iPod Cracked, But Does it Matter?

Bennett Haselton writes "The Associated Press is writing that "DVD Jon", known for breaking the copying restrictions on DVDs, plans to market a method for breaking the copy protection on songs purchased from iTunes Music. What's missing from the story is the fact that converting iTunes music into unrestricted formats like MP3 is already trivial. In principle it's impossible to prevent music from being copied anyway, because a user can always play a song through an audio output jack and use another device to record the sound; there are several other methods that work by reducing the same principle to practice. Bottom line: there's no reason yet to get excited about the iTunes-cracking technology (and, indeed, no reason to buy an iPod), when you can already convert songs this way." Bennett's full article on the subject is available below.

According to an Associated Press story, "DVD Jon" Johansen is planning to market a technology for cracking the copy protection on songs purchased from Apple's iTunes Music Store.

This technology will probably be much discussed in the press as the release date draws nearer, but it's a case of using a flame thrower to kill a fly. It's already possible to convert Music Store songs to MP3 without even using any functionality outside of iTunes.

Apple doesn't make this easy to find, of course, and in fact tries to make it look impossible -- if you set your preferred import format to MP3, then right-click on a song in your iTunes "Purchased songs" list and click "Convert selection to MP3", you get the error: "[song name] could not be converted because protected files cannot be converted to other formats". But you can easily burn a series of songs to a CD, then select the songs on the CD and import them into MP3 format. (Of course, if you don't like wasting a writable CD each time you convert your songs, then wait until you've purchased a few more songs and convert them all at once.) All of this is based on core iTunes functionality, which won't go away unless Apple decides to stop letting users (a) burn CDs or (b) import CD songs as MP3 files, neither of which is likely.

But suppose Apple does manage to block this path. (The easiest way I can see would be to write a hidden code on each CD burned from protected songs with iTunes, so that iTunes would refuse to re-import that CD into an unprotected format. Users could re-import the songs with another application, but at least they'd have to open two programs!) You can still use a program like Total Recorder that can capture any sound output on the computer and save it to an MP3 file.

And even if it ever becomes possible for the audio playback application to seize control of the operating system in order to stop programs like Total Control from working, you can always connect a portable MP3 recorder to the audio output of your computer.

It's a common misconception that if a copy-protection algorithm gets broken, it must be because the encryption was too weak or the algorithm was flawed. But the Achilles heel of any such copy-protection scheme is that in order for the content to be playable, the playback program has to "break" the encryption every time, in order to play it. If the content is encrypted using a key, the key has to be stored on the user's computer where the playback program can find it. (If you didn't have to store the key along with the encrypted content, you could use encryption algorithms that are believed to be impossible to break with today's computers, by 15-year-old Norwegians or anybody else.) But even though every copy-protection algorithm is breakable in principle, it's usually easier just to capture the content as it's played back, which is what the previous examples do.

Logically, I think the only algorithm that would help to fight music piracy would be one that embeds a unique "fingerprint" or "watermark" in each downloaded copy of a song -- in the audio itself. A good fingerprint would have these properties:

• it should not be noticeable enough to interfere with the user's enjoyment of the song
• it should not be possible to copy the song in a way that destroys the fingerprint, without degrading the song quality and diminishing its value

A good example is the "cap code" dots that appear in certain frames of a movie; these are supposed to be unique to each movie theaters so that pirated movies can be traced to the theater where they were filmed off the screen. This, of course, doesn't make the film traceable to the individual pirate who filmed it, but it makes the movie theater accountable, and incentivizes them to prevent piracy. Unfortunately the "cap code" dots tend to fail the first criteria above -- people do find them annoying, to the point where they're nicknamed "crap code". (It would also be easy to remove them from pirated copies, but few people bother, since the cap code only gets the movie theater in trouble; it doesn't incriminate the individual movie pirate.) We can only hope that any fingerprints embedded in song files are a lot less intrusive.

In the meantime, don't get taken in by the hype around a new way to "crack" the existed restrictions on copy-protected song files. They were never really protected.

DRM sucks, news at 11

[tomstdenis (446163)]

Is anyone really surprised by this?

DRM is such a futile idea that the only way it would be possible would be to lock down consumer electronics so badly as to make them virtually function free.

We call that the theatre or a live performance.

Tom

Re:DRM sucks, news at 11

[Raptor CK (10482)]

If the end result of DRM was that I'd have a live band following me at all times, I'd be all for it.

Re:DRM sucks, news at 11

[gEvil (beta) (945888)]

Trying to make music uncopyable is like trying to make water not wet.

Behold the ice cube! : p

Re:DRM sucks, news at 11

[elrous0 (869638)]

And I shall offer comptetition with my new patent-pending innovation: "steam" -Eric

Re:DRM sucks, news at 11

[igny (716218)]

Wrong, it is energetically favorable [wikipedia.org] to have a thin film of liquid on top of ice regardless of the pressure.

Re:DRM sucks, news at 11

[tomstdenis (446163)]

Shut up Bruce.

Besides DRM is more than just copy protection. it's "rights" protection, like I have the "right" to only permit you to view that DVD on Tuesdays between 9pm and 930pm. I have the "right" to stop you from sharing the DVD, i have the "right" to stop you from backing it up or using clips for fair use purposes. I have the "right" make the media only work in select markets and then lock down the number of different players...

Effective, I have the "right" to make you my bitch. Squirm all you want, I'll cry foul and get the Federal government to lock up more kids!

Tom

P.S. note the quotes around "rights"

Re:DRM sucks, news at 11

[eldepeche (854916)]

That isn't at all what copyright means. Copyright regulates distribution, not use. If I buy a record, I do not have the right to make bootleg copies of it and hand them out or sell them. If I buy a book, I can't photocopy all the pages and staple them together and hand them out, or type it all into a text file and upload it onto my website. The copyright holder can, and can grant the right to do so. Before you accuse people of not understanding copyright law, you might want to know the definition of copyright.

The concept of fair use is mostly separate from copyright, because it is use and not distribution. If I buy a record and make a tape recording (or a digital one) so that I can listen to it on a portable player, copyright law has nothing to say about it because I'm not distributing it. If I buy a book and type all the content into a text file so I can read it on my laptop, that's fine.

The two areas come into conflict mostly due to the DMCA. Until this law came into force in the US, and its sibling pieces of legislation in other countries, DRM was annoying, as it inhibited place-shifting (fair use), but easily circumvented. The DMCA made it illegal to circumvent copy protection, so that, in theory, a person could be prosecuted for removing DRM in order to use a digital file on a portable player different from the intended one. In practice, it allows manufacturers of printers to sue manufacturers of replacement cartridges.

Anyway, I mostly just wanted to tell you that you don't know what you're talking about. I can't tell if you're joking.

Re:DRM sucks, news at 11

[berashith (222128)]

This is how my wife felt, until she tried to watch a DVD that she owned, on a tv she owned, using a laptop that she had purchased the DVD drive in for the purpose of watching movies (this was several years back). When she wanted to use a large screen and not hunch over the laptop, a simple S-video cable out to the tv showed the desktop of the laptop. Unfortunately, all of the content in the dvd playing program came out black. When I explained that this is DRM and its uses, that the maker was more worried about the potential of her making a vhs copy than her ability to watch the movie unless she went out and purchased their "approved" hardware, she changed her mind quickly.

I don't dislike DRM because I like free stuff. I dislike DRM because it artificially limits me. Before an argument about license and legitimate restrictions comes up, remember that I have to pay again if I lose or break my copy. The media companies need to decide that I own something, or that I license something, and give the rights to the consumer that correspond to the situation. They cant limit me based on the situation and change the rules only with the concern of screwing me for every penny.

Re:DRM sucks, news at 11

[Doctor Memory (6336)]

But if my DVD goes bad then it's my problem

Yep, just like if you dropped a vinyl album and it broke.

Or if I want to play my DVD on a device that uses a different format, too bad for me.

Yep, just like if you wanted to play your vinyl album on your 8-track player. Or your wax cylinder on your Gramophone. Imagine if the Beatles had been around earlier, how many times would you have had to buy The White Album by now?

Seriously, I don't think the media companies are restricting people's usage any more than they used to, it's just that people want more from their media because the potential is greater. You might as well complain that you can't listen to satellite radio on your car's AM radio even though you purchased a subscription...

Hopefully, once they've figured out their One True DRM, it'll be incorporated into everything, so I'll be able to copy shows from my TiVo onto a DVD so my daughter can watch them in the car. And yeah, I realize that if there wasn't any DRM I could probably do that today, but that's not the point. The industry is fixated on curbing piracy, and I'm not a pirate, so I say the sooner they get something they're comfortable with in place, the sooner I can start lobbying for digital medium independence. Once the DRM BS is settled, we can start agitating for our rights under fair use again, and have a better argument ("Hey, as long as it's protected, I can copy my own DVDs onto my media server and watch them from a hotel in Bangkok, right? I mean, I purchased the right to view them, didn't I?").

Bullshit! At least the editor(!) might RTFA!

[mstroeck (411799)]

He is going to market a way for COMPANIES OTHER THAN APPLE to create copy-protected content that is playable on the iPod. None of the crap you just wrote is in any way relevant to what he is up to.

Re:Bullshit! At least the editor(!) might RTFA!

[elrous0 (869638)]

Geez, I know this is /. But you think at least the SUBMITTERS could RTFA.

-Eric

Re:Bullshit! At least the editor(!) might RTFA!

[jfinke (68409)]

I agree. I was wondering what the hell I was reading there. The whole point of what he is doing is to allow say Microsoft to encode their files such that it is native to the iPod format. It is not so you can pull iTunes songs off.

I believe that this is what real did several years ago without much success.

Re:Bullshit! At least the editor(!) might RTFA!

[zeromorph (1009305)]

Yeah! The point actually is that he is going to commercialise his hack. And that is something more newsworthy than the fact that you can copy DRMed material through a digital-analog-digital conversion.

And if he (or they i.e. DoubleTwist [doubletwistventures.com]) is really doing that - what will Apple do to him/them in court?

DoubleTwist seem to be pretty sure about not being sued, but I can't imagine Apple not taking them to court. And thyen will any mp3-player manufacturer buy it before the whole issue is settled?

But you lose quality

[kill-1 (36256)]

You lose quality if you first convert audio from digital to analog, and then sample it again. But in the age of "CD quality" 128 kBit MP3s and crappy PC speakers, who cares about audio quality anyway...

Re:But you lose quality

[mgabrys_sf (951552)]

Audio Hijack from Rogue Amoeba. There - no analog conversion. Was that so hard?

Re:But you lose quality

[kill-1 (36256)]

That won't work with future DRMed PCs.

Re:But you lose quality

[pla (258480)]

Audio Hijack from Rogue Amoeba. There - no analog conversion. Was that so hard?

The grandparent post has the right idea, but either misspoke or misunderstood the real problem...

Even with "perfect" fidelity analog (or in the case you offer as an alternative, bypassing the analog step completely), playing and recompressing to MP3 will still cause a loss of quality, for two reasons.

First, AAC throws away slightly different "unneeded" parts of the sound than MP3 (or Ogg, or whatever lossy format you want to use) does. This means you have a serial reduction in quality with every generation of transcoding. You can avoid this problem by transcoding to a lossless format ("lossless" at the same sampling rate and number of bits per sample, anyway, since no truly lossless encoding exists, not even in analog)... But doing so gives you a much larger file with the same (lossily compressed) quality as the AAC you started with.

Second - and your suggestion may get around this, if the sound hardware allows it - Resampling an audio stream will virtually never capture the exact same moments in time, with the same exact starting point. Thus, even reencoding with the exact same encoder as the original will still result in the same sort of quality loss you see from transcoding.


Thus, if you consider the convenience of downloading compressed audio as worth the loss of quality compared to buying a CD (for almost the same price new, and actually less if you buy used) and ripping it yourself to something like FLAC - At least keep the original and never, ever transcode it. That means, if you want to really "own" your collection, you have the sole option of directly stripping out the DRM. Any other method will sacrifice quality for the convenience.

Analog re-recording is tedious!

[FooAtWFU (699187)]

There is value to a fully digital cracking technique. If you have a large collection of songs, it is a royal pain to set things up to re-record them, re-label them with titles and artists and such... it's good for one or two songs at a time, but for a big collection? Ick. With a digital cracking procedure, you can write an automatic tool that runs at well above standard playback speed and which you can walk away from (or leave running while you browse the Web...)

iPod Cracked?

[Meatloaf Surprise (1017210)]

I read most of the article and it discusses breaking drm on music purchased on iTunes. Can someone explain what this has to do with cracking the iPod?

