Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

TiVo File Encryption Cracked

Posted by kdawson on Mon Dec 04, 2006 03:17 PM
from the platform-equity dept.
An anonymous reader writes "TiVo file encryption has been cracked. Details on the project can be found on the wiki. Mac and Linux users rejoice!" The project page says, "The conversion still requires the valid MAK of the TiVo which recorded the file, so it cannot be used to circumvent their protection, simply to provide the same level of access as is already available on Windows."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • This is good news for people who are trying to use content they recorded, like they should be able to.
    • Re:Yay fair use (Score:4, Interesting)

      by Lumpy (12016) on Monday December 04 2006, @03:28PM (#17103806) Homepage
      Funny, I've been doing this with my ReplayTV for years now. I made the decision to go replay instead of Tivo back then and enjoyed full access to my content, no features removed (I still have a commercial skip button that works, no pause ad's and everything works as it should and was promised when I bought it.

      Nice to see that TiVO owners can catch up to the rest of us now, but a smarter decision at the beginning would have given you that choice from the start.

      if someone figures out how to take a TiVo and install a linux distro on it and a mythtv install I'll be all over buying a Tivo or two to hack, but until then. I'll keep using my networked replays.
      • Oh no! (Score:5, Funny)

        by PHAEDRU5 (213667) <instascreed@[ ]il.com ['gma' in gap]> on Monday December 04 2006, @04:06PM (#17104364) Homepage
        A cloud of smug!
        • Actually, I think the correct term is gaggle, but I could be mistaken.
              • Re: (Score:3, Informative)

                Ah, don't flatter yourself too much. I've gone through the GP's recent posts and he's hardly your "personal troll". He's pretty funny too.
      • Re: (Score:2, Informative)

        And I've been pulling shows off my Series 1 TiVo for years now too. What's your point?
      • Re:Yay fair use (Score:5, Insightful)

        by Manchot (847225) on Monday December 04 2006, @04:26PM (#17104638)
        Commercial skip: Still works on the Tivo, except now you have to push a six-button sequence every couple months to get it to work.
        Ads: Barely visible. They either appear on the bottom of the Now Playing screen, in which case they're optional, or it takes up an eighth of the screen during the commercial for the product being shown. In essence, the latter are only visible in the short time while you're fast-forwarding, showing you a stationary ad for a couple seconds. Those ads are exceedingly rare anyway. (I saw one for the Wii yesterday during primetime, but that's the first I've seen in weeks.)

        It seems to me that many people on Slashdot, the Richard Stallman crowd especially, act like Tivo is most evil company on the planet for a few very minor faults (especially when it comes to DRM). In reality, I like Tivo because while they do pay lip service to the likes of the RIAA and the MPAA, it is only lip service. They didn't actually remove the commerical-skip feature: they just put in an easy workaround to get it. They included DRM to prevent themselves from getting sued, but it is extremely minimal DRM that is easily circumvented by the owner of the Tivo with a single DirectShow filter. If ReplayTV had paid lip service, it might still be around.

        In fact, Tivo even does things that most Slashdotters would applaud, but are villainized nonetheless. Though they have a few patents, a lot of it is for innovative hardware. They aren't like some of the patent-whores who patent things invented fifteen years ago: they basically co-invented the DVR, and made a damn good one. They even use Linux and released their code under the GPL. And yet, we still hear Stallman complaining about the fact that the Tivo hardware locks you out from changing the software. What he (and many others) apparently miss is that when you buy a Tivo, you're not buying a general purpose computer: you're buying a DVR. I mean, God forbid that they prevent users from running them out of business by buying the hardware for far less than it costs Tivo to make it and loading MythTV onto it. (Yes, Tivo subsidizes the cost of the hardware, but only because you are agreeing to pay for the service.)
        • Re: (Score:3, Interesting)

          Quite simply, I shouldn't need to indulge in a "hack" that is a well known secret in order to get my PVR to skip ahead 30 seconds. You've just been conditioned to accept this. Nevermind how annoying it is anytime there's a power hit.

