HDCP Master Key Is Legitimate; Blu-ray Is Cracked 1066
adeelarshad82 writes "Intel has confirmed that the leaked HDCP master key protecting millions of Blu-ray discs and devices that was posted to the Web this week is legitimate. The disclosure means, in effect, that all Blu-ray discs can now be unlocked and copied. HDCP (High Definition Content Protection), which was created by Intel and is administered by Digital Content Protection LLP, is the content encryption scheme that protects data, typically movies, as they pass across a DVI or an HDMI cable. According to an Intel official, the most likely scenario for a hacker would be to create a computer chip with the master key embedded it, that could be used to decode Blu-ray discs."
not protects (Score:5, Insightful)
It restricts data. It restricts my rights. It does not protect anything.
Re:not protects (Score:5, Insightful)
Where is there any indication that "pirates" were behind the leak of this master key?
Re:not protects (Score:5, Funny)
All the parrot poop on the floor, the indentations left by a peg leg, and the stench of rum are a dead giveaway.
Comment removed (Score:5, Funny)
Re:not protects (Score:5, Informative)
From the preface to the 1703 (corrected edition) of 'The True-Born Englishman':
Note that he was much more sanguine about the piracy after three years (the poem was originally printed for sale in 1701) in that it provided a vast audience for his work who, otherwise, would not have been able to afford it. This helped lead to his becoming celebrated during his lifetime.
Re:not protects (Score:4, Insightful)
Of course, this usage of piracy is still used to describe those looking to profit. I'd be interested to see when the term was first used to describe people making personal copies.
Re:not protects (Score:4, Insightful)
Re:not protects (Score:5, Informative)
The key is probably not copyrighted. US law usually restricts copyrighted material to original works of authorship. However, the key is most likely the output of some algorithm. In this case, since an algorithm "wrote" the "work", it's probably not covered. It's also highly unlikely that their bitstream is unique. But more importantly, facts are never copyrightable. For example, a phonebook may be copyrighted; you can't take the pages, copy them, and sell them legally. However, the phone numbers (the facts) are not copyrightable; you may copy all of the phone numbers into your own phonebook and sell that. In this case, the fact is the particular digits of the master key. It doesn't represent a work of authorship, but a fact generated by a computer.
Re:not protects (Score:5, Insightful)
Re:not protects (Score:4, Funny)
The acronyms, please no... no more. I can't handle the compression!
Weve seen that argument before (Score:5, Insightful)
You know and I know, this is primarily a tool for piracy.
No, it's primarily a tool. How you use it is up to the user.
Much like a gun is a tool. You can use it for target practice, hunting, home defense - and murder. The tool doesn't get to decide how it is used. The user does. The tool is blameless.
Another point. Most people aren't pirates, and most of the people "content protection" screws with are the paying customers. It absolutely is about rights. You buy it - you own it. That's how it used to be. Now the industry is trying to change that. It is important to let those people know they are selling snake oil. That's how I see this event. It's not about a BluRay player for Linux, it's not about piracy. It's about stopping snake oil salesmen from infringing on our rights with these increasingly bogus copy protection schemes.
That's why I love watching things like this happen. I love it when people who are clearly in the wrong (both philosophically and mathematically) get called on their hubris. It fills me with joy.
Re:Weve seen that argument before (Score:4, Interesting)
You buy it - you own it. That's how it used to be
not true. you bought the medium, (record, printed paper), but even back in the "good ol days", you did not purchase the right to the actual content. And today almost all of our information is encoded digitally and much of it is transmitted across the internet, so there is no longer any natural limit on infringement.
I agree with you concerning the effect copy prevention has on the "average consumer", and i tend to shop for more open formats. But people will always choose free over not free. And "retailers" like the Pirate Bay don't charge for the service (they make their money from ads) so they facilitate people's instinct to get something for nothing, and make millions doing it. All the while saying that they are defending free speech or whatever. They just make it easy to walk right past the producer of the content and take their shit without paying. And that seems really, really cool. Until you think about it a little.
Re:Weve seen that argument before (Score:5, Insightful)
You know I sometimes wonder if the world would be a richer or poorer place without copyright, pleanty of things would be different certainly and those who make their money from the current system will of course tell you the world would be a poorer worse off world for it.
It's almost taken as a given that the world would have less creativity without copyright but I do wonder.
If the chef at your local restaurant had to pay royalties whenever he used a recipe published by a celebrity chef would you have a tastier and more enjoyable meal?
What if he risked being sued into the ground if he created a derivative work by altering the recipe slightly without a liscence?
or would you just have a more bland, unoriginal, uninspired and ultimately vastly more expensive meal.
If your hairdresser had to pay royalties whenever some kid comes in with a magazine picture and says they want their hair to "look like that".
Would everyone have far more interesting hairstyles or would it just cost far more and see people getting sued for doing their own hair at home in a copyrighted style?
Both these things are creative and also involve a skill much like storytelling or playing a musical instrument and in both cases I've heard of people trying to get copyright protections extended to cover them.
Imagine a world where in the 17th century someone had decided that recipes and cooking should fall under copyright along with books.
You can be sure that were someone to call for it's repeal 300 years later there'd be no lack of "professional recipe composers" who would talk about how much work they put into working out new recipes and the time and effort it takes and how we're bad people for implying that they haven't worked hard and that they somehow don't deserve a cut whenever someone follows their recipies.
of course in a world where we're all free to take someone elses recipe, use it, copy it, publish it or even claim it as our own we know very well that fuck all harm has been done to the industry for the lack of legal protection on such creativity.
We live in a world where everyone has family recipes but hardly anyone has family music.
In a world where such legal protections existed and nobody ever knew such an open and unprotected situation as we have in this world it would be very easy to claim that there would be no creativity, no well paid chefs and that setting up a kitchen would be pointless since someone else would just copy the chefs recipes.
Similarly it's taken almost as a given that the world would have less good books, less good stories and less without copyright but try questioning that even for a moment.
Of course no someone is going to complain that composing and cooking a good meal can't be compared to composing and playing a good piece of music because..... well just because!
Re:Weve seen that argument before (Score:5, Interesting)
I think that in a world without Copyright (and the like) the only think we would not have is the crap copyrightable stuff (e.g., Britney Spears, Eminem, etc...) mainly because such media is only famous due to its heavy marketing and not its quality.
For example (borrowing from your analogy) how many really bad recipes do you know that are famous? I know none (except the ones for food I don't like) and I have lived in 3 countries, traveled to more than 12 and I like gastronomy.
The interesting thing is, I am sure in 200 years people we look back at our time and will see efforts like PirateBay, RlsLog, Gigapedia, the Scene, etc as the "good guys" who made a very strong effort to share our culture. In the same way we see Kings,Queens and Fathers of ancient empires who either wanted to have control of information or encouraged its dissemination.
Comment removed (Score:5, Insightful)
Comment removed (Score:5, Insightful)
Re:Weve seen that argument before (Score:5, Insightful)
The customer is NOT allowed to take advantage of the global market by "outsourcing" THEIR suppliers of media by ordering from a different, cheaper region.
And if you've ever bought used textbooks on the Internet, you'll probably quickly discover what a sweet discount you can get when the global market stays global for you. I've bought plenty of (English-language) textbooks that were originally sold to the Indian subcontinent; they're exactly the same between the covers as the American editions but priced quite differently, and you can often save some good money. (Competitive pricing keeps the prices all pretty much the same, but the foreign editions are often the cheapest, sometimes by as much as $10-$20. And I'd have to guess that they pull down the prices of the other editions.)
The catch is that there's a small but visible red box announcing that the book was for such-and-such countries and that any sale outside those countries is "UNAUTHORIZED"—which is true, but it refers to the publishers' contracts with their own retailers. They indeed do not authorize secondhand sale to the U.S., but that doesn't make it the least bit illegal or unethical. (They also don't authorize me to scribble in the margin or dip the book in peanut butter or whatever, but who's asking their permission? After the publisher sells the book to a contract-bound vendor, who sells it to a private citizen, the publisher's power to authorize anything is null.) But they sure as hell don't mind letting some Westerner assume that they'd be buying stolen property, so they're no clearer than they need to be about whether such an "UNAUTHORIZED" sale is actually dishonest.
The parent poster is absolutely right about what the region codes do: divide the market into pieces where each one can be charged a different price, while keeping the pieces from trading with each other and benefiting from a free secondary market as I did with my books. To criminalize breaking the codes has no purpose other than to help publishers make more money in a sickeningly anti-capitalistic way. Good for whoever cracked the codes: they've done something for the little guy and his ability to buy and sell his own property like a capitalist. (And perhaps you thought that "capitalist" always meant "pro-corporation"...)
Cost per region (Score:4, Insightful)
Once we start talking about parallel imports, we have a problem. Intellectual property is only as valuable as the customer is willing to pay. But at the same time, it has base costs. If we talk about academic textbooks, the customer in India, Kenya or Peru is not willing or capable of paying as much as the customer in the US or the UK. So we cut the price in their region so that they can afford it, and this gives them access to education. If import protections didn't exist, the publishers would have a straight choice between losing their developed-world profits by selling at developing-world rates, or losing their developing-world profits by selling at developed-world rates. The big money's in the developed word, so if we were to ban import protection on IP works, education in the developing world would suffer.
Of course, the opposite is true in the case of Hollywood cr*p -- if that wasn't available, education would improve, but you've got to take the rough with the smooth.
HAL.
Re:Weve seen that argument before (Score:5, Insightful)
Re:Weve seen that argument before (Score:5, Insightful)
You would be hard pressed to not even find a PERSON who hasn't put in an attempt to change the law in his/her favour - as that's what elections are about. At least I for one when I have the chance to vote will vote for a person/party that wants laws to work in the same way I want it to.
The goal is the same, just the process is a bit different.
Re:Weve seen that argument before (Score:4, Insightful)
Re:Weve seen that argument before (Score:5, Insightful)
If the law is so out of sync with reality that everybody find adherence to be too difficult to do, or too invasive to want to abide by, then isn't that an indication that the law is out of sync with reality?
The purpose of art is not the enrichment of media companies, but the recognition of artists. If the entire system requires the militant enforcement of government in order to prop it up because people cannot or will not play by its rules, then in my books, the entire system is the problem, not the people.
Re:Weve seen that argument before (Score:5, Insightful)
Not surprising if it takes more effort to buy and use than to get a pirated copy.
Amazon MP3 has done more for weeding out music piracy than all XPAA efforts combined.
Re:Weve seen that argument before (Score:4, Interesting)
I would be very hard-pressed to name even one person that I personally know who has never done anything criminal. It is arguably part of growing up.
Personally, I have never shoplifted or stolen a bike, but I'm absolutely positive that I have, during the years, done a number of things that weren't exactly legal. Now, however, I am (in the view of my friends) almost painfully legit. I can say that I do not own a single piece of software, prose, film, or music that I did not obtain legally. That means free software, public domain e-books and store-bought paperbacks, tv-recorded shows or store-bought dvd's, and store-bought cd's (I like to have the covers, even if I rip them to flac first thing).
I would think that the majority of the media of the majority of the population is legal. Further, I concede that I also expect the majority of the population to possess a minor amount of illegally obtained media.
