Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »
June 17, 11:30 AM - 12:30 PM U.S./ET (GMT-4)
Larry Bonfante, CIO of the U.S. Tennis Association, will discuss the skills and approaches that your rising IT leaders must learn to be effective in an executive capacity.
How to Handle Your New CEO: Managing Turnover at the Top
June 18, 11:00 AM - 12:00 PM U.S./Eastern (GMT-4)
Turbulent times have increased turnover at the top. Find out what Council CIOs have done to "break in" new CEOs—build relationships, set expectations, educate on the role of IT.
Mid-Market CIO Panel: Tips and Techniques for Improving Vendor Relationships
July 15, 4:00 PM - 5:00 PM U.S./Eastern (GMT-4)
We'll highlight relationship priorities and best practices identified in a Council study, and we'll interact with a CIO panel on the approaches they've used to improve strategic vendor partnerships.
Executive Competencies Assessment Tool
Assess Your Business Leadership Skills with the Council's new benchmarking tool. Rate yourself in change leadership, strategy, customer focus and more.
Learn more about the CIO Executive Council »Apply today for a FREE subscription to CIO Magazine!
April 09, 2007 — IDG News Service (Tokyo Bureau) —
A cat-and-mouse game between the guardians of the copy-protection system on next-generation DVDs and those intent on hacking it has kicked off with the first revocation of a descrambling key used in a popular software application.
Last week the Advanced Access Content System Licensing Administrator (AACSLA) said it was expiring a key used in Corel's InterVideo WinDVD 8 application after the key was discovered and posted on the Internet.
Writing on the Doom 9 message board, a user with the name "Atari Vampire" said that he or she had managed to find the device key for the software. The device key is used in conjunction with individual keys on each movie title to decrypt the data on the disc.
In response, Corel is updating WinDVD 8 with a new device key and warning users that they won't be able to watch HD-DVD or Blu-ray Disc titles unless they upgrade.
"Our decision stems from recent reports that hackers have illegally obtained certain software licensing keys and have used them to duplicate copyrighted content without prior authorization," Corel said in a statement.
The discovery of the device key is the latest in a string of attacks on AACS, which is used on both HD-DVD and Blu-ray Disc.
The first to be disclosed was a title key for Stanley Kubrick's 1987 film, Full Metal Jacket. A user with the name "Muslix64" posting to the same discussion board said he or she began attacking the copy-protection system after it prevented the viewing of the movie on a high-definition monitor. As an antipiracy measure, the system allows high-definition video output only over a monitor connection that supports copy protection.
Then on Feb. 13, an additional key, called a processing key, was also published online.
AACSLA downplayed the impact of both attacks, saying of the first that it "does not represent an attack on the AACS system itself" and of the second that it "represents no adverse impact on the ability of the AACS ecosystem to address the attack."
Ironically, technical documentation on AACSLA's own website appears to be lending a hand to people like Atari Vampire who are looking for weaknesses in the copy-protection system.
"I even printed out all 70 pages of the AACS Introduction and Common Cryptographic Elements document, painfully reading through this material," wrote Atari Vampire before explaining how an analysis of memory contents was conducted using data "per page 13 of the AACS Common Crypto doc."
The attacks to date have all involved exploiting weaknesses in PC software used to play the discs, and in this respect they bear a close resemblance to the downfall of the content scrambling system used on DVDs. The first attacks on that system were through badly written software rather than a brute-force attack on the encrypted data. The cracking of the scrambling system has led to the widespread availability of software that can copy DVDs.