LWN.net Logo

A cost analysis of Vista content protection

A cost analysis of Vista content protection

Posted Dec 23, 2006 21:21 UTC (Sat) by lutchann (subscriber, #8872)
Parent article: A cost analysis of Vista content protection

It does seem necessary to take this paper with a grain of salt. Even the author admits that it's not possible for most readers to verify many of the assertions he makes about Microsoft's content protection requirements, and taking into account some of his leaps of logic (for example, the absurd assumption that adding a high-speed AES engine to a graphics card would require the removal of "a rendering pipeline or two"), I wouldn't take his predictions too seriously.

Frankly, I'm having a hard time getting worked up over this whole issue. As many other people have suggested, if you want a DVD player, buy a DVD player, not a PC. If you have a moral problem with DRM, don't watch DVDs.

I don't see this affecting Linux users much at all. Sure, these DRM requirements will have some not-insignificant effect on hardware prices for the next year or two, but I doubt it will be particularly notable looking at long-term trends. And honestly, I'm looking forward to having another reason to tell people not to run Windows.


(Log in to post comments)

A cost analysis of Vista content protection

Posted Dec 23, 2006 22:03 UTC (Sat) by bk (guest, #25617) [Link]

"If you have a problem with air pollution, stop breathing!"

"If you have a problem with government oppression, move somewhere else!"

"If you don't like Windows, don't use a computer!"

A cost analysis of Vista content protection

Posted Dec 24, 2006 11:17 UTC (Sun) by drag (subscriber, #31333) [Link]

Plus DVDs on DVD players just suck. :-)

I was watching movies at my parents house and I was amazed to see that I couldn't just skip through the advertisements at the beginning and the FBI warning and other assorted nonsense. It'd pop up a warning that said something along the lines of 'Disk forbids this function at this time'.

I had forgotten that stuff existed because I am used to just using Xine or mplayer to watch DVDs.

Who do you want your hardware to serve? You or a movie studio?

It's amazing that now I have to break federal law just to skip advertisements. Pretty soon I'll start hearing that I am not allowed to buy certain types of fatty fried foods? (oh wait...)

When will it end? This whole erosion of liberty thing is realy realy starting to piss me off.

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 24, 2006 18:17 UTC (Sun) by TxtEdMacs (guest, #5983) [Link]

" ... Pretty soon I'll start hearing that I am not allowed to buy certain types of fatty fried foods? (oh wait...)"

You might think this as humorous, but how well informed of the trans fat content of the food you consume? Were you aware that they were an inadvertant result of trying to lower arterial disease? Are you aware they are at least as dangerous (or more) as the food component they were meant to replace? I would guess not*. Recognize too the trans fat content is to the advantage of the producer/seller not the consumer. It is cheaper and more stable; as to having a taste advantage - there is none.

Are you against the "War Against Drugs"? I personally am in favor of giving the confiscated drugs away to confirmed addicts on the condition they they not pursue criminal activities. In addition, I would stress helping those kick the habit if they were motivated to try. Last I would place the lowest priority upon street level enforcement. The goal is to reduce the demand side and the profit margins so the business is less enticing to all concerned.

If you choose to knowingly kill yourself - fine with me, but I want you off any health insurance reimbursement system. Eat all the trans fats and consume all the addictive drugs you please - try tobacco. But don't cry later.

For me, I just do not like DRM equipped hardware being forced upon me when I play very little video or audio on my machines.

* I am painfully aware, because I happened to work on a multi-department, multi-university project meant to attack heart and arterial disease where the solution was as bad culprit: butter fat. Later instinctively I kept my butter fat intake low, but preferred it to margarine.

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 25, 2006 8:04 UTC (Mon) by drag (subscriber, #31333) [Link]

""You might think this as humorous, but how well informed of the trans fat content of the food you consume? Were you aware that they were an inadvertant result of trying to lower arterial disease? Are you aware they are at least as dangerous (or more) as the food component they were meant to replace? I would guess not*. Recognize too the trans fat content is to the advantage of the producer/seller not the consumer. It is cheaper and more stable; as to having a taste advantage - there is none.""

No it's not fucking humorous. This thinking is the one of the most unfunny things I have ever heard in my entire life.

It's showing how absurd this thinking goes. If you don't want to eat transfat then DON'T. Nobody is going to force you, nobody gives a shit one way or another. It's MY LIFE. Not yours, not the government's, not anybody elses and Dammit, if I want KFC I want KFC.

Screw the a-holes trying to control every freaking aspect of our lives because they feel justified because they assume that everybody else is a completely and total fucking moron. People need to worry a hell of a lot about their own lives before they go around trying to control how other people live theirs.

""If you choose to knowingly kill yourself - fine with me, but I want you off any health insurance reimbursement system. Eat all the trans fats and consume all the addictive drugs you please - try tobacco. But don't cry later.""

Fuck that. This sort of thing REALY pisses me off. I WORK for a living. I make a valueable contribution to sociaty and I get compinsated. I use the money I earn to buy health insurance.

Are you saying that since a person does not follow your nutrional rules that they are less relevent and should be less able to get medical help?

Seems a bit fascist to me.

I am a grown person, work for a living, and it's not anybody else's business. It's NOT ANY OF YOUR BUSINESS.

SEROUSLY. Just because you want to be a cheap bastard doesn't mean that it gives you a right to control other people's lives. And you know what? You get rid of transfat it's not going to make anybody healthy, it's not going to make your insurance cheaper. It's NOT GOING TO ACCOMPLISH ANYTHING.

A fat bastard will just continue on being a fat bastard. They will get sick and die, and you know what? Nothing you will do will ever change anything. One way or another they are just going to find another way to kill themselves off slowly.

Do you comprehend how fucked up this whole thing is? The VERY IDEA of this whole thing is so completely counter to the idea of a free country.

Why not just pass a law saying that unless people walk a mile everyday they are going to get fined?

Why not just pass a law saying that a person has to eat a balanced diet and that stores are not allowed to sell people certain combinations of food?

Why not make it illegal to buy too much pork?

Here.. This is a great idea..

Why not use RATIONS to determine what food stores are allowed to sell to me. It would be brilliant idea!!!

That way people will be FORCED to only buy the correct balance of fruits and vegetables.

This is the way your going. It's just so completely asinine. Words just fail me. I am just failing to come up with polite words to express how completely and utterly how wrong this line of thinking is.

""* I am painfully aware, because I happened to work on a multi-department, multi-university project meant to attack heart and arterial disease where the solution was as bad culprit: butter fat. Later instinctively I kept my butter fat intake low, but preferred it to margarine."""

That's why it should be illegal to sell butter, right?

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 25, 2006 10:03 UTC (Mon) by hummassa (subscriber, #307) [Link]

>> ""If you choose to knowingly kill yourself - fine with me, but I want
>> you off any health insurance reimbursement system. Eat all the trans
>> fats and consume all the addictive drugs you please - try tobacco. But
>> don't cry later.""

> Fuck that. This sort of thing REALY pisses me off. I WORK for a living.
> I make a valueable contribution to sociaty and I get compinsated. I use
> the money I earn to buy health insurance.

I think the question here is (and I would like that you respond it with a
sound argument if you have one): I too work for a living, etc etc. WHY
should my health insurance cost the same as yours, if I do everything to
prevent health problems (including seriously limiting my intake of drugs,
amongst them white sugar, trans fat, alcohol and tobacco) and you don't???
You should be carrying the burden of your own style of living, not me.

> I am a grown person, work for a living, and it's not anybody else's
> business. It's NOT ANY OF YOUR BUSINESS.

The problem is: it IS my business if you are spending MY money on your
self-inflicted health problems.

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 25, 2006 14:03 UTC (Mon) by drag (subscriber, #31333) [Link]

There is absolutely no reason why your insurance should be the same as mine.

Why do you think it is? I realy realy doubt you pay the same as I do.

Go and find some insurance place that does physicals if you don't want to share your cost with unhealthy people.

""The problem is: it IS my business if you are spending MY money on your
self-inflicted health problems.""

It isn't your money.

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 26, 2006 13:02 UTC (Tue) by irios (guest, #19838) [Link]

I want your genome scanned for genetic imperfections which might cost other innocents a lot of money later.

Your attitude is so selfish, self-righteous, self-indulging, self-serving, and myopic that you deserve no answers at all. And all because one day you read an article about fat, and now you feel enlightened, and entitled to impose your supposedly informed opinions on others.

That attitude is why you have to pay an arm and a leg for a shitty health insurance, or else you may die sitting at the door of a hospital for all they care, while everybody in my much poorer country is protected by universal health coverage.

A cost analysis of Vista content protection (just a bit off topic)

Posted Dec 25, 2006 22:20 UTC (Mon) by bk (guest, #25617) [Link]

That's a common reaction from people who a) don't really understand what trans fats are, and b) don't really understand the details of the 'ban'.

Banning trans fats will have absolutely zero effect on your ability to eat unhealthily if you so desire. You can be obese/overweight (and develop all the related health complications) to your heart's content. Restaurants will still have the option of frying everything in lard, butter, coconut oil and just about anything else.

What the ban *does* do is prevent establishments (almost entirely national fast-food franchises) from making the economic decision to use products that are cheaper but endanger the health of consumers. Trans fats are artificial (ie, they don't exist in nature) chemicals resulting from the hydrogenation of vegetable oil. Such restaurants can continue to use slightly more expensive products (such as lard) that are still quite unhealthy (don't worry, the 'health nut' agenda won't be forced on you) but don't have the overwhelmingly toxic effects of trans fats.

It also doesn't prevent you from going to a store and buying hydrogenated oils and using them at home. Of course there's no rational reason to do this (other than perhaps saving a penny or two by using Crisco instead of butter or animal fat) but it's still your option.

Nothing you will do will ever change anything.

Posted Jan 4, 2007 6:01 UTC (Thu) by xoddam (subscriber, #2322) [Link]

> Nothing you will do will ever change anything.

Right.

No public health program has ever changed anything.
No political campaign has ever changed anything.
No human being will ever achieve anything.

> One way or another they are just going to find another way to
> kill themselves off slowly.

And, of course, every time anyone ever gets sick it is entirely
their own fault and has nothing whatever to do with the public
sphere. No-one else has any hope of preventing it, and no-one
else will ever suffer as a result.

A cost analysis of Vista content protection

Posted Dec 25, 2006 2:38 UTC (Mon) by jamienk (guest, #1144) [Link]

Pretty soon I'll start hearing that I am not allowed to buy certain types of fatty fried foods? (oh wait...)

The one government regulation is the result of monopolists pretty much paying to have intricate, draconian, and weird laws passed to protect their business models, enforce their monopolies, and all but guarantee them more income than the amounts they paid for the laws.

The other government regulation is the result of nutritionists fighting to stop machine-made poisons from being sold as foods.

You might argue some libertarian-esque line that "all government regulation is bad" but I think such an argument is overkill here. We can all agree that the former "regulation" should be fought against before we even begin to debate the terms of the second issue.

A cost analysis of Vista content protection

Posted Dec 25, 2006 8:10 UTC (Mon) by drag (subscriber, #31333) [Link]

""The one government regulation is the result of monopolists pretty much paying to have intricate, draconian, and weird laws passed to protect their business models, enforce their monopolies, and all but guarantee them more income than the amounts they paid for the laws.

The other government regulation is the result of nutritionists fighting to stop machine-made poisons from being sold as foods.""

BOTH ARE JUST AS BAD.

Seriously. You don't know were this is leading do you?

Just stop and pause.. Stop assuming that eveybody else is a moron and knows nothing about nuturion and they need to be protected from 'big transfat' and realise the implications of a government controlling foods becuase they do not approve of the nutrional content.

Oh sure,your freedom is sooo important when it comes to being able to copy files, but on the other hand it's completely irrelevent when it comes to how you run a business.

Do you not see the irony? Which freedom do you think is more important?

A cost analysis of Vista content protection

Posted Jan 4, 2007 6:33 UTC (Thu) by lysse (guest, #3190) [Link]

> Stop assuming that eveybody else is a moron and knows nothing about nuturion and they need to be protected from 'big transfat' and realise the implications of a government controlling foods becuase they do not approve of the nutrional content.

So presumably adding sand, heroin, arsenic or polonium-210 to foodstuffs and not telling your customers that you've done so should also be perfectly legal, if that's what the consumer is willing to tolerate when spending their dollars?

I'm as individualist as they come, but sadly the consumer who makes a rational decision based on complete and correct information at all times is about as likely to be spotted in the wild as the Loch Ness Monster. Especially when consumers are increasingly required to distinguish between conflicting authoritative claims... if even experts cannot reach consensus, how on earth is the average consumer supposed to choose? In such a situation the only sensible choice is not to consume unless you know and trust the production. (For example, only eating what you grow, catch or hunt yourself.)

I'm scarcely the first person to moot this, and I wish I were so much better at acting on it, but: Self-sufficiency is a prerequisite for functional liberty. If you don't have the freedom to refuse all choices and go your own way, you have no freedom at all - and the freedom is pointless without the ability.

