Home About The Codist RSS Feed

Will Industry Ever Learn, Copy Protection Never Works
May 01, 2007 13:21 perm link Readers: 759

All the storms today about the infamous HD DVD key seem like old news to me. Copy protection has never worked, and as far as I know, never will.

In the olden days (early 80's) game manufacturers first started putting weird hacks on the floppy disks that their games came on. Usually they would take advantage of odd hardware features to try and subvert the ability to duplicate and run the disk. One scheme would work for a while until someone found a way to defeat it, and then a new one would appear. That too would be defeated, and so on it went.

The problem with any such scheme was that the software at some point would have to actually run in the computer. You couldn't really hide it all that well. Sometime people would have simple code in their games to check for passing the complex copy protection.

if (pass)
{
  playgame();
}

This of course was a laughable bit of code to circumvent.

Over the years companies have tried virtually every kind of scheme since then, and without exception all have eventually fallen. As long as you have to (or it can be forced to) run the code on a computer it will be found. The whole idea of having a single key for all HD DVD's is itself laughable; it's like having a single key to all the houses in the country; lose it once and everyone's unsafe.

Only a complete fool would expect this to be kept secret.

Then again we are talking about the MPAA and their good buddies the RIAA, for whom bad sense would be an improvement. Today their lawyers are trying to deliver cease-and-desist letters to every site that even points to an article with the key in it (ie Digg, Google, etc). Yet the more they try the wider spread the key gets. The more they try the funnier it gets as well. This is the best kind of security theater.

You can't order the internet and its users to cease-and-desist and expect it to happen. Even governments try and fail.

Maybe these folks should check out a little history and discover the title to this article is old hat.

My Tags:

  • somedude: May 01, 2007 13:24

    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

  • : May 01, 2007 16:38

    Know what? Bank safes never worked either. Laughable against oxyacetalene torches and nitroglycerine.

    Yet banks still use them. Beats leaving the money out on the streets, protected solely by laws against taking it.

  • damian.nikodem: May 01, 2007 17:21

    Lol.. If theres money left on the street theres no law against taking it...

    Id consider the HD DVD Key (and to a lesser extent CSS) to be a step or 2 up from something that you can circumvent with 1 well placed 'no-op' abd a hex editor...

    As for creating unbreakable copy protection.. its not really that hard, its just expensive. all you have to do is make sure the end user (or a detirmined hacker) cannot run any executable code on your 'player'.. Then embedd all the logic of your entire player on a single microcontroller and if there is a 'programming interface' still left for it then it should be disabled in the factory or have those pins 'removed' before it reaches a customer..

    so... You would need to stream 'raw' data directly from a HD-DVD directly to a IC that could then drive a TV or moniter... All the actual decoding happening away from the the PC's CPU/RAM block would make it a mightly fine would make it mighty difficult to reverse engineer the algorythm, but because it can be played in some form then its still rather trivial to dump a movie out in analogue form and re-digitize in on its way back in, but it would make it difficult to get the 'perfect digital' copy ad it would have to go through a D-->A and then a A-->D before being compressed and considered 'copied'....

  • Paul: May 02, 2007 08:07

    The bank vault is a poor analogy. If a bank vault was broken into and emptied, the bank would replace the door and instigate extra security. Only that vault would be compromised, and only once. You wouldn't have to upgrade every vault in the world, and once repaired, the cracked vault would be at least as secure as it was, requiring a completely new effort to break it a second time. Even if you were stupid and left the keys or access code lying around beside the door, only that one vault would be vulnerable, and once the break-in was discovered, the lock could be changed.

    Compare that to DRM and software protection schemes, where one out of the millions of copies or players is compromised, causing EVERY copy of that product, or every single player, to be compromised too. You can't just "change the locks" because every copy or player in circulation would have to be replaced or upgraded. Even after doing all that, the cracked copy is still available; it will have been stored somewhere, and put online all over the place (and trying to track down, let alone shut down, all the warez sites and stored copies would be nigh-on impossible). With DRM and copy protection, once broken means forever broken.

    The only thing copy protection achieves is to delay the inevitable, and seldom for very long. The harder you make it to break, the more intrusive it becomes to the legitimate purchaser, but eventually it will still be broken.

    For something like a DVD movie, a music album or a software package, the protection will be broken long before the product's lifecycle ends, unless it's made so intrusive that your customers leave in droves anyway. Current DRM schemes are a hair's breadth away from "too intrusive" for the average consumer.

  • c: May 03, 2007 09:27

    Actually Damian, there is a law against taking money left on the street especially if you know it belongs to the bank - it's still theft (at least in the UK it is).

    It only becomes OK to take it if you can't take reasonable steps to find out who owns it and return it to the rightful owner otherwise it's dishonest appropriation.

  • Kevin: May 04, 2007 09:07

    Isn't it obvious to everyone that they WANTED the key leaked?

    In order to go to congress and ask for legislation protecting them, they have to be able to show the only way they can protect themselves is through legislation -- having exhausted all other alternatives.

    It's a win-win for them.

  • Add Comment

Name:


Optional URL:


Comment:


Save Cancel

Copyright © 2007 By Andrew Wulf