BMG album copy protection is thwarted with the shift key?

07 Oct 03 10:14 by Crabbyappleton in category Uncategorized To news archive


According to this report from P2P.net , the much ballyhooed copy protected BMG album “Comin’ Where I’m From” is a hit on P2P, but not because folks want to listen to the latest from BMG. Supposedly, within hours of its release, tracks were available ad nauseum on file sharing networks because the protected cd was cracked. Especially embarrassing to Sunncomm that conducted an “external testing phase” prior to the release, “with the intention of determining compliance with the official test procedures and guidelines for protected content recently outlined by the Recording Industry Association of America (RIAA) and the International Federation of the Phonographic Industry (IFPA),” They should have added “it’s no fair if you push the shift key when you insert the album”.The challenge
to say you can’t copy this album was more than most people could bear. Even for
the Dept. of Computer Science at Princeton.

src="http://www.cdfreaks.com/contentimages/newsimages/1379728958" align=right border=0
>It also prompted John Halderman at Princeton University’s department of computer science to check it out in detail.

And, “most affected users can bypass the system entirely by holding the shift key while inserting the CD,” he states, having analysed Comin’ From Where I’m From.

“MediaMax’s protections are ineffective because the driver program can easily be disabled or, depending on the system configuration, it might never be installed to begin with,” Halderman says
href="http://www.cs.princeton.edu/~jhalderm/cd3/" target=_blank
>here.

“As a result, audio content is vulnerable to copying in virtually 100% of deployed systems. SunnComm’s
href="http://www.sunncomm.com/press/pressrelease.asp?prid=20030827630"
target=_blank>press release may be technically correct – if their testers always ran the MediaMax application before trying to copy audio, they likely would see protection in every case. However, in practice the software often fails to start, and when it does start, users can manually surpress it. Here are some examples:

  • “Computers running Linux or Mac OS 9 can’t run the MediaMax software at all, so they can always copy the recording.
  • “Many users disable the autorun feature [11] (autostart on Mac OS), so their systems will be able to copy the disc unless the user manually launches MediaMax.
  • “Windows users who haven’t disabled autorun can suspend it when they play a SunnComm-protected disc by holding down the shift key for a few seconds while inserting the CD. They can then copy the data normally.

    “In all these cases, the audio tracks are left completely unprotected.

    “These vulnerabilities will be difficult or impossible to repair. SunnComm’s software can’t take any corrective action if it isn’t started, and all these flaws involve ways that it is prevented from running in the first place. To make matters worse, MediaMax, unlike earlier copy-prevention techniques, works entirely in software. This means a moderately skilled programmer could, in only a few minutes, write an application to watch for and unload the SbcpHid driver, neutralizing MediaMax’s copy resistance while leaving all the disc’s other features intact.”
  • No… shift key… From hell’s heart I stab at thee…For hate’s sake… I spit my last breath at thee! A perfect plan foiled, by the single stroke of a hackers keyboard!

    If this is true (I am having a hard time believing it) this is really bizarre.

    Source: p2pnet.net

    16 Comments

    yoshix
    Posts: 72
    Posted on: 07 Oct 03 10:57
    HAhahahahahaahahahah AHHAhhahaahahah!!!!!!!!!!!!!! Holy $hit that is funny!!! So the money they spent on that could have gone in their profit book and not as a loss :g First was the Black Felt pen and now the Shift Key I knew that key would be useful, instead of a crouch button on one my FPS game
    gene_simmons
    Posts: 1022
    Posted on: 07 Oct 03 11:39
    Oh , they forgot to add a few lines in the cd booklet" if you want to play this cd on your pc , you MUST return your keyboard to your musicshop"! B:+M:+G
    katastrofe
    Posts: 116
    Posted on: 07 Oct 03 11:52
    LMAO!! What will they come up with next?!
    damiandimitri
    Posts: 3702
    Posted on: 07 Oct 03 11:59
    that is an old trick lol
    GristyMcFisty
    Posts: 634
    Posted on: 07 Oct 03 12:56
    'bout time for the CEO to resign?
    Crabbyappleton
    Posts: 5757
    Posted on: 07 Oct 03 14:17
    One of the readers here, cdfree discovered this back in September in the story about the release of the album. I did not see that reaction then, but was alerted to it by another editor. So I guess it is true! *snicker*
    DiggnSaeg
    Posts: 391
    Posted on: 07 Oct 03 16:39
    Nice one. Disabling "autoinsert notification" does the trick, too...
    katastrofe
    Posts: 116
    Posted on: 07 Oct 03 16:53
    We should demand this copy protection on *every* cd. That way everyone's happy :B
    cdfree
    Posts: 23
    Posted on: 07 Oct 03 18:08
    Yes, it was unbelievably simple to crack. In fact I thought at first I might have had a 'defective' version of MediaMax it was so easy. I'm surprised it took Princeton so long to come to the same conclusion. I can only assume they had to revise the paper so many times to remove all references to SunnComm being a bunch of idiots in case they were sued.
    Leolo
    Posts: 14
    Posted on: 07 Oct 03 19:29
    But, wait a minute. By saying that the copy protection can be cirvumvented pressing the shift key, aren't you violating the DMCA? Is this article illegal in the USA? I'm not sure, just wondering...
    Refrenz
    Posts: 23
    Posted on: 07 Oct 03 19:58
    I doubt its illegal - there is no protection installed so there is no protection to circumvent. Now, if you found a way around the protection AFTER it was installed and running, that would probably be illegal. The question to ask here is this ... is it illegal to prevent copy-protection software being installed, as well as circumvented?
    [edited by Refrenz on 07.10.2003 20:01]
    anr11
    Posts: 28
    Posted on: 07 Oct 03 19:59
    No, but I bet it's illegal in Germany now
    dentman42
    Posts: 648
    Posted on: 08 Oct 03 01:28
    Any decent CD writing software also disables auto-insert notification and autorun while it's running, so for instance, CloneCD would be able to copy it as long as the MediaMax hadn't been run prior to launching CloneCD. Does anybody know if the old Session Selector software that used to ship with Easy CD creator still works (or if there's a new version of the utility with 6)? That should defeat ANY copy protection relying on a second (data) session on an audio CD by treating the disc as single session.
    sspade100
    Posts: 294
    Posted on: 08 Oct 03 03:58
    And how much money did BMG flush down the toilet for this nonsense?
    sspade100
    Posts: 294
    Posted on: 08 Oct 03 04:00
    BTW the penalty for this is amputation of all ten fingers.
    katastrofe
    Posts: 116
    Posted on: 08 Oct 03 12:44
    that's ok, i'll still be able to hit the shift key!

    Post a comment

    Hello guest,
    default
    To benefit from all extra features you need to log in or sign up.

    Most popular headlines

    Microsoft: PS3's Blu-ray is a burden (4)

    • Thu 18 Mar 00:00 by JaredNewman
    • Blu-Ray writers & players, Game Consoles

    Microsoft's Xbox product director Aaron Greenberg said the Xbox 360's lack of a Blu-ray player has actually been crucial to the console's success.

    Spain allows P2P, link-sharing of copyrighted works (9)

    As long as no profits are made, it's legal to share copyrighted material through peer-to-peer transfers or link to it through a Web site, a Spanish court ruled.

    WIN your own LG N2B1 NAS with 2TB of Storage! (41)

    • Thu 11 Mar 16:10 by bjansen
    • Blu-Ray writers & players, Network Storage (NAS)

    WIN with LG! We're giving away two LG N2B1 NASes (one with Blu-ray, the other with DVD) with 2TB of Storage! See what you have to do to participate.

    Blockbuster sounds the bankruptcy alarm, again (7)

    For the second time in one year, Blockbuster has warned that it may have to file for Chapter 11 bankruptcy protection.

    See all headlines

    Active Commenters