Cryptography, DRM and You

cryptography drm and you data protection

We talk about DRM quite often. Technically it stands for Digital Rights Management, but we did have a listener recommend we try to change that to Digitally Restricted Media. The point of DRM is to protect digital media files from piracy. The actual result of DRM is a lot of frustration for those who just want to watch movies and listen to music.

Today’s Show:

News:

Other:

Cryptography, DRM and You

We talk about DRM quite often. Technically it stands for Digital Rights Management, but we did have a listener recommend we try to change that to Digitally Restricted Media. The point of DRM is to protect digital media files from piracy. The actual result of DRM is a lot of frustration for those who just want to watch movies and listen to music.

We recently read about a vulnerability discovered in OpenSSL that could have an impact on DRM in consumer electronics. OpenSSL is a freely available software package used in countless different products to protect sensitive information, which could include movies and songs that the content owners don’t want to have freely available on the Internet.

Before we get into the actual vulnerability, the flaw in the OpenSSL software, we need to provide a little background on Cryptography and how it applies to DRM. We’ve talked about how plasma TVs and LCD TVs work in the past. So along those lines, we’re going to get a little geeky on how DRM works

What is Cryptography?

So in a nutshell, cryptography is a big umbrella that describes many different ways to protect information or keep a secret. Remember Ralphie’s decoder ring in A Christmas Story? Yep, that was cryptography. The secret there was the phrase “Be sure to drink your Ovaltine.” The secret in DRM is the actual audio or video file that is useless unless you know how to decode it so you can play it back.

Keys

Imagine cryptography as a box. You have to have a key to lock something inside the box so you can keep it secret. You also need a key to open the box to reveal the secret. There are two ways to do this. With symmetric key cryptography, you use the same key to lock and unlock the box. With asymmetric cryptography, one key can lock the box, but a different one must be used to unlock it.

Asymmetric key algorithms are more secure. Everyone keeps their ‘private’ key safe, and provides only their ‘public’ key to the world. If I want to send you a message, I can lock it with your public key because I know that you’re the only one who can open it, because you’re the only one with your private key. These algorithms are more secure, but they also require a lot more processing power, making them less than ideal for audio and video playback.

When you’re playing an audio or video file, you have to decode it quickly so that you don’t get any stuttering or delays in the content. Symmetric key algorithms require less processing horsepower. That’s why the DRM scheme chosen for Blu-ray, called Advanced Access Content System (AACS), chose a symmetric encryption algorithm (they use AES, Advanced Encryption Standard).

You can pretty quickly realize that it’s not the encryption or the algorithm or any of that stuff that really matters. What really matters is protecting your keys. If a key gets published on the Internet, anyone can use it to decrypt any Blu-ray movie and essentially post DRM-free copies of full quality content. Without getting into too much detail, AACS has a way to create unique keys for devices that can be turned off if they’re compromised, but that still doesn’t solve the problem.

The Vulnerability

So what exactly was this vulnerability in OpenSSL? When you hear it, you may get a little chuckle. Evidently scientists from the University of Michigan found a way to read tiny pieces of a private key by injecting slight fluctuations in a device’s power supply as it was processing encrypted messages. It took a little over 100 hours, but eventually they were able to get the entire 1024-bit key.

This may not really impact you all that much, if you see a bunch of people around your Blu-ray player with lasers and a rack of servers, ask them politely to leave. And, to be honest, it isn’t even the easiest way to crack Blu-ray. The tried an true method is to use a software based Blu-ray player on any computer and simply examine what’s in memory while the player is running. At some point the software player will need to put the key in memory to use it, and you can grab it.

But what it shows is that no matter what you do to protect your digital content, someone with enough determination can find a way to break it. In this case an $80 Blu-ray player and a little over 4 days of Jolt cola and power fluctuations cracks every Blu-ray disc on the market. So even if you push Blu-ray decryption to hardware on a PC, it can still be cracked.

Why does it matter?

So the real question is, why does any of this matter to any of us? Bottom line, those of us who follow the rules don’t spend 4 days shining a laser on our Blu-ray player so we can crack it and distribute pirated movies. Those who don’t care about the legalities of content protection are going to do it no matter what the rules say.

So piracy still happens, DRM or not, there will always be pirated copies of movies and music available on the Internet. But for those of us who don’t pirate content, we get the shaft trying to figure out why the movie we just bought won’t play on our laptop or the TV show we just bought won’t stream to our media center extender.