(Having said which, I think banning advertising in all forms would accomplish a HELL of a lot more for people's health, not to mention their sanity, than banning particular "bad" substances. After all, advertising is basically systematic manipulation - brainwashing, frankly - and every bit as coercive as the use of force. We live in a world where people taste a beer differently depending on what they believe its brand name to be... advertisers take full advantage of the chasm between how much we *do* trust our senses and our judgement, and how much we *should*.)

A cost analysis of Vista content protection

Posted Jan 4, 2007 6:41 UTC (Thu) by lysse (guest, #3190) [Link]

> not telling your customers that you've done so

...should read "not making any particular effort to let your customers know that you've done so, on the grounds that if they care enough to want to know they'll ask"

A cost analysis of Vista content protection

Posted Dec 25, 2006 11:32 UTC (Mon) by dion (subscriber, #2764) [Link]

I'm with you on the DRM bit, there is no reason for the government to protect the copyright holders over customers, however, that has no parallels to the government protecting you from harmful crap in your food.

Transfats are an artificial and bad type of fat and there are other, less damaging types of fat that can be used in stead.

There is no way for the customer to see if the fat used is one of the evil kinds and maybe the kitchen staff have no idea either.

I think it makes perfect sense to simply outlaw the transfats, escpecially when there are perfectly fine alternatives and when it's very hard for most people to tell the difference.

Your liberty is not being eroded by when the government makes it illegal for companies to poison your for profit.

I think your problem is that you live in a country so corrupt and democracy-deficiant that you have come to assume that all government involvement is bad, when at times it can be absolutely cool.

A cost analysis of Vista content protection

Posted Dec 25, 2006 14:23 UTC (Mon) by drag (subscriber, #31333) [Link]

Transfat != poison.

It's stabilised vegitable oil. The proccess that produces this causes certain types of fatty acids that make your LDS cholesterol raise more rapidly then some other types of common fat.

Since highten LDS cholesterol is associated with greater risk of heart disease then people assume that transfat causes heart disease... which isn't even nessicarially true.

All this 'poison' stuff is realy irritating. It should sound very familar:
http://www.dhmo.org/

There is no adverse effects from transfat in moderation. If you eat nothing but fast food then your health is going to go to shit, which is the whole target of this. Fast foods places use a lot of transfat, but you can't pass a law based on targetting specific types of businesses like that.. you wouldn't get away with it they'd lobby against you and stop it.

But you can't lobby against stopping 'man made poison'. It's the social engineers people trying to get people to eat less fast food.

I don't have a problem with that, but it should be taken care of through public education rather then subverting government to your own ends.

Banning isn't going to realy do anything. Fatty fast foods are still going to be just as unhealthy if they use other types of fat. It's just not a balanced diet. People are still going to become fat asses, not eat properly, and get no excerise weither or not their food uses one type of fat or another.

If you don't want to use cisco, then don't. Your better off without it.

A cost analysis of Vista content protection

Posted Dec 25, 2006 14:24 UTC (Mon) by drag (subscriber, #31333) [Link]

oops. Crisco, not cisco.

A cost analysis of Vista content protection

Posted Jan 4, 2007 6:35 UTC (Thu) by lysse (guest, #3190) [Link]

Although... ;)

A cost analysis of Vista content protection

Posted Dec 25, 2006 19:15 UTC (Mon) by dion (subscriber, #2764) [Link]

As far as I can tell trans fats are worse for your health than the alternatives and the alternatives are not expensive or rare, so what's the argument for using trans fats?

Nobody is trying to outlaw shitty KFC type food, or McD, it's a relatively simple case of forcing the industry to use a less harmful ingredient.

... but this is entrirely off topic, my point was that some times it makes perfect sense to outlaw something for the good of the people and that the customers are actually better off because of it.

Take a hypotetical example, let's say cigarrets contain additives that only serve to make the victims addicted, would forcing the industry to stop adding that crap really infringe on anybodys freedom?

To get all of this a bit back on topic: I'd be all for making copyright a two-way trade, either the copyrightholder respects fair use and allows it or he gets no copyright protection at all.

A cost analysis of Vista content protection

Posted Dec 28, 2006 15:41 UTC (Thu) by tjc (subscriber, #137) [Link]

There went five minutes I'll never get back... :-|

A cost analysis of Vista content protection

Posted Jan 5, 2007 18:27 UTC (Fri) by giraffedata (subscriber, #1954) [Link]

It's really self-centered to look at content protection as erosion of liberty. It's just a shift of liberty, that happens to be away from you.

