Feeds

DVD Jon hacks Media Player file encryption

Repeat performance

5 things you didn’t know about cloud backup

Norway's best known IT export, DVD Jon, has hacked encryption coding in Microsoft's Windows Media Player, opening up content broadcast for the multimedia player to alternative devices on multiple platforms.

Jon Lech Johansen has reverse engineered a proprietary algorithm, which is used to wrap Media Player NSC files and ostensibly protect them from hackers sniffing for the media's source IP address, port or stream format. He has also made a decoder available.

Johansen doesn't believe there is a good reason to keep the NSC files encrypted, because once you open the file with Media Player to start viewing the stream, the IP address and port can be revealed by running the netstat network utility that is included with most operating systems.

The hacker hopes his move will make content streamed to Media Player more widely available to users of alternative players on non-Windows platforms.

Johansen achieved notoriety when he was tried and re-tried in a Norwegian court for creating a utility that enabled him to play DVDs on his Linux PC. Prosecutors, acting in the interests of the beloved US Motion Picture Association of America (MPAA), argued he had acted illegally by distributing his DeCSS tool to others via the internet. This, the prosecution, claimed, made it easier to pirate DVDs.

However, the court ruled in his favor, saying he had not broken the law in bypassing DVD scrambling codes that had stopped him from using his PC to play back DVDs.

Earlier this year Johansen developed a work around to bypass digital rights management (DRM) technology in Apple Computer's iTunes.

His latest hack was done to make Media Player content available to the open source VideoLAN Client (VLC) streaming media player. VLC is available for download to 12 different operating systems and Linux distributions and has seen more than six million downloads to Mac. Apple is even pre-loading VLC on some Macs destined for high schools in Florida.

Johansen told The Register he'd acted following requests for NSC support in VLC. One developer is already hard at work integrating Johansen's decoder into the VLC.

Johansen said: "Windows Media Player is not very good and Windows and Mac users should not be forced to use it to view such [NSC] streams."

The NSC file contains information about the stream, such as the name and address of the stream server. When the file is opened in Media Player, the file is decoded and then connected to the stream server specified.

Johansen said claims made by companies like Cisco Systems, who ship products with NSC support, that the encoding he cracked protects the media don't make much sense. "It's more likely that the purpose is to prevent competing media players from supporting the NSC format," he observed. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
No, thank you. I will not code for the Caliphate
Some assignments, even the Bongster decline must
Kaspersky backpedals on 'done nothing wrong, nothing to fear' blather
Founder (and internet passport fan) now says privacy is precious
TROLL SLAYER Google grabs $1.3 MEEELLION in patent counter-suit
Chocolate Factory hits back at firm for suing customers
Mozilla's 'Tiles' ads debut in new Firefox nightlies
You can try turning them off and on again
Facebook, Google and Instagram 'worse than drugs' says Miley Cyrus
Italian boffins agree with popette's theory that haters are the real wrecking balls
Sit tight, fanbois. Apple's '$400' wearable release slips into early 2015
Sources: time to put in plenty of clock-watching for' iWatch
Facebook to let stalkers unearth buried posts with mobe search
Prepare to HAUNT your pal's back catalogue
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.