Live data from Hacker News

A peek into the curious world of HDMI copy protection

adamsblog.aperturelabs.com

11–20 of 36 posts

Re: A peek into the curious world of HDMI copy protection

#11

DRM doesn't have to work technically. You can just make the whole thing ROT13 and then pass a law that its illegal to unscramble it. The technical part isn't the part that matters.

If infringement goes to court, the content owner needs to prove that they took adequate measures to protect their property and that they tried their best to alert the consumers of what constitutes the violation.

This is why there are technical updates to DRM systems (they need to be reasonable, but in the interest of consumers backwards compatibility can waive that requirement) and also why there are the non-skippable FBI warnings on discs.

Re: A peek into the curious world of HDMI copy protection

#12
post #4

See also, "Warner Bros and Intel Sue Over HDCP Crack Piracy" from December: http://torrentfreak.com/warner-bros-and-intel-sue-over-hdcp-... "Freedom USA, which also operates under the names AVADirect and AntaresPro, makes several devices which allow consumers to convert HDCP-encrypted digital signals to analog signals. This means that users could potentially record pay-per-view broadcasts, including Hollywood movies.…

Or to record gameplay from a PS3.

Re: A peek into the curious world of HDMI copy protection

#13

DRM doesn't have to work technically. You can just make the whole thing ROT13 and then pass a law that its illegal to unscramble it. The technical part isn't the part that matters.

If decryptors are criminal then only criminals will have decryptors. The legal side of things isn't going to bother the commercial rippers one single bit; they'll just stream from somewhere that hasn't signed up to the Berne convention. Burma is close to both Thailand and Bangladesh no? You want to buy a cheap copy of movie mister? Top quality! Work in US and EU.

Re: A peek into the curious world of HDMI copy protection

#15

In the article, Adam Laurie writes: HDCP (the copyright protection mechanism in HDMI) is broken. I don't mean just a little bit broken, I mean thoroughly, comprehensively, irredeemably and very publicly broken. Broken in such a way that any possible recovery would mean layering it with so much additional new infrastructure as to render it entirely pointless. Broken. B-R-O-K-E-N. .... So why, then, is it still being s…

Clearly true, as stripping HDCP, while useful for interoperability with noncompliant devices, is an obviously fussy and inefficient way to store or distribute video supplied in a compressed format with cracked DRM (e.g., Blu-ray, iTunes).

Well, that and inertia, HDMI being the digital evolution of the old "analog hole".

Re: A peek into the curious world of HDMI copy protection

#16
Adam said that an HDCP-stripper can generate a key on-the-fly, thereby making it impossible to revoke. Does such a device exist? It was my understanding that all HDCP-stripper available were using static keys (which have to be reprogrammed by the end-user with a new key in the event the key is revoked).

Re: A peek into the curious world of HDMI copy protection

#17
post #9

Earlier quoted context omitted.

That's not the main reason. If it were, then Hollywood would have stuck with CSS for Bluray and HD-DVD instead of making AACS. They tried hard with AACS: unlike CSS, it uses a real, peer-reviewed encryption algorithm (AES) and has a very complex key management system. Hollywood was really hoping to get a technical solution to DRM and not a purely legal one. (Of course it failed in the end.) The real reason why these…

Yup. It already exists as HDCP v.2 (totally new system reenginered from scratch). It'll likely start to be used together with the HDMI v.2 protocol eventually, most likely for UHD TVs as you said. http://blog.cryptographyengineering.com/2012/08/reposted-cry...

I still can't understand why they even bother.

The problem with software-based DRM is that you can always, in the worst case, run the whole thing in a virtual machine and capture the output the software thinks is going to a display but is really going to a video encoder.

The problem with hardware-based DRM is that you have a hundred million devices in service when a vulnerability is discovered. Then you can't even securely issue a firmware update as a result of the exact same vulnerability you're trying to patch, and if the vulnerability is in the hardware itself then you're totally screwed.

Normal cryptography is Alice sending a message to Bob without Eve being able to read it. We know how to do that pretty well at this point -- and even then, look at the regularity we see security patches to e.g. OpenSSL. DRM is not even that. DRM is Alice sending a message to Bob that self-destructs after Bob looks at it, even if Bob doesn't want it to. It isn't clear that this is even theoretically possible against a determined attacker, and in practice it hasn't even held up to amateurs and hobbyists.

All they're doing is just pissing money away and inconveniencing their paying customers. I'm pretty sure the only reason we still have new DRM systems at all (as opposed to faux DRM whose sole purpose is to invoke the DMCA) is that there are still companies who make money peddling it and the people paying them haven't yet been able to see through the lies.

Re: A peek into the curious world of HDMI copy protection

#18

Earlier quoted context omitted.

Yup. It already exists as HDCP v.2 (totally new system reenginered from scratch). It'll likely start to be used together with the HDMI v.2 protocol eventually, most likely for UHD TVs as you said. http://blog.cryptographyengineering.com/2012/08/reposted-cry...

I still can't understand why they even bother. The problem with software-based DRM is that you can always, in the worst case, run the whole thing in a virtual machine and capture the output the software thinks is going to a display but is really going to a video encoder. The problem with hardware-based DRM is that you have a hundred million devices in service when a vulnerability is discovered. Then you can't even se…

DRM is popular not because it makes the possible impossible (not even the least technical people at the studios think this), but because it makes copying more expensive. As such, it's one leg of the "anti-piracy" stool, along with spurious lawsuits, punitive licensing deals, &c.

You (and I) might think the whole think is a donkey circus that just ends up making things worse, but it's important to keep in mind that there is a reason for it, and it's not false consciousness on the part of the content owners, or magical pixie dust from DRM vendors.

Re: A peek into the curious world of HDMI copy protection

#19
post #18

Earlier quoted context omitted.

I still can't understand why they even bother. The problem with software-based DRM is that you can always, in the worst case, run the whole thing in a virtual machine and capture the output the software thinks is going to a display but is really going to a video encoder. The problem with hardware-based DRM is that you have a hundred million devices in service when a vulnerability is discovered. Then you can't even se…

DRM is popular not because it makes the possible impossible (not even the least technical people at the studios think this), but because it makes copying more expensive . As such, it's one leg of the "anti-piracy" stool, along with spurious lawsuits, punitive licensing deals, &c. You (and I) might think the whole think is a donkey circus that just ends up making things worse, but it's important to keep in mind that t…

>DRM is popular not because it makes the possible impossible (not even the least technical people at the studios think this), but because it makes copying more expensive.

Except that it doesn't. The user who downloads pick-your-favorite-DVD-ripper doesn't even have to know that it contains code to remove CSS, they just download it and it works.

At the same time, DRM is costing them money. If I go to the store and buy a shiny plastic disc for $30 and take it home and it doesn't play because my $2000 TV from two years ago doesn't have HDCP version whatever, I am not going to go straight out and buy another $2000 TV. I am just going to spend my money on something other than plastic discs that won't play on my TV until the time comes when I would have replaced it anyway. And two months after that happens, someone breaks the new DRM and they come out with new content that won't play on my new TV.

The net result of DRM is to make piracy more convenient relative to purchasing. As far as I can tell its continued existence has only two causes: The first is the DRM snake oil salesmen bamboozling people into thinking it isn't a net negative, and the second (which I imagine is the real reason) is that it allows major content producers to better control content distribution channels and thereby exclude, tax or penalize smaller competitors. But that doesn't require the DRM to be effective in any way, it only requires the DMCA and lawsuits against anyone who attempts to challenge them in the market for content distribution.

Re: A peek into the curious world of HDMI copy protection

#20
post #18

Earlier quoted context omitted.

I still can't understand why they even bother. The problem with software-based DRM is that you can always, in the worst case, run the whole thing in a virtual machine and capture the output the software thinks is going to a display but is really going to a video encoder. The problem with hardware-based DRM is that you have a hundred million devices in service when a vulnerability is discovered. Then you can't even se…

DRM is popular not because it makes the possible impossible (not even the least technical people at the studios think this), but because it makes copying more expensive . As such, it's one leg of the "anti-piracy" stool, along with spurious lawsuits, punitive licensing deals, &c. You (and I) might think the whole think is a donkey circus that just ends up making things worse, but it's important to keep in mind that t…

> DRM is popular not because it makes the possible impossible (not even the least technical people at the studios think this), but because it makes copying more expensive

No, it exists because it's usually a contractual obligation for licensing the content for distribution to at least make a token effort to protect content. That's really the biggest reason.

Source: I work at an entertainment company

Post reply on HN