DRM schemes enhance the liberty of a movie maker to put DVDs in millions of homes, usable in a variety of ways, without unwanted copying happening.

A cost analysis of Vista content protection

Posted Dec 24, 2006 1:47 UTC (Sun) by tetromino (subscriber, #33846) [Link]

> I don't see this affecting Linux users much at all.

Vista requires mid- to high-end sound and video devices (anything that needs to handle "protected content" without degradation) to be hardware-fingerprinted. Device manufacturers are contractually obligated to not disclose any information that might be used to work around the fingerprinting process. You can bet that the corporate legal folks will interpret that as "do not tell anything helpful to Linux driver writers".

In other words, when Vista becomes popular, open-source sound and video drivers will become an endangered species.

A cost analysis of Vista content protection

Posted Dec 24, 2006 3:13 UTC (Sun) by lutchann (subscriber, #8872) [Link]

I guess I just don't see how "when Vista becomes popular, open-source sound and video drivers will become an endangered species" logically follows from "device manufacturers are contractually obligated to not disclose any information that might be used to work around the fingerprinting process" even assuming the latter statement is true. Just because the hardware manufacturer is obligated to provide some sort of secret authentication or handshaking type of functionality doesn't have anything to do with whether the manufacturer can provide programming information for the device to allow a full-featured open driver to be written.

Hardware manufacturers are either interested in supporting Linux or they're not. Those that are not might hide behind the Vista requirements as yet another excuse for not providing open drivers/specs, but I have yet to see any sensible reasoning to justify the assertion that these requirements are going to prevent Linux-supporting hardware companies from being able to do so in the future.

If somebody can provide a more concrete explanation as to how Microsoft is contractually preventing hardware manufacturers from opening their specifications, I'd certainly be interested to know, but the HFS accusation as it's written in this paper doesn't make sense.

A cost analysis of Vista content protection

Posted Dec 24, 2006 6:22 UTC (Sun) by grouch (guest, #27289) [Link]

I guess I just don't see how "when Vista becomes popular, open-source sound and video drivers will become an endangered species" logically follows from "device manufacturers are contractually obligated to not disclose any information that might be used to work around the fingerprinting process" even assuming the latter statement is true.

Monopoly power is a funny thing. If unchecked, it can be leveraged from the market in which the monopoly is attained to intrude into, and take over, other market segments. When a single company controls enough of a market to wield monopoly power, all others must conform to the constraints it imposes on that market or they are left to try to survive in the left-overs.

Microsoft has long used its power in the PC software market to control the PC hardware market. This is why we have such bizarre things as an 'on-off' switch which does not act like the 'on-off' switch on, for example, a lamp. (How long do you hold a lamp switch in the off position before the light goes off? Is it still drawing power after it's off?)

Try doing a search for "PC System Design Guide", with or without the quotes, and see what turns up. Try it for PC95 design guide, or PC97 hardware design guide, or PC98 system design guide, or PC99 system design guide, or PC2000 system design guide, or PC2001 system design guide.

Hardware manufacturers must design for inclusion in the monopoly or try to recoup their design and manufacturing costs by selling to the left-overs outside the MS Windows / PC market. How many can afford to reduce their market share by 80% - 90%?

Microsoft software ships pre-installed on most computers available in brick-and-mortar stores and on most computers available by mail order or by way of the Internet. With the OEM market in hand, Microsoft can dictate hardware design. Hardware manufacturers would need to take a bold gamble that MS Vista will not retain monopoly status in order for them to reject design criteria dictated by Microsoft.

A cost analysis of Vista content protection

Posted Dec 24, 2006 17:53 UTC (Sun) by joey (subscriber, #328) [Link]

> This is why we have such bizarre things as an 'on-off' switch which does not act like the 'on-off' switch on, for example, a lamp. (How long do you hold a lamp switch in the off position before the light goes off? Is it still drawing power after it's off?)

When was the last time you lost a file on your lamp due to unclean shutdown?

Also, it's not exactly unheard of for other equipment to have complicated on/off behavior. For example, my deisel truck needs to heat its glow plugs so has a two step process to turn it on. The space shuttle needs over an hour after landing to be safed and shut off. Nor is it unheard of for equipment unaffiliated with microsoft to draw power while "off", for example, my cordless phone here does. So do most televisions. Laying computer power switch behavior at the feet of microsoft's monopoly is an interesting assertian, I'd be intruiged to see some quotes justifying it.

A cost analysis of Vista content protection

Posted Dec 24, 2006 19:04 UTC (Sun) by grouch (guest, #27289) [Link]

Laying computer power switch behavior at the feet of microsoft's monopoly is an interesting assertian, I'd be intruiged to see some quotes justifying it.

See the PC97 design guide, or, if you prefer not to access microsoft.com:

"Microsoft proposed that all three platforms have system boards that support as a standard component the Advanced Configuration and Power Interface 1.0 specification or later, which was also put forward at the WinHEC conference.

"The company believes this requirement will ensure that the overall system properly supports the Plug and Play and power management capabilities for laptops as well as desktop systems.

"Microsoft is also pushing for next year's systems on all three platforms to support its OnNow Design Initiative. That initiative would control the on and off state of systems and peripherals, allowing them, for instance, to power up immediately like today's televisions."

-- Microsoft specifying PC designs, FoRK Archive, posted by Rohit Khare, referencing Ed Scannell, InfoWorld Electric

The start procedure you reference for a diesel engine is dictated by the way a diesel engine works. Likewise for the space shuttle. A PC does not require a complex power-off procedure. A power switch shielded from accidental tripping would be sufficient. Uninterruptible power supplies are the best answer to the problem of losing files due to disorderly shutdowns. The "instant on" provision is a convenience for many people. I don't think it adds enough convenience for the aggravation and it is certainly not dictated by the way a PC works. It comes, instead, from Microsoft, just as the extra keys with a MS Windows logo was dictated to the keyboard industry by Microsoft.

A cost analysis of Vista content protection

Posted Dec 24, 2006 22:46 UTC (Sun) by aya (guest, #19767) [Link]

> A power switch shielded from accidental tripping would be sufficient.

It would also need a big red sign next to it telling users not to press it until they had selected "shut down" from the Start Menu (which, by the way, they wouldn't read); alternatively, it couldn't actually shut the computer down immediately, at which point we're back to today's status quo. What you say is true, *if* all computer users were computer-savvy, which is obviously not the case. Most people won't understand without a lot of explaining that their important document didn't actually go to disk as soon as they hit "save", and most people won't really care, either.

Now, that being said, I do feel a bit skittish about Microsoft's potential control over hardware design, but this particular example isn't terribly insidious.

A cost analysis of Vista content protection

Posted Dec 25, 2006 0:57 UTC (Mon) by grouch (guest, #27289) [Link]

It would also need a big red sign next to it telling users not to press it until they had selected "shut down" from the Start Menu

What's a "Start Menu" and what does it have to do with turning a computer off?

(which, by the way, they wouldn't read); alternatively, it couldn't actually shut the computer down immediately, at which point we're back to today's status quo. What you say is true, *if* all computer users were computer-savvy, which is obviously not the case. Most people won't understand without a lot of explaining that their important document didn't actually go to disk as soon as they hit "save", and most people won't really care, either.

There are people who will use a fork to try to remove a screw and end up with a ruined fork and a ruined screw. Maybe there should be some mandated design guide for forks to make them not fit screw heads.

Now, that being said, I do feel a bit skittish about Microsoft's potential control over hardware design, but this particular example isn't terribly insidious.

Where do you get this "potential" qualifier? The potential was fulfilled more than 10 years ago. MS Vista is simply extending the remote control.

A cost analysis of Vista content protection

Posted Dec 24, 2006 6:49 UTC (Sun) by dang (guest, #310) [Link]

Based just on the snippets below, it looks like M$'s requirements put the gun right to the device manufacturers' heads. If you want to vend your wares to the huge M$ installation base, then it will be really, really hard to do so in a way that allows you to support open source platforms.

---snippets below----

"In order for this to work, the spec requires that the operational details of
the device be kept confidential. Obviously anyone who knows enough about the
workings of a device to operate it and to write a third-party driver for it
(for example one for an open-source OS, or in general just any non-Windows OS)
will also know enough to fake the HFS process. The only way to protect the
HFS process therefore is to not release any technical details on the device
beyond a minimum required for web site reviews and comparison with other
products."

----
"Since HFS requires unique
identification and handling of not just each device type (for example each
graphics chip) but each variant of each device type (for example each stepping
of each graphics chip) to handle the situation where a problem is found with
one variation of a device, it's no longer possible to create one-size-fits-all
drivers for an entire range of devices like the current
Catalyst/Detonator/ForceWare drivers. Every little variation of every device
type out there must now be individually accommodated in custom code in order
for the HFS process to be fully effective."