          It's really quite nice being able to completely power down the MythTV box that sits in my living room. If I do the same to my Tivo, not only does stuff not get recorded but I will have to re-enter that stupid hack to get my 30-second skip back again.

          That's not even getting into
            • Re: (Score:3, Informative)

              Also, does turning the power off on a TiVo (not pulling the power plug or anything) actually stop the box from recording? I haven't had a TiVo in my house for about 5 years (been using MythTV and cable company HD DVRs), but I thought the TiVo would turn itself on and record when your shows come on.

              TiVo's don't have a power switch. The closest you get is putting it in Standby mode which stops video and audio output. The unit is still on and still records shows and LiveTV. At least, that's true for the sta
              • Re: (Score:3, Informative)

                I know my P3-450 BIOS has a setting to wake at a specified time, but I don't know if that has a API to set it via software.

                It probably doesn't. The usual trick is to use nvram-wakeup to edit the onboard CMOS RAM and set the wakeup time that way...
        • Re: (Score:3, Interesting)

          I'll respond to this a bit... I have 2 DirectTivo's - a series 1 and a series 2.

          I DO like my Tivo, but it is showing it's age. It's slow, and the feature you mention as "commercial skip" isn't (it's a 30 second skip.) I also want the ability to get programs off it (which I'll probably add a cache+net card to do on the S1.) At this point, after using tivo for about 5 years now, I want more. I want more flexibility, speed, features (play MP3's, photos, etc.) and storage. The Tivo has served me well, but it's
        • Commercial skip: Still works on the Tivo, except now you have to push a six-button sequence every couple months to get it to work.

          That's not commercial skip. That's 30-second skip.

          ReplayTV's commercial skip, like MythTV's commercial skip, figures out what portions of the recorded show are commercials and then automagically skips them on playback. Certain VCR's (I think JVC) had similar functionality, just not as nice since fast-forwarding tape is a lot clunkier than seeking on a file.
  • by adam (1231) * on Monday December 04 2006, @03:20PM (#17103682)
    After reading the linked "details" article, I am at a loss to tell whether or not this will work with HD-Tivo. I've wanted to buy one of these for a long time (and they've recently hit the market [engadget.com], but at $700ish I can't justify the cost unless I have some way to archive my programing (and Tivo2Go is not offered for HDcontent). HD-DVD and BluRay are both non-starters at the moment, whereas HBO, Showtime, Cinemax, etc all play assloads of HD content all the time (including many movies that aren't out on DVD yet, as well as their own series such as Deadwood, Dexter, etc).

    So can anyone tell me if this actually brightens the prospects of being able to use a series 3 HD Tivo to record HD shows and then archive them offline for storage? I did RTFA but the jargon about headers and address bytes and whatnot got a little heavy for me.
    • by Anonymous Coward on Monday December 04 2006, @03:30PM (#17103852)
      No, this just applies to standard def content from a Series 2 TiVo. You must use the Home Media Option to get the files off the TiVo top begin with. The Series 3 TiVo (the HD version) does not support the Home Media Option.
    • by MBCook (132727) <foobarsoft@foobarsoft.com> on Monday December 04 2006, @03:49PM (#17104114) Homepage
      It won't. Series 3 do not have the necessary feature enabled because Cable Labs won't let them (yet). Look for it in a future release (if hell freezes over).

      For getting video off a Series 3, I worry that it will take an external drive (once they enable THAT) and then get the files that way.

      I say all this as a Series 3 owner who, really, doesn't have a ton of use for extracting video.

      In short: Series 3 need not apply.

    • Re: (Score:2, Insightful)

      You've already paid for an expensive HD TV and the extra charges for the HD channels.

      Now you are going to cry over the cost of the HD Tivo?

      • Re: (Score:3, Insightful)

        Yup. A HD TV isn't expensive really. Anymore HD is just a standard feature with any TV that's a decent large screen TV for watching movies. All of that progressive DVD content will be more than adequately cool. You don't even need to futz with the HD channels (payware or otherwise).

        Infact, when stacked up next to a nice progressive DVD those HD channels aren't that hot anyways. Even when not compared to good DVD's in a side by side comparison those HD channels aren't that impressive.

        Many people don't have t
        • Re: (Score:3, Informative)

          Either you have a really crappy HD input signal, you don't have your TV calibrated correctly (get a video essentials/avia DVD), something else is bad (cables, malfunctioning part, etc), or you have a smaller TV and you are not sitting close to it; because I've never known anybody to say that it's not really that different when seeing the actual difference. (most often it's because they have their TV calibrated to make 408i signals to look better, which unfortunately conversely makes their HD signals look
        • Re: (Score:3, Informative)

          Infact, when stacked up next to a nice progressive DVD those HD channels aren't that hot anyways. Even when not compared to good DVD's in a side by side comparison those HD channels aren't that impressive.

          If it's good HD, that is just not true. Sure, for poorly encoded, or lower bit-rate transcoded stuff that may be so, but check out PBS-HD and tell me it's not better.

          -Ted
  • by Anonymous Coward
    whats the news? i've been doing this for a while, they come to the pc in a proprietary format and then i use tshow to clean them up. I'm using a series 1.
  • No it hasn't. (Score:2, Informative)

    by Anonymous Coward
    It hasn't been "cracked", since it still requires your Media Access Key to decode the video.
    • Re:No it hasn't. (Score:5, Insightful)

      by pegr (46683) on Monday December 04 2006, @03:54PM (#17104182) Homepage Journal
      It hasn't been "cracked", since it still requires your Media Access Key to decode the video.
       
      Remember what Bruce says kids: In the classic encryption scenerio, A(lice) encrypts her message to B(ob) to protect it from C(harles). With DRM, Bob and Charles are the same person!
    • Re:No it hasn't. (Score:4, Informative)

      by mrsbrisby (60242) on Monday December 04 2006, @04:01PM (#17104294) Homepage
      It hasn't been "cracked", since it still requires your Media Access Key to decode the video.
      Yes it has. The MAK isn't the key to the encrypted stream- the MAK is what's printed on the System Information page in the TiVO.

      This defeats TiVO's DRM that was used to prevent Linux and Mac users from watching shows on their PC.

      Please stop replying if you have no idea what you're talking about.
        • Re:No it hasn't. (Score:5, Interesting)

          by mrsbrisby (60242) on Monday December 04 2006, @04:37PM (#17104772) Homepage
          The MAK isn't the key to the encrypted stream-
          Yes it is... RTFWiki.
          No it isn't. read the wiki yourself. I've been following it for months.

          The key is produced through a (previously) unknown tranformation involving the MAK. Since the MAK is published, as well as the cipher, as well as the protocol.

          TiVo's DRM prevented Linux and Mac users from watching their shows only as a side effect. The intent of TiVo's DRM is to prevent people who don't know the MAK from watching the content.
          I don't know what the intent of Tivo's DRM was, and I strongly suspect you don't either.

          The DRM as implemented couldn't do what you say it was intended to do- people regularly rip from their tivo and show the results to people who don't have the MAK.

          This is a nice piece of reverse engineering, but no encryption scheme was cracked.
          Its a wonderful piece of reverse engineering, but if you're nitpicking that people didn't break the turing cipher, I've got news for you: Nobody had to. They broke the method of creating the key.
  • DMCA? (Score:5, Interesting)

    by Thunderstruck (210399) on Monday December 04 2006, @03:22PM (#17103734)
    If I recall, the DMCA prohibits trafficing in technology to bypass security measures on copyrighted media put in place by the owners of that copyright.

    The limitations on Tivo are copy protections put in place by a third party, not the owner. (I can still record the same programs on my betamax with no trouble.) Have I missed something?

    • Re:DMCA? (Score:4, Interesting)

      by Aadain2001 (684036) on Monday December 04 2006, @03:29PM (#17103824) Journal
      IANAL, but from my understanding it can summed up as: the MPAA/ABC/CBS/etc can't sue them for this (they didn't put the protection in place), but TiVo certainly can!
      • Re:DMCA? (Score:4, Interesting)

        by ahknight (128958) * on Monday December 04 2006, @03:35PM (#17103928) Homepage
        It's not TiVo's media. You are, however, breaking the license agreement for the service if you do this and they can disconnect you. That's about it. (IANAL, either)
    • Re:DMCA? (Score:5, Informative)

      by Jerf (17166) on Monday December 04 2006, @03:32PM (#17103876) Journal
      Why "recall"? This is the Internet. Look it up.
      Sec. 1201. Circumvention of copyright protection systems

                  `(a) VIOLATIONS REGARDING CIRCUMVENTION OF TECHNOLOGICAL MEASURES- (1)(A) No person shall circumvent a technological measure that effectively controls access to a work protected under this title. The prohibition contained in the preceding sentence shall take effect at the end of the 2-year period beginning on the date of the enactment of this chapter.
      I don't see any reference to who is adding the "protection". This is probably a DMCA violation.

      'Course, unless you run Linux but have never watched a DVD, you've pretty much already opened that door.

      IANAL, but while I'm sure you could argue either way, I'm pretty sure that the better argument is that the DMCA is intended to allow non-owners to add protection, as TiVo is here, for exactly the sort of things TiVo is doing.
      • Re:DMCA? (Score:5, Funny)

        by acklenx (646834) on Monday December 04 2006, @04:14PM (#17104472) Homepage

        No person shall circumvent a technological measure that effectively controls access to a work protected under this title.
        Call me crazy, but if you can circumvent it, then it doesn't seem like it effectively controls access. So you can crack anything that you can crack, duh.
      • Re: (Score:3, Interesting)

        'Course, unless you run Linux but have never watched a DVD, you've pretty much already opened that door.

        There's every reason to believe dvdcss (and this software) is perfectly legal under the DMCA, as it falls under "interoperability":

        `(3) The information acquired through the acts permitted under paragraph (1), and the means permitted under paragraph (2), may be made available to others if the person referred to in paragraph (1) or (2), as the case may be, provides such information or means solely for the p

    • Re:DMCA? (Score:4, Interesting)

      by cfulmer (3166) on Monday December 04 2006, @03:41PM (#17104010) Journal
      Well, the relevant part of the DMCA is this:

      'a technological measure "effectively controls access to a work" if the measure, in the ordinary course of its operation, requires the application of information, or a process or a treatment, with the authority of the copyright owner, to gain access to the work.'

      (that's 17 U.S.C. 1201(a)(3)(B)). Under your reading, where it says "with the authority of the copyright owner," that means that the copyright owner has to approve the encryption being put in place. Since I don't think Tivo has agreements with all the media companies, I don't think this applies. Also, I don't think Tivo adds anything to the media, so it doesn't have any copyright in it. So, under this section, you're right.

      But, there's another section, 17 U.S.C. 1201(b) which says that you cannot traffic in something that circumvents "a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof." And, here, it does that if it "prevents, restricts, or otherwise limits the exercise of a right of a copyright owner under this title." That's a bit odd to read -- the expression "a right of a copyright owner" is a term of art which basically means "the things only copyright owners can do." The end result is that you cannot traffic in circumvention devices, even if they circumvent something that was not put there with the agreement of the copyright owner, so long as it keeps you from doing something that only the copyright owner can do (i.e. *copying*).

      I think that the end result of this odd situation is that people can circumvent the encryption on the Tivo, but can't provide a tool for others to do the same thing.

      [See a lawyer before you rely on this.]

    • Not if it's technology to bypass security measures in order to achieve interoperability [hellerehrman.com].

      Granted, there's been a few conflicting precedents (DeCSS/libdvdcss) but I think it's well within consumer's rights to watch Tivo-recorded video on whatever OS they darn well please. And on that topic . . . why doesn't Tivo already have a Linux client? It's the native OS on the box itself, after all . . . then again . . . Tivo hasn't shown itself to be particularly supportive of the community that created the base so

  • by Space cowboy (13680) * on Monday December 04 2006, @03:23PM (#17103742) Journal
    It's cool that Mac/Linux users can now access their media in the same way as Windows users have been able to. It's not *too* cool (ie: dangerous to TiVo, and by extension the implementors) because you still need your MAK key, and all it does is provide the same level of access as TiVo already provide to windows users.

    The crucial thing here is that TiVo took a business decision not to support Mac/Linux users. They can't really complain when those users decide to support themselves, giving themselves the same abilities that TiVo provide to Windows users...

    Personally I think this is the right balance - my TiVo has been sitting in a corner since I moved house - the new cable box does everything TiVo did, and does it in HD (although the interface sucks a bit. Bad comcast). With this though, I can see a new lease of life for the TiVo ... a few creative uses come to mind :-)

    Simon
  • Are there any new solutions these days for recording tv that _DON'T_ require subscribing to a monthly service, like the vcr did? Like, say... recording programs to a large hard drive and then being able to either play from the HD or else transfer them to a computer and burn DVD's of the stuff for permanent storage.
    • Re: (Score:2, Informative)

      by Anonymous Coward
      ...recording programs to a large hard drive and then being able to either play from the HD or else transfer them to a computer and burn DVD's of the stuff for permanent storage. There are standalone DVD burners (Panasonic, Sony, etc.) that have hard drives. You record to either DVD or the hard drive, and you can playback from the HD or record the data to DVD.
    • Re: (Score:2, Informative)

      Yes. Almost all video capture cards come with programs to do this -- every card I've had/seen from ASUS and ATI does. There won't be any program guide or fancy remote control, but it'll record whatever you program it to. Just like a VCR.

      The appeal of the Tivo is it's simplicity and ease of use. Yes, I can build my own, but it will cost far more than the cost of the tivo and monthly (or lifetime) service. Plus a home grown solution will tend to require never ending tweaks to keep it running.
  • --begin opinion--

    I don't understand why someone would go through the effort of downloading movies from their TiVo to watch on a PC.

    - Basic TiVo quality isn't so hot
    - The TV shows that I record in high-quality usually exist on purchasable DVD's anyway
    - Who ever watch movies more than once or twice? Thanks to Netflix, there is a never ending list of good movies that I've never seen

    I don't see all the fuss. TiVo is fine, the DRM is fine. TiVo records disposable media, and media worth hanging onto is worth p
    • I don't understand why someone would go through the effort of downloading movies from their TiVo to watch on a PC. ... The only case I can see is if your kid is on the local news and you want a permanent record. Even then, you can usually contact the news station for that.

      So see? You made a liar of yourself: You _CAN_ understand why someone would download from their tivo to watch on their TV.

      I like putting cartoons on DVD so my kid can watch something on long car rides. Before today, this meant using wine a

  • So can a MythTV install now send shows recorded by TiVo to other MythTV or TiVo players across the Internet? Do you even need MythTV to do this?
    • by Scutter (18425) on Monday December 04 2006, @03:41PM (#17104026) Journal
      Check it out, and you'll be amazed.

      I did, and I wasn't. It was a giant pain in the a** to set up and configure, it didn't work reliably, and the cost for hardware was way higher than buying a TiVo.
      • Re: (Score:3, Interesting)

        The reason hardware for MythTV costs more is because Tivo sells their hardware at a loss, because they can count on making up for it in high subscription fees.

        I recently spec'ed out a MythTV box with an 80gb hard drive and hardware MPEG encoding and a nice media center case for $350 shipped from NewEgg. A pretty good deal, I'd say, and it can actually be used for other things than just watching TV (it's got an Athlon 64, 512 mb RAM, and NVidia GeForce 6150 graphics).
      • by scribblej (195445) on Monday December 04 2006, @04:02PM (#17104296)
        It's a pain in the ass to set up and configure. I can't argue with you there. If you've done it once successfully, though (or two or three times) it becomes much easier.

        However, I take issue with "didn't work reliably" and "cost was higher than a tivo."

        My own MythTV works flawlessly, using a donated PIII-750 (cost: $0) for the server, and a Hauppauge 150 (cost: $60) for the tuner/encoder. There are no monthly fees. If you can show me a TiVo with lifetime subscription for $60, I'll be amazed. And tell my friends to buy it.

        My MythTV also has features that TiVo will never have -- like the ability to automatically detect and skip commercials, the ability to select programs to automatically burn to DVD, and support for enough tuners to simultaneously record everything on every channel (well, in theory... I'd love to see the hardware for that!).

        I like the TiVo. It's easy to use. But I like my MythTV a lot more. And I don't have to worry about what stupid decisions TiVo corporate might make -- like encrypting my videos so only I can watch them, support for the "Broadcast" flag, and wasting my storage space with advertisements.

        • Re: (Score:2, Interesting)

          One other thing I like about my MythTV. It doesn't "forget" whether I've watched a show or not after a few months. If I've watched something and told it I'm done with it, it's not going to record it again without my permission. Unlike the TiVo which will happily record shows you've watched a dozen times, if it's been long enough for the TiVo to forget.

          • Re: (Score:3, Interesting)

            Your MythTV didn't cost you $60. Just because someone donated the computer to you doesn't mean it was free.

            Although I'm not sure what your point is here, I guess I'll go with it. Just because you griped enough to DirecTV and didn't get charged for a year doesn't make it free to you either. Be sure to count the time on the phone with them, the downtime without the service, and the general BS that you have to put up with when speaking w/ customer service.

            There's that and there's the time it cost you to put
    • When I got my TiVO, it was $200 for the box and $300 for a lifetime subscription, for a total of $500.

      I didn't have a computer that was capable of running MythTV (and still don't), and when I priced the parts needed to build one, I was looking at over $1000 plus an appreciable amount of labor to build a machine that was as capable as a TiVO box.

      It's been some years, so I really don't know if the math works out the same anymore, but at least in my case I really don't think it's a wonder at all that I chose t
      • Re: (Score:3, Interesting)

        $500 for a TiVO w/ Lifetime subscription is not a bad price, but let me break down my MythTV box.

        • $119 nMedia Media Center Case I could have used an old beige box, but this case fits in perfectly with my other components
        • $88 Athlon64 3000+ CPU
        • $87 Asus A8N-VM CSM motherboard with Geforce 6150 onboard
        • $95 Seagate 400GB SATA 3.0 HD
        • $90 1GB DDR RAM Crucial ValueRAM
        • $10 Universal Remote
        • $5 Homemade Serial IR receiver
        • $40 2 WinTV software encoder cards from Ebay

        Total: $534

        I happen to have Charter HD cable

          • Re: (Score:3, Interesting)

            You are an ac, but I would like to prove that my post was correct.

            Couple of points:
            • The case did come with a quiet 280 watt PSU. The only fans in the system are the PSU and the CPU cooler. The AMD stock cooler is very quiet.
            • The embedded video has s-video output. I don't use it because I am doing HD over DVI. The s-video adapter does cost an extra $10 though. If you have another Asus board that has onboard s-video that adapter will work.
            • $10 universal remote is not a problem. I bought a nice one off woo
    • by hal2814 (725639) on Monday December 04 2006, @04:12PM (#17104458)
      "Why TiVo when you can MythTV?"

      Why post on-topic when you can blatantly go off-topic and get modded up for it? This is a nuts and bolts Tivo article. It's not about considering one DVR solution over another. No other solution is even on the table here. I'm not the biggest fan of Tivo but I'm getting a bit sick of these folks who feels some sort of duty to shove in a reference to MythTV every time Tivo is mentioned. I for one won't be amazed by links about MythTV but I can't read a single DVR article that doesn't have some wonky poster extolling the virtues of MythTV. We get it. We know. Stick to the topic.
      • Re: (Score:3, Informative)

        This is an article about the BS associated with proprietary solutions. The possibility of using an open solution and BYPASSING all of this BS is very much on point. I am a LONG time Tivo user that chose to build a MythTV system over this very problem.
      • "Why TiVo when you can MythTV?"

        Why post on-topic when you can blatantly go off-topic and get modded up for it? This is a nuts and bolts Tivo article. It's not about considering one DVR solution over another.

        It's perfectly relevant to the discussion. After all, the discussion centers on an inconvenient aspect of TiVo. The assertion is made that by using MythTV, you avoid that inconvenience altogether. I find that interesting, in the context of the discussion.