Microsoft's DRM 'cracked'

GargGarg Purveyor of Lincoln Nightmares Icrontian
edited September 2006 in Science & Tech
Microsoft's digital rights management (DRM) for Windows Media protected files has been broken, according to news sources. A new program can strip the protection from the files, leaving them with unrestricted uses. That is, until Microsoft closes the hole.
A program called Fairuse4wm has been posted on the net and is apparently capable of breaching Microsoft's Digital Rights Management (DRM) system.

It could spell problems for internet music shops, potentially enabling users to download unlimited files.

However, an analyst said Microsoft was probably working to "close the hole".
And Microsoft will close the hole. Their DRM system can be dynamically, seamlessly updated. What's significant about this development is not just that people can "free" their restricted files for the next few days until Microsoft fixes the problem. It also means that now that DRM has been cracked once, more hackers will likely get into the game, and breaches of DRM could become more common. Perhaps most importantly, it is a clear signal the people are not ready to kick the free (or at least, unrestricted) music habit anytime soon, and companies that embrace that fact may be putting themselves in a more realistic position.

In a related story, the world's largest music group is allowing its music to be downloaded for free from an advertisement-supported service: Link

Source: BBC News

Comments

  • ThraxThrax 🐌 Austin, TX Icrontian
    edited August 2006
    Something to note: The DRM schema can't be updated unless you let it update your licenses and files.
  • GargGarg Purveyor of Lincoln Nightmares Icrontian
    edited August 2006
    Would that happen automatically if you're using a service like Napster? When I start Napster up, it gives some ambiguous messages like "updating library."
  • airbornflghtairbornflght Houston, TX Icrontian
    edited August 2006
    DRM will always be cracked, it is just a game of cat and mouse imo...
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited August 2006
    Okay, it's officially been patched. Anyone who was connected to the internet and launched their respective DRMed service late last night had an updated DRM control downloaded to their PC. Author is working on version 1.2. Only way to avoid it was to back up the old DLL, and use a hex editor to update the version # to the new version while leaving the old hackability.
  • edited August 2006
    I'll just stick with Tunebite for now and avoid all the mess. :D
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    Recracked. Version 1.2 strips the newest blackbox keys by Microsoft for WMA10 and 11, as well as V1 copyright protection that a user might accidentally place on their CD when they rip it with WMP10/11.
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    yay
  • JustinJustin Atlanta
    edited September 2006
    Mudd knows best. Tunebite>DRM.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    Yeah, except you lose a hell of a lot more quality going through the internal loopback than you do with a WMA -> MP3 conversion.
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    yeh, DRM sucks, plain and simple. This almost makes me want to redownload all 6,000 tracks from napster again. oh well, I record at 192kb/s, and it sounds pretty good to me. and that is all that really counts. Still not sure if DRM is gonna work in the long term or not. It just keeps getting cracked...
  • KwitkoKwitko Sheriff of Banning (Retired) By the thing near the stuff Icrontian
    edited September 2006
  • GargGarg Purveyor of Lincoln Nightmares Icrontian
    edited September 2006
    Still not sure if DRM is gonna work in the long term or not. It just keeps getting cracked...

    Since the people out there cracking and haxing music files out there are the minority, the biggest factor will be how much money the DRMed services make. If Napster and iTunes keep making a profit, they won't change their ways unless they think they'll make more money.
  • edited September 2006
    Thrax wrote:
    Yeah, except you lose a hell of a lot more quality going through the internal loopback than you do with a WMA -> MP3 conversion.

    I've actually been pretty impressed with the quality of the rip with Tunebite. I've played the original DRM'ed WMV file and then followed it with the mp3 rip back to back and honestly, I can't tell the difference between them And that is with playing either through my Z5500's or through my Bose headphones. I do rip to 192 kb/s to preserve as much quality as possible though. I can definitely hear the difference between a 192 rip or 128 rip.
  • edited September 2006
    I've purchased [link removed] and it's worth buying.
  • KwitkoKwitko Sheriff of Banning (Retired) By the thing near the stuff Icrontian
    edited September 2006
    I've banned mephisto and he's worth banning.
  • profdlpprofdlp The Holy City Of Westlake, Ohio
    edited September 2006
    I laughed at KwitCoβ„’'s last comment and it was worth laughing. ;D
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    Patched.

    I find it funny how microsoft can not fix a zero day vulnerability in a reasonable amount of time, yet they can patch this within days.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    No, it's still unpatched. ;)
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    Thrax wrote:
    No, it's still unpatched. ;)

    Is it? engadget is reporting that it is fixed. and wmp crashed while trying to extract the key, where it worked 2 nights ago. so im guessing he will find a workaround in a a couple of days.
  • GargGarg Purveyor of Lincoln Nightmares Icrontian
    edited September 2006
    ...so im guessing he will find a workaround in a a couple of days.
    Viodentia seems to think so.

    What do you think of Microsoft's latest memo, which claims to patch version 1.2?

    I'll reserve full commentary until I've had a chance to examine the new IBX in more detail. I'll release a new version sometime this week.
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    RE: RE: RE: Cracked.

    v1.3 is out, and gets around Microsoft's newest patch.
  • Private_SnoballPrivate_Snoball Dover AFB, DE, USA
    edited September 2006
    Thrax wrote:
    RE: RE: RE: Cracked.

    v1.3 is out, and gets around Microsoft's newest patch.

    It looks like unless MS reworks the DRM scheme from the ground up he will just continue to fill in the blanks they leave with every patch.
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    Thrax wrote:
    RE: RE: RE: Cracked.

    v1.3 is out, and gets around Microsoft's newest patch.

    OH GOODY, I've been waiting!
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    I don't know what you've been waiting for. As long as you have Automatic Updates disabled in Windows, you don't use WMP, and you don't download that update when you go to MS Update, they can never patch you.
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    yeh, but napster automatically sends me the updates; how nice of them.:aol:
  • ThraxThrax 🐌 Austin, TX Icrontian
    edited September 2006
    They didn't send me the updates.
  • airbornflghtairbornflght Houston, TX Icrontian
    edited September 2006
    Thrax wrote:
    They didn't send me the updates.

    mine did, soon as I logged in, because 1.2 ceased working, started throwing errors, and automatic updates are indeed off. I just hope this keeps up, I saw that microsoft has subpoenaed him, and are filing charges. The accuse him of stealing source code or something. he just used their api. would be a pretty good news story to follow.
Sign In or Register to comment.