Feeds

How gizmo maker's hack outflanked copyright trolls

Chumby NeTV: A triumph for mankind

Secure remote control for conventional and virtual desktops

'Legal bullies on the technology playground'

The hack was helped along with a series of fortunate events. The first was a September 2010 post on Pastebin.com that contained the master key that ultimately derives the shared keys that encrypt video as it passes from a set-top box or DVD player to a monitor. More than 12 months later, no one knows who authored the key or whether it was found mathematically or just leaked by an insider. Ultimately, it didn't matter: The secret protecting the scheme was irreversibly revealed.

Another lucky happenstance was the HDCP's use of a stream cipher to encrypt content, making it possible to combine it seamlessly with other encrypted signals that use the same key. This allowed Huang to use the leaked master key to encrypt the NeTV feed and inject it into the stream without ever having to convert anything into plaintext. Had HDCP used a block cipher, this task would have been significantly more limited.

Huang's hack was also noteworthy for its ability to inject content into the feed without causing hiccups in the the video or audio, something that's not easy to do with a device that uses an 800 MHz processor. One of the ways he worked around the bottle neck was the use of chroma key compositing, the technique involving green screens videographers have used for years to seamlessly overlay one video feed into another.

Of course, the absence of any decryption by the NeTV is no guarantee Chumby won't be sued by a device maker or content provider who doesn't like the idea of an outsider joining the HDCP camp without an invitation. People modifying Sony's PlayStation or Microsoft's Xbox game consoles and Texas Instruments calculators know first hand how touchy device makers can be about these kinds of hacks.

The risk hasn't escaped the notice of Huang, who is scheduled to demo the NeTV hack at Sunday's Maker Faire at the New York Hall of Science.

“While I'm hoping that everyone will engage in mature, rational and fair discourse, the fact exists that there *are* legal bullies on the technology playground and they have a lot of tricks in their bag, and a lot of ammunition to hurl at people they don't like,” he wrote. “But, what will the world come to if all innovative thoughts end at lawyers, and not at users? I think it would be a sad day for consumers when small innovators spend more resources worrying about being sued than worrying about being creative.”

This story to be continued ... maybe. ®

This article was updated to correct the name of the HDCP scheme.

Choosing a cloud hosting partner with confidence

More from The Register

next story
4K-ing excellent TV is on its way ... in its own sweet time, natch
For decades Hollywood actually binned its 4K files. Doh!
Oi, Tim Cook. Apple Watch. I DARE you to tell me, IN PERSON, that it's secure
State attorney demands Apple CEO bows the knee to him
Apple's big bang: iPhone 6, ANOTHER iPhone 6 Plus and WATCH OUT
Let's >sigh< see what Cupertino has been up to for the past year
Phones 4u website DIES as wounded mobe retailer struggles to stay above water
Founder blames 'ruthless network partners' for implosion
Get your Indian Landfill Android One handsets - they're only SIXTY QUID
Cheap and deafening mobes for the subcontinental masses
Apple's SNEAKY plan: COPY ANDROID. Hello iPhone 6, Watch
Sizes, prices and all – but not for the wrist-o-puter
A SCORCHIO fatboy SSD: Samsung SSD850 PRO 3D V-NAND
4Gb/s speeds on a consumer drive, anyone?
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.