Film-Tech Cinema Systems
Film-Tech Forum ARCHIVE


  
my profile | my password | search | faq & rules | forum home
  next oldest topic   next newest topic
» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Torrent Sites still going strong (Page 4)

 
This topic comprises 7 pages: 1  2  3  4  5  6  7 
 
Author Topic: Torrent Sites still going strong
Leo Enticknap
Film God

Posts: 7474
From: Loma Linda, CA
Registered: Jul 2000


 - posted 04-04-2017 08:32 AM      Profile for Leo Enticknap   Author's Homepage   Email Leo Enticknap   Send New Private Message       Edit/Delete Post 
I think Dennis is speculating that as computer processing power increases, the viability of attempting brute force decryption of a DCP gets closer. I suspect that if it ever becomes even within spitting distance of being do-able on consumer hardware in less than a matter of years, DCI will introduce 512-bit encryption pretty quickly.

What makes DCP encryption an order of magnitude more secure than any DRM system used for consumer formats is that it uses the digital equivalent of a One-time pad: the decryption key for every CPL is different, and itself is re-encrypted in transit between the server and media block, and so is very difficult to intercept.

 |  IP: Logged

Carsten Kurz
Film God

Posts: 4340
From: Cologne, NRW, Germany
Registered: Aug 2009


 - posted 04-04-2017 08:35 AM      Profile for Carsten Kurz   Email Carsten Kurz   Send New Private Message       Edit/Delete Post 
Even the decryption key for every single reel can be different. Brute force times X...

- Carsten

 |  IP: Logged

Steve Guttag
We forgot the crackers Gromit!!!

Posts: 12814
From: Annapolis, MD
Registered: Dec 1999


 - posted 04-04-2017 09:34 AM      Profile for Steve Guttag   Email Steve Guttag   Send New Private Message       Edit/Delete Post 
With typical IMBs...it isn't re-encrypted, it is never decrypted...the key resides within the IMB so the decryption resides in there. My guess is that its most vulnerable state is between the IMB and the imagers where the information to form the image is in the clear, though, at that point, the watermarking is already part of the image.

Obviously, one could merely point a camera right at the imager, at that point but again, you have a watermarked copy that would be similar to camcording in a cinema, sans the people. The audio is also likely watermarked (depends on the title, always available on each and every channel too).

 |  IP: Logged

Dennis Benjamin
Phenomenal Film Handler

Posts: 1445
From: Denton, MD
Registered: Feb 2002


 - posted 04-04-2017 09:39 AM      Profile for Dennis Benjamin   Author's Homepage   Email Dennis Benjamin   Send New Private Message       Edit/Delete Post 
Sorry.

It's hasn't been cracked. We'll go with that. [Wink]

Sidenote: Out of curiousity, I did some research online. I found a place where I could stream an HD version of "Beauty and the Beast" the 2017 version for free.

P.S. I am aware of how it works. But, I know that a 20 minute segment of a DCP was decrypted in less than two weeks previously by someone before. Obviously less trouble to borrow a screener from a film company executive/employee at this point. Knowing someone involved at the first part of the encryption process helps too:

LINK

How does encryption work in digital cinema?

2 March 2016 by Julius Waltenberger

Digital cinema uses a two step encyption method.

Every media asset of an encrypted DCP is encrypted with a 128 bit AES key. This step is a symmetric method, that means for encryption (during mastering of the DCP) and decryption (during playback in the movie theatre) the same key is used.

To transport these media keys safely to cinemas an asymmetrical encryption method (2048 bit RSA) is being used. Asymmetrical encryption uses pairs of keys, consisting of a public and a private key. The message is being encrypted with the public key and can only be decrypted with the private key. The public key can not be used to decrypt the message, meaning it can be safely published / forwarded.

So the AES media keys are sent to cinemas as Key delivery message (KDM), encrypted with the public key of the corresponding projection system and provided with a validity period. There the KDM is being imported on the projector and the media keys are extracted with the private key which is stored securely inside the projector. With the extracted media keys the DCP is being decrypted during playback.

This means that the same DCP goes out to every cinema but there has to be single KDM for for every projection system that will show the DCP. For any KDM that is generated we have to retrieve the corresponding public key / server certificate of the projection system for which the KDM is valid. For this purpose we maintain a database of all projectors in the field, with the information in which movie theatre and cinema hall the projector is used.

And this is how a Key delivery message looks like in detail:

DigitalCinemaPackage_kdm_example_DCM.pdf

 |  IP: Logged

Carsten Kurz
Film God

Posts: 4340
From: Cologne, NRW, Germany
Registered: Aug 2009


 - posted 04-04-2017 10:46 AM      Profile for Carsten Kurz   Email Carsten Kurz   Send New Private Message       Edit/Delete Post 
quote: Dennis Benjamin
Sidenote: Out of curiousity, I did some research online. I found a place where I could stream an HD version of "Beauty and the Beast" the 2017 version for free.
That doesn't mean an encrypted DCP of that title was 'cracked'. But, wait, you didn't say 'cracked' but 'decrypted'. Yes, I can decrypt a DCP on my 10 year old notebook in a few minutes.

If you give me the key.

- Carsten

 |  IP: Logged

Dennis Benjamin
Phenomenal Film Handler

Posts: 1445
From: Denton, MD
Registered: Feb 2002


 - posted 04-04-2017 11:27 AM      Profile for Dennis Benjamin   Author's Homepage   Email Dennis Benjamin   Send New Private Message       Edit/Delete Post 
Quantum computing will change everything... and it's here.

[evil]

 |  IP: Logged

Mike Blakesley
Film God

Posts: 12767
From: Forsyth, Montana
Registered: Jun 99


 - posted 04-04-2017 12:55 PM      Profile for Mike Blakesley   Author's Homepage   Email Mike Blakesley   Send New Private Message       Edit/Delete Post 
You mean everything is going to change...again?!

 |  IP: Logged

Marcel Birgelen
Film God

Posts: 3357
From: Maastricht, Limburg, Netherlands
Registered: Feb 2012


 - posted 04-04-2017 05:19 PM      Profile for Marcel Birgelen   Email Marcel Birgelen   Send New Private Message       Edit/Delete Post 
quote: Dennis Benjamin
Quantum computing will change everything... and it's here.
First of all, it's not entirely here *yet*, at least not in a way that would harm any commonly used and generally accepted encryption schemes.

And while it would be a major problem for RSA and DSA, AES would only be weakened, quite severely weakened on paper, but maybe not so in practice.

So, the key exchange itself would be broken, unless it would transition to a quantum-safe algorithm (which there are), but AES256 itself still needs to be brute-forced, which can be highly optimized using a quantum computer, but it would probably require so much quantum computing resources that it would probably be cheaper to do on conventional GPUs or highly optimized ASICs.

In the end it's also how much it actually worth. Why would you ever spend for example millions worth of computing resources to decrypt a DCP?

 |  IP: Logged

Carsten Kurz
Film God

Posts: 4340
From: Cologne, NRW, Germany
Registered: Aug 2009


 - posted 04-04-2017 05:56 PM      Profile for Carsten Kurz   Email Carsten Kurz   Send New Private Message       Edit/Delete Post 
Would be cheaper to bid on the distribution rights to get a hand on a copy...

- Carsten

 |  IP: Logged

Dennis Benjamin
Phenomenal Film Handler

Posts: 1445
From: Denton, MD
Registered: Feb 2002


 - posted 04-04-2017 07:22 PM      Profile for Dennis Benjamin   Author's Homepage   Email Dennis Benjamin   Send New Private Message       Edit/Delete Post 
quote: Carsten Kurz
Would be cheaper to bid on the distribution rights to get a hand on a copy...

We already do that.

 |  IP: Logged

Lyle Romer
Phenomenal Film Handler

Posts: 1400
From: Davie, FL, USA
Registered: May 2002


 - posted 04-05-2017 06:55 AM      Profile for Lyle Romer   Email Lyle Romer   Send New Private Message       Edit/Delete Post 
With regards to cracking encryption, I always think back to what a professor once told me back in engineering school:

"If man can make it, man can break it."

If you wanted to make it a lot more difficult to crack encryption, you could design a system where each receiver of the file was given a different decryption algorithm as well as different encryption key. This would require every location (in the case of movies) to have a copy custom encrypted. Then, they'd get the algorithm by one delivery method and the key by another.

Now, to break the code by brute force you'd have to try every possible key on potentially thousands of different algorithms. It is still breakable but would take a lot of time.

As far as the torrent site issue. You will probably eventually see the studios filing lawsuits against purchasers of "easy piracy" devices. Years ago, DirecTV did this. Theft of their service was running rampant through modified access cards as well as software based emulation of access cards.