Therefore, I believe your statement that "most people [are] pirates" is false, and that it is fair to circumvent arrangements that clearly punish the wrong people (a perfect example being the (otherwise) unskippable "do not copy this dvd" message).
Re:Weve seen that argument before (Score:5, Interesting)
Re:Weve seen that argument before (Score:5, Insightful)
No, you have it backwards. It's the media producers who live off other people.
Yep. Just the other day, a "media producer" came to my home and ate all my food. Sarcastic? Yes, a little. But providing me with something that I want in exchange for an agreed price is not "living off me". If someone publishes a book or releases a movie and says they're selling it for X amount of money, that's my choice. Are they offering me something I think is worth X money, yes or no. If yes, I buy it. If no, I don't. If that's living off other people, then so is pretty much any job, and many much more so than the "media producer".
Is it not they, who expect to profit forever, without bound, from a limited amount of work? They, who don't want to accept the market as it exists, and want to impose their own rules on the general population, so that they can live off them without effort?
Wow. That's some dramatic prose in defense of taking for free what others who paid to produce. It's pirates "who don't want to accept the market as it exists" as they are the ones bypassing the market and setting their own conditions on others without that party's agreement. A "market" is agreed exchange. If author Jane offers her work for amount X, that imposes nothing on you. You are free to negotiate or walk away, and that is the market. If some freeloader says to Jane: you have no ability to negotiate with me - I'm taking this and there's nothing you can do about it, then that meets your flowery language of "imposing their own rules" does it not? That meets your definition of "living off them without effort" does it not?
We owe them nothing.
Someone produces a book, movie, song, game that you enjoy and you say you "owe them nothing".
to encourage these lazy persons to produce our music
The "lazy persons produce our music", eh? You see no contradiction in that sentence? You condemn as lazy people who write novels, record albums, film movies, develop games. You have no conception of how much work or expense any of these things involve, clearly. If it's so trivial, and you're so not lazy, why don't you make your own novels, albums, movies and games? Surely not because that would require effort / money / expertise.
but they have abused our trust and taken it to the extreme.
How, in precise words, has someone abused your trust? Because I've always been under the impression that movies / novels / music / games, were being sold to me. I was never "trusting" that these things were all being thrust into my hands for free only to suddenly find that my trust was broken because someone asked for money as I left the shop or clicked the "Confirm Order" button.
They deserve no pity. The problem is not solved by forcing the population to spend all their extra money on copies of bits
Yes. They are demons, irrevocably damned. We must not pity people who spend their time or money on producing things.
The problem is not solved by forcing the population to spend all their extra money on copies of bits.
Disingenuous in the extreme. When was the last time anyone forced you to spend your money on a movie or TV show or a novel or whatever? Really - when were you forced to spend this money?
It is solved by introducing sane copyright law, that brings balance back into the game.
After the illogical, unsupported and self-contradicting post you just made, you have as much right to talk about "sane" as King Herod does to talk about "child care"
Re:Weve seen that argument before (Score:5, Funny)
Esophagus? If I ever need an emergency tracheotomy, please be far, far away from me at the time.
Re:Weve seen that argument before (Score:5, Funny)
he's a nerd, not a doctor
You missed a pristine opportunity for a "For God sake's, Jim..." joke.
Nerd card please.
Re:Weve seen that argument before (Score:4, Funny)
For God's sake, Jim. He's a doctor not a nerd.
Re:Weve seen that argument before (Score:4, Insightful)
Wrong--it's a tool with two uses: copyright violation, and copyright protection. The buyer is also granted certain rights under copyright law. DRM seeks to prevent those rights from being exercised.
Use how you want to (Score:5, Interesting)
Net result: I've found better things to do with my time.
Re:not protects (Score:4, Insightful)
"Yeah, and there are five people who legitimately want to back up their blu-rays. So what? You know and I know, this is primarily a tool for piracy."
Maybe he knows and you know. But I don't know. What I do know is that there are whole countries where ripping a DVD for private use is perfectly legitimate. That surely makes for more than five people.
"I'm not expressing an opinion, just a simple fact."
"Simple facts" can become quite complex upon deeper inspection.
Re:not protects (Score:5, Informative)
They just copy the entire disks as is, and any player that can play the original can play the copy.
It's like making a photocopy of a book in a language you don't understand. It doesn't matter if you can't understand it, all that matters is the end-user (player) can.
Re:not protects (Score:4, Interesting)
That's funny coz the "pirates" in my country don't need this key to copy stuff.
They just copy the entire disks as is, and any player that can play the original can play the copy.
It's like making a photocopy of a book in a language you don't understand. It doesn't matter if you can't understand it, all that matters is the end-user (player) can.
That's probably not what's happening. Blu Ray disks won't even let you read them unless you have the key. Only "Legitimate" players (software, or hardware) are allowed access to those keys.
Most Blu Ray copies exist because an indivdual key for that particular disk was sniffed. Then "Illigitimate" software can load the key to make a copy. But you can't even access the data without some kind of key. Your pirates probably DO rely on "Illigitimate" software that uses sniffed keys.
This new leak is the *Master* key with which they made all those individual keys that the disks are protected with.
Which means we can now generate good keys on the fly. Which, I'm led to believe, lets us copy any Blu Ray disk without first having to sniff the key. Though that last part I'm still not sure about. But thats what it seems like.
-Taylor
Re:not protects (Score:4, Insightful)
The disk drives are also controlled. The disk drive don't let you just get the bits out - they will only give you data if you have a key, etc. I don't know the specifics but this is a *well* thought out system. They have serious control over this shit.
So unless you're going to start writing firmware for blu ray disk drives (which are certainly also protected in some way from attacks like that) i don't see how you're going to get the sequence of bits out.