----------

"Once a weakness is found in a particular driver or device, that driver will
have its signature revoked by Microsoft, which means that it will cease to
function (details on this are a bit vague here, presumably some minimum
functionality like generic 640x480 VGA support will still be available in
order for the system to boot). This means that a report of a compromise of a
particular driver or device will cause all support for that device worldwide
to be turned off until a fix can be found. Again, details are sketchy, but if
it's a device problem then presumably the device turns into a paperweight once
it's revoked. If it's an older device for which the vendor isn't interested
in rewriting their drivers (and in the fast-moving hardware market most
devices enter "legacy" status within a year of two of their replacement models
becoming available), all devices of that type worldwide become permanently
unusable."

----

A cost analysis of Vista content protection

Posted Dec 24, 2006 12:26 UTC (Sun) by rwmj (subscriber, #5474) [Link]

Personally, I'm looking forward to the day when Microsoft "revokes" some popular piece of
hardware.

Rich.

driver revocation

Posted Jan 4, 2007 6:11 UTC (Thu) by xoddam (subscriber, #2322) [Link]

I wonder how easily forgeable a revocation is?

A cost analysis of Vista content protection

Posted Dec 24, 2006 12:58 UTC (Sun) by csamuel (✭ supporter ✭, #2624) [Link]

But this is just security through obscurity, and I don't believe it is necessary with good crypto. GnuPG is open source and secure, the strength is in the algorithms and key management. So if the driver has the public key for the card and the card signs a message with its private key then the driver can be sure the message came from the card and hasn't been tampered with.

I suspect the problem is more likely to be with the identification of registers and other hardware controlling bits - there is a precedent for having a binary only module for this in the Intel open source graphics drivers, as Keith Packard put it:

This module contains stuff which Intel can't publish in source form, like Macrovision register stuff and other trade secrets. It's optional, so if you don't want to use a binary module, you don't get to use code written by Intel agents for these features.

To me this seems like an excellent compromise, the module is optional and you can still use your hardware quite happily.

A cost analysis of Vista content protection

Posted Dec 25, 2006 1:20 UTC (Mon) by grouch (guest, #27289) [Link]

To me this seems like an excellent compromise, the module is optional and you can still use your hardware quite happily.

Please let everyone know how Microsoft receives your proposed compromise.

A cost analysis of Vista content protection

Posted Dec 25, 2006 2:16 UTC (Mon) by csamuel (✭ supporter ✭, #2624) [Link]

Hmm, I'd missed the comment that the *spec* requires the details to be kept confidential.

So effectively Microsoft is using this as an excuse to compel hardware manufacturers to not publish specs, with the effect of hamstringing open source driver development. Of course they'll protest that it's not their fault but it certainly fits with past practices from Redmond. :-(

Without a copy of the spec it's hard to say how much is direct quotation and how much is inference..

A cost analysis of Vista content protection

Posted Dec 25, 2006 12:57 UTC (Mon) by i3839 (guest, #31386) [Link]

Problem is that any key on the PC, wherever it's hidden (driver or kernel) can be quite easily found and modified. I don't see how they can avoid a man in the middle attack with those public/private keys stored in software, not even with TMP hardware.

But for open source it's even easier, as most protection is in place to verify DRM hardware. The hardware can't verify the driver as any private keys need to be in the driver and thus can be recovered. As we only want a functional driver and aren't trying to bypass the DRM, it's probably even legal.

A cost analysis of Vista content protection

Posted Dec 26, 2006 4:39 UTC (Tue) by csamuel (✭ supporter ✭, #2624) [Link]

Ah, but the private key(s) only needs to be in the hardware with its
corresponding public key(s) in the driver. Of course there can be
hardware attacks against the hardware based private key as well, but
that's going to push up the cost of an attack quite dramatically compared
to a software only attack.

This of course assumes that the report about the spec is accurate in that
all that is required is that the driver validate the hardware and not the
other way around.

Attacking the driver to modify its public key will only result in
stopping verification from working, so my guess is that it'd turn into a
DoS attack.

Regarding FLOSS drivers, it would mean that those drivers would have to
be purely reverse engineered if the hardware manufacturers are indeed
contractually bound to not release information about how they work. A
situation that would please Microsoft no end I suspect..

A cost analysis of Vista content protection

Posted Dec 26, 2006 13:32 UTC (Tue) by i3839 (guest, #31386) [Link]

True, but in that case it's the driver checking the hardware, and as we want to replace the driver it's quite easy, as there's nothing stopping us, except some obfuscated binary code.

But if we can so easily replace the MSWindows driver with a Linux one (concerning DRM "protection"), then what would stop people bypassing the DRM from the software side? Nice expensive hardware all for nothing because the software can't keep any key secret... (Even the key on the hardware isn't safe if they aren't very careful.)

Only way to fix the above problem is to pass encrypted data to the hardware with the software not knowing the keys, which is what happens I think. But I don't believe that all those hardware companies and content industry can keep their keys secret. If this is the case, then there's no need at all to be secret about interfaces and drivers information, as all decryption is done by hardware.

Considering the draconian regulations it means they went for a half assed solution which can be broken, and thus will be broken. If the hardware really did all the verification then things would be very simple for the driver, as the only thing that changes would be that the hardware is more expensive and has an extra feature.

Maybe it is a sneaky way to try killing FOSS after all...

A cost analysis of Vista content protection

Posted Dec 27, 2006 23:52 UTC (Wed) by csamuel (✭ supporter ✭, #2624) [Link]

My understanding was that the stated aim of the exercise is to stop
someone writing software that poses as video hardware to an existing
driver because the hardware & driver do a DH key exchange and the driver
encrypts the "premium" content with the exchanged keys.

Thus if your software was able to masquerade as a plug in video card and
did the DH exchange with the driver you would then be able to decrypt
the "premium" content yourself.

A cost analysis of Vista content protection

Posted Dec 28, 2006 15:33 UTC (Thu) by i3839 (guest, #31386) [Link]

Diffie-Hellman doesn't protect against man-in-the-middle attacks, so some form of authentication would be still needed. And for that there needs to be keys both in hardware and the driver.

The key in the driver could be replaced with any key the attacker wants, and then the authentication would seem to succeed and unencrypted content would be received by the fake videocard. I don't believe they're so stupid to bet on this...

But maybe they do, as it appears that the driver needs to do checks, and checks can be bypassed, so what the hell are they thinking? If the driver needs to do any checks then the system is broken by design.

A cost analysis of Vista content protection

Posted Jan 23, 2007 10:43 UTC (Tue) by i3839 (guest, #31386) [Link]

It seems they were indeed so stupid as this, both Blueray and HD-DVD are cracked because the encryption keys can be fished out of ram. Pathetic.

A cost analysis of Vista content protection

Posted Dec 27, 2006 20:09 UTC (Wed) by allesfresser (subscriber, #216) [Link]

One thing that seems to be missing in all this discussion of how to break this scheme is that in the largest market for PCs (the US), reverse-engineering or 'breaking' it will be completely illegal and very prosecutable, thanks to the DMCA. This will have a significant damper on legitimate free drivers, to say the least.

A cost analysis of Vista content protection

Posted Dec 27, 2006 23:53 UTC (Wed) by csamuel (✭ supporter ✭, #2624) [Link]

Amen.

Very handy for the agendas of both "content" providers and Microsoft.

A cost analysis of Vista content protection

Posted Dec 30, 2006 16:14 UTC (Sat) by i3839 (guest, #31386) [Link]

Well, breaking content protection may be illegal, but making a free driver that also honours the DRM surely isn't illegal?

A cost analysis of Vista content protection

Posted Dec 25, 2006 1:45 UTC (Mon) by dkite (guest, #4577) [Link]

Very simple.

Microsoft will end up writing most of the video drivers for the card
manufacturers.

Already the closed video drivers available for X have microsoft code in
them.

The spec is very complex, and most of the function is system level as
opposed to video driver level, the only problem being that it has to run
in the video processor. Why not have MS write the complicated
communication and trip handling bits, and focus on the particularities of
your hardware.

If it isn't the case now, it will as Nvidea and ATI have trouble
delivering adequate performance and consistency, and MS starts losing
sales because of it.

And since MS will own the code, which IS the spec for the hardware, how
can anyone else have a go at it?

My opinion is that this will be an utter failure for everyone involved.
It will take a few years to shake out.

Derek

A cost analysis of Vista content protection

Posted Dec 24, 2006 13:11 UTC (Sun) by csamuel (✭ supporter ✭, #2624) [Link]

It's worth remembering that Peter is a well known crypto geek and was one of the contributors of source code to Bruce Schneier's "Applied Cryptography". He has his 800 slide godzilla crypto tutorial online at his University of Auckland pages.

He's likely to have a reasonable understanding of the crypto implications and burders of this specification.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds