From giles@raj.phys.sfu.ca Wed, 3 Nov 1999 09:51:45 -0800 (PST) Date: Wed, 3 Nov 1999 09:51:45 -0800 (PST) From: Ralph Giles giles@raj.phys.sfu.ca Subject: [Livid-dev] another (sensationalist) article in wired Saw a link to the following article on Slashdot: http://www.wired.com/news/technology/0,1282,32263,00.html Not much there, mostly just "the industry is shocked" spin on the dvd crack. However, they did get a statement from the DVD forum. Perhaps we should finish the algorithm documentation soon incase we need a cleanroom implementation? To quote: The circulation through the Internet of the illegal and inappropriate software is against the stream of copyright protection. Toshiba, which has led the establishment of the DVD format and is the chair-company of the DVD Forum, feels it is a great pity," wrote Masaki Mikura, manager of the strategic partnership and licensing division at Toshiba Ltd. "In the future, the laboratories will be more actively conducting strict surveillance and take counter measures against illegal, inappropriate software and hardware in the market. Moreover, we believe that, based on the recent legislation, legal measures and steps will be taken by copyright holders against such violation of intellectual properties," Mikura wrote. Rather bald admission of the intent of the recent copyright modification bills the US has seen, there at the end. :/ -ralph
From alan@lxorguk.ukuu.org.uk Wed, 3 Nov 1999 18:46:12 +0000 (GMT) Date: Wed, 3 Nov 1999 18:46:12 +0000 (GMT) From: Alan Cox alan@lxorguk.ukuu.org.uk Subject: [Livid-dev] another (sensationalist) article in wired > Rather bald admission of the intent of the recent copyright modification > bills the US has seen, there at the end. :/ One good thing about the US is that you have seem to have free speech rights to publish "DVD exposed" in written form as a 2600 article or in Phrack or Dr Dobbs 8) Alan
From jfbeam@bluetopia.net Wed, 3 Nov 1999 13:59:48 -0500 (EST) Date: Wed, 3 Nov 1999 13:59:48 -0500 (EST) From: Ricky Beam jfbeam@bluetopia.net Subject: [Livid-dev] another (sensationalist) article in wired On Wed, 3 Nov 1999, Ralph Giles wrote: >Not much there, mostly just "the industry is shocked" spin on the dvd >crack. However, they did get a statement from the DVD forum. Perhaps we >should finish the algorithm documentation soon incase we need a cleanroom >implementation? > >To quote: <snip> Not to fuel an arguement on the list, but there is a big difference between "copy protection", "copyright", and "copyright protection". CSS is none of those things (and all of them as well.) If the forum is trying to prevent illegal duplication of the DVDs then they should know damn well that CSS is not going to stop _anything_. If any piece of software can do CSS, then it _will_ be figured out. The only way to maintain such a trade secret is by wiring it into the silicon of the actual hardware where no one can get at it. CSS is not patented. I've seen nothing officially marking CSS as anyone's copyrighted property. Even if it were, the software (the lines of code) is what is protected by copyright. The actual process/algo. is not protected by copyright -- nor can it be. When is the DVD Forum going to get their head out of their ass and see that we are not trying to duplicate DVDs, we are simply trying to view what we've paid good money to view. "Piracy" is a very small problem just as it has been in the VHS tape market and the digital audio market (CD and DAT.) I don't see anyone suing Philips out of existance for a CD to CD recorder or Go Video for dual deck VCRs (which will duplicate tapes with Macrovision intact.) Face it people, DVDs are _huge_. Yes, people download entire images of CDs all the time -- the news groups are full of these things. Even with the ever increasing size of hard drives and personal netwrok connections, DVDs are just too damned big to be easily moved around. The average IDE hard drive can hold about 5 DVDs and would take weeks to download. Why would I invest the time and space to download a DVD when I can walk (yes literally walk) to Best Buys or Walmart and buy the DVD for 10$US? It's my opinion that the DVD Forum is trying to hold on to an at least marginally illegal monopoly. (I'm not a lawyer nor does the forum operate only in the US.) --Ricky
From bsa3@cornell.edu Wed, 3 Nov 1999 15:52:31 -0500 Date: Wed, 3 Nov 1999 15:52:31 -0500 From: Brad Ackerman bsa3@cornell.edu Subject: [Livid-dev] another (sensationalist) article in wired On Wed, Nov 03, 1999 at 01:59:48PM -0500, Ricky Beam wrote: > If the forum is trying to prevent illegal duplication of the DVDs > then they should know damn well that CSS is not going to stop > _anything_. If any piece of software can do CSS, then it _will_ be > figured out. The only way to maintain such a trade secret is by > wiring it into the silicon of the actual hardware where no one can > get at it. I seem to remember something about the NSA's attempts at tamper-proof ASICs being cracked by Sandia, although I can't find the cite. In any event, there's no way that a $100 device could possibly contain a decryption chip expensive enough to be resistant against the efforts of a grad student and a small university lab, let alone several PhDs with twenty years of experience each and the resources of IBM Microelectronics. [Just to pick one place at random where there exist people with motive, means, and opportunity.] I'm not sure if the studios are so dumb as to believe CVS would stop piracy. They'd have to have the IQ of a C. elegans to believe that region coding would convince customers to not import discs, but they forced it on manufacturers anyhow. The only thing that's certain is that we are not dealing with corporations whose motives, actions, and/or plans can be logically deduced. -- Brad Ackerman N1MNB "Conjecture has become fact, bsa3@cornell.edu and rumour has become history." PGP: 0x62D6B223 -- _Serial Experiments Lain_ http://skaro.pair.com/ Layer 09: "Protocol"
