encryption
Latest
AACS sez: Blu-ray and HD DVD titles compromised, loosed into the wilds
It's official, AACS protection on Blu-ray Disc and HD DVD has indeed been compromised. The AACS Licensing Authority was quick to assure the industry that their AACS encryption was still intact. Rather, the keys used to unlock commercial films had been stolen by exploiting "flaws" in "one or more" of the hi-def players. The AACS LA also confirmed that the breach affects both Blu-ray and HD DVD. So it's true, muslix64 and Co are snagging the "title keys" as they are exchanged between the player and optical media. Of course, anyone trolling the usenet and torrents already knows this full well. But isn't it nice to see the rubber stamp of disapproval from an industry on its heels?[Via Yahoo! News, thanks Philip S.]
SpectraLink unveils NetLink 8000 series of 802.11a/b/g WiFi phones
For those of you who think VoIP just isn't good enough, or you manage an enterprise with hundreds of folks needing to yap it up simultaneously sans wires, you might be interested in SpectraLink's latest duo, which collectively claim the title of "world's first" 802.11a WiFi phones. The VoFi (voice over WiFi) handsets are part of the NetLink 8000 series, and both units feature 802.11a/b/g, WPA2 support for enhanced security, four programmable softkeys, audible / vibrating ringers, backlit displays, text messaging support via Open Application Interface (OAI), military grade shock resistance, speakerphone, and a software configuration tool to boot. The NetLink 8030 ups the ante by including dust / water resistance, rubberized grips for "improved ergonomics and durability," enlarged earpiece for noisy environments, and SpectraLink's "unique PTT feature." Both handsets should begin shipping during the first quarter of this year, and while the NetLink 8020 will run $595, the PTT-enabled NetLink 8030 will demand a whopping $675.[Via NetworkWorld]
Cyberlink responds to BackupHDDVD crack: It wasn't us
Since "muslix64" posted his BackupHDDVD tool there has been much discussion across the internet over how it works, and if it works at all. So far others haven't been able to obtain the necessary keys to decrypt high definition content, and now Cyberlink, makers of the PowerDVD software many assumed was exploited for the attack, is denying vulnerability. In an email to blogger Chris Lanier, the company stated not only is it confident that PowerDVD "fully protects" HD DVD contents, it does not keep the encryption "Title Keys" in system memory -- which is how muslix64 was presumed to have obtained them -- and finally that there is no evidence in the YouTube video released indicating PowerDVD was in any way actually used to crack HD DVD content. Other questions surrounding news of the crack center on the usage of PowerDVD version 6.5 instead of the just released (and Xbox 360 HD DVD player compatible) Power DVD Ultra. The video promised more details in January, and being that it's January now, we shouldn't be waiting very long to find out if this is truly a chink in the AACS armor -- and if so, where it really lies.
TRENDnet's 108Mbps TEW-445UB USB 2.0 WiFi adapter
What's better than TRENDnet's pre-802.11n gear? How about an 802.11b/g-compliant device that you can actually rest assured works with basically every other piece of WiFi kit out there? The TEW-445UB is a 108Mbps-capable wireless USB 2.0 / 1.1 adapter which sports a fairly small 2.8- x 2.1- x 0.7-inch enclosure and plays nice with Windows only. Aside from supporting "Super G" technology and WEP / WPA encryption, it boasts a high power output for up to 23dBm of range, a detachable 2dBi antenna, and claims to cover "50 to 100" meters indoors while blanketing "150 to 300" meters outside. While nothing here is particularly revolutionary, the respectable $72 pricetag fits the package quite well, and it should be showing up in stores real soon.
PSP homebrewer creates indie game encryption system
PSP homebrewing by its very definition requires a moderate level of subversion. As Sony has shown time and time again, running unsigned code on the PSP is not the way that it wants its customers to use the PSP, simply because there's a lot more profit to be gained in selling games than there is in selling hardware. Hold that thought for a second as we bring you up to speed on the latest from the PSP homebrew scene: a developer by the name of Xart has created an encryption system for homebrew PSP code. Apparently, the problem of homebrew community members copying their fellow coder's work and re-releasing it with their name in the splash screen has become bad enough to warrant this encryption system. So lets get this straight: a coder has made an encryption system for a community that's based partly around bypassing Sony's own complex restrictions. What's next? DRM for freeware games?[Via PSPFanboy]
Hitachi to offer auto-encrypting hybrid notebook HDDs in 2007
We already knew Hitachi was planning to unveil 20GB Microdrives and perpendicular notebook drives in 2007, but now the HDD giant is one upping itself by adding some juicy details about next year's 2.5-inch hard drive roadmap. Aside from offering both 5400 and 7200RPM units "in the quarter-terabyte range," next year's Travelstar lineup will likely boast "hybrid" technology in order to conserve battery life, enable zippier bootup times / recovery from hibernation, and provide "greater reliability and higher performance" -- oh, and it's seemingly a requirement to rock Windows Vista Premium (on a laptop), too. Moreover, the firm is touting its "HDD-level encryption solution" as being "virtually impenetrable" (read: fuel for a hacker's fire) and it reportedly won't bog your machine down the way similar software-based security applications will; Hitachi's version "scrambles data using a password-generated key" as the data is written, and then descrambled with the key as it is retrieved using the highly-touted Advanced Encryption Standard (AES) algorithm. Consumers can expect 7200RPM 200GB flavor to be available in "the first half" of 2007, while the larger (albeit slower) 5400RPM 250GB edition should land in notebooks before the year's end.[Via CNET, thanks resource]
Seagate launches updated version of drive encryption
There's nothing like starting the week with a little encryption, eh? Seagate has just announced an update to its hardware-based built-in drive encryption. Previously, the company had brought Full Disk Encryption to its Momentus 5400.2 mobile drive. This new update ships with 128-bit AES and a "faster serial advanced technology attachment interface." Essentially, according to The San Francisco Chronicle, all data traveling to or from the disk will be encoded and decoded by the encryption chip. However, there's one little problem, as Scott Shimomura, senior product marketing manager for Seagate, told the Chronicle: "If the password has been lost to the drive, then, yes, the drive becomes unusable." That means all your data. Consumers should expect to pay a $100 or less per drive premium for the privilege and should see the updated drives on shelves in the beginning of 2007.[Via CIO, illustration courtesy The San Francisco Chronicle]
Lenovo ThinkPads bring biometric HDD encryption, Merom, and draft-N
While fingerprint scanners on laptops are becoming all the rave lately, from what we can tell most of them don't encrypt and decrypt data with the swipe of a finger. Today, Lenovo announced that all new models in the ThinkPad 60 series will include Ultimaco's SafeGuard Easy 4.30, software which enables the option of biometric hard drive encryption that meets the FIPS 140-2 certification -- what the Feds require for government-purchased encryption products. On the Core 2 Duo side, models T60, T60p, R60, R60e, X60, Z61t, Z61p and Z61e are getting the bumped processor treatment, while the same laptops, plus the X60s, (but not including the Z61e) are also to be offered with 802.11n. Lenovo told us that all of these new features are due out later this month, but we don't yet know how much of a premium they'll fetch; we'll keep you posted as soon as the intel comes in. [Via The Associated Press]
First quantum cryptographic data network demoed
With so much sensitive data traveling among governmental agencies, financial institutions, and organized crime rackets, the need for ultra-secure communication has never been higher, and now it seems like the holy grail of unbreakable encryption is almost upon us. Researchers from Northwestern University and Massachusetts-based BBN Technologies recently joined forces to demonstrate what's being hailed as the world's first fully-functional quantum cryptographic data network, as the system leverages the quantum entanglement properties of photons for both data transfer as well as key distribution. The magic of quantum cryptography lies in the fact that not only can two parties exchange the so-called keys without the risk of an eavesdropper ever being able to fully ascertain their values, but the simple act of eavesdropping on an encrypted data transfer can easily be detected on both ends of the line. This current breakthrough combined Northwestern's data encryption method (known as AlphaEta) with BBN's key encryption scheme to enable a completely secure fiber optic link between BBN's headquarters and Harvard University, a distance of nine kilometers. As you might imagine, the entire project was funded by a $5.4 million grant from DARPA, an agency which has a vested interest in transmitting data that not even a theoretical quantum computer could crack. It will be a while before this technology filters down to the consumer, but when it does, you can bet that BitTorrenting pirates will be beside themselves with joy.[Via Slashdot]
Cinea's SV510 USB key puts movie footage on lockdown
