iTunes 4.5 Authentication Cracked 725
fooishbar writes "Yesterday, Apple released iTunes 4.5, which deliberately broke the 4.2 authentication scheme, which had been successfully reverse-engineered. However, crazney has been at it again, and within 24 hours of downloading iTunes 4.5, has broken the new scheme, and added more features to this library along the way. If you want to incorporate iTMS support in your program, give libopendaap a go!" Reader ScottGant submits this story about the Pepsi/iTunes promotion: "News.com has this story about Pepsi's iTunes promotion give-away. The promotion,
which is slated to end this Friday, was to have given away 100 million
tracks through Apple's iTunes
music site. But according to Apple on Wednesday, only about 5 million
free songs have been redeemed."
Why do "free" songs require credit card numbers? (Score:-1, Informative)
That's because for a "free" song you had to give them your credit card number. I complained twice to Pepsi and Apple...never got a response. So, as far as I am concerned, they've fucked themselves on this one.
On Pepsi's iTunes Contest (Score:3, Informative)
So when My Lovely Wife (MLF) would go to the store, she knew to look for Sierra Mist with the label. For about the last 5 months she's looked, and every so often I'd take a peek.
Nothing. Nada. I've talked to other people in the San Diego/Southern California area. Nothing. I was on a business trip to Chicago - didn't see any out there (though maybe someone who lives there might have had more luck).
I don't know if it's that Pepsi had a lot of "warehouse" Pepsi to sell that just never got to the market, or if they only shipped it to certain areas. But whatever the reason, I have not seen one iTunes Pepsi cap - and those friends I have who have seen them in their area mention that it's not 1/3 that one, but typically more like 1/10 (though perhaps they were victims of the "Bottle Tilt Trick" in their area from ambitious music buyers).
I'd like to hear that Pepsi extends the contest for another 6 months in the hopes that the labeled bottles will eventually reach stores, but I'm not holding my breath.
Only 5 million songs is no surprise (Score:5, Informative)
Maybe someone forgot to ship these things to places where people actually would use them?
Re:Why do "free" songs require credit card numbers (Score:5, Informative)
No, you didn't. I got two free, no credit card required.
Re:Only five million? (Score:3, Informative)
Re:Why do "free" songs require credit card numbers (Score:3, Informative)
I know that I did not enter a CC number when creating a login for my 9 y/o daughter to download free itunes.
Re:Why do "free" songs require credit card numbers (Score:5, Informative)
Re:Why do "free" songs require credit card numbers (Score:1, Informative)
No you don't...at least I didn't have to anyways. When I created my account to redeem my free music the credit card part was optional.
Re:This is annoying. (Score:4, Informative)
Right-- fairplay still works. (Score:4, Informative)
Fairplay still works without any changes. A "friend" did the following last night:
1. Using an old version of itunes on a pc, purchased a new song from the music store.
2. Launched VLC on the PC, and found it had no problem playing it. Checked c:\documents and settings\[username]\application data\drms and there was a new file: XXXXXXXX.005, in addition to the other two files that were already there. They had extensions
3. Upgraded itunes on the PC to 4.5. Bought another song. It shows fairplay v2 when you look at it's info.
4. VLC can also play this one. No new file in the drms directory was created.
5. Copied both songs.m4p and the key files from drms to the mac running the latest itunes. Put the keys in ~/.drms
6. Ran playfair (v 0.5.0) against the two songs. They decoded into
7. Just to double check, bought a third song using itunes on the mac. Ran playfair against it (still using the keys from the PC) and it decoded and plays fine.
My conclusion is that as long as you have the keys, you can still use playfair. My friend gets the keys from the PC running VLC. I don't know if other techniques may have been broken by the new itunes.
I don't have any problem with the ethics of removing the protection. I don't-- I mean, *wouldn't* use it to illegally share the music. It's just nice to have clean files in case Apple quits developing itunes for the PC, or some other unlikely scenario.
In Cali, (Score:3, Informative)
Free iTune download (Score:4, Informative)
Get 'em while they're hot--er, or before they melt?
Re:Why do "free" songs require credit card numbers (Score:2, Informative)
That's because for a "free" song you had to give them your credit card number. I complained twice to Pepsi and Apple...never got a response. So, as far as I am concerned, they've fucked themselves on this one.
Actually, when signing up, the option was given to input a credit card number now or later. I opted for later. I have downloaded several songs with the Pepsi promotion but I still have yet to give them my credit card number. :P
I have to admit that I do like iTunes. It has a nice interface, the music store seems well designed, and I haven't run into any issues with the DRM yet. But still wouldn't mind seeing a new version of software like PlayFair that addresses iTunes 4.5.
Re:Why do "free" songs require credit card numbers (Score:5, Informative)
And why not... (Score:2, Informative)
oh, and playfair:
mirror [fe.up.pt]
Look at this link (Score:3, Informative)
Re:Why do "free" songs require credit card numbers (Score:3, Informative)
For the promotion, all I needed was an email address.
Re:Only five million? (Score:1, Informative)
There is a 10 cap redeem limit per day for those who were waiting to redeem caps.
Re:Fantastic. (Score:1, Informative)
And last but not least: Great Wall? You do realize that Japan and China are different countries, right?
Your metaphor may be correct, but I can't really tell since you have your historical facts so confused.
Re:No they didn't (Score:3, Informative)
The McDonalds Monopoly game was rigged [cheril.com].
Upgrade the other machines! (Score:5, Informative)
Re:No they didn't (Score:3, Informative)
Not a surprise (Score:1, Informative)
Re:This is annoying. (Score:2, Informative)
I agree with you, but you could do even a little bit better if you spent money on services that don't utilize DRM. Emusic, magnatunes, audio cds, etc.
If/When these DRM-free sites get more market share than the DRM sites, record companies will start to rethink their positions on it.
Re:Why so few redeemed songs... (Score:2, Informative)
Re:5million, because they want a credit card. (Score:5, Informative)
They ask for it if you want set up the ability to purchase music at the time you open the account but you do NOT have to provide it to redeem a free song.
Re:Good? (Score:4, Informative)
Crazney has broken the pointless encryption on streaming things in the iTunes library to other machines on a LAN.
It has nothing to do with iTMS. Repeat after me: it has nothing to do with iTMS.
The encryption on streaming tunes between clients only serves two purposes: to try and keep people on the Apple upgrade treadmill and to force people to use iTunes on all their machines if they want to stream music between them from the iTunes library. This is your own music we're talking about here, no copyright violations are taking place.
To be frank, Apple is taking the piss with this sort of encryption, and now the piss is being taken out of them. Too bad, but it has nothing to do with FairPlay.
Tokugawa era (Score:3, Informative)
I can't even figure out what major Tokugawa construction project you might be referring to. I can't find anything other than a number of castles that were built.
Apparently [jcastle.info], one of the edicts of the Tokugawa era (not sure which Lord Tokugawa you're referring to) was that each province was required to have a castle. This resulted in a lot of castle-building, so it's hard to figure out exactly which one you're thinking of. I can't easily find any reference to a building at the end of a region.
Re:Only five million? (Score:4, Informative)
Fat consumption has nothing whatsoever to do with diabetes. You could eat bacon 3 meals a day and not have high glucose levels. (Your blood pressure and cholesterol levels might not be so terrific...)
Type 2 diabetes is one of two things: 1. You are not producing insulin fast enough to process large amounts of glucose in the blood.
Or 2. Your body is not absorbing the insulin fast enough to do so.
In either case, when you eat foods that are quickly turned to sugar in the blood (any foods which are high in starch or sugar, including white bread and potato products, and especially sugary foods like Pepsi) your blood's glucose level goes way up, because your body can't process it. This causes all kinds of problems. Fatty foods do neccesarilly raise your blood sugar levels. You may be confused because obesity (fat tissue, not fat consumption) slows insulin absorbtion, and is a contribuiting factor to Type 2 diabetes.
Just legally download free music (Score:4, Informative)
Re:This is annoying. (Score:1, Informative)
Re:What stopped me from downloading (Score:3, Informative)
Step 1 - go to iTunes website [apple.com].
Step 2 - download iTunes software - click on the download now button.
Step 3 - install the iTunes software and then run it.
Step 4 - Access the music store from within the iTunes software by clicking "Music Store" in the top of the righthand pane.
You should now see the big Pepsi logo and the phrase "Redeem your free song here."
Correction (Score:3, Informative)
Re:Only five million? (Score:4, Informative)
Distribution sucked majorly.
Here're three unclaimed codes (Score:1, Informative)
PPQ4F KKAI(D or less likely O)
HEWGG IHA4C
FPMFN DACVF
All are "One free song" of course, so enjoy !
Re:Why do "free" songs require credit card numbers (Score:3, Informative)
A lot of people seem to be up in arms over this, so let me clear it up somewhat: when the Pepsi promo was started, there was an option in the account settings to choose "none" for your credit card. However, in the last week, that option was disabled, and new accounts now require a valid credit card to be entered in order to be created. So both sides of the argument are correct.
An interesting side note: my account had the "none" option selected, so even though that's no longer an option, my account has been unaffected! Meaning, unless Apple figures it out, I can keep my account open without entering any credit card information. I intend to do all my future purchases via iTunes Gift Certificates. ^_^
Re:Only five million? (Score:2, Informative)
Re:And why not... (Score:2, Informative)
Re:Why do "free" songs require credit card numbers (Score:3, Informative)
Clicked on Redeem Song. Asked me to log on. Clicked Create Account. Page did not load. Navigated back, repeated several times. Popup comes up asking for information. Get submission errors if I try to submit without valid / complete CC info. Finally enter the info and await an email verification. Log on. Click redeem song, asks me to log on again. Log on with username and password. This time I'm allowed to enter codes. Once I find the song I want, it takes me 5 minutes to figure out that "Buy Song" is scrolled off the right side of my screen. Do a Help search to figure out how to buy the music in my cart. Realize I can't because nothing is in my cart, I'm "not logged in." Log in. Re-add song to cart. Click on Shopping Cart in left pane, click Buy Music. Enter username and password AGAIN. Confirm purchase (free).
I love iTunes, it's the best player/net radio/music file organizer/burner I have ever used, but the learning curve on the store's UI was ridiculous. Since then, I have had no problems redeeming 12 more codes.
Re:Wrong way round (Score:3, Informative)
There is almost always a solution. In virtually all the other cases, there is at least a workaround.
Distributors are the limitation (Score:3, Informative)
I live up in the North Country in New York. I'd consider my city to be pretty darn far from a major population center, yet strangely enough we had iTunes Pepsi's available by the second week of the promotion.
Fearing diabetes in my late 20s, I have long-since switched to Diet Pepsi, so collecting caps wasn't a problem -- I've amassed 47 winning songs thus far...
Re:This is annoying. (Score:2, Informative)
copyright tutorial [ncsu.edu]
Certainly you can't sell the copies, but it is also against the current interpretation of the spirit of the law to copy material in its entirety.
Re:Only five million? (Score:3, Informative)
This is because NutraSweet has a relatively short shelf life. It's something like 3-6 months (very vague recollection here), and then it loses its sweetness, completely.
The fountain soda is in containers or "bags" and can be in the channel for months or (gasp!) a year or more before it's hooked up and served -- really the distributors have little control over when restaurants or convenience stores hook it up. As such, it's still saccharine based to ensure they don't start serving out big "crap batches."
Re: Saccharine (Score:2, Informative)
Aspartame by itself is heat and pH sensitive (meaning it loses its sweetness over time), the concentrated fountain syrup causes aspartame to lose its sweetness faster than it would in a finished beverage. Fountain diet drinks, therefore, are sweetened with a blend of and saccharin to assure maximum product quality.
Re:Distributors are the limitation (Score:3, Informative)
Exactly. The marketing agency I work for currently has Pepsi as a client. One of the biggest hassles in getting promotions going is dealing with the bottlers and distributors. If the bottlers still have items in stock waiting to be sent out, then it's even tougher to get the new bottles out.
Re:On Pepsi's iTunes Contest (Score:2, Informative)
Re:This has nothing to do with the DRM! (Score:3, Informative)
No, it doesn't. The streaming protocol doesn't decrypt the music first. If you're not authorized (and would thus have the decryption key), you still can't listen to the music.
HERE'S WHY (AND WHEN) IT REQUIRES A CREDIT CARD... (Score:3, Informative)
iTMS tries to figure out where you are located. If you are connected to the internet via a computer in the United States, and it is fairly certain of this, it doesn't require a credit card to make an account.
If it is not sure, it requires a credit card to verify that your address is in the US.
It's a licensing issue: since they can't sell to people overseas, they can't give songs away to them either.
Now, having heard this, some people overseas might get ideas about bypassing such protections. They may well work, and they are Not My Problem.
Geez, guys. With 30 seconds of thought, any of you could have figured this out. Why are there so many 'but *I* needed a credit card!' 'but *I* didn't!' posts all over the place?
-fred