Program Points Way To iTunes DRM Hack

Published by

The Norwegian programmer who distributed the first widely used tool for cracking the copy protection technology found on DVDs has turned his attention to Apple Computer's iTunes. Late last week, programmer Jon Johansen posted a small program called QTFairUse to his Web site, with little in the way of instruction and even less explanation. But during the next few days, it became clear that the program served as a demonstration of how to evade, if not exactly break, the anticopying technology wrapped around the songs sold by Apple in its iTunes store.

Johansen's software isn't for technology novices. In its current form, it requires several complicated steps to create a working program from source code, and it doesn't create a working song file that can be immediately or simply played from a digital music program like Winamp or Microsoft's Windows Media Player. But if other developers--or Johansen himself--pursue the project, it could herald the arrival of simple ripping programs that could create unprotected music files from iTunes songs as simply as from an ordinary compact disc. Johansen's latest program, which works only for the Windows version of iTunes, is just the most recent move in the ongoing game of cat and mouse being played by digital rights management technology creators and hackers, who see the copy locks as a challenge. The Norwegian's 1999 program, called DeCSS, ignited a debate over the legality of copying DVDs that has yet to end. Now widely distributed, DeCSS and similar tools are the foundation for much of Hollywood's fear that digital versions of movies will be copied and distributed online. Johansen was sued in Norway for releasing the software, but a court there ruled that he had the right to decode a DVD he had purchased so that he could play it on a Linux-based computer. Johansen's program works by patching Apple's QuickTime software with a new software component of his own. Because he called the program a "memory dumper," programmers on message boards around the Web speculated that QTFairUse made a copy of the raw, unprotected song data from the computer's temporary memory after it was unprotected for playback, rather than simply recording the audio stream as it played. But this was not independently verified by Apple or Johansen. If that is indeed the approach Johansen took, it's possible Apple could release an update to QuickTime that nullifies Johansen's work, much as Microsoft did for the early break of its digital rights management tools. (ZDNet)