Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Sticky Tape Defeats Sony DRM Copy Protection

Posted by Zonk on Tue Nov 22, 2005 02:04 PM
from the not-much-you-can-do-about-that dept.
cybrpnk2 writes "As reported by InformationWeek, Sony BMG Music's controversial copy-protection scheme can be defeated with a small piece of tape. According to thinktank Gartner analysts Martin Reynolds and Mike McGuire, Sony's XCP technology is stymied by sticking a fingernail-size piece of opaque tape on the outer edge of the CD. 'After more than five years of trying, the recording industry has not yet demonstrated a workable DRM scheme for music CDs. Gartner believes that it will never achieve this goal as long as CDs must be playable by stand-alone CD players.'"
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by CyricZ (887944) on Tuesday November 22 2005, @02:05PM (#14093030)
    Does using tape in such a fashion violate the terms of the DMCA? If so, could the tape manufacturers be held responsible for making a product that potentially aides in piracy?

  • Damn yo (Score:4, Funny)

    by Anonymous Coward on Tuesday November 22 2005, @02:06PM (#14093031)
    This would be a good place to say something insightful, but the headline has me dumbfounded.
  • by Zegnar (704768) on Tuesday November 22 2005, @02:06PM (#14093037)
    And they always said that home taping would kill the music industry...
  • by GweeDo (127172) on Tuesday November 22 2005, @02:07PM (#14093049) Homepage
    Sony/BMG sued 3M Corporation today for their new technology called "tape" to circumvent their copy protection and encryption schemes. They will be tried under the DMCA, news at at 11!
  • by Anonymous Coward on Tuesday November 22 2005, @02:08PM (#14093062)
    Here's what you can do to defeat it without risking your optical drive: Hold shift when inserting the disc or, even better, disable CD autostart. But that wouldn't make such a nice headline, would it?
    • by BenFranske (646563) on Tuesday November 22 2005, @02:12PM (#14093119) Homepage
      I think once upon a time there was a similar revelation that running a black marker around the edge would do the same thing. Really you're just interfering with the drive reading the data portion of the disc so it appears just as an audio disc. The parent is correct, the shift key or turning off autorun works just as well. They don't make headlines though.
      • by Enzo the Baker (822444) on Tuesday November 22 2005, @02:22PM (#14093217)
        No no no. Running a green marker around the edge of your CD is for making it sound better.
        • by NF6X (725054) on Tuesday November 22 2005, @02:47PM (#14093489) Homepage
          I know a guy who insists that degaussing his CDs (i.e., with a magnetic tape eraser) makes them sound better. I $#!^ you not!! I tried to be reasonable and explain how many ways that is wrong, but he insisted that I just have a tin ear. Well, I guess I better go turn in my Master's degree in electrical engineering, because it's no match to his Golden Ear.

          As if that wasn't absurd enough, he later told me how he breaks in his AC power cords by running a current through them before using them on his stereo, because otherwise the sound is too, well, I don't even remember what adjective he used. Yellow? Impudent? Octagonal? Whatever. He said that a new electrical outlet takes even longer to break in. OMFGBBQ! I'm ashamed to say that at that point I completely lost the ability to debate rationally with him and try to educate him, and told him what an idiot he is. Well, at least he doesn't bother to ask me any electronics-related questions any more.

          Sometimes I find myself thinking that I should invent some electrical snake oil to liberate audiophools from their excess money, but I just don't want to sink that low.

          • by LWATCDR (28044) on Tuesday November 22 2005, @03:38PM (#14094268) Homepage Journal
            What a moron! He uses CDs! Real audiophiles know that records have a much warmer sound than CDs. CDs are so digital sounding! Real audiophiles stick to analog recording with real tubes. I bet this guy doesn't even have the 1000lbs granite slab to mount is equipment on so he doesn't get vibrations from passing trucks and stuff! What a poser.
            And yes there are people like that and no for the love of all that is holy I am not one of them! It is a joke, true but a joke.
          • by Hoi Polloi (522990) on Tuesday November 22 2005, @03:50PM (#14094438) Journal
            Sell him some "special" 00 grit sandpaper and tell him to scrub the labels off of his cds with it. Tell him that it'll make the cd lighter and the sound "clearer".

            Make sure you get a good headstart before he destroys his cd collection.
            • by alienw (585907) <{alienw.slashdot} {at} {gmail.com}> on Tuesday November 22 2005, @04:22PM (#14094834)
              Actually, you can't measure any fidelity-related parameter in audio systems with an oscilloscope (or any other cheap, readily-available instrument). Distortion, for instance. Anyone can easily hear 1% THD, on any system. You'll see visible distortion on the scope only when it's at about 10% (when you get visible clipping). In fact, most digital scopes use 8-bit ADCs -- try listening to music on an ancient 8-bit soundblaster.

              A very precise spectrum analyzer designed for low frequencies would be much more useful, but you likely won't find one even in a well-equipped lab; a really good one might be _very_ expensive ($50k to millions of dollars).

              Quality is very difficult to measure, simply because the ear is a hell of a lot more sophisticated and sensitive to nonlinearities than any man-made instrument. I think listening to a system is much more useful than trying to measure it with cheap, primitive instruments (like THD meters or oscilloscopes). You can have two systems that measure the same THD but sound drastically different, simply because THD is a simplistic measurement.

              I hate audiophile snake oil ($500 power cables, $20k "interconnects", and magic boxes) as much as you do, but don't assume you can measure everything. Nobody knows how to quantify, for instance, the taste of something. There same applies to audio.
  • by CyricZ (887944) on Tuesday November 22 2005, @02:09PM (#14093073)
    Indeed, these scenarios show just how artificial restrictions on knowledge and information are. It is impossible to try to make such an inherently abundant resource scarce, in order to derive profit.

    • by kfg (145172) on Tuesday November 22 2005, @02:37PM (#14093384)
      " ". . .it will never achieve this goal as long as CDs must be playable by stand-alone CD players.'" "

      Well, obviously all they need to do is put a stop to this sort of nonsense.

      KFG
        • DVD stands for (Score:5, Informative)

          by typical (886006) on Tuesday November 22 2005, @06:35PM (#14096254) Journal
          I was also thinking some one should explain to them what the V stand for in DVD.

          Well, originally the "V" stood for "Video". That presumably made some marketing guy from some DVD Consortium company that made non-video devices unhappy, so it was renamed to "Versitile". After many more dollars spent debating this crucial issue, nobody could agree, so officially the "V" stands for nothing.

          You probably think I'm joking; I assure you, I'm not [wikipedia.org], sad as it is.

          I once had a boss that kept marketing people off of his back by generating busywork to occupy their time. Every time they had a meeting in which they wanted to influence anything technical, he'd bring up the fact that something lacked a name and emphasized how crucial it was to the product's success that the name be appealing. They'd vanish for a month. It was amazing to see this guy in action.

          Of course, we had to put up with silly names as a result, but we didn't have to deal with technically broken things, so it was worthwhile.
  • by gelfling (6534) on Tuesday November 22 2005, @02:10PM (#14093089) Homepage Journal
    Only outlaws will have office supplies.
  • by scovetta (632629) on Tuesday November 22 2005, @02:10PM (#14093090) Homepage
    Illegal technology, outlawed by DMCA:
      * Sticky Tape
      * Magic Markers
      * Shift Keys

    When will these companies learn? 3M, Sharpie, and Dell-- stop trying to get me to break the law!!!
  • Easier way (Score:5, Informative)

    by nsayer (86181) <nsayer@kf[ ]om ['u.c' in gap]> on Tuesday November 22 2005, @02:10PM (#14093096) Homepage
    Last time I had to defeat the usual sort of multi-session CD DRM I just used a whiteboard pen. It's helpful because if you go to far in (and start losing the last track), you can just rub little bits off until you get it just right.
  • Low tech hacks (Score:4, Informative)

    by Chr0nik (928538) on Tuesday November 22 2005, @02:11PM (#14093104)
    Gotta love it. Almost as cool as the captain crunch whistle.... well, not quite.
  • I predict (Score:4, Insightful)

    by LWATCDR (28044) on Tuesday November 22 2005, @02:12PM (#14093109) Homepage Journal
    That it will be impossible as long as CDs are playable!
    What is next will Sony try and outlaw mics and wires?
    Dear Sony. I will not steal your music. In fact I will not listen to or buy your music anymore. I am sure that eventualy artists will move to a label that treats it's customers with a bit more respect.

    • by amigabill (146897) on Tuesday November 22 2005, @02:47PM (#14093496)
      > I am sure that eventualy artists will move to a label that treats it's customers with a bit more respect.

      Sony will likely call your bluff here, as they know there is no such thing today as a label that treats its customers with any respect.
  • by tchuladdiass (174342) on Tuesday November 22 2005, @02:12PM (#14093114) Homepage
    Has there been any Audio CD drm put out that doesn't rely on the auto-run feature of Windows? I remember reading something about one method that would put defects in the disc that would be filtered out by an audio CD player, but I haven't seen any reports if that would affect cd-paranoia.
    In other words, since I do all my music work using Linux, do I need to worry about any of the protection methods currently out there?
    I'd like to see a list of all the drm methods that are "in the wild" along with their prevalence and effectiveness agains various OS's & tools.
    • by iamnotaclown (169747) on Tuesday November 22 2005, @02:55PM (#14093619)
      Has there been any Audio CD drm put out that doesn't rely on the auto-run feature of Windows? I remember reading something about one method that would put defects in the disc that would be filtered out by an audio CD player, but I haven't seen any reports if that would affect cd-paranoia.

      Yes, there is. There are a few different versions of this, but the general idea is to intentionally put bad data in the tracks (or the TOC) that would be error-corrected out by an audio CD player, but cause a CD-ROM to fail while attempting to read it. Some modern CD-ROM drives still have trouble with this type of copy control. Since the error correction layers have been subverted, the tiniest scratch will usually render the CD unplayable.

      More info here: http://www.cdrfaq.org/faq02.html#S2-4-3 [cdrfaq.org]

    • by Anonymous Coward on Tuesday November 22 2005, @05:04PM (#14095332)
      Audio CD Protections, in brief:

      - Zeroth Generation (the Click Generation):

      * Weak Sectors in ATIP: TTR Technologies MusicGuard (never deployed)

      Flat out doesn't work at all, you probably wouldn't even notice they'd done anything. Any Lite-On, BenQ or Plextor wouldn't even skip a beat. Only CD-ROM tested which even gave a damn was a Sony (heh), the drive in the PlayStation 1 to be precise. Didn't get a contract, so TTR partnered with Macrovision, and tried harder. Much harder. Much too hard, in fact.

      * Weak Sectors causing C2 Errors in Audio: TTR Technology/Macrovision SAFEAUDIO (limited deployment), Settec Alpha-Audio D-Type (data type, never deployed)

      Extremely rare, no longer used; the market overwhelmingly rejected it, which is to say, it broke a music exec's speakers. High channel return rate because of obscenely low compatibility, duplicators returning whole batches as bad pressings because they couldn't perform any useful QA on discs deliberately damaged to this extent. Useless. (TTR apparently liquidated.)

      Archiving: Alternate CDFS.VXD tools for Win9x may work, as they interpolate in exactly where SAFEAUDIO puts corruption. Other than that, deliberate damage = not perfectly playable, or rippable. Effectively an analogue medium with huge deliberate noise spikes. Use a mint disc, do the best you can, and high-order-interpolate over the scratches (Adobe Audition or something), just like archiving vinyl.

      - First Generation (The Anti-CD Generation):

      Archiving all first-generation formats merely needs a Good Drive and Good Software with Good Settings. Can be divided into roughly three groups:

      * High Jitter Spike: Cactus Data Shield (classic): CDS-100/CDS-200, First4Internet XCP-Aurora XCP "Red"

      (0'09", insert bad CIRC sector, 1200 weak sector/desync, 2 *blank* sectors with no sync, then start again with normal data.) Intent: Cause a "hiccup" during a burstmode rip which would be absorbed by a CD player's (tiny) buffer. Reality: Any quality drive firmware, buffer, or jitter correction, means you won't even skip a beat. Might slow down a little, but that's all. Now only marketed for internal releases/promos.

      * Malformed TOC/Evil Session with no player: Early Sony key2audio (1.0), Settec Alpha-Audio S-Type (session type), First4Internet XCP-Aurora XCP1

      Bread and butter, it's simple; include a normal or malformed TOC, and sprinkle liberally with a seriously malformed second session, relying on CD-ROMs being multisession and CD players being single session only.

      * Malformed TOC/Evil Session with autorun player: Sony key2audio, SunnComm MediaClòQ

      Differs from the above only in the second session being malformed, but having a valid data track containing a DRMv2 WMA player (or downloader). Players have evil EULAs, and may interfere with ripping while the player is running (although the first version of the key2audio player that appeared actually shifts the session enough to allow flawless ripping while the player is running...!) but as far as known, they don't leave behind malicious software.

      - Second Generation (The Autorun Generation):

      Rate of returns was still high, so Macrovision tried a weaker system with a much higher false negative, but a much lower false positive. Actually caught on; almost no returns. They could actually put the CD logo on these if they wanted.

      * Valid CD-Extra with autorun player: Macrovision CDS-300, Macrovision TotalPlay CD, Alpha-Audio M-Type (main type)

      Player (MS-DRMv2, as usual) interferes with ripping (while it's running) but doesn't seem to leave any malicious software behind. If the autorun isn't run (disable it, or hold SHIFT while inserting CD and be careful in Explorer) or supported, it's a normal CD-Extra. First session is valid Red Book.

      - Third Generat
      • by multipart/mixed (163409) on Tuesday November 22 2005, @02:54PM (#14093601)
        > the drive made funny noises faintly reminding to 1541
        > (that's the C64 floppy drive for you youngsters) read errors.

        It may have been the very same thing.

        The 1541 would recover from read errors by telling the stepping motor to position the head WAY past the outer track. Of course, this would cause it to bang it repeated against the cam stop. This would insure that the head was properly aligned for track zero (and probably why those damned drives went out of alignment so often!). Then, it would count forward the right number of tracks, and try to read the data again.
  • by archiereed (933183) on Tuesday November 22 2005, @02:13PM (#14093129)

    In 2003 some of the HP Labs researchers looked at the related issues and published a paper titled: "If Piracy is the Problem, Is DRM the Answer?" http://www.hpl.hp.com/techreports/2003/HPL-2003-11 0.pdf [hp.com]

    You might find the white paper interesting if you've not read it before. This caused quite a stir when it was released, both inside and outside HP, and is still quite relevent in light of the Sony issue. This provides an counterpoint even inside HP where we try to maintain some form of management across all the issues.

    The conclusion reads:

    "We pointed out that unauthorized use and unauthorized acquisition are two aspects of piracy. A key concept is how licenses are bound to content. We saw that various kinds of DRM technology address these issues in very different ways, but that all of them have some kind of flaw that make it highly unlikely that they will be able to solve the problem of piracy. The real problem with piracy is that it takes only a small fraction of users who are capable of dissociating licenses from content to make managed content available to a significant fraction of users in unmanaged form.

    We explored the concept of draconian DRM in which devices that handle managed content do not handle unmanaged content at all. Draconian DRM could potentially be effective at eliminating piracy if it were ubiquitously adopted, but introduces a new problem of how to handle public content.

    Our conclusion is that currently proposed technical measures will not be able to completely stop the illegitimate distribution of pirated content. We believe that content producers must take steps to compete with the piracy as an alternative."

  • by Anti-Trend (857000) on Tuesday November 22 2005, @02:16PM (#14093161) Homepage Journal
    I still maintain that the best way to defeat Sony's DRM is by simply not buying their music. All the fuss and legal backlash is nothing if we are two-faced in our dealings with them, and indeed all big industry. If we're chiding them on the one side for their vicious tactics and financially supporting them on the other, they hear the message loud and clear: we're pushovers. I think that's the answer they were prodding for when they first decided to include XCP on their CDs in the first place.
  • Gartner 2001: (18 July 2001 'Research Management Update: Content Management - Timetable for Digital Rights Management' IGG-07182001-02 written by Michael Calvert; Analytical source: A. Weintraub, from http://www.dcita.gov.au/drm/1981.html [dcita.gov.au]:

    Gartner predicts that 2003 will be a critical year for DRM when mainstream content providers begin to understand and identify the value propositions DRM systems can provide. Around this time full production systems will be launched and there will be some settling in technology and standards. This will take some of the 'chaos' and risk out of choosing a particular technology for each functionality area. More importantly, there is likely to be a higher availability of well-integrated and flexible systems from outsourcing services or Application Service Providers (ASP). This could dramatically lower the capital and technical investment required from content owners to implement and utilise a range of DRM, ecommerce, marketing and content techniques. In Gartner's view, it won't be until 2004, or more likely 2005, that revenue models start to mature and mainstream adoption of DRM becomes commonplace.

    By 2006, Gartner sees the DRM market consolidating and a standard rights description language emerging. They identify the factors that will affect the success of the market as:

            * the acceptance by consumers of the regulation of e-content
            * the capability of the industry to establish a 'standard rights' language
            * the cost balance between developing a secure DRM solution and the potential revenue to be gained from DRM secured e-content management


    Not to mention September 2005 (http://www.gartner.com/DisplayDocument?ref=g_sear ch&id=485976 [gartner.com]):
    "Organizations increasingly need to create, store, retrieve and manage rich media files. Those that successfully cultivate a digital asset management environment can cut their associated operational costs in half."

  • HISTORY REPEATED!!! (Score:5, Interesting)

    by SmurfButcher Bob (313810) on Tuesday November 22 2005, @02:27PM (#14093282) Journal
    Oh, this is too funny.

    Many years ago in the Apple ][ era... Lotus 1-2-3 was a great spreadsheet. They invested a huge pile of money to make certain that you could not run their program without possessing the original disk. And try as we may, we couldn't figure out how they did it... there was one sector that was funky, but it didn't make any sense.

    Then, by chance, my neighbor had a nice RANA drive - and it had a 'write protect' button on the face, that you could manually toggle. We stuck a (non-working) copy into the drive to begin the arduous task of single-stepping through the code, and accidentally hit that button while doing so. The result?

    Lotus fired right up!

    They spent way too much money using a laser to create a specific media defect in a specific place; upon startup, the program would attempt to write to that location. If it failed, it knew it was the original. If it succeeded... then there was no defect there, and it was a copy.

    All that time and god-knows-how-much-money they invested in this scheme... only to be defeated by a .01 cent piece of 'write-protect' tape. And now, Sony repeats it with the same level of hubris... that's too funny.
  • FRAUD !!! (Score:5, Interesting)

    by Nom du Keyboard (633989) on Tuesday November 22 2005, @02:40PM (#14093406)
    In addition to everything else Sony is being sued over I wish they'd add Fraud to the list.

    People buy CDs to get the best 44.1Kbs uncompressed audio usually available for purchase. Yet the DRM'd versions are highly compressed audio files (hence things like the illegally included LAME decoder in the XCP package) where true quality is sacraficed in order to achieve compression levels allowing it to be sandwiched onto a standard CD.

    Some very fine audio chips and speakers are available for computers these days, and certainly some people use their computers as their primary audio system. Yet were on the packaging, or EULA (an astonishing concept for a music CD in and of itself), does it tell you that you'll receive inferior quality playback when played on your computer. How many people believe that the DRM'd discs are actually playing back the .WAV files, instead of WMA or other crap files? It's fraud to not inform consumers that even after they agree to the DRM that they'll receive degraded audio as a result -- and Sony should have to pay for that as well!

  • Ed Foster provides more information that allows us to make a "behavioral profile of Sony" [gripe2ed.com]:

    Sony has other DRM software. Here are quotes:

    MediaMax also "phones home" every time you play a protected CD with a code identifying what music you're listening to.

    ... before users can even say yes or no to accepting the Sony EULA, MediaMax has already installed a dozen files on their hard drive and started running the copy protection code. The files remain even if the user rejects the EULA, and the Sony CDs provide no option for uninstalling the files at a later date.

    ... an e-commerce revenue generation "feature of dynamic on-line and off-line banner ads. Generate revenue or added value through the placement of 3rd party dynamic, interactive ads that can be changed at any time by the content owner."

    Ed Foster says Sony management has a "scum" profile. Quote: OK, so let's see what we've got here. A company that seems bent on sneaking files onto unsuspecting users' computers, pretending they've gotten permission to do so from a vaguely-worded EULA, transmitting a constant stream of usage information back to their servers, and using that information for who-knows-what revenue generating opportunities. Does this sound like a familiar profile to you? Of course, it's the profile of all the spyware/adware scum that have come very close to destroying the Internet just to make a few bucks peddling their trash.

    Issues that remain concerning Sony's rootkit software and other DRM software:

    As is shown by Ed Foster's analysis linked above, attacking customer computers seems to be the kind of thing that is part of the Sony corporate culture. There has been no apology [userfriendly.org], and Sony management makes statements giving the impression they intend to continue infecting customer computers.

    A music retail store spokesman said that Sony's rootkit attack has become public just before Christmas. Customers can easily choose some other gift now that they are scared about computer attacks. Sony's attack has hurt the entire music industry, not just Sony. Also, the damage will continue after Christmas.

    Few people are technically knowledgeable. The Sony rootkit CDs will be causing problems for many, many years, as they are traded or borrowed or sold to thrift stores.

    The number of computers already corrupted by the Sony rootkit is probably far larger than the 500,000 quoted in articles about the Sony attack. That number is just the number of Domain Name Servers that show evidence that a computer has tried to contact the Sony phone home address. The average server would almost certainly service more than one corrupted computer.

    Following Microsoft's lead years ago, some businesses treat all their customers as crooks so that they can stop a few.
  • by glarbex (933185) on Tuesday November 22 2005, @03:16PM (#14093917) Homepage
    I really fail to understand what anyone hopes to achieve by any form of copy protection...

    As far as I can tell, the only form of copy protection that can hope to work against any low-level data extraction tool is one that involves partially invalid data or unreadable regions. And even then, you can do a straight 1:1 copy, and whenever it starts having read errors, put a 0 or something in those bytes and skip them. That is easily achieved using a utility like dd. In many cases, you can also read the disc in a virtual PC (e.g. VMware), and save the audio output to a disk file - and then delete the virtual PC in case of malware installed by the CD.

    Unless the disc is in a proprietary format which can only be read by a specific player, which has no standard output connections, you can copy anything that you can play, simply by plugging the output of whatever you use to play it into the line-in on your PC. If they somehow prevent that, you can still record anything using a microphone, as long as you can somehow get sound waves out of it.

    Also, is it really right to try and stop all copying? I absolutely cannot stand any kind of data being held within a single physical object, especially such a fragile one as a CD. I keep most of my CDs backed up onto two locations, but I steadfastly refuse to play the music on more than one location at a time, or share it with a friend. There can't be very many people in the world who would want to rip the musicians off, and not posess the necessary technical skills to bypass copy protection. The slightest hint of copy protection on a CD in my posession prompts me to try and create a "pure" copy, just because I can't stand my data being defiled by such things.

    Certainly, it is stupid to incorporate Windows trojans into the CDs. People trust the music companies; at least, they did. Things like this must really lower people's trust - especially since they try to disuade people from piracy by saying that pirate copies may contain trojans. I will certainly be very reluctant to insert a CD into a Windows computer without the shift key held down in the future.
    • by saskboy (600063) on Tuesday November 22 2005, @02:33PM (#14093344) Homepage Journal
      You're right that the tape is a bad idea. If someone does try it though, at least put a balancing slice on the opposite side of the disc. You don't know strange and loud until a CD EXPLODES in your CDROM drive. I've seen the remaining disc after an explosion, and sand almost has bigger pieces than some of what's left.

      Also in describing the Sony Rootkit problem it's good to mention that the disks are "infected with DRM". The person won't know what DRM is, but it helps to associate it with a bad word like "infection". And in the case of the Sony CDs, it's not overhyping the facts either, so your conscience can remain clear.

      Bottom line is, "these discs are designed to infect a computer with DRM, which breaks Windows, and lets Sony and viruses take over your computer."