Fuel's paradise?

Found on The Guardian on Sunday, 06 November 2005
Browse Science

It seems too good to be true: a new source of near-limitless power that costs virtually nothing, uses tiny amounts of water as its fuel and produces next to no waste. If that does not sound radical enough, how about this: the principle behind the source turns modern physics on its head.

Randell Mills, a Harvard University medic who also studied electrical engineering at Massachusetts Institute of Technology, claims to have built a prototype power source that generates up to 1,000 times more heat than conventional fuel. Independent scientists claim to have verified the experiments and Dr Mills says that his company, Blacklight Power, has tens of millions of dollars in investment lined up to bring the idea to market. And he claims to be just months away from unveiling his creation.

The problem is that according to the rules of quantum mechanics, the physics that governs the behaviour of atoms, the idea is theoretically impossible.

Dr Mills's idea goes against almost a century of thinking. When scientists developed the theory of quantum mechanics they described a world where measuring the exact position or energy of a particle was impossible and where the laws of classical physics had no effect. The theory has been hailed as one of the 20th century's greatest achievements.

Just let's wait a few more months. In case this idea works, we have a great new source of energy. In case it doesn't, the lights will go out at Blacklight Power. So far, there's not much to lose.

More on Sony: Dangerous Decloaking Patch

Found on Sysinternals on Sunday, 06 November 2005
Browse Software

Despite a chorus of criticism over Sony not delivering an uninstaller with their DRM software, Sony refuses to admit blame and to make an uninstaller readily available. The uninstall question on Sony's FAQ page directs you to another page that asks you to fill out a form requesting for uninstall directions to be emailed to you.

There's no way to access the uninstaller without providing this information, and clicking on the Sony privacy policy link at the bottom of the page takes you to a notice that your email address can be added to various Sony marketing lists.

However, Sony's uncloaking patch puts users systems at risk of a blue-screen crash and the associated chance of data loss. The risk is small, but I made the point in my last post that the type of cloaking performed by the Aries driver prohibits safely unloading the driver while Windows is running.

The EULA also makes no reference to any "phone home" behavior, and Sony executives are claiming that the software never contacts Sony and that no information is communicated that could track user behavior. However, a user asserted in a comment on the previous post that they monitored the Sony CD Player network interactions and that it establishes a connection with Sony’s site and sends the site an ID associated with the CD.

I dug a little deeper and it appears the Player is automatically checking to see if there are updates for the album art and lyrics for the album it's displaying. This behavior would be welcome under most circumstances, but is not mentioned in the EULA, is refuted by Sony, and is not configurable in any way. I doubt Sony is doing anything with the data, but with this type of connection their servers could record each time a copy-protected CD is played and the IP address of the computer playing it.

It just gets worse every day. Instead of providing a simple direct download, Sony wants user information (which might be shared with others). That's no way to treat your customers. Just like Russinovich's first article, this one is worth reading too. It should also be mentioned that Sony gets sued over rootkits and will hopefully have to reveal more details about all that.

The rootkit of all evil?

Found on BBC News on Saturday, 05 November 2005
Browse Various

Sony BMG, the record company part of the multinational corporation that makes laptops, TVs, movies and many other things, is in trouble this week thanks to a copy protection scheme it has used on a number of its CDs.

It is one of many competing techniques used by record companies to try to stop people making copies of music files from CD as they fear that their customers will then make the music available online without permission.

If you have got a Mac or a Linux box then you can play and even copy you disc happily, because the real WAV files that a CD player uses are there on the disc.

Fortunately, it is possible to avoid buying discs like this. Philips, who defined the CD standard and then made it widely available, has been very clear that these music delivery systems do not count as Compact Discs and cannot use the CD logo.

Microsoft has told technology companies that if they want to develop system-level software that lets Vista play movies then they have to get the approval of at least three of the major studios before it will be included in Windows.

I suspect that Sony would be very interested indeed in a version of Windows that controlled music playback without the need for any extra software from them.

And of course once there is a "technological protection mechanism" in place then it is against the law - both in Europe and the US - to get round it, so open source players for Linux platforms will be illegal.

