April 19, 2006 | By Fred von Lohmann

DMCA Encourages Bad Security

Professor Ed Felten has been posting this week (1, 2, 3) about HDCP, a content protection technology rapidly becoming ubiquitous in the world of high-def video, whether from your cable, satellite, or next-gen Blu-Ray/HD DVD player.

Apparently, HDCP has serious security weaknesses, Hollywood knew it, and everyone went ahead with it anyway. So it won't stop "pirates," but it will create incompatibilities for regular movie fans for years to come.

Why? Because the developers were dumb? Because they were desperate to stop piracy? Nope. Felten explains:

A much more plausible answer is that HDCP encryption exists only as a hook on which to hang lawsuits. For example, if somebody makes unlicensed displays or format converters, copyright owners could try to sue them under the DMCA for circumventing the encryption. (Also, converter box vendors who accepted HDCP's license terms might sue vendors who didn't accept those terms.) The price of enabling these lawsuits is to add the cost of 10,000 gates to every high-def TV or video source, and to add another way in which high-def video devices can be incompatible.

So, in other words, the DMCA gives Hollywood a strong incentive to deploy cheap, weak security systems in order to get legal leverage over technology companies, rather than investing in good security.

Deeplinks Topics

Stay in Touch

NSA Spying

EFF is leading the fight against the NSA's illegal mass surveillance program. Learn more about what the program is, how it works, and what you can do.

Follow EFF

The government is set to get new hacking powers on Dec. 1. Thankfully, members of Congress are asking questions. https://www.eff.org/deeplinks...

Oct 28 @ 11:58am

Tomorrow EFF will host a free digital self-defense workshop w @LBSBaltimore. Marched for Freddie Gray? You need this https://www.eventbrite.com/e/...

Oct 28 @ 11:41am

Has your social media account been suspended or post been taken down? Tell @censored your story. https://onlinecensorship.org/...

Oct 28 @ 9:57am
JavaScript license information