HD-DVD and Blu-Ray Protections Fully Broken Options

[krabapple]

dont' think this has been posted yet -- if so please delete -- from slashdot yesterday

http://slashdot.org/article.pl?sid=07/02/13/1724238

gEvil (beta) writes "According to an article at BoingBoing, the processing keys for the AACS encryption scheme used by both HD-DVD and Blu-Ray video discs have been extracted, and a crack has been released. What this means is that there is now a method to extract the copy-protected content of any HD-DVD or Blu-Ray disc out there. This is different from Muslix64's previous crack, which only extracted the volume key for each disc. This new method bypasses this step and allows anyone to extract the data without first requiring the volume key."

This post has been edited by krabapple: Feb 14 2007, 20:26

[OmniCbex]

I've been following HD decrypting for a while now, but this is news to me. Thanx for the update. Every hole the AACS devs missed will make it exponentially easier to crack. Slysoft AnyDVD HD is is alpha and there will soon be DVDShrink / Decrypter-esque progs, I foresee.

"AACS took years to develop, and it has been broken in weeks. The developers spent billions, the hackers spent pennies."

One of my fav quotes from the original article. When will they learn that DRM is as futile as it is expensive?

This post has been edited by OmniCbex: Feb 14 2007, 21:14

[spoon]

The only secure DRM is one that connects to a server to validate that one person - most people would not allow their TV or DVD to be connected to the internet, so current DRM is futile (where the attacker is also the recipient of drm, which means it will always be hackable).

[user]

Well, at least with DVD-Audio they have still success with their protection, though it was cracked and tools were in internet available.
It is less time and PC/HD-stress because of too many manual steps, I think, to buy a DVD-A new or used via ebay eg. and keep that DVD-A, than trying to copy (and sell it again).
Another factor against coyping: The huge data amounts, file sizes.
I think, who wants DVD-A or HD-DVD instead of normal CD/DVD-Video, will be willing to invest (more) money for high quality content. Whereas CD and DVD-V will fulfill a very well "standard" high-quality scenario for a very long time, still.

[zombiewerewolf]

Wow, this is pretty fast. HD content is still in its early stage, just came out like a year or two, and its protection had already been broken. Those crackers amazed me.

Do you think HD-DVD and Blu-Ray protection scheme will be updated? The HD market is still immature, I think there still time if they want to make any changes.

This post has been edited by zombiewerewolf: Apr 20 2007, 22:53

[rjamorim]

The only secure DRM is one that connects to a server to validate that one person

That is, until someone manages to reverse engineer the authenticating server and create another one - that basicly authenticates everything - and use it through a proxy.

Well, at least with DVD-Audio they have still success with their protection, though it was cracked and tools were in internet available.

DVD-Audio is a chicken-and-egg problem. Hackers won't bother with it until it becomes popular enough, it won't become popular enough until it gets broken by hackers (because, unbroken, DVD-Audio is pretty useless compared to CDDA)

Do you think HD-DVD and Blu-Ray protection scheme will be updated? The HD market is still immature, I think there still time if they want to make any changes.

That's unlikely, they are already experiencing underwhelming sales, breaking compatibility would make consumers even more intimidated.

Besides, everyone that spent huge bucks to buy hardware players would be righteously pissed off.

This post has been edited by rjamorim: Apr 21 2007, 04:01

[smok3]

the thing that pisses me off is the money they spent for silly DRM system, which could be much better used for building a children hospitals for example.

[rjamorim]

I have only one thing to say about all this:
09-f9-11-02-9d-74-e3-5b-d8 -41-56-c5-63-56-88-c0

[rohangc]

I have only one thing to say about all this:
09-f9-11-02-9d-74-e3-5b-d8 -41-56-c5-63-56-88-c0

Getting HA.org into trouble, are we?

[Rotareneg]

I have only one thing to say about all this:
09-f9-11-02-9d-74-e3-5b-d8 -41-56-c5-63-56-88-c0

Getting HA.org into trouble, are we?

Don't look too closely at my avatar.

[rohangc]

Don't look too closely at my avatar.

I know what I am looking at! But even after staring at it for half an hour, I still can't see what I know is supposed to be there.

So, how do I find what is visible, yet invisible in that picture?

This post has been edited by rohangc: May 4 2007, 13:26

[rjamorim]

I have only one thing to say about all this:
09-f9-11-02-9d-74-e3-5b-d8 -41-56-c5-63-56-88-c0

Getting HA.org into trouble, are we?

Sure, HA and a few million other web sites :-B

http://www.google.com/search?q=09-f9-11-02

I know what I am looking at! But even after staring at it for half an hour, I still can't see what I know is supposed to be there.

So, how do I find what is visible, yet invisible in that picture?

Looks like a binary coded representation of the hex string as an image. Quite clever...

It's easy, just convert the hex values to binary, arrange them in a grid where each column represents a byte (I.E, a pair of hex values), then interpret the zeros as black and ones as white, or vice versa.

This post has been edited by rjamorim: May 4 2007, 15:48

[kurtnoise]

I have only one thing to say about all this:
09-f9-11-02-9d-74-e3-5b-d8 -41-56-c5-63-56-88-c0

More Pictures



@Roberto : ready for hosting something on rarewares ?

This post has been edited by kurtnoise: May 4 2007, 16:43

[Tropican]

AACS was not "broken", "hacked", or "cracked" IIRC. The Volume ID and processing keys have been found through memory dumps of players.

Using those two keys, it's possible to calculate the VUK needed to decrypt a movie.

The processing key can be renewed with every MKB version. What this means is that every few months when a new batch of disks is shipped, we'll have to search for a new one.

However, there's no way to stop us from getting new processing keys from the memory of players.

This post has been edited by Tropican: May 4 2007, 22:19

[rjamorim]

http://www.theinquirer.net/default.aspx?article=39413

It's almost sad...

[TREX6662k6]

J!nx just released the t-shirt with the number on. Gona get my self one of those.

[OmniCbex]

thinking about spray-painting the code on the side of my piece of crap van. Maybe a vista ultimate product key on the other side too, just to even it up.