I can tell you one thing - that kind of hack is nothing I've heard of; its always people getting the key.
-Taylor
Re:not protects (Score:5, Informative)
That's not actually true. You can absolutely get almost all of the data off of a Blu-ray disc without breaking AACS. What you can't get (without a hacked drive or an un-revoked player certificate) is the volume ID, which you need to decrypt or duplicate the disc.
Note that Blu-ray drives have basically been irrevocably broken at this point, so this is sort of moot.
Re:not protects (Score:5, Informative)
AACS has been cracked in a way that's practical enough for non-technical users. Check out MakeMKV . It's two-click simple to rip a Blu-Ray to MKV files without losing any A/V streams or recoding. You can even stream live to HTTP if you'd like to do from-disk playback in a system that accepts web streams but doesn't yet have AACS decryption.
You can also rip complete disk images, if you prefer to keep the original stream wrappers and whatnot.
The only part that's really missing is a Blu-Ray menu playback system, which isn't surprising because there's actually a good deal of software necessary to run Blu-Ray menus.
Re:not protects (Score:5, Insightful)
Re:not protects (Score:4, Insightful)
Says anonymous coward. Every 3 year old CAN be taught properly, AFTER they ruin up to dozens of original copies. By that time they are 4 or 5.
Shall we have a little poll? (Score:5, Funny)
Let's have a little poll. Who believes the above was written by a parent?
Re:not protects (Score:5, Funny)
1. Reach puberty
2. Have a kid
3. Wait three years
4. Come back and post a correction
Re:not protects (Score:5, Insightful)
Yeah, and there are five people who legitimately want to back up their blu-rays. So what? You know and I know, this is primarily a tool for piracy. Mod me down to oblivion, that changes nothing. I'm not expressing an opinion, just a simple fact.
I'm not the one who has to pretend I'm saving the rights of "The People" or sticking it to "The Man" while I gorge myself on free entertainment.
You obviously dont' have kids. DVDs, or any kind of disk media is just NOT suitable for an entertainment system used around children. Keeping the shiny colourful box and disc out of their reach is the only way. I'd rather spend my time keeping DANGEROUS things out of their reach (like knives) than worrying about having to rebuy my whole collection if the kid somehow gets to them. This isn't the only use case where a backup is a good idea either. The fact that you're so dismissive makes you either a shill or a fool or both.
Comment removed (Score:5, Interesting)
Mod parent up, wtf. "flamebait?" (Score:5, Insightful)
A strongly worded opinion. Well written, with references and links. It's not even a controversial topic, From what I see this is rather a majority opinion on slashdot.
Who the hell modded this flamebait?
Re:Mod parent up, wtf. "flamebait?" (Score:5, Funny)
Re:not protects (Score:5, Funny)
Re:not protects (Score:5, Funny)
could you please tell me what the "R" in "DRM" stands for?
Restrictions, according to RMS (the Rights Management System).
Re:not protects (Score:4, Insightful)
The R stands for the copyright holder's Rights.
Re:not protects (Score:5, Insightful)
It could well be rights. Waste Management takes your waste away, so Digital Rights Management takes your digital rights away.
Re:not protects (Score:5, Insightful)
great, then i can stick it on my iPod to watch it, if i have a license to the content. ohh wait, it's a license to watch it from the dvd only? needs to be in readable text on the outside of the case, or you can shove it.
Re:Captive market. (Score:5, Informative)
Re:not protects (Score:5, Insightful)
The rights in question are fair use / fair dealings rights. You have the right, for example, to extract short clips from a video and quote them in commentary and so on, for example including screen captures in reviews. DRM on BluRays prevents you from exercising this right, among others. In some countries, you have the explicit right to format shift, which DRM also prevents.
DRM is vigilante action by the publishers, and it should be treated as any other vigilante action.
Re:not protects (Score:5, Insightful)
Actually, the expansion of corporate monopolies by use of DRM and DMCA restricts what used to be inalienable rights of both artists and users far more that most people imagine. It is a very dangerous situation right now. Anything to weaken DRM and DMCA is good, at least until the the political process starts working for the people again.
Re:not protects (Score:4, Insightful)
Your negativity is not funny, not insightful, and definitely not helping.
When the copyright expires, and it will, I should not have to spend time cracking a protection scheme in order to access public domain works. Creators have a temporary monopoly in exchange for agreeing to give it to the public at some time.
At the time of creation, the creator has the right to copy the work, or allow copying, and I do not. At the time of expiration, the right to copy passes from the creator's hands into mine. There should be no lock which prevents me from exercising my fully legal right at that time.
If you're feeling like adding something about effectively perpetual copyright due to extension, that's fine, but know that copyrights at least in USA are constitutionally limited. It might be a thousand or a million years, but when that time comes the Constitution says it's public domain.
I have seen arguments that, while public domain status is guaranteed there is no requirement that the work be accessible. That might be true. However, I can easily see a court battle which establishes that locking away expired works is abuse of copyright. Unfortunately we won't be able to have that established for 100 years, until someone shows actual harm, and therefore standing to sue. Ultimately, I believe it will be illegal to lock away content due to agreeing upon entering the copyright protection agreement one also agrees to its public domain status once expired. Either that, or the Library of Congress exemptions will water down DRM breaking enough that it's irrelevant. That has already begun.
It's not like a company can claim they were surprised that copyright is limited. Until the US constitution is changed, the *IAA have to accept that their works will be public domain at some point.
Re:not protects (Score:4, Insightful)
Re:not protects (Score:5, Insightful)
> but the manufacturers also have the "right" to put encryption on media.
Cool. We have the right to try to break it, and to succeed.