With movie studios sending around an increasing amount of digital footage before a film is even released, there are a growing number of opportunities for pirates to get their hands on that valuable content and do what pirates do best. We've already seen Dolby Laboratories subsidiary Cinea attempt to combat this problem by shipping secure DVDs and players to Academy Awards judges, and now the company has released a portable USB 2.0 video key called the SV510 that brings the same encryption technology to the dailies and rough cuts that need to be distributed throughout the filmmaking process. Once the desired footage has been encoded with Cinea's S-VIEW encryption and watermarking technique, it can be safely sent on a DVD or via the Internet to recipients with an authorized SV510, who must plug the device into their PCs and enter a six to twelve digit code if they wish to view the content. This system ensures that even if a laptop and SV510 are both lost/stolen together, the encrypted video cannot be viewed without a password; and for heightened security, any of the Cinea peripherals can be remotely de-authorized by the content creators. The Windows version of this product is available immediately for $600 -- a Mac edition will be shipping in October -- along with a "management fee" of $20/month for the life of the device.[Via über gizmo]
Slingbox encryption upgrade limits functionality
Since its inception, the Slingbox has been a tough pill for some broadcasters to swallow, and while many were screaming injustice, Sling Media declared its flagship product a model of fair use. Apparently some of the accusations have prompted changes, as Sling's latest firmware upgrade adds encryption to the Slingbox's video streams, contrary to its previously encryption-free process. Presumably in reaction to the demands of content owners and the media industry, this encryption should at least appease those who don't want any streamed content to end up being illegally distributed. But the alteration has caused at least one piece of add-on timeshifting software to become defunct. The At-Large Recorder (previously the Replay SlingCorder) from Applian Technologies had allowed users to record their streamed data directly onto a computer, but now cannot function due to the added layer of encryption, causing its CEO to rail against the decision, saying, "They basically added a feature that nobody asked for, for reasons that they're not willing to discuss, and it happens to break our product too." A spokesperson for Sling claimed that encryption had been in the works for awhile, and the timing here is "completely coincidental," despite Sling's previous run-in with Applian, where they obliged the software company change the name of its Replay SlingCorder product. While the upgrade was likely a defensive move to appease an ever-wary content industry, Sling has stifled some extended functionality with the update; exactly how much choice Sling was left regarding the matter when facing the mighty media regulators we may never know, but for the time being there is a number of Applian customers not too stoked by Sling's decision. [Via Techdirt]
CinemaNow launches "Burn to DVD" service for select films
Just days after MovieLink announced that it has licensed technology for burning flicks to DVD, rival download service CinemaNow has stepped up to the plate and begun actually offering consumers this very option. Starting today, about 100 titles are available for download through the "Burn to DVD" beta service, complete with all the interactive menus and bonus features you'd find on a store-bought DVD. Burnable titles start at $8.99, though if you're looking for the latest releases, you won't find them here -- Disney, Sony, Universal, and friends have only provided older films for the initial roll-out. While MovieLink partnered with Sonic Solutions for its presumed entrant into this space, CinemaNow decided to go with technology based on fluxDVD from Germany's ACE GmbH. Even though there may not be a lot of demand for the current crop of titles, assuming that the encryption scheme is able to ward off pirates and at least a few folks show some interest in "Charlie's Angels: Full Throttle" and "About a Boy," among others, it's likely that newer and more popular films will be added to the library in the near future.[Thanks, Michael]
"Diamond Crypto Smartphone" for the rich and paranoid
Thought we admire diamond encruster extraordinaire Peter Aloisson and his previous work, it suffered the same problem as other million-dollar cellphones have in the past: not enough cryptography. Happily, Russian firm JSC Ancort has developed a Windows CE-based smartphone ready for Aloisson's bejeweling that employs "powerful encryption technology" to "provide secure protection of information against kidnapping, technological blackmail, financial racketeers and corrupted state officials" -- sounds like marketing speak for a password-protected wallet app, but who are we to judge? Of course, with its $1.3 million price tag and 50 diamonds (10 of which are blue) we think you might start to have more trouble with mugging than with "technological blackmail," but there's only one way to find out for certain -- anyone want to donate the cash for a hands-on?[Via textually.org]
1Passwd - password/form manager lets Firefox use the Keychain
*Oh snap!* Agile Web Solutions has created a password and form manager extension for both Safari and Firefox that fixes one of my biggest gripes about Mozilla's flagship browser: it can store website passwords in Mac OS X's Keychain Access application. For those who haven't stumbled upon the wonders of the Keychain: it's a system-wide secure password manager that most other Mac OS X apps can use to store logins for things like websites and FTP access. 1Passwd is an extension that, amongst other features, lets Firefox join the Keychain party party so you can have one secure, centralized area for managing (and backing up) your logins. This also means that if you have a .Mac account, any passwords you enter into Firefox will sync between your Macs. But 1Passwd doesn't stop at handle just your login information. Check out the full feature list to see everything else it can do for both Safari and Firefox.If beer could be sent virtually through PayPal, I'd send Agile Web Solutions a twelve pack; this brings Firefox one step closer to being a true Mac OS X browser. 1Passwd is currently in a third beta release, and those who opt to test the beta and offer their email addresses will receive a discount off its (somewhat steep) $29.95 price.
