure to be able to find parts in china as you wish.
Again, in the name of as-chepa-as-possible-integration you'll also find a bunch of output that you don't need (the additionnal outputs of the splitter), but hey, it works all the same.
(e.g.: a ViewHD splitter)
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
When you write $350, I have to read MX$6500. When you write $850, I translate to roughly MX$16,000. I have a net income of roughly MX$25,000 a month (little bit over US$1000), and I am well trained and paid in the range of the upper 10% of Mexico's population.
So, while this week's sale in Best Buy seems like a good deal, it's not something I'd rush out to buy. And, the price you paid three years ago? No, not by a long shot.
I do own a projector and screen combo (that would make something more or less that size) and often use it to watch movies, but the reasons for buying it was not purely entertainment.
You may have excellent hearing, and using hearing protection certainly seems like a good idea. The values I mentioned may also have been a tad low. You said you could hear 12K - that's of choose quite a bit less than 20K or 22K.
> I guess that those monitor speakers aren't as crappy as I thought. :)
Maybe, but actually maybe they are throwing off your test. Less expensive equipment has more harmonics, often called THD (total harmonic distortion). This is an effect where when you ask for 8Khz, your amp and speakers actually deliver 8Khz, 16Khz, 4Khz, and 2Khz.
It is time to nuke the planet. Nothing more that is good can ever exist.