Oh Bennett

[gEvil (beta) (945888)]

It's clear that Bennett didn't even bother READING the article that he's supposedly using to back up his claims. Nowhere in that article does it talk about DVD Jon (or his company) selling a tool to crack the iTunes encryption. However, what it does talk about is DVD Jon's company selling a tool that will allow other music retailers to encrypt songs that they sell in the format that is used by iTunes and the iPod.

Remember kids, Reading Is Fundamental!

Re:Oh Bennett

[tabdelgawad (590061)]

I don't know about TFA, but here is the first paragraph from a similar story on the BBC website:

http://news.bbc.co.uk/2/hi/technology/6083110.stm [bbc.co.uk]

[Begin Quote]

The code that prevents music downloaded from Apple's iTunes store being played on any portable player other than an iPod has been "cracked".
Apple has not commented on claims that Jon Lech Johansen has "reverse engineered" the FairPlay system.
Prominent hacker Mr Johansen has made a name circumventing software used to restrict the use of digital media.
His company, DoubleTwist, said that it planned to license the code to other digital music player manufacturers.

[End Quote]

Perhaps that's why the company is called *Double*Twist. It will allow both iTunes tracks to play on non-iPods and non-iTune tracks to be encrypted using Apple's DRM and therefore be playable on iPods.

No Reason to buy an iPod...

[PPGMD (679725)]

Huh? Why is broken iTMS DRM a reason not to buy an iPod? Since I purchased my first iPod years ago I only have 4 protected music files, 3 of which are political speeches from the National Conventions in 2004, and another is the free song that I got from a Pepsi. Heck I don't even use iTunes to put music on my iPod anymore, I use XPlay.

Anyone that assumes that the iPods success comes from iTunes Music Store is mistaken IMO, iTMS helps the iPod alot but what makes the iPod such a hot seller is good marketing by Apple, and a good product. The user interface for the iPod is still the best one on the market (never mind the fact that Apple has a patent on the interface which prevents competition), and iTunes is extremely easy to use even for people that know little about computers. That combined with excellent marketing makes the iPods extremely popular.

Bennett

[truthsearch (249536)]

Who is this Bennett person and why do I get the feeling he'll be as popular as John Katz?

crack still matters

[theStorminMormon (883615)]

One common misconception I've come across on Slashdot a lot is that security is either open or shut. An algorithm is either secure or broken. This is not how security works, and a couple real-life examples demonstrate this. You lock the doors on your car, but someone can still just break the window to gain access. But this doesn't mean locking the doors is meaningless, it makes it harder (or more risky) for a thief to gain access to the contents of your vehicle.

The same thing applies with iTunes. The question isn't "is it possible to strip DRM", but "how easy is it to strip the DRM". I don't think, for example, that being able to burn to a CD or capture audio output is practical for most people. I have over 40 GB of music. A lot of it is burned from my CD collection, a lot of it is from my wife's collection, and some of it is downloaded from iTunes. So I've got well over 8,000 files and of those a couple hundred are DRM-protected. I honestly don't know which at this point. For me to DRM-strip them using either of those methods is going to be like a day-long project that, frankly, I don't have time for. In addition to that, I'm not sure about the sound-quality degradation in converting from MP3 to audio CD and back to MP3. Or about going from digital to analog back to digital. In any case, it would be pain in the butt to go through my entire library, and I may not be able to practically avoid some quality degradation. Yeah - DRM is already "broken", but at what cost?

If the result of DVD Jon's crack is a program what will go through my iTunes library and batch process the files to strip any DRM automatically, then we have something on our hands that matters. In addition, there are a lot of additional potential applications for DRM-stripping to make music automatically portable across various music players. If my library was nothing but vanilla MP3s with no DRM, then it wouldn't realy matter if I accessed it with iTunes (for an iPod) or Windows Media Player (for various wannabe iPods).

The effect of DRM is not to make it impossible to move your music around, it's to make it inconvenient. Convenience is not a side-issue for digital music. It's the issue. Otherwise we'd all just carry around CD players and 500-disc CD wallets. The digital music industry exists because of convenience, so any approach that not only circumvents DRM but does it painlessly is a significant improvement over DRM-skirting strategies that require additional effort from the consumer.

-stormin

wow, new low

[oohshiny (998054)]

Not only did both the submitter and the editor get wrong what the guy was actually planning on marketing, the whole thing was followed by an uninformed and irrelevant rant about watermarking. What's the problem, guys? Are mere dupes getting boring?