Navio makes good on promise to "unlock iPod"
It looks like Navio Systems have made good on their promise to open up the iPod to non-iTMS content, at least according to a report by Business 2.0, which says that the company is planning to enable its customers to offer iPod-compatible, copy-protected videos by the end of June. Although the details of Navio's methodology are not entirely clear, it seems that their engineers have deconstructed Cupertino-neighbor Apple's FairPlay DRM in order to create a separate-but-equal copy protection scheme that content providers can use to offer their own encrypted products to iPod owners. You'll remember that RealNetworks employed a similar tactic with their Harmony technology, which allows songs purchased from the RealPlayer Music Store to play on iPods, and which Apple did their part -- albeit unsuccesfully -- to thwart by way of firmware updates. Will Navio's technology spark a similar firmware arms race? Only time will tell, but we can't really see Steve and friends just sitting back listening to Beatles tunes while other players start eating away at iTunes' market share.[Via iLounge]
Linksys' WTR54GS Wireless-G Travel Router reviewed
We sure wish we'd had Linksys' WTR54GS travel router a few months ago at CES, where press room Ethernet connections were few and far between, and the single venue offering free WiFi seemingly devoid of techs to keep the network running. Mobile Tech Today also seems to think that this 802.11b/g router would have served us well, providing both basic SecureEasySetup-compatible WEP and WPA encryption along with more advanced Stateful Packet Inspection (SPI) and browser-based fine tuning options for regulating traffic. With four out five stars from MTT, the only downside to this 5.2-ounce router is its range, due mostly to the internal antenna, but when you're sitting five feet away from it in your hotel room that probably won't matter too much.
SecureGSM SP crypto software for WM5 smartphones
Windows Mobile Smartphone users now have a new way to conduct their shady business in secret, thanks to a newly-released version of Australian developer SecureGSM's "military-grade" crypto software. Designed to incorporate seamlessly with the WinMo UI, SecureGSM SP delivers on-the-fly data encryption for communicating with other SecureGSM-enabled devices, and promises voice quality that's "comparable to standard mobile communication." Processor requirements for the ~$190 app are pretty light, with any device running faster than 175MHz making the cut, but system requirements are a bit stricter, as you'll need the MSFP-sporting WM5 AKU2 installed if you want to enjoy conversations free of eavesdropping.
Knox version 1.0.7 is available
I'll admit it, I don't want people poking around my Mac. While I may want certain files encrypted, Apple's File Vault would be overkill for my needs. That's why I use Knox. With Knox, you can quickly create password-protected, encrypted volumes that you alone can gain access to. You can even schedule backups to occur whenever your iPod is docked. If that's not your cup of tea, you can use a remote server or even your .Mac storage space as a backup destination for Knox. Moving from volume to volume is easily accomplished via a menu bar item.How secure is secure? From the website: "Knox’s encryption—based on Apple’s FileVault technology—protects files with the U.S. Government’s new Advanced Encryption Standard (AES)." So there you go. Changes to version 1.0.7 include: Fixed a problem with opening the Preferences window after upgrading to 1.0.6. Fixed a crashing bug in Knox task handling. There is a free trial available, and a single license will cost you $29.95US (€29.95 w/ VAT). Knox requires Mac OS 10.3.9 or later.
