[macvoiceover] Re: no nls for ipod ever:

  • From: Chris Hofstader <cdh@xxxxxxxxxxxxx>
  • To: macvoiceover@xxxxxxxxxxxxx
  • Date: Sat, 24 Oct 2009 09:45:26 -0400

The MAC adress solution has been defeated many times.

To wit: FS spends a lot of time, money and brain share on its really strong authorization scheme. Quite a number of years ago, we tried a MAC adress only solution and within weeks someone had posted a hack. As it is ugly technical details, I won't go into the hack and how it worked but it wasn't too elaborate or especially difficult.

Ultimately, we added a ton of things that would identify a particular computer and we put in a "heartbeat" that, at random moments in the use of JAWS, it would recheck your authorization to make sure you hadn't fraudulently authorized with a hack and ran the program with the crack.

Next, we added the authorization check to a lot of places in the program so, if a clever copy protection hacker found one place and patched the JAWS binary, it still wouldn't work until all of the places were broken which, given the scheme, was nearly impossible.

Finally, instead of just popping up a dialogue telling the user that authorization had failed and to call FS which would show a hacker the route to the actual authorization code, we caused different features in JAWS to, over about fifteen minutes, stop working. Thus, the person running the program would see problems develop without reason and, if they called tech support, we caught them.

In a computer solution for NLS, the player would need somehow to replicate a scheme similar to that in JAWS as, much more than mobile devices, computers running all of the operating systems provide many easy ways to hack copy protection and other annoying things.

Also, NLS would probably need to run some sort of program to encrypt each book in a manner special for each separate computer. This isn't really too hard but would definitely cause an extra load on the server side of the operation. Lastly, a per computer solution would really annoy people who have more than one computer, or other device as they would need to have sub-accounts for each item.

Handheld mobile devices have many more ways to identify them uniquely so the problem is an easier one to fix.

Only one cup of coffee...

Happy Hacking,
cdh


.
On Oct 23, 2009, at 8:35 PM, Greg Kearney wrote:

They could do on a computer the same as they do on players, provide a key tied to the MAC identifier of the particular computer. I also note that in all of this effort I can still copy any NLS books with nothing more than a $2 bit of wire.

I don''t believe that there has ever been a serious issue with the theft of NLS books in all the years that they have been on cassettes which are simple to copy.


Gregory Kearney
Manager - Accessible Media
Association for the Blind of Western Australia
61 Kitchener Avenue, PO Box 101
Victoria Park 6979, WA Australia

Telephone: +61 (08) 9311 8202
Telephone: +1 (307) 224-4022 (North America)
Fax: +61 (08) 9361 8696
Toll free: 1800 658 388 (Australia only)
Email: gkearney@xxxxxxxxx

On 24/10/2009, at 12:14 AM, Bryan Smart wrote:

As I understand it, their reasons are technical, , not ideological.

In order to distribute the books, they're required to be certain that only blind people can access the material. To date, this has been possible by making the books available on blind-person-only devices like the Stream and Icon/Braille+. Of course, a sighted person could purchase one of these, but probably wouldn't want to. Further, these devices have advanced rights protection features, and a sighted person wouldn't be able to easily obtain a decryption key.

Though rights protection can be frustrating at some times, NLS has tried to make this as painless as possible by only requiring authorization for the device, not each piece of content. For example, once your device is authorized, you can download as much content as you want from their web site. You can archive the content in any way that suits you, and play it on any player that you own that is authorized. You never need to ask for permission to play a specific book, worry about files that expire, etc. As rights protection goes, this is a very friendly, easy to use, and flexible system.

There is no technical way to secure content on PCs to the same degree that is possible with the current hardware players. All that would need to happen on a PC is for someone to manually hack the player application, and the hacked player would be able to play any book from the collection. With the unlimited download capability on the NLS site, you'd have a huge problem with unauthorized people downloading mountains of books, building their own collections, and sharing them. The only partial solution would be for NLS to start acting like Audible, enforcing download limits, requiring you to obtain per-book authorization, and forcing files to expire. And, even then, the content would still be quite vulnerable, while increasing the frustration level for all of the honest users that must now deal with complex rights protection.

The IPod and IPhone are secure platforms, but ITunes is not. Since ITunes is used to manage content on the Apple players, NLS probably sees ITunes as just as big of a security hole as any PC player.

Of course, anyone that is determined enough can break any sort of protection. However, NLS must make these efforts, or else they'll be viewed as contributing to unauthorized reproduction. I'm not fully up on the legal side of why they do this, but I bet that they're working under some modified form of the exemption in the DMCA that allows them to produce these audio books in an alternative format without having to seek approval for each individual book from the copyright holder. Reproducing audio books as specially formatted talking books on specialized players can probably stand legally as an acceptable alternative format, while making them available through a PC application is not looked on in the same way.

Maybe if the books could be downloaded over the air directly to an IPod Touch or IPhone, they could have legal cover, but I don't think that a sync with ITunes would stand.

As it is, you can buy a Stream for about $300. That is dirt cheap as far as assistive tech goes, and it is a far better book player than any IPod. If you're too broke to afford a Stream, you can get a free digital player from your library.

I'd like to play their books on my other devices, but I think that their hands are legally tied in this regard.

Bryan


-----Original Message-----
From: macvoiceover-bounce@xxxxxxxxxxxxx [mailto:macvoiceover- bounce@xxxxxxxxxxxxx] On Behalf Of David Poehlman
Sent: Friday, October 23, 2009 10:29 AM
To: macvoiceover@xxxxxxxxxxxxx
Subject: [macvoiceover] no nls for ipod ever:

All;

I've received information that nls will not make it possible to play their digital talking books on ipods and iphones etc.

This is indeed distressing and if you are concerned, please contact the administration of the nls digital talking book program, your state representatives and your state legislature to boost this. It is of grave concern to voiceover users since the ipod is the most widely used portable digital media player available and the books are after all digital media.

Further, it has come to my attention that software will not be produced or authorized by NLS for the purpose of reading digital talking books on any computer which effectively stonewalling itunes from accessing them legally. If we were to undertake an illegal approach, we'd be punnished in some way or another if they found out yet they leave no alternative avenue open and this is after all tax payer dollar we are talking about.

Why shoule we be forced to purchase or be handed a proprietary player that is over priced when we already have players as inexpensive as the ipod nano at under $60 at our disposal. I know the nano might not be able to play a huge book, but most books are not huge and many of us have ipods larger in capacity than the nano and wiITunes is available and accessible on both platforms.

Thanks for listening.


Click on the link below to go to our homepage.
http://www.icanworkthisthing.com

Manage your subscription by using the web interface on the link below.
//www.freelists.org/list/macvoiceover

Users can subscribe to this list by sending email to
macvoiceover-request@xxxxxxxxxxxxx
with 'subscribe' in the Subject field OR by logging into the Web
interface at //www.freelists.org/list/macvoiceover


Click on the link below to go to our homepage.
http://www.icanworkthisthing.com

Manage your subscription by using the web interface on the link below.
//www.freelists.org/list/macvoiceover

Users can subscribe to this list by sending email to
macvoiceover-request@xxxxxxxxxxxxx
with 'subscribe' in the Subject field OR by logging into the Web
interface at //www.freelists.org/list/macvoiceover



Click on the link below to go to our homepage.
http://www.icanworkthisthing.com

Manage your subscription by using the web interface on the link below.
//www.freelists.org/list/macvoiceover

Users can subscribe to this list by sending email to  
macvoiceover-request@xxxxxxxxxxxxx
with 'subscribe' in the Subject field OR by logging into the Webinterface at //www.freelists.org/list/macvoiceover



Click on the link below to go to our homepage.
http://www.icanworkthisthing.com

Manage your subscription by using the web interface on the link below.
//www.freelists.org/list/macvoiceover

Users can subscribe to this list by sending email to macvoiceover-request@xxxxxxxxxxxxx with 'subscribe' in the Subject field OR by logging into the Web interface at //www.freelists.org/list/macvoiceover

Other related posts: