iTunes 4.5 Authentication Cracked 725
fooishbar writes "Yesterday, Apple released iTunes 4.5, which deliberately broke the 4.2 authentication scheme, which had been successfully reverse-engineered. However, crazney has been at it again, and within 24 hours of downloading iTunes 4.5, has broken the new scheme, and added more features to this library along the way. If you want to incorporate iTMS support in your program, give libopendaap a go!" Reader ScottGant submits this story about the Pepsi/iTunes promotion: "News.com has this story about Pepsi's iTunes promotion give-away. The promotion,
which is slated to end this Friday, was to have given away 100 million
tracks through Apple's iTunes
music site. But according to Apple on Wednesday, only about 5 million
free songs have been redeemed."
Only five million? (Score:5, Interesting)
Also, about the new authentication crack: I am curious how this will impact their deal to offer free weekly songs, I'm assuming it's some sort of deal with the record industry. Today is a fairly uninspiring Avril Lavigne track (but free! I got it anyway!
Re:Only five million? (Score:5, Interesting)
Personally in Raleigh, NC I never saw a 'iTunes' bottle but then again I don't drink a lot of soft drinks anyway.
This is annoying. (Score:4, Interesting)
If you don't like this, you shouldn't use iTunes at all and don't buy their music because this is something they need to sell music online. Last I checked, you can just buy the CD at the store that contains no DRM at all.
4.5 busted sharing with previous versions (Score:5, Interesting)
Re:That was quick (Score:5, Interesting)
This isn't about DRM, it is about access to the music store, sharing, etc. outside of the iTunes application.
And despite the poster's assertion, there's no real reason to think the authentication scheme was intended to break compatibility; as most developers know, sometimes you need to make changes for other reasons that force a break in compatibility. If this WERE about DRM, I'd say it was likely, but I see no reason to think this separate change was deliberate. It may have been, but no one's given any reason to think it.
Re:Only five million? (Score:5, Interesting)
Bad thing, I never remembered to keep the bottle, I tossed it like normal. Dont know how many other people don't know, or don't care.
Re:Only five million? (Score:5, Interesting)
In the area I'm in (Downtown Long Beach, Ca), the iTunes bottles didn't reach most stores until the end of February. All of the stores were carrying Lakers promotional bottles instead.
Once the iTunes bottles started showing up, I won a few songs. When I went to redeem them, iTunes didn't have any of the specific songs that I wanted. They didn't have any Led Zeppelin songs, so I went looking for some songs off of a CD that my wife wants. They didn't have that either, so my caps didn't get turned in.
Re:Why do "free" songs require credit card numbers (Score:2, Interesting)
But to keep myself on topic.. Apple probably has a standard singup path.. They assume that if you are going to redeem a free song.. that you might buy something later.. But yes.. its lame to require a credit card when you are making a purchase of $0.00..
Pepsi Redemption Rate (Score:5, Interesting)
I wonder what the typical redemption rate is for the Pepsi, Coke and other softdrink give aways. I know for paper coupons [cnn.com] the redemption rate is about 2 percent. Granted alot of those coupons go straight into the trash. However, when people print coupons from the web only 20 percent are redeemed. And if someone is going to print them, you would think they would use them.
My point, is the Pepsi-iTunes rate of 5 percent unexpected?
Re:Only five million? (Score:3, Interesting)
I'd say the only ones who benefit from this deal is Apple, but that credit card requirement scared away most people. So, other than more awareness, Apple didn't gain much from this.
5% sounds about right (Score:4, Interesting)
I personally got about 30 free songs (Score:4, Interesting)
It wasn't a bad promotion, but many times we had to go out of our way to even find the Pepsies with the offer. They were hard to find.
Re:Why do "free" songs require credit card numbers (Score:3, Interesting)
How is this authentication Cracked. (Score:5, Interesting)
Authentication cracked means that you cand take an encrypted password and retreive the plain text for and already existing account.
All this guy seems to be able to do is figure out where and how iTunes sends its login information, so he can put it in his own application.
5million, because they want a credit card. (Score:3, Interesting)
i had a couple caps but i didnt feel like signing up. great promotion there. only
100,000 winning caps were not produced! (Score:1, Interesting)
Re:Yay for hackers!!! (Score:3, Interesting)
They need to work on their business model, because this piecemeal anti-cracking stuff is a joke.
Just like Rebates (Score:1, Interesting)
Woops. Oh well, who cares about one free track anyway? What am I going to do with one free track. I've used the music store twice and it was to purchase full albums that I could't find on IRC to download.
Re:Wrong way round (Score:4, Interesting)
No [againsttcpa.com] they [cam.ac.uk] won't [notcpa.org].
Don't be surprised when Apple suddenly becomes one of the biggest supporters of "trusted" computing, and introduces a palladium technology of their own. And all the Mac zealots who were busy telling us before why Apple DRM was good, while Microsoft DRM was bad, will come back to tell us why Mac Palladium is good.
I'm not saying the coders here are doing something wrong because they are pushing Apple in that direction: if we self censor ourselves to appease the DRM monglers, then we are where they wants us anyways. Apple picked sides in this battle, and for all the bullshit their fans are feeding us about "nice" DRM, the side they chose leads only one way. Goodbye user controlled computer. Welcome Palladium controlled user.
Re:Only five million? (Score:5, Interesting)
I did buy a few and I won all but one of them. I really liked the promotion and I'm sorry it's (nearly) over. There are still caps in the stores, so I think they should have extended the redemption period.
Since I wasn't able to tilt the bottle and see which bottles were winners, I thought it was interesting that I won most of them. I live in LA, and we've only had the bottles for a couple of weeks now. Perhaps they had to use up the winning caps and so a higher percentage of people here were winners.
I think they should have stuck in maybe 3 codes for each 12-pack. That would have given the heavy drinkers a chance to win. The contest as it is seems designed for light drinkers, and that's just plain silly. Why not cater to your huge customers and hope to snag a few from Coke?
(I'm afraid that I like Diet Coke in cans quite a bit more than Diet Pepsi in bottles, so from a conversion perspective this was a flop).
D
Re:Only five million? (Score:4, Interesting)
My experience. (Score:1, Interesting)
Why? Because there is not enough music I -LIKE- on iTunes. I don't like 90% of the pablum they tried to force to me, and when I was browsing around, there wasn't anything I wanted that I Didn't Already Have. Nearly a third of my 24 redeems were recommendations from friends, or re-aquisitions of songs I don't have on CD alreay.
Did it change my soda drinking habits? Sort of. Before the promo, I was a diet coke drinker, I swapped to Diet Pepsi while I could find the bottles. Now, I drink Diet Coke again. (Well, Diet Mt Dew, there's another promo on Dew Points...)
As for breaking it? Eeh, I never worried about the first one. I burned to CD all the songs I DL'ed, and listen in the car. My MP3 Player is my PC where I have them legitimately anyway. Perhaps in the future that will change.
Pepsi F*CKED the distribution (Score:5, Interesting)
I'm still getting yellow caps now; it's a good thing Apple is still letting me redeem them (at least through tomorrow), because I've already cashed in 7 or 8, and could reap a few more between now and the end of work tomorrow.
Re:Am I the only one who thinks this is bad? (Score:1, Interesting)
Re:Fantastic. (Score:2, Interesting)
I think your vision of civilization is seriously warped, and your grasp of Japanese history is terribly flawed. While Tokugawa exhibited genius in uniting Japan into a single nation under the Shogunate, the culture that evolved from his social theories trapped Japan, for centuries, into a static class-ridden state that rejected change, both social and technological innovation, and was very much the equivalent of the European Dark Ages.
The elevation of the samurai to a ruling class, and the rigid caste system that they enforced, froze Japan's cultural development and reduced what had been a vital nation into a backward and primitive country that was fragile and all but helpless when it confronted aggressive US and Western neo-colonialism in the mid-1900s.
(It remains to be seen if such model, a culture largely shaped by fear of change and innovation -- and a desperate effort to freeze a economic elite in power by oppressive laws -- will prove irresistible to the RIAA and the US Congress;-)
For the vast majority of Japanese subjects, the experience of the Shogunate -- despite the peace that it brought to their nation -- must have been excruciating terrible. You were what you were born to be, period. Social mobility disappeared. Economic development, technical development, social development, and political development were all but brought to a grinding halt. Even the damn wheel seems to have been forbidden on carriages. Women (even samurai women) were, for the first time, forced into a state of utter dependance on males.
Rule by oppressive soldiers -- soldiers, mind you, in a centuries long interregnum in which there was no war -- made for a sad, damaged, pitiful, feudal society that is only retroactively redeemed in its ruling class poetry and Bushido myths.
By the mid-19th Century, culminating in the Imperial Restoration, the social structure had become so corrupt and self-destructive that -- when it briefly confronted the West -- it collapsed into a fascist monarchist revolution that set the stage for the aggressive Japanese militarism and imperialism that roiled Asia and the world for 50 years, until the WWII surrender placed them in MacArthur's thrall.
Step cautiously when you recommend Tokugawa's social vision. The new millennium already has an overabundance of fearful powerful folk and "leaders" who dream of extending the status quo indefinitely.
_AraratRe:Wrong way round (Score:3, Interesting)
Goodbye Internet access, which will require that your computer authenticates itself as correctly TCPA user hostile.
And even if you do find an ISP that will let you online, goodbye web content, since webpages will consist of encrypted content that only TCPA can read.
Goodbye IM access (they are currently breaking third party clients for "security reasons" every other month. With TCPA in place they will do it ones and for all).
Goodbye email access (Bill Gates is talking about using "trusted" mail agents to stop spam).
Goodbye computer gaming (TCPA "trusted" clients to stop cheating).
Goodbye reading Microsoft Office documents.
Re:Only five million? (Score:5, Interesting)
Then, as you pointed out quite accurately, there's the system requirements, bandwidth requirements, computer-experience and application installation experience requirements, and the need to be interested in music (many people don't listen to much music, or are just interested enough to listen to what's on the radio). Frankly, I think a 5% redemption rate should be viewed as a rather decent success of this product. If they thought honestly that they'd get a 30% redemption rate, they were kidding themselves. Personally, I think I would have guessed more like 10% based on my sense of the market.
I also think the promotion would have been much more successful if it targetted regular Pepsi drinkers who drink from cans. The return from cashing in these free songs is much higher if you've collected 10-15 free songs, and I'd say the likelihood of that person getting the songs and going through the effort is much higher than the likelihood of somebody else.
I'll us myself as an example (though I'm a bad one in most ways). I am not a regular Pepsi drinker - I drink Pepsi usually only when there are no other options (i.e. no Diet Coke around). I won an iTunes cap while on the road driving from Boston to New York at a rest stop in Connecticut where they only sold bottles, and only sold Diet Pepsi. I have used iTunes and purchased probably 15 dollars worth of songs from iTunes in the past. I thought it was very cool and great that I had a bottle cap worth a dollar, and I put the bottle somewhere meaning to keep and redeem the free song. Nonetheless, I didn't really give it enough thought to be terribly careful with that bottle, and ended up throwing it out by accident when cleaning my car after the drive. Had I gotten that bottle cap upstairs and dropped it by my computer, I probably would have redeemed it at some point. So even among people interested enough, competent enough, and so on who happen to get a winning bottle cap, the redemption rate is likely to be at best maybe 50%? And that's a pretty small fraction of the population
Pepsi only, not Pepsi products (Score:2, Interesting)
I think one thing that hurt the promotion was the lack of variety in sodas that could win. Pepsi, Diet Pepsi. No Caffiene Free Pepsi, Lemon Pepsi, Vanilla Pepsi, etc. No Mtn Dew (I can safely assume that the 5mil would break 10mil from the Slashdot crowd alone), no Dr Pepper, etc. I prefer Pepsi over Coke so when I was interested in a cola, it was going to be Pepsi. But I know a lot of people who generally like Pepsi products, just not Pepsi.
I'm in the DC area, we had the new bottles pretty quick after the promotion started (largely due to the lardy fatsos in Baltimore w/ a caffiene craze I bet
$.02
Re:Not surprising (in retrospect)/iTunes #'s (Score:3, Interesting)
This promo wasn't a failure by ANY means:
Let's say Pepsi produced 100 million bottles with free song caps. Out of those, 70 million were sold. 50% of the buyers had computers (down to 35 million) and 50% of them had broadband (down to 17.5 million) and 50% of them were interested in digital music (now down to ~9 million).
Apple got over 1/2 of those people to use iTunes, many for the first time. Many of these people, now that they had to download the software are likely to remain apple music customers.
Then you break it down further - those who like the iTunes Store that also drink Pepsi and those that have a portable player that will play them and those that were just generally confused and thought that it was STILL stealing or thought that it was exclusively an Apple Promotion.
I KNOW older people that think ALL downloaded music must be stolen or illegal AND I know people who think iTunes ONLY works on Macs or if it has an Apple Logo and says Apple Computer it must be Apple/Mac ONLY.
I'd say; if we take ALL that into consideration they actually had a 75-90% redemption rate.
Re:Wrong way round (Score:3, Interesting)
Re:Yay for hackers!!! (Score:3, Interesting)
Your comments are very astute if we assume that most people are similar to Slashdot readers. Apple has done a tremendous job of getting iTunes / iPod awareness into the mainstream -- there's a higher non-geek ratio than many people understand. Most iTMS users don't read Slashdot or other tech blogging sites, nor visit Sourceforge regularly. Most iTMS users don't have more than five PCs, or need to burn more than eight copies of a CD, or have a huge desire to dump their collection of iTunes-purchased tracks into their Kazaa share directory.
It just may be so that among your circle of friends, awareness and use of the iTunes crackers approaches 100% -- no debating that. However, among my circle of friends who use iTunes, awareness is practically zero, and when I've mentioned it to them, their responses have been more along the lines of "how retarded," rather than "ooh, just what I've been looking for." Internet or no, there's a whole different strata of users beyond the Slashdot crowd.
Re:Only five million? (Score:4, Interesting)
iTMS is a music store. iTunes is a kick-ass audio player/organizer. It is second to none, imho. No winamp user I know who tried iTunes ever went back.
Some shortcomings, but the DB makes up for them (Score:4, Interesting)
I believe that it was a poor design choice on Apple's part, but iTunes performance degrades quickly in the presence of shoddy video drivers. This may have been your problem. Also, if you disable SoundCheck (or just let it finish running) performance improves dramatically. SoundCheck determines the volumes of your music files and has iTunes compensate for bad rips, etc.
iTunes on Windows is slow
FairPlay is the DRM system used on files from the iTMS. iTunes could care less what you do with any of your files that were acquired elsewhere. It will even let you stream audio across your network with almost zero setup.
Winamp 2.95 is fast, convenient, and smart.
It sure is better than the 3.x version, but it has zero library management functions. It takes no time to search for a song in my library in iTunes. If I want to hear a song, I can begin to type any part of its name or its artist's name or even the album name and the song list updates live with each keystroke. It often takes just one or two characters to bring the song you want into the window. That is the one feature that sets iTunes apart from Winamp for me. I really liked Winamp and Macamp but I hated trying to find a particular song. I had to use filesystem searches, but that's not good enough.
You might want to take a second look at iTunes after you update your video drivers. Since you want it to be light weight, turn off all of the music store and sound enhancement features (turn off SoundCheck!). Then you will have an awesome music library management program. I think that if you have a significant music library that you will appreciate the search feature so much that it will eclipse iTunes other shortcomings.
5 Million is unsurprising (Score:3, Interesting)
It would seem that Pepsi did indeed screw up big time with the distribution. It's a shame the caps were only around for about a month, I would have gotten many more free songs if they didn't disappear so fast.