The only people who get punished are the ones who follow the rules. We think DRM should simply be a thing of the past. If content owners want to charge for content, provide a service worth charging for. Make it super easy to find what we want. Make the downloads or streams incredibly reliable. Make the service something worth coming back to. It worked for iTunes. Despite every song available there being available for free elsewhere on the Internet, people still buy songs from iTunes.

Abolish DRM, free the content, stop punishing everybody for the transgressions of a few. Besides, you aren’t even stopping those few, so what’s the point?


HT Guys

HTGuys.com

Home Theater

Bask in the glory of your home theater with these 4K Ultra HD Blu-rays

What good is a 4K TV if you don't have the means of pushing it to its limits? Here are our favorite 4K Ultra HD Blu-rays, all of which are nothing short of stunning. It'll make you wonder why you haven't always watched movies this way.
Home Theater

Time for a TV upgrade? Here’s what you need to know about 4K Ultra HD TV

Ultra HD 4K has quickly taken over the world of TVs. But what is Ultra HD 4K, how does it work, and most importantly, should you upgrade, or keep your old TV? We explain it all right here.
Home Theater

Still listening on tinny TV speakers? Try one of our favorite soundbars

You no longer have to sacrifice sound for size when selecting home audio equipment. Check out our picks for the best soundbars, whether you're looking for budget options, pure power, smarts, or tons of features.
Home Theater

The seven best TVs you can buy right now, from budget to big screen

Looking for a new television? In an oversaturated market, buying power is at an all-time high, but you'll need to cut through the rough to find a diamond. We're here to help with our picks for the best TVs of 2018.
Podcasts

TWB Podcast: iPhone price cut rumor; smart home hack; delivery robot

Apple lawsuits and iPhone price drops; Smart Home Devices hacked remotely; Autonomous Delivery Robots may be closer to reality.
Podcasts

TWB Podcast: CES preview; LG 8K television; Home assistant takeover

CES Preview and Digital Trends coverage; LG 88" 8K television; Home assistants will be taking over everything; the strange tech of CES.
Movies & TV

Between the Streams: A brutal ‘Sicario 2’ trailer, 10 more years of Star Wars

It's lightsabers, polka kings, and sequels galore this week on Between the Streams, as we look at a wide variety of new content hitting screens, including everything from a Bright sequel to Star Wars Episode IX news.
Podcasts

Trends With Benefits podcast: Our favorite tech from CES 2018

It's our annual episode from CES! We've seen a lot of great tech this year, and have been surprised by a few announcements as well, so we discuss our favorite products and announcements this year.
Podcasts

TWB Podcast: Best TVs of CES; emerging tech; Amazon/Apple 2nd HQ; Falcon X

We'll cover the Best TVs of CES, some of more fringe emerging tech, Amazon and Apple's 2nd Headquarter statuses and the Falcon X Heavy rocket may finally be launching.
Movies & TV

Between the Streams: Apple and Kristen Wiig, ‘Solo’ synopsis, Black Widow movie?

This week on Between the Streams: A comedy series with Kristin Wiig and Reese Witherspoon from Apple, a Catch 22 miniseries from George Clooney, rumors of a Spider-Man and Venom meet-up, a Black Widow stand-alone film, and much more.
Podcasts

TWB Podcast: iPhone X discontinued?, Galaxy S9 first look, 50 Cent’s bitcoins

Apple iPhone X discontinued: After a week of rumors, it seems that Apple may indeed be discontinuing the current version of the iPhone X. KGI Securities predicts that this will occur later this year, when potential replacements for the X…
Podcasts

TWB Podcast: Amazon Echo vs. Google Home vs. Apple HomePod, Galaxy X

With the three big names in Home Assistants all taking aim at each other, we break down the Amazon Echo, Google Home, and Apple HomePod. Samsung may be debuting a foldable phone this year and we'll recap some highlights from Outdoor…
Movies & TV

Between the Streams: CBS’ desperate ‘Murphy Brown’ revival, Super Bowl trailers

This week on Between the Streams, we'll be discussing all the weird new sitcom reboots (and how desperate they are), Netflix's new series Altered Carbon, all the new trailers we expect to see during the Super Bowl, and so much more.
Podcasts

TWB Podcast: SpaceX triumph, Spotify vs. Apple Music, Apple Watch health

After the success of the Falcon launch, what's next for SpaceX and Tesla? Spotify is the kind of streaming music, but Apple Music is hot on the trail. The Apple Watch may soon provide your doctor with valuable information.