So far, those "copy protection solutions" have never stopped the content of the CDs from going online. Every try was a successful failure, which only annoyed consumers, and never the "pirates". It's like a genocide which only kills your people, because your enemies are somewhere else. I'm not looking forward to a law which forces people to use Windows because it does what the entertainment industry wants. Somehow I doubt that such a law will become reality, simply because of the sheer amount of non-Windows users.

The MPAA killed the movie theater experience

Found on Politech on Friday, 04 November 2005
Browse Various

Last night (November 3rd), my girlfriend brought me along to see a screening of Derailed at the Paramount theatre in Toronto, which she had to review for a magazine she works for.

Anyway, the line was moving slowly because they were asking customers to raise their arms so that they could be electronically frisked with a metal detector, and women's purses were being searched by uniformed security guards.

Her phone was taken from her and put in a sealed plastic bag with a claim ticket, and she joined me where I was waiting, past the gate, and we walked into the theatre together.

To add further insult to the debacle at the gate, near the exits at stage right and left were two uniformed security guards at each door, all four with video cameras scanning the crowd and making themselves very conspicuous.

This was not just a bit of pre-show MPAA theatre, they stood there for the entirity of the movie, red LED's glowing, scanning the crowd to remind us that we were under close surviellence and our actions were being recorded.

If you have sat in a chair in a dark room watching disturbing scenes unfold in front of you, while four uniformed people with video cameras stand in front of your, silently recording your reactions, you might be reminded of scenarios from a Clockwork Orange, Brazil, 1984, Videodrome, and strangely, that 90's relic: SFW.

I would also say that this is further evidence that movie studios are losing revenue because of the increasingly poor movie-going experience and general low-quality of the movies they are making, as after this, I can certainly undertstand why someone would prefer to watch a movie on their 14 inch screen than suffer the indignity of a multiplex.

You could always get a 19" or 21" monitor. I wouldn't want to be treated like a prisoner at Guantanamo Bay just because I want to see a movie.

World of Warcraft hackers using Sony rootkit

Found on The Register on Thursday, 03 November 2005
Browse Software

Want to cheat in your online game and not get caught? Just buy a Sony BMG copy protected CD.

World of Warcraft hackers have confirmed that the hiding capabilities of Sony BMG's content protection software can make tools made for cheating in the online world impossible to detect. The software - deemed a "rootkit" by many security experts - is shipped with tens of thousands of the record company's music titles.

Blizzard Entertainment, the maker of World of Warcraft, has created a controversial program that detects cheaters by scanning the processes that are running at the time the game is played. Called the Warden, the anti-cheating program cannot detect any files that are hidden with Sony BMG's content protection, which only requires that the hacker add the prefix "$sys$" to file names.

Not only gamers will think of this.

Sony to offer patch for 'rootkit' DRM

Found on The Register on Wednesday, 02 November 2005
Browse Software

Sony BMG said today it will offer a patch for one of its own exploits - one that comes bundled with its music CDs.

The code cloaks itself and by intercepting and redirecting low level windows system calls, forces the audio through a custom player, and restricts the number of CD burns that can be made.

Russinovich also pointed out that because the cloaking technique it used to hide itself was so crude, malware authors could hide their own nefarious programs on users hard disks using Sony's DRM software.

However, the patch that Sony will offer doesn't remove the 'rootkit' DRM: it only makes the hidden files visible.

Incredibly, the Sony DRM malware has been out on the market for eight months and is bundled on 20 CD titles. Sony said it hadn't received a single complaint until this week. So, disturbingly, most people either haven't run into serious problems yet, or even more disturbingly, don't find the Sony DRM particularly onerous. We pray it's not the latter.

Now that was quick. Just a few days after being made public, they offer a fix. It's pretty safe to assume that this fix was made at the time of the development, but had not been released because nobody asked. However, the people have to pay more attention to what's going on; with stunts like this, the entertainment industry tries to enforce it's total control scheme. And when people don't cry out, they will take it to a new level every time.

Hollywood after the Analog Hole again

Found on Boing Boing on Tuesday, 01 November 2005
Browse Technology

Under a new proposed Analog Hole bill, it will be illegal to make anything capable of digitizing video unless it either has all its outputs approved by the Hollywood studios, or is closed-source, proprietary and tamper-resistant. The idea is to make it impossible to create an MPEG from a video signal unless Hollywood approves it.

If this had been around in 1976, the VCR would have been illegal. Today, it would ban Mythtv, every tuner-card in the market, and boxes like ElGato's eyeTV the Slingbox and the Orb and the vPod.

The studios will "enable the business-model" of charging you money for the stuff that you get for free today. Here's a quote: "Doing this stuff has value, and if it has value, we should be able to charge money for it."

There are literally tens, if not hundreds of millions of products in the market today that don't obey the rules the studios want to embed in their video. If just one of those devices gets access to the video, then poof, it's on the Internet.

So what problem does this solve? In the parlance of the studios, this will "keep honest users honest." Which is to say that if you're someone who only wants to go on doing all the perfectly legal things that you can do with video today -- watch, store, time-shift, space-shift, format-shift -- then you will be prevented from doing so without permission.

However, if you're someone who actually wants to infringe copyright by downloading video from the Internet, this will have zero effect on you.

If they would operate a blood bank, they would pull in random people and squeeze them until every drop is out. Besides, this will have no effect. Even if this law would become real, it would only be in the US; the rest of the world can continue to digitize any audiovisual content (and put it online). They are trying to milk a dead cow.

Wheelchair ban for 'drink-driver'

Found on Ananova on Tuesday, 01 November 2005
Browse Pranks

A disabled man had his electric wheelchair confiscated after being caught more than four times over the drink drive limit.

Police stopped Mietke as he was on his way to buy beer from a petrol station in the early hours of the morning.

They said he was going down the road from side-to-side and when breathalysed found he had 228 milligrams of alcohol in 100 millilitres of blood.

In Germany, the legal limit is 50 milligrams of alcohol in 100 millilitres of blood.

In court Mietke admitted: "I drink 10 to 12 bottles of beer a day."

He will now have to use a regular wheelchair until the ban is over.

Does that mean you can use a regular wheelchair when you are totally wasted? That could be helpful at some parties.

Sony, Rootkits and Digital Rights Management

Found on Sysinternals on Monday, 31 October 2005
Browse Software

Last week when I was testing the latest version of RootkitRevealer (RKR) I ran a scan on one of my systems and was shocked to see evidence of a rootkit. Rootkits are cloaking technologies that hide files, Registry keys, and other system objects from diagnostic and security software, and they are usually employed by malware attempting to keep their implementation hidden.

To my surprise, the majority did have identifying product, file and company strings. I had already recognized Dbghelp.dll and Unicows.dll as Microsoft Windows DLLs by their names. The other files claimed to be part of the "Essential System Tools" product from a company called "First 4 Internet".

I Googled the company name and came across this article, confirming the fact that they have deals with several record companies, including Sony, to implement Digital Rights Management (DRM) software for CDs.

The DRM reference made me recall having purchased a CD recently that can only be played using the media player that ships on the CD itself and that limits you to at most 3 copies. I scrounged through my CD's and found it, Sony BMG's Get Right with the Man (the name is ironic under the circumstances) CD by the Van Zant brothers.

Not only had Sony put software on my system that uses techniques commonly used by malware to mask its presence, the software is poorly written and provides no means for uninstall. Worse, most users that stumble across the cloaked files with a RKR scan will cripple their computer if they attempt the obvious step of deleting the cloaked files.

Everybody should really take a look at the full article and read it. Mark Russinovich's article is very detailed and technical, but the average computer user should be able to follow the main line easily.

Ad dollars for the Star Wars Kid?

Found on CNet News on Sunday, 30 October 2005
Browse Various

Forget Google. The Internet's real killer app has always been the strange little amateur videos, like the Star Wars Kid or the Numa Numa Dance, that find explosive popularity almost overnight.

A new company launching Monday in Los Angeles, co-founded by Freenet peer-to-peer developer Ian Clarke, aims to give the producers of those videos a way to make money from them at last.

Dubbed Revver, the company has set up a Web site that starts out as a kind of Flickr for videos, allowing anybody to post their videos online, and letting viewers organize them by adding their own descriptive keyword "tags." But Revver adds a new touch, inserting code into the video itself that adds a small advertisement every time it is viewed, even if the video is downloaded and distributed from another site.

Everybody who has missed the Star Wars Kid or Numa Numa Dance should instantly go watch them.