Re:not protects (Score:4, Insightful)
You pay for the right to view and use their data on their own terms.
That is the flaw in your argument. The content providers have the right to control the distribution of their product, and have a monopoly on the profits from their product, but they don't have the right to limit my fair use of the product. The real pirates are the guys that are copying the DVDs bit for bit and selling them. This is not the same as ripping it to your hard drive to watch on your computer. No one is arguing against punishing those that are profiting from other people's works.
The argument is simple: Once I buy the media, I should be able to watch it any way I want as long as I don't infringe on their rights to profit from it. This means I am not supposed to sell copies, I'm not supposed to show it in a theatre or pub or other public venue. Whether I watch it on my laptop, TV, or work computer doesn't affect them as I have already purchased the item. If I want to include a short clip for commentary or criticism on my blog, the law says I have the absolute RIGHT to do so, but the technology effectively blocks me from doing this.
You are worried about THEIR rights, which are based upon the (valid) idea that they have the right to exclusively profit from their work. Once I have purchased that DVD or BD, they no longer have a vested interest in the profits of that one disk, they already have it.
G'huh? (Score:5, Informative)
Re: (Score:3, Insightful)
Re:G'huh? (Score:5, Informative)
So you record the stream from the player to the display. No big difference.
It implies a lossy decode and re-encode rather than a bit-for-bit copy.
However, 99.9% of all bluray pirating seems to be lossy re-encodes anyway - mainly for the size reduction. When done well, those re-encodes are essentially indistinguishable from the originals (It helps that x264, the pirate's encoder of choice, just happens to be the most efficient h264 implementation that is generally available - so the pirated versions have a better picture-quality-to-size ratio than then legitimate releases which are used as source material for the pirated versions).
Re:G'huh? (Score:5, Insightful)
It's the difference between copying an unmodified MPEG (or VC1) stream at whatever rate your machine can muster, or recording the uncompressed output of such a stream at no faster than real-time.
The former is lossless, smallish, and fast. The latter is lossless only if you can keep up with and store the intense datarate, or is lossy if you recompress it, and it always takes as long to record as the playing-length of the source.
Big differences. Huge, giant, overwhelming differences, in fact.
Comment removed (Score:5, Informative)
Comment removed (Score:4, Informative)
challenge (Score:5, Insightful)
http://www.engadget.com/2010/09/16/confirmed-intel-says-hdcp-master-key-crack-is-real/ [engadget.com] /.'d)
(original article
"For someone to use this information to unlock anything, they would have to implement it in silicon -- make a computer chip," Waldrop told Fox News, and that chip would have to live on a dedicated piece of hardware -- something Intel doesn't think is likely to happen in any substantial way.
I think we've got a new challenge here! Props to the first person to post an easy hardware/software system for intercepting and decoding HDTV signals.
Comment removed (Score:5, Insightful)
Re:challenge (Score:5, Interesting)
Or maybe implement a "virtual display" driver that claims to support HDCP ...
Summary left out one important detail (Score:5, Funny)
Re:Summary left out one important detail (Score:4, Informative)
Here:
http://www.cafepress.co.uk/HDCP [cafepress.co.uk]
Based on this:
http://jedsmith.org/hdcp/ [jedsmith.org] (see the bottom for info on how it should be interpreted)
This just in... (Score:5, Funny)
Intel now approaching release on an even newer, even better DRM system developed with secret AI Heuristics obtained in their recent acquisition of McAfee. A spokesman, who asked not to be identified, said "Trust us! This time we'll defeat those nasty pirates for sure!" The Intel technology is rumored to be based on quantum cryptography, 2Gbit keys, and something which is referred to as a "negative entropy hash".
In response we've asked Tim Jones of The Pirate Bay to comment. "Goodness. Whatever will we do? We'll never be able to decode that. Oh, wait. Those torrents come from unencrypted masters before they went to production. They're not cracked, they're leaked. Never mind. No worries."
Sony, BMG and Viacom are said to be in negotiations to license the technology.
TFS is confusing (Score:5, Informative)
TFS talks about using the HDCP master key to decode Blu-Ray.
But, really, HDCP has nothing to do with Blu-Ray in particular -- it's protection for a transmission format, not a storage format. The availability of this key means nothing with regards to Blu-Ray.
So, I've been wondering for the past few days: What, exactly, can this HDCP master key do for folks? Does it automagically allow us to decode HDCP-protected content on a DVI or HDMI cable? Or does it allow us to merely sign our own HDCP devices given an appropriate amount of hackery?
Re:TFS is confusing (Score:5, Informative)
It will allow me to watch my legally purchased blu-ray discs using my legally purchased blu-ray drive on my old, non-HDCP compliant monitor. I am forced to break the law just because my monitor is too old: In the past, I couldn't use a program like powerDVD to watch my blu-ray discs at full resolution because it would notice my monitor wasn't compliant. That meant obtaining an AACS key for the blu-ray disc and using a program like dumphd, anydvd or dvdfab to make a copy of the data on the disc to my hard drive which didn't had HDCP. Now, I could conceivably still have to violate the DMCA, but by faking my monitor's HDCP compliance so powerDVD or another program can watch the video.*
* I'd just like to point out that I'll still break the DRM because there is not a blu-ray reader for linux that works reliably.
Re:TFS is confusing (Score:5, Insightful)
Hint: the DMCA exception clauses allow for bypassing restrictions for the purpose of interoperability, which is exactly what you're doing. Your actions are 100% legal, per the DMCA itself. :)
Re:TFS is confusing (Score:5, Insightful)
No he isn’t. He’s being forced to go to extreme lengths to exercise his fair use.
Re:TFS is confusing (Score:5, Informative)
Any DRM system is only as good as the weakest link in the chain. BD+ doesn't have to be broken, only one link in the chain and the whole thing falls apart. You just need a little HDCP stripper box between the legal blue ray player, and whatever you are using to copy. And there is now no physical way to invalidate the keys in the HDCP stripper box. They box could identify itself with an infinite number of working keys generated each time it is powered up. As mentioned in an earlier thread, the unencrypted raw stream can then be recompressed/encoded into any desired format. (Including BD+ and AACS free Bluray) As mentioned earlier, any good HW engineering student armed with the specs and an FGPA could make one.
The only way to stop this would be to start over with a new master key, which would brick every existing HDCP encumbered piece of hardware out there.
Re:TFS is confusing (Score:5, Insightful)
Lies, deceit.
Since HDMI can transfer up to 10.2 gigabits per second of data, I don't think these "perfect digital copies" are going to be made any time soon. 1920x1080x60 + 8 channels of uncompressed audio == lots of bandwidth. More than anyone, currently, wants to store -- it'd be cheaper to buy the movie than buy the storage for a copy of it it, in the case of a direct HDMI lossless rip. And nevermind actually achieving these datarates on any commonly-available storage medium.
Unless, of course, the copies get compressed with something. And then, plainly, they're not perfect anymore.
Re:TFS is confusing (Score:5, Insightful)
This does open the way for a way around older highres LCDs not being hdcp compliant.
You mean this one? (Score:5, Informative)
Unless /. mangles it, it should be the exact same.
HDCP MASTER KEY (MIRROR THIS TEXT!)
This is a forty times forty element matrix of fifty-six bit
hexadecimal numbers.
To generate a source key, take a forty-bit number that (in
binary) consists of twenty ones and twenty zeroes; this is
the source KSV. Add together those twenty rows of the matrix
that correspond to the ones in the KSV (with the lowest bit
in the KSV corresponding to the first row), taking all elements
modulo two to the power of fifty-six; this is the source
private key.
To generate a sink key, do the same, but with the transposed
matrix.
6692d179032205 b4116a96425a7f ecc2ef51af1740 959d3b6d07bce4 fa9f2af29814d9
82592e77a204a8 146a6970e3c4a1 f43a81dc36eff7 568b44f60c79f5 bb606d7fe87dd6
1b91b9b73c68f9 f31c6aeef81de6 9a9cc14469a037 a480bc978970a6 997f729d0a1a39
b3b9accda43860 f9d45a5bf64a1d 180a1013ba5023 42b73df2d33112 851f2c4d21b05e
2901308bbd685c 9fde452d3328f5 4cc518f97414a8 8fca1f7e2a0a14 dc8bdbb12e2378
672f11cedf36c5 f45a2a00da1c1d 5a3e82c124129a 084a707eadd972 cb45c81b64808d
07ebd2779e3e71 9663e2beeee6e5 25078568d83de8 28027d5c0c4e65 ec3f0fc32c7e63
1d6b501ae0f003 f5a8fcecb28092 854349337aa99e 9c669367e08bf1 d9c23474e09f70
3c901d46bada9a 40981ffcfa376f a4b686ca8fb039 63f2ce16b91863 1bade89cc52ca2
4552921af8efd2 fe8ac96a02a6f9 9248b8894b23bd 17535dbff93d56 94bdc32a095df2
cd247c6d30286e d2212f9d8ce80a dc55bdc2a6962c bcabf9b5fcbe6f c2cfc78f5fdafa
80e32223b9feab f1fa23f5b0bf0d ab6bf4b5b698ae d960315753d36f 424701e5a944ed
10f61245ebe788 f57a17fc53a314 00e22e88911d9e 76575e18c7956e c1ef4eee022e38
f5459f177591d9 08748f861098ef 287d2c63bd809e e6a28a6f5d000c 7ae5964a663c1b
0f15f7167f56c6 d6c05b2bbe8800 544a49be026410 d9f3f08602517f 74878dc02827f7
d72ef3ea24b7c8 717c7afc0b55a5 0be2a582516d08 202ded173a5428 9b71e35e45943f
9e7cd2c8789c99 1b590a91f1cffd 903dca7c36d298 52ad58ddcc1861 56dd3acba0d9c5
c76254c1be9ed1 06ecb6ae8ff373 cfcc1afcbc80a4 30eba7ac19308c d6e20ae760c986
c0d1e59db1075f 8933d5d8284b92 9280d9a3faa716 8386984f92bfd6 be56cd7c4bfa59
16593d2aa598a6 d62534326a40ee 0c1f1919936667 acbaf0eefdd395 36dbfdbf9e1439
0bd7c7e683d280 54759e16cfd9ea cac9029104bd51 436d1dca1371d3 ca2f808654cdb2
7d6923e47f97b5 70e256b741910c 7dd466ed5fff2e 26bec4a28e8cc4 5754ea7219d4eb
75270aa4d3cc8d e0ae1d1897b7f4 4fe5663e8cb342 05a80e4a1a950d 66b4eb6ed4c99e
3d7e9d469c6165 81677af04a2e15 ada4be60bc348d dfdfbbad739248 98ad5986f3ca1f
971d02ada31b46 2adab96f7b15da 9855f01b9b7b94 6cef0f65663fbf eb328e8a3c6c5d
e29f0f0b1ef2bf e4a30b29047d31 52250e7ae3a4ac fe3efc3b8c2df1 8c997d15d6078b
49da8b4611ff9f b1e061bc9be995 31fd68c4ad6dc6 fd8974f0c506dd 90421c1cd2b26c
53eec84c91ed17 5159ba3711173b 25e318ddceea6a 98a14125755955 2bb97fd341cea2
3f8404769a0a8e bce5c7a45fb5d4 9608307b43f785 2a98e5856afe75 b4dbead4815cac
d1118af62c964a 3142667a5b0d14 6c6f90933acd3d 6b14a0052e2be4 1b1811fda0f554
12300aa7f10405 1919ca0bff56ea d3e2f3aad5250c 4aeeea5101d2ec 377fc499c07057
6cb1a90cdb7b11 3c839d47a4b814 25c5ac14b5ec28 4ef18646d5b9c2 95a98cc51ebd3b
310e98028e24de 092ffc76b79f44 0740a1ca2d4737 b9f38966257c99 a75afc7454abe4
a6dd815be8ccbf ec2cac2df0c675 41f7636aa4080f 30e87b712520fd d5dfdc6d3266ac
ee28f5479f836f 0bf8ee2112173f 43ae802fa8d52d 4e0dffd36c1eac 3cbda974bb7585
fb60a4700470e3 d9f6b6083ef13d 4a5840f02d0130 6c20ef5e35e2bf dad2f85c745b5b
61c5ddc65d3fc9 7f6ec395d4ae22 2b8906fb3996e2 e4110f59eb92ac 1cb212b44128bb
545afda80a4fd1 b1ffea547eab6b fac3d9166afce8 3fe35fe17586f2 9d082667026a4c
17ffaf1cb50145 24f27b316acfff b6bb758ec4ad60 995e8726359ef7 c44952cb424035
5ec53461dbd248 40a1586f04aee7 49ea3fa4474e52 c13e8f52c51562 30a1a70162cfb8
ccbada27b91c33 33661064d05759 3388bb6315b036 0380a6b43851fb 0228dadb44ad3d
b732565bc37841 993c0d383cfaae 0bea49476758ac accc69dbfcde8b f416ab0474f022
2b7dbcc3002502 20dc4e67289e50 0068424fde9515 64806d59eb0c18 9cf08fb2abc362
8d0ee78a6cace9 b678
Re:You mean this one? (Score:5, Funny)
HEY!! That's the combination to my luggage!
Re:You mean this one? (Score:5, Funny)
Huh? (Score:4, Insightful)
Chinese Player (Score:5, Interesting)
So. Yeah. Putting the code in a chip is what is the immediate danger for the big player, not the oft cited "copyer" which bit torrent stuff.
Eh? (Score:5, Insightful)
Now we all need to buy new TVs and Blu-Ray players with HDCP2 support. You fuckers should have just caved and got a new 3D TV when they were trying to drive uptake the polite way.
No not so much (Score:5, Insightful)
They've already had trouble selling HD technology. Were they to just invalidate everything and declare you had to buy new stuff this would not only lead to lawsuits, but just difficulty on the consumer market. If someone already has their TV and Blu-ray player they aren't going to rush out and buy a new one. The content producres will release for what people have, or they'll get no business, thus they'll keep making older formats.
You might notice that DVDs aren't gone, nor for that matter are CDs. The media industry loved the DVD-Audio idea because they had better protection (CPPM) and of course CDs had none. Problem was they couldn't move DVD-A players. Very few people outside of audiophiles bought them. As such the content kept being produced for CD because it was that or have almost no sales.
As I said, Blu-ray is proving to be somewhat of a hard sell as it is, since all it offers is a better picture (DVD offered a ton of better features). If they just said "Nope, you have to buy all new hardware," it would be a total non-starter. People wouldn't buy the HDCP2 players, since they'd have HDCP1 TVs and they'd want them to work. Thus electronics companies wouldn't be interested in selling HDCP2 players. Since people wouldn't have HDCP2 players, you couldn't make discs require HDCP2 or nobody could play them.
Things can be forced on consumers only in certain circumstances. All the encryption on Blu-ray worked because nobody really noticed, it was just a part of the format. Likewise HDCP wasn't something most people encountered problems with only the early adopters got fucked. However you now have a massive installed base of HDCP TVs, and growing every day. Try to screw that over and it just won't work. Your shit won't sell and if it won't sell, companies will stop making it.
Re:No not so much (Score:4, Funny)
Yes, this is all true. This is also slashdot, so I needed to karma whore to make up for expressing a Microsoft neutral point of view. A DRM consipiracy theory seemed likely enough to garner upvotes. Reverse trolling, if you will.
This is the universal hack. (Score:5, Informative)
All digital content ultimately ends up as an HDMI stream protected by HDCP.
With HDCP compromised that stream can eventually be captured. All that needs to happens is for a company to make a NON-HDCP compliant capture card which just happens to be easily flashable. Think they might end up selling a lot of those? Think some companies in asia would be willing to make that "mistake".
This goes beyond Bluray. Want to get HD quality capture of your favorite HBO show, or maybe some first -release movie rentals (movies rented while still in theaters)?
Everything ends up as an HDMI stream protected by HDMI
The claim that it would be too much bandwidth or too large is just silly.
1920 x 1080 x 24 bits per pixel x 24 fps = 145MB/sec. Fast but not beyond a RAID.
120 minutes of 1080p 24fps uncompressed is roughly a terrabyte. Large but once again not beyond current disk systems.
1) capture the stream
2) dump it to disc
3) re encode with a good multi pass encoder to any format, size, resolution, and bitrate you want.
While not 1:1 it can be virtually indistinguishable from the original.
Sure hacking the compressed copy makes duplication easier and faster but the media protection is always changing. This is the unversal hack. If it is video it can now be captured *nearly* perfectly.
Re:This is the universal hack. (Score:5, Interesting)
All digital content ultimately ends up as an HDMI stream protected by HDCP.
With HDCP compromised that stream can eventually be captured. All that needs to happens is for a company to make a NON-HDCP compliant capture card which just happens to be easily flashable. Think they might end up selling a lot of those? Think some companies in asia would be willing to make that "mistake".
Kind of funny, when you think about it. Used to be that the shady Chinese knockoffs were the less useful hardware, because they wouldn't go to the extra effort to make them work right. Now, it's easy to conceive a scenario in which the cheap stuff is the most functional, because they won't go to the extra effort to properly break them.
Re:This is the universal hack. (Score:5, Informative)
This has long since been true for DVDs just because of region coding. Cheap Chinese manufacturers think nothing of hiding a secret menu or option which lets you make your player region-free.
well thats that then (Score:4, Funny)
Just like digital audio and DVDs, Blu-ray will no longer be a profitable media.
Re:well thats that then (Score:5, Insightful)
Comment removed (Score:5, Insightful)
Side Effect (Score:4, Interesting)
Perhaps they can now stop worrying about plugging the analog hole.
Hear that sound? (Score:4, Insightful)
Somewhere, right now, in a corporate office somewhere, the wrong heads are rolling.
People seem to think this was done for Piracy (Score:4, Funny)
People seem to think that this was done for piracy, or done by extraordinarily clever hackers through a lot of time and pain.
Thats all bunk. The whole reason people hack these master keys is to sell a butt-load of t-shirts.
Clueless about what HDCP does (Score:5, Informative)
With the HDCP master key, one can build hardware that decrypts HDCP encrypted signals (that is the easy and well documented part) and is accepted by the HDCP encoder on the other side (that is the hard part). You still need rather sophisticated hardware. Not that easily built by your average software hacker.
That in turn allows you to record the signal coming out of your video card or Bluray player. That's about 200 MB per second. I don't have any hardware lying around that can record the output of a DVI card for two hours and neither does your average slashdot poster.
So this doesn't allow _you_ to backup your Blu ray discs. It will allow some rather sophisticated pirate organisation to pirate Blu ray discs, and they will produce Blu ray discs that again you cannot copy. So you as the end user won't gain anything from this.
Okay (Score:5, Insightful)
Right, now all I need is for someone to build a complete HDCP stripper, emulate/strip BD+ completely, supply cheap BD-R/RW drives and media, give me a few cheap HDMI cables, a new "HD-ready" TV, and a free voucher for the BluRay version of every movie that I already "own" on DVD and I'm ready to join the HD era.
Hell, I still can't see the extra pixels at my comfortable viewing distance (so I "must be blind"), but I have to get with technology apparently. Apparently my 1440x900x32-bit display, fed via a VGA cable, or SCART, or composite, is "obsolete" and not as good quality as me having a digital cable, despite decades of viewing to the contrary. Apparently being able to watch *anything*, not having to worry about where I bought the disk, not having to fight with new cabling that does a lesser job of simply putting some images on my screen, and being able to backup all my movies is "old-hat". Oh, and I have to pay an extra X amount per month, plus new decoder hardware, in order for them to send me a slightly higher quality signal down my aerial/satellite dish/cable. In the case of FreeView, that means second-generation hardware too. Not wanting that apparently makes me "cheap".
I don't own Blu-ray hardware, don't own "HD ready" kit, and I don't miss it. My normal computer monitors have been "HD" for decades, you just want to add fancy definitions and restrictions so that it's "Movie Industry HD" instead of "HD". When you solve these problems, you'll see the boom in HD adoption that you are desperately hoping for.
Movie companies: The deal in the past was always "I give you about £20, you let me watch that movie wherever I take the disc/tape, on whatever hardware I want, and I promise not to copy it". That sufficed for about 40 years. If you're not willing to keep up your end of the bargain any more, then I won't keep up mine. My morals and job require me not to break the last promise, so I just won't give you the £20 (which is creeping closer to £40 now) OR watch your movie. Deal? Last time I went to the cinema was over a year ago, and that was because I was passing, was bored, was with someone and we needed to fill a few hours until the restaurant opened. The movie we saw was a heap of crap but wasted a few hours. I can't even *name* any movies that come out in 2010. I don't feel I've missed out, though.
breaks HDCP, not AACS (Score:5, Insightful)
People are confusing this master key that breaks HDCP, saying it can help decrypt Blu-Ray discs. That's not the case: Blu-Ray is encrypted with AACS, which has a similar concept of device keys derived by a master key. AACS has a mechanism of revoking compromised device keys. Getting the AACS master key would bypass that mechanism, and would be great news.
This key isn't the AACS master key This is an HDCP key, which would allow one to create a "unauthorized" device that can connect to HDCP-encrypted HDMI and succesfully decrypt the HD stream.
HDCP has been known to be nearly broken since 2001 [cryptome.org], in that obtaining the device keys of 40-50 devices is enough to calculate the master key.
Re:Honestly, is anyone surprised this has happened (Score:4, Informative)
Provided sufficiently large keys (1024 bits or more in the case of RSA), brute force is infeasible. "Reverse engineering" only really applies if the details of the cryptographic primitives are not already publicly known (pretty much never the case).
Re:Hear that MPAA? (Score:5, Insightful)
Re:Hear that MPAA? (Score:4, Informative)
Re:Why confirm? Two words: British Petroleum (Score:5, Insightful)
Look at the metric shitload of bad press BP got when they tried to lie and evade regarding their recent oil leak. I believe the people responsible for that are no longer with the company.
It is interesting that someone would question why on Earth Intel would step up and do the right thing that will be best for the company in the coming weeks and months. I think this is because we have come to expect large corporations to act with all the integrity and intelligence of a retarded dinosaur after it has had its brains knocked out by a piece of asteroid shrapnel. Apparently real engineers continue to work at Intel and for some unknown reason, at least one of was placed in a position of authority.