The Lazy Genius

Security News & Brain Dumps from Xavier Ashe, a Bit9 Client Partner

Blu-Ray AND HD-DVD broken – processing keys extracted

Posted by Xavier Ashe on February 13, 2007

Arnezami, a hacker on the Doom9 forum, has published a crack for
extracting the “processing key” from a high-def DVD player. This key
can be used to gain access to every single Blu-Ray and HD-DVD disc.

Previously, another Doom9 user called Muslix64 had
broken both Blu-Ray and HD-DVD by extracting the “volume keys” for each
disc, a cumbersome process. This break builds on Muslix64's work but
extends it — now you can break all AACS-locked discs.

AACS took years to develop, and it has been broken in weeks. The developers spent billions, the hackers spent pennies.

For DRM to work, it has to be airtight. There can't be
a single mistake. It's like a balloon that pops with the first prick.
That means that every single product from every single vendor has to
perfectly hide their keys, perfectly implement their code. There can't
be a single way to get into the guts of the code to retrieve the
cleartext or the keys while it's playing back. All attackers need is a single mistake that they can use to compromise the system.

There is no future in which bits will get harder to
copy. Instead of spending billions on technologies that attack paying
customers, the studios should be confronting that reality and figuring
out how to make a living in a world where copying will get easier and
easier. They're like blacksmiths meeting to figure out how to protect
the horseshoe racket by sabotaging railroads.

The railroad is coming. The tracks have been laid
right through the studio gates. It's time to get out of the horseshoe
business.

From Boing Boing.  Or you can go read the article on Doom9.org.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: