http://www.grc.com/sn/SN-074.htm
Steve Gibson: Right, well, it generated a lot of controversy because it became clear from the article published by Peter Gutmann, who’s in New Zealand, a New Zealand-based, very well known, good reputation security analyst. He took a look at the consequences of essentially putting this AACS, the Advanced Access Content System, which has been assembled by a number of hardware companies in order basically to appease the interests of Hollywood, in order to say, look, this is the way we’re going to protect the next generation of content.
As we saw last week – and the reason we spent last week’s episode was to create some historical context for both the legislative side and the technical side. And I talked last week about basically AACS is a phenomenally complex technology that involves state-of-the-art encryption. It involved some stuff you just can’t even get your mind around. I mean, I will never try on Security Now! explaining the subset difference tree system for allowing keys to be revoked by keeping those specific players from being able to perform the decryption. It’s mind-numbing, what they’ve done.
And so it’s one thing for that to be in an HD-DVD player. And in fact we’ve already seen, consumers have seen the consequence of that when they stuck a DVD into their first-generation players, it would take up to or in some cases more than a minute for the player and the disk to negotiate all of the crypto going on just internally within the player. And Leo, I was thinking about how you had commented that, when you stuck your HD-DVD on your Xbox 360, it didn’t take long.
Leo: Well, it’s got a faster processor.
Steve: Exactly. Well, talk faster, that’s a monster.
Leo: It’s got three 3GHz Power PCs...
Steve: Exactly. Exactly. So it’s a very different platform there than a typical consumer drive, where they’re trying to keep the cost as low as possible.
So anyway, I’m excited. We’re going to have Peter joining us here in a moment from New Zealand because we wanted to talk to him, get his side of this, talk about what the paper that he wrote is about. And I just wanted to sort of give a little bit of a preface and explain that basically Microsoft has decided that they want Vista to be able to deliver this kind of content. And what Peter’s paper is about is essentially the cost of delivering this content. And what it means is that so many aspects of our PCs, which have been fully documented, been public domain, been anyone could develop a display card, for example, that’s no longer the case. If you’re going to have any foot in this next-generation game, you have to sign up and apparently pay hefty license fees just to participate. And if you don’t get certificates, which are subject to spontaneous revocation, if you then subsequently misbehave, or in fact I read one of the AACS organization documents said that you could be revoked if you failed to pay your annual dues.
Leo: Your card would stop working in my PC.
Steve: Exactly. The hardware that the consumer purchased could be shut down.
Leo: Never buy a card from somebody who’s about to go bankrupt.
Steve: That’s a very good point.
Leo: I mean, the whole thing is nuts. This is just nuts. We’re going to talk to Peter in just a bit and get the details.
Looks like Vista's DRM may make it an OS customers would be wise to avoid. Disabling your hardware if the manufacturer falls out with Microsoft is a nice touch I thought. Vista is also looking more and more like a specialised multi-media home PC operating system rather than a general purpose OS like Windows XP - I can't see business users buying into the DRM crap unless they are forced into it by withdrawal of support for Windows XP.