As sellers of the cards or hardware to facilitate the software emulation were being caught, they would get the customer information of the people that purchased. They used this information to file lawsuits.

Even though the defendant could beat the suit, at the very least it required a few grand in fees to a lawyer.

I don't think they care all that much about the piracy that requires expertise to find and download or people surfing the "dark web" for stuff. They do care when people can get free content easier than they can pay for it.

 |  IP: Logged

Marcel Birgelen
Film God

Posts: 3357
From: Maastricht, Limburg, Netherlands
Registered: Feb 2012


 - posted 04-05-2017 05:52 PM      Profile for Marcel Birgelen   Email Marcel Birgelen   Send New Private Message       Edit/Delete Post 
quote: Lyle Romer
"If man can make it, man can break it."
Not to discredit your old professor, but this often heard statement might be a bit of an oversimplification. There's no scientific proof that man cannot design and build something that's essentially "unbreakable" as such. I'd say there's sufficient empirical evidence that designing something that is "unbreakable" is generally speaking, pretty hard.
quote: Lyle Romer
Now, to break the code by brute force you'd have to try every possible key on potentially thousands of different algorithms. It is still breakable but would take a lot of time.
The number of encryption algorithms considered to be safe, are somewhat limited. It takes quite some effort by quite a lot of people to develop a new algorithm that's considered safe. The reputation of an encryption algorithm also matures, once it becomes increasingly clear that it is a hard to solve problem and that the amount of shortcuts that can be found are limited. You need quite a lot of research to get this right.

Also, it would not make anything any safer at all. You can still try to brute-force your uniquely encrypted DCP and you can copy it as often as you please. As a matter of fact, I think you're even opening up yourself more for failure this way.

Different encryption protocols might have different weaknesses. If you encrypt the same content with different protocols, there might even be the possibility to do a cross-protocol examination of certain aspects of your encrypted data. It might possbily help to limit your search domain considerably and thus weakening the encryption overall.

I think you should generally follow Bruce Schneiers advice on this one: Don't roll your own encryption. Encryption isn't a simple problem and lots of research is needed, before we can reasonably state that something can be considered secure.

Furthermore, the potential weakness of DCI isn't in the DCP encryption itself, it's in the key exchange and in the simple fact that this key has to be loaded into memory in unencrypted form, at least somewhere inside the media block to do the actual decryption.

quote: Lyle Romer
I don't think they care all that much about the piracy that requires expertise to find and download or people surfing the "dark web" for stuff. They do care when people can get free content easier than they can pay for it.
I think there's another problem here that needs addressing: Finding the content that people actually want to pay for...

 |  IP: Logged

David Buckley
Jedi Master Film Handler

Posts: 525
From: Oxford, N. Canterbury, New Zealand
Registered: Aug 2004


 - posted 04-05-2017 10:14 PM      Profile for David Buckley   Author's Homepage   Email David Buckley   Send New Private Message       Edit/Delete Post 
With the current state of computation, cracking DCP encryption is just too hard.

DCPs are encrypted, as Dennis notes, with symmetric AES with a 128 bit key, and every disk is encrypted with the same key. So all one has to do (all! ha!!) is to get a copy of that key, and then every disk for a title can be decrypted. One can get a copy of that key either by opening a KDM message, which is again computationally hard if one doesn't have the matching IMB, or by filching the key from the place where KDMs are encoded. Which is a problem that could be solved.

Hmmm.... I assume DCP titles here (as in NZ, so really, Aus) are encrypted with a different AES key as the US releases... Our KDMs are genned by Deluxe in Ausland, so I muse their keys will be entirely independent from keys used in the USA simply because there is no need for them to be the same, and transporting these keys internationally is a risk that doesn't need to be taken.

 |  IP: Logged

Buck Wilson
Jedi Master Film Handler

Posts: 894
From: St. Joseph MO, USA
Registered: Sep 2010


 - posted 04-11-2017 01:55 PM      Profile for Buck Wilson   Email Buck Wilson   Send New Private Message       Edit/Delete Post 
Browsing Facebook, stumbled upon a meme of Jack Black "Saluting the person who actually pays for Netflix while the rest of us use their account"

Check out this comment thread.

Aurra Sing Why not just download Showbox, not use other people's accounts, and get the same movies for free? Less hassle. No theft.
Surprised that people are still even falling for this mess.
But then again, monkey see monkey do. "Netflix and chill" must be such a popular pastime.
Like · Reply · 7 · April 5, 2016 at 7:02pm

Shane Vestnys Show box is littered with ads and is annoying. I used to use it but all it is. Is pirated stuff streamed . Which you can easily just download and avoid the ads and non sense if you are going to go that route
Like · Reply · 3 · April 6, 2016 at 3:33am

Elizabeth Houts I use to use gingle but their site is all screwed up and directs you to nothing but ads. Can't download anything from there anymore
Like · Reply · April 6, 2016 at 9:17am

Aurra Sing There's a drawn gun at the top of of your facebook page, and your profile picture looks like a mug shot of a twelve year old. Obviously, no one cares about you either.
Like · Reply · 3 · April 6, 2016 at 3:17pm

Aurra Sing It's actually not. I watch all of my films on Showbox, ad free.
Also, all of those films you talk of downloading are coming direct from the same source as the films showbox has. So really, it's a three step process. Download showbox, type in film and play said film.
Instead of continuously searching for, getting redirected from places like Putlocker to some random site, refreshing, playing the film again and finding out you're unable to fullscreen the film.
Like · Reply · 1 · April 6, 2016 at 3:22pm

Aurra Sing Never heard of Gingle. That's a funny name though.
Like · Reply · April 6, 2016 at 3:23pm

Naishmarie Lucas I use showbox all the time, but it only works on android devices. iPhone users don't have that option lol
Like · Reply · 1 · April 6, 2016 at 3:49pm

Aurra Sing It works on multiple devices. My Kindle also, for instance. Tablets, etc.
Like · Reply · April 6, 2016 at 3:55pm

Aurra Sing Perhaps, don't buy an overpriced cell phone that isn't even compatible with a simple application? Seems like a waste of money to me. A smart phone. That does stupid shit.
Hmm.
Like · Reply · April 6, 2016 at 3:57pm

Aurra Sing No shade. Just sarcasm lol.
Like · Reply · April 6, 2016 at 3:58pm

Nathalie Squigly Aurra obviously Chris cares enough to comment, but not enough about his education since he couldn't even spell "no one" correctly.
Like · Reply · 2 · April 6, 2016 at 6:44pm

Aurra Sing Sure it was, young one.
Go do your homework.
Like · Reply · April 6, 2016 at 10:58pm

Grace Seleyman Peter So much judgement lol.
Like · Reply · 4 · April 7, 2016 at 6:52am

Nate Slezak You're downloading a streamed video that the seeder most likely does not have the rights to do it. Not exactly legal
Unlike · Reply · 4 · April 7, 2016 at 11:17am

Aurra Sing Better than stealing someone's Netflix account.
Like · Reply · April 7, 2016 at 1:34pm

Aurra Sing Hey, talk shit. Get shut down.
Little kids should know their place.
Behind a desk with a book. Speaking when spoken to.
Like · Reply · April 7, 2016 at 1:36pm

Nate Slezak There are better apps than showbox
Like · Reply · April 7, 2016 at 2:05pm

Aurra Sing Like?
Like · Reply · April 7, 2016 at 2:11pm

Aurra Sing Open to ideas.
Like · Reply · April 7, 2016 at 2:11pm

Meagan Fish Cnfstudio.com
No downloading (: just instant steaming. Yes you get an occasional pop up.. Just close it out.
Watching a movie now lol. Has new movies, old, tv shows.. Love it! ...See More
IMovieMax.Se - Watch Full Movies Online Free
imoviemax.se
Like · Reply · 1 · April 7, 2016 at 2:42pm

Aurra Sing I'll check it out. Thanks, Meagan. [Smile]
Like · Reply · April 7, 2016 at 8:35pm

Melissa Metler Just tried it, it's wanting my debit card info to "validate" my account.
Thanks but no thanks, I'm not that stupid.
I had showbox, but I ran out of patience with that one. To many ads, freezing all the time etc
Like · Reply · 1 · April 9, 2016 at 11:19am

Nate McCooey "Better than stealing someone's Netflix account."

Says the person using an app to watch pirated movies. Hypocritical much?
Unlike · Reply · 4 · April 9, 2016 at 9:37pm

Aurra Sing Which was asking for credit information?
Hmm. Showbox never freezes on me. That's weird. I literally deal with way less adds then people say they get. Like, one every two weeks or so. That's less of a hassle then YouTube lol.
Like · Reply · April 9, 2016 at 9:39pm

Aurra Sing Pirates films are something I'm unable to control. But I CAN control not purposely hacking into and stealing someone's account that they pay for with their hard earned money.
With as many people posting about the shit online, if the government wanted to shut it down, they would. But they don't. They let it continue. Probably watch it themselves too.
Use logic.
Like · Reply · April 9, 2016 at 9:42pm

Aurra Sing Some of you are legitimately remedial.
Like · Reply · April 9, 2016 at 9:43pm

Aurra Sing Doesn't the government normally shut down (meaning, shut down the operation of something) something they deem to be illegal?
Thought that was pretty self explanatory. Kind of a stupid question if you ask me.
Like · Reply · April 11, 2016 at 1:16am

Nate Slezak That's false look at the piratebay you can download illegal games, movies, songs and anything else. All people who own the rights do is go leach a download and save the logs. That way every single person who was downloading at that time will be busted. You get a few warnings where they just shut down your internet though. Think what you want but using your friends netflix account isnt illegal. Owners already got paid to allow netflix to stream it. But they dont make any money off of people using other apps or sites like showbox. Idk how you came up with it being more ok than using someones account
Unlike · Reply · 1 · April 12, 2016 at 5:49am

Aurra Sing This post isn't about "using your friends netflix account", genius. It's about hacking into, and using another's service whom you don't know, but may have either left it available by accident, or wasn't aware that some little shithead was going to hack them and use it.
When it's "free" to the public, it's better than hacking and theft. We aren't the one's operating the site that downloads the videos (showbox, etc)
We're merely watching it because it's available, and we don't have to struggle to find it online. When it comes to movies, they should be public viewing anyhow. They over price movies at the theater, and online. Some have even used people's information when they type it in. The movie industry isn't any different from any other industry that robs the people blind, using their desires against them. If you disagree with that, you're arguing just to argue.
You sound more foolish than anything I've said. Real shit.
Like · Reply · April 19, 2016 at 2:20am

Aurra Sing The government does not shut down, or even incriminate people the way you claim that they do. Millions of people have yet to be taken in. Argument invalidated.
Like · Reply · April 19, 2016 at 2:21am

Kai Okami I'm pretty sure it's not theft if Netflix already knows about it and LETS you do it.
Like · Reply · April 9 at 12:29am

Aurra Sing They don't let you do it. They simply cannot send out task forces find those that do so.
Like · Reply · April 9 at 8:27am

Buck Wilson Aurra with all due respect, you are DEAD WRONG. At least Netflix properly licenses/pays for/distributes the content. You, watching a stolen copy of a movie on Showbox, are no better than the person "hacking" into someone else's Netflix account. Theft is theft. By watching a movie without paying for it, you stole. It doesn't matter if it was "available".

____________________________

This has everything. The ignorance, the cluelessness, and even the "fuck the man" mentality mentioned earlier.

 |  IP: Logged

Frank Cox
Film God

Posts: 2234
From: Melville Saskatchewan Canada
Registered: Apr 2011


 - posted 04-11-2017 02:52 PM      Profile for Frank Cox   Author's Homepage   Email Frank Cox   Send New Private Message       Edit/Delete Post 
I've said before that there is a huge number of people who genuinely and sincerely believe that these pirate movie and tv show boxes are legitimate and legal. When I was in the hardware store here the other day I noticed that they are selling an "android tv box" (that's exactly what the sign on the shelf said) for $279 that allows you to "watch the latest movies and television programs for free!!"

Some time ago a woman that works at my accountant's office told me that she had purchased a tv box of some kind and "now I don't have to go to your theatre to see the movies." I told her that it's actually pirated material on her box and she assured me that it's not. I haven't actually seen her here at a movie since then so I guess her box must work; she used to come to all of the chick flicks.

I suspect that 99% of the people with those boxes genuinely believe that it's completely legitimate. I've even had people coming to a show here tell me that "I"ve watched this on my tv last week but my buddy Joe here wants to see it now too."

I've come to the conclusion that it's a waste of time to tell people that what they are doing is illegal or illegitimate; if you do they think you're just pushing a case of sour grapes and it makes you look bad. So I just smile and say "That's nice" whenever something like that comes up.

 |  IP: Logged



All times are Central (GMT -6:00)
This topic comprises 7 pages: 1  2  3  4  5  6  7 
 
   Close Topic    Move Topic    Delete Topic    next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:



Powered by Infopop Corporation
UBB.classicTM 6.3.1.2

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.

© 1999-2020 Film-Tech Cinema Systems, LLC. All rights reserved.