Feeds

How gizmo maker's hack outflanked copyright trolls

Chumby NeTV: A triumph for mankind

Top 5 reasons to deploy VMware with Tegile

'Legal bullies on the technology playground'

The hack was helped along with a series of fortunate events. The first was a September 2010 post on Pastebin.com that contained the master key that ultimately derives the shared keys that encrypt video as it passes from a set-top box or DVD player to a monitor. More than 12 months later, no one knows who authored the key or whether it was found mathematically or just leaked by an insider. Ultimately, it didn't matter: The secret protecting the scheme was irreversibly revealed.

Another lucky happenstance was the HDCP's use of a stream cipher to encrypt content, making it possible to combine it seamlessly with other encrypted signals that use the same key. This allowed Huang to use the leaked master key to encrypt the NeTV feed and inject it into the stream without ever having to convert anything into plaintext. Had HDCP used a block cipher, this task would have been significantly more limited.

Huang's hack was also noteworthy for its ability to inject content into the feed without causing hiccups in the the video or audio, something that's not easy to do with a device that uses an 800 MHz processor. One of the ways he worked around the bottle neck was the use of chroma key compositing, the technique involving green screens videographers have used for years to seamlessly overlay one video feed into another.

Of course, the absence of any decryption by the NeTV is no guarantee Chumby won't be sued by a device maker or content provider who doesn't like the idea of an outsider joining the HDCP camp without an invitation. People modifying Sony's PlayStation or Microsoft's Xbox game consoles and Texas Instruments calculators know first hand how touchy device makers can be about these kinds of hacks.

The risk hasn't escaped the notice of Huang, who is scheduled to demo the NeTV hack at Sunday's Maker Faire at the New York Hall of Science.

“While I'm hoping that everyone will engage in mature, rational and fair discourse, the fact exists that there *are* legal bullies on the technology playground and they have a lot of tricks in their bag, and a lot of ammunition to hurl at people they don't like,” he wrote. “But, what will the world come to if all innovative thoughts end at lawyers, and not at users? I think it would be a sad day for consumers when small innovators spend more resources worrying about being sued than worrying about being creative.”

This story to be continued ... maybe. ®

This article was updated to correct the name of the HDCP scheme.

Choosing a cloud hosting partner with confidence

More from The Register

next story
Fujitsu CTO: We'll be 3D-printing tech execs in 15 years
Fleshy techie disses network neutrality, helmet-less motorcyclists
Space Commanders rebel as Elite:Dangerous kills offline mode
Frontier cops an epic kicking in its own forums ahead of December revival
Intel's LAME DUCK mobile chips gobbled by CASH COW
Chipzilla won't have money-losing mobe unit to kick about anymore
First in line to order a Nexus 6? AT&T has a BRICK for you
Black Screen of Death plagues early Google-mobe batch
Ford's B-Max: Fiesta-based runaround that goes THUNK
... when you close the slidey doors, that is ...
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Driving business with continuous operational intelligence
Introducing an innovative approach offered by ExtraHop for producing continuous operational intelligence.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?