A quick and dirty and probably somewhat inaccurate description of the way AACS works is that each disc is encrypted with a single 'disc key' and then that key is encrypted once with every known 'player key,' and each of those is stored on the disc. So, if you have an authorized player, it will find the version of the disc key that it knows how to decrypt and then use that to decrypt the disc for playback.
It seems like this also opens up the possibility for an attack on the player keys. Since that the plaintext (the disk key) that the player key is encrypting is now known, it sounds like an attempt to recover a player key just got easier; especially since there are multiple disk keys to work against and multiple player keys to recover.
Agreed. If it helps you sleep better at night, you can consider 2k3 to be AD SP1.
We've run AD since a few months after it was released. We have around 30k user accounts in it. We completed an upgrade to 2k3 earlier this year and all of the functionailty that should have been there at the initial release has suddenly appeared. As the parent mentioned, the client tools are a lot better - we no longer need to log into the DCs to do day-to-day administration.
Also important in a large environment, the 5000 people-in-a-group limit has gone.
We didn't migrate from NT, so I have no idea how well that works under 2k or 2k3.
Something that caught my eye a while ago in this area was HiveCache. Never used it, don't know anyone that has, but it looks like a pretty cool system.
Check out Hivecache. Their software supposedly uses all your free bits of disk space for online backups. Not exactly what you're after, but a pretty cool idea none-the-less.
Slashdot Mirror
It seems like this also opens up the possibility for an attack on the player keys. Since that the plaintext (the disk key) that the player key is encrypting is now known, it sounds like an attempt to recover a player key just got easier; especially since there are multiple disk keys to work against and multiple player keys to recover.
Invest the $30k. Use the interest to buy yourself one or two fairly decent toys a year for the rest of your life.
Here in Auckland, New Zealand, I can pay my parking tickets online http://www.aucklandcity.govt.nz/auckland/transport /parking/payonline.asp. Certainly not the most technologically advanced web-thing I've ever seen, but it's saved me a lot of time.
Agreed. If it helps you sleep better at night, you can consider 2k3 to be AD SP1.
We've run AD since a few months after it was released. We have around 30k user accounts in it. We completed an upgrade to 2k3 earlier this year and all of the functionailty that should have been there at the initial release has suddenly appeared. As the parent mentioned, the client tools are a lot better - we no longer need to log into the DCs to do day-to-day administration.
Also important in a large environment, the 5000 people-in-a-group limit has gone.
We didn't migrate from NT, so I have no idea how well that works under 2k or 2k3.
Something that caught my eye a while ago in this area was HiveCache. Never used it, don't know anyone that has, but it looks like a pretty cool system.
Check out Hivecache. Their software supposedly uses all your free bits of disk space for online backups. Not exactly what you're after, but a pretty cool idea none-the-less.