From springer@convergence.de 04 Nov 1999 12:53:54 +0000 Date: 04 Nov 1999 12:53:54 +0000 From: Martin Springer springer@convergence.de Subject: [Livid-dev] another (sensationalist) article in wired Brad Ackerman <bsa3@cornell.edu> writes: > The only thing that's certain is that we are not dealing with corporations > whose motives, actions, and/or plans can be logically deduced. I think the corporations know already what will happen. They just need some time to reorganize their companies and business models. I found an interesting article about what they are concerned with next: (http://www.edtn.com/story/biz/OEG19991015S0024-R) <snip> Hollywood wants the 5Cs to include such conditions as "no Internet retransmission" in the DTCP specifications so that "it would be much easier, on a long-term [basis], to manage the situation where everything can be connected and retransmitted digitally, when the high-speed connection becomes available," said a movie industry executive. </snip> Today they know that they did not succeed to prevent copying of DVDs. They still believe that they can prevent transmission of movie content by defining a "cryptographic protocol to protect audio/video entertainment from illegal copying, interception and tampering as it traverses high-performance digital buses such as 1394". Tomorrow they will know that this attempt is useless as well. Then they will present the new business models they are developing right now and still make their money. For me this seems logically deduced. Martin -- Martin Springer convergence integrated media gmbh 10115 berlin +49.30.85908840 chausseestrasse 8 germany
From andreas@andreas.org 04 Nov 1999 16:20:37 +0100 Date: 04 Nov 1999 16:20:37 +0100 From: Andreas Bogk andreas@andreas.org Subject: [Livid-dev] another (sensationalist) article in wired Ricky Beam < jfbeam@bluetopia.net> writes: > piece of software can do CSS, then it _will_ be figured out. The only way > to maintain such a trade secret is by wiring it into the silicon of the > actual hardware where no one can get at it. Repeated cracks of Pay TV systems have shown that even wiring something in silicon doesn't mean no one can get it. Andreas -- "We should be willing to look at the source code we produce not as the end product of a more interesting process, but as an artifact in its own right. It should look good stuck up on the wall." -- http://www.ftech.net/~honeyg/progstone/progstone.html
From jfbeam@bluetopia.net Thu, 4 Nov 1999 12:36:20 -0500 (EST) Date: Thu, 4 Nov 1999 12:36:20 -0500 (EST) From: Ricky Beam jfbeam@bluetopia.net Subject: [Livid-dev] another (sensationalist) article in wired On 4 Nov 1999, Andreas Bogk wrote: >Ricky Beam <jfbeam@bluetopia.net> writes: >> piece of software can do CSS, then it _will_ be figured out. The only way >> to maintain such a trade secret is by wiring it into the silicon of the >> actual hardware where no one can get at it. > >Repeated cracks of Pay TV systems have shown that even wiring >something in silicon doesn't mean no one can get it. Cable systems are (at least used to be) analog. Anyone with an o-scope can literally see what they did to scramble it -- this was a favorite trick of mine in high school. The cable box had ciruitry to undo the scrambling and a processor getting data from the VBI of some channel (Time-Warner uses ch.5 here in Raleigh, NC [*]) to tell it to turn on or off the decoder. In the case of the Zenith boxes TWC uses in the analog system, the board(s) are encased in tar to prevent anyone from tampering or re-engineering it. 2600 (wonderful people!) had an article some years ago with detailed instructions on where to drill two holes in the tar and attach a paper clip to perm. enable the decoder :-) [Digital cable is a whole other problem.] Even though you can now see the picture, you still have no idea what's actually in the silicon -- and you really don't need to. --Ricky * WRAL found this out a few years ago in the course of testing a set-top broadcast system (some Microsoft thing.) It worked perfectly over the air, but was nowhere to be found in the cable signal. Finally, TWC told us they were putting the control codes in there :-( It's not like that's easy to change. (It also means to block the comm traffic to your box, you'd have to kill the CBS station.)
From andreas@andreas.org 04 Nov 1999 18:56:20 +0100 Date: 04 Nov 1999 18:56:20 +0100 From: Andreas Bogk andreas@andreas.org Subject: [Livid-dev] another (sensationalist) article in wired Ricky Beam <jfbeam@bluetopia.net> writes: > >Repeated cracks of Pay TV systems have shown that even wiring > >something in silicon doesn't mean no one can get it. > Cable systems are (at least used to be) analog. Anyone with an o-scope can > literally see what they did to scramble it -- this was a favorite trick of > mine in high school. The cable box had ciruitry to undo the scrambling and > a processor getting data from the VBI of some channel (Time-Warner uses > ch.5 here in Raleigh, NC [*]) to tell it to turn on or off the decoder. Well, I'm mainly referring to the European hacks, where a smart card is involved which decrypts a session key transmitted in the VBI. So most attacks on these systems involved extracting the algorighms and keys from a smart card. Details on the techniques used can be found here: http://www.cl.cam.ac.uk/~mgk25/sc99-tamper.pdf Andreas -- "We should be willing to look at the source code we produce not as the end product of a more interesting process, but as an artifact in its own right. It should look good stuck up on the wall." -- http://www.ftech.net/~honeyg/progstone/progstone.html