April 19, 2006 | By Fred von Lohmann

DMCA Encourages Bad Security

Professor Ed Felten has been posting this week (1, 2, 3) about HDCP, a content protection technology rapidly becoming ubiquitous in the world of high-def video, whether from your cable, satellite, or next-gen Blu-Ray/HD DVD player.

Apparently, HDCP has serious security weaknesses, Hollywood knew it, and everyone went ahead with it anyway. So it won't stop "pirates," but it will create incompatibilities for regular movie fans for years to come.

Why? Because the developers were dumb? Because they were desperate to stop piracy? Nope. Felten explains:

A much more plausible answer is that HDCP encryption exists only as a hook on which to hang lawsuits. For example, if somebody makes unlicensed displays or format converters, copyright owners could try to sue them under the DMCA for circumventing the encryption. (Also, converter box vendors who accepted HDCP's license terms might sue vendors who didn't accept those terms.) The price of enabling these lawsuits is to add the cost of 10,000 gates to every high-def TV or video source, and to add another way in which high-def video devices can be incompatible.

So, in other words, the DMCA gives Hollywood a strong incentive to deploy cheap, weak security systems in order to get legal leverage over technology companies, rather than investing in good security.

Deeplinks Topics

Stay in Touch

NSA Spying

EFF is leading the fight against the NSA's illegal mass surveillance program. Learn more about what the program is, how it works, and what you can do.

Follow EFF

While Bangladesh blocks social messaging apps, locals are turning to Tor and Twitter: https://globalvoices.org/2015...

Nov 25 @ 3:50pm

You've heard recent news about Securus, the prison phone service. It's also the proud owner of a very stupid patent. https://www.eff.org/deeplinks...

Nov 25 @ 3:09pm

San Diego County has doubled the number of facial recognition devices officers use in the field since 2013: http://www.cbs8.com/story/305...

Nov 25 @ 1:30pm
JavaScript license information