Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I hope nobody was expect networks etc to not block Airplay given how fundamentally insecure it appears to be.

Phazer

I wouldn't say that this proves that AirPlay is insecure; I'm pretty sure that you can still only play DRM'ed videos on authenticated devices. Of course this doesn't mean that media companies might not over react...
 
...

- Streaming DVDs to the Apple TV: Using VLC, AirFlick, and a bit of command-line tweaking, Erick van Rijk and Sadun have demonstrated how to stream DVD content from a Mac to the new Apple TV. While certainly not a one-click solution at this point, the demonstration shows the wide variety of media that can be converted for AirPlay streaming.

...

This one gave me a hopeful moment. Not to stream DVDs to an AppleTV, but to my iPad. I followed the steps, using Safari as my viewer on my iPad, and sure enough, there was the movie playing right on my iPad... Except that the audio was out of sync by a few seconds. I tried, but at least on my initial attempts, I found no way to get it back into sync. Hrmph.

Air Video. I've been using it for a year. Fantastic stuff. I store no video locally on my iPad or iPhone 4.

I, too, love AirVideo. My one wish has been that they'd implement a DVD live streaming solution. Of course, I realize that there may be legal reasons why they wouldn't, but I can still wish...
 
I will buy Apple TV as soon as it can play anything from anywhere...get on this apple. Apple would double or triple their sales if they allowed Sadun's proof of concept natively and cleaned up of course.

Then again I will buy if a future jailbreak solution arises.
 
Do you think Apple will eventually provide some of these capabilities itself? If not, why not?

Some of these...most likely yes. DVD streaming to the AppleTV, I'm guessing no. This would bite into the revenue stream from iTunes. While they may make money on the hardware for AppleTV, the real money is in the content, and most likely always will be.

I'd love to stream DVD to my AppleTV and let me get rid of the DVD player in the bedroom. With the remote app, I don't need line of site to control the AppleTV and could hide everything behind the wall mounted TV. It would make my wife so happy not to have to see wires and boxes...and that is priceless!:p

Nabby
 
I wouldn't say that this proves that AirPlay is insecure; I'm pretty sure that you can still only play DRM'ed videos on authenticated devices. Of course this doesn't mean that media companies might not over react...

Many networks stream H.264 video to the iOS devices on the basis that there's no stream ripping software to capture the streams permanently on that platform since it'll only run signed code and Apple doesn't allow any such apps.

If those streams are subsequently sent to a general purpose computing platform, capturing them is trivial, which causes major business model issues.

And hence it will be blocked, because it's too big a risk. Especially the iPad streams given their reasonable resolution.

Phazer
 
Many networks stream H.264 video to the iOS devices on the basis that there's no stream ripping software to capture the streams permanently on that platform since it'll only run signed code and Apple doesn't allow any such apps.

If those streams are subsequently sent to a general purpose computing platform, capturing them is trivial, which causes major business model issues.

And hence it will be blocked, because it's too big a risk. Especially the iPad streams given their reasonable resolution.

Phazer

Good point, I wasn't thinking of streaming content. I seem to remember that the reason that iOS devices get iPlayer in a browser, and Android devices don't, is that the BBC is happy that content can't be gotten out of iOS devices. I'm somewhat surprised that AirPlay doesn't use the AirTunes solution of encrypting everything on the fly as it heads towards the AppleTV. Maybe the processing power required to encrypt video means that this isn't possible.
 
Good point, I wasn't thinking of streaming content. I seem to remember that the reason that iOS devices get iPlayer in a browser, and Android devices don't, is that the BBC is happy that content can't be gotten out of iOS devices. I'm somewhat surprised that AirPlay doesn't use the AirTunes solution of encrypting everything on the fly as it heads towards the AppleTV. Maybe the processing power required to encrypt video means that this isn't possible.

I'm not sure encrypting anything would really help - you'd have to pass the decryption key down with the signal, so it's trivial to discover (though likely a DCMA violation).

But why isn't secure certificate client authentication, probably embedded in hardware, used to make sure the device is really an authorised one?

I suspect the reason airshare video isn't working yet isn't because of technical issues, but because the networks have thrown a massive paddy over this and threatened to withdraw content en-masse.

Phazer
 
Erica Sadun was the "brilliant hacker" and spokesperson for the team who hacked and cracked the original iPhone OS to allow jailbreaking and carrier-independence. Resulting in a rather long delay of distribution of updated software to iPhone owners, the ones who followed the TOSs and licenses of both Apple and their carriers, while Apple shored up all the leaks in the iPhone OS and baseband.

People like Sadun should be wary and more considerate. Hacking iOS may be great fun for THEM, but it handicaps the majority of users who wait for Apple updates and officially supported features. No matter the flag-waving about our "rights" as users, it's Apple's bat, ball, glove, bases and field. They can pick up their toys and go home whenever they please.

Proving a concept is fine. Make us a video. By all means, post it on YouTube. But don't release your software hacks/cracks to the general public. If you want to do that, there's a whole other ballpark just for you: It's called Linux.
 
I'm not sure encrypting anything would really help - you'd have to pass the decryption key down with the signal, so it's trivial to discover (though likely a DCMA violation).

But why isn't secure certificate client authentication, probably embedded in hardware, used to make sure the device is really an authorised one?

I suspect the reason airshare video isn't working yet isn't because of technical issues, but because the networks have thrown a massive paddy over this and threatened to withdraw content en-masse.

Phazer

I think this has something to do with Apple's FairPlay -- or whatever now exists for iTunes Store video -- and not licensing it. I think AirPlay decrypts, if necessary, within iTunes or iOS, then sends in the clear. That way Apple doesn't have to license any DRM scheme they've developed, or even a component of that DRM scheme. So Denon and iHome, etc., more to come, blah, blah, can license AirPlay without licensing any Apple-devised DRM technology. And without having to build in some sort of "key chip" or use Apple-provided black-box code for decryption of the AirPlay signal.
 
I think this has something to do with Apple's FairPlay -- or whatever now exists for iTunes Store video -- and not licensing it. I think AirPlay decrypts, if necessary, within iTunes or iOS, then sends in the clear. That way Apple doesn't have to license any DRM scheme they've developed, or even a component of that DRM scheme. So Denon and iHome, etc., more to come, blah, blah, can license AirPlay without licensing any Apple-devised DRM technology. And without having to build in some sort of "key chip" or use Apple-provided black-box code for decryption of the AirPlay signal.

Well yes, but I'm sure the Apple TV will have a secure two part identifying certificate, which is an ISO standard, not an Apple one. The iPhone has one - it's documented in the SDK.

Apple appear just to have chosen not to get the iPhone/iPad et al to check it before sending the stream. Which is completely daft.

Phazer
 
I think this has something to do with Apple's FairPlay -- or whatever now exists for iTunes Store video -- and not licensing it. I think AirPlay decrypts, if necessary, within iTunes or iOS, then sends in the clear. That way Apple doesn't have to license any DRM scheme they've developed, or even a component of that DRM scheme. So Denon and iHome, etc., more to come, blah, blah, can license AirPlay without licensing any Apple-devised DRM technology. And without having to build in some sort of "key chip" or use Apple-provided black-box code for decryption of the AirPlay signal.

I would be surprised if this was now AirPlay worked. If video was sent in the clear then it would be pretty trivial to get rid of iTunes DRM by sniffing the data from the network.

It was a few years ago now but when I looked at AirTunes I don't think anybody had created a replacement speaker end in software. I had a Linux server connected to my hifi and wanted to use it with iTunes. From memory I think that each Airport Express has a certificate associated with it and iTunes removes the FairPlay DRM and then re-encrypts the audio with the Airport Express's certificate.
 
Air Video. I've been using it for a year. Fantastic stuff. I store no video locally on my iPad or iPhone 4.



It's $2.99, no recurring fee, and it blows away any free solution. It transcodes your media on the fly so that you can even stream DivX/MKV/OGM/etc to your iPhone and iPad.

Seriously, don't give the $2.99 a second thought.

Absolutely. My favorite iPad app by far and away. I store nothing on my iPad except for books/apps.
 
I would be surprised if this was now AirPlay worked. If video was sent in the clear then it would be pretty trivial to get rid of iTunes DRM by sniffing the data from the network.

It was a few years ago now but when I looked at AirTunes I don't think anybody had created a replacement speaker end in software. I had a Linux server connected to my hifi and wanted to use it with iTunes. From memory I think that each Airport Express has a certificate associated with it and iTunes removes the FairPlay DRM and then re-encrypts the audio with the Airport Express's certificate.

I think you're right.
 
People like Sadun should be wary and more considerate.

To whom? You? Me? Apple? It all depends on your point of view, after all.

Hacking iOS may be great fun for THEM, but it handicaps the majority of users who wait for Apple updates and officially supported features. No matter the flag-waving about our "rights" as users, it's Apple's bat, ball, glove, bases and field. They can pick up their toys and go home whenever they please.

Fine. Let them go home. That means they're out of business, BTW. If you don't sell anything, you're done (well as soon as the money runs out, that is and given the shares would drop like a stone for a business that announces it's no longer going to sell ANYTHING to ANYONE because mean old hackers made their hardware and/or software work with other hardware or operating systems.... Well golly gee Wally! That's just awful! I might just be able to use my AppleTV and/or iPod with Linux! How HORRIBLE! Apple makes their money from the hardware and this means more sales of iPods and AppleTV units to markets that wouldn't otherwise consider them, but Apple only sees lost sales of Macbooks and MacMinis. How limiting.


Proving a concept is fine. Make us a video. By all means, post it on YouTube. But don't release your software hacks/cracks to the general public. If you want to do that, there's a whole other ballpark just for you: It's called Linux.

One person have one view of life. Another person has a very different view of life. One person believes information should be held captive so greed can rule. Another person believes all information should be free for the benefit of everyone. Others have a view somewhere in-between. Who is 'right' and who is 'wrong' much like all of history for that matter seems to be determined by the person with the largest sword/bank account/will to FORCE their point-of-view on someone else. After all, it would be just AWFUL to have a world where everyone respected each others' rights to have a different opinion or point-of-view about something.

The real trouble starts where one person thinks their rights supersede someone else's rights. For example, my belief 'might' be (purely for sake of argument) that women are inferior to men and that they should have NO rights what-so-ever (this has been a common theme among certain world religions), but I somehow doubt the women like that point-of-view very much. That doesn't stop people from forcing their beliefs on others at the end of a sword or a lawsuit.

My personal beliefs are more towards the sharing/respect end of the spectrum and so I don't like greedy individuals, companies and countries. I don't care for most lawyers, lobbyists and corrupt government officials who serve the few instead of the many. Sadly, my point-of-view is in the minority of all of human kind because I believe most humans are little better than kindergarten students who refuse to share toys at play time.

Getting back to the subject at hand, this means that YOU would prefer hackers leave things alone (or go 'play' in the Linux world) because you are afraid Apple might retaliate somehow (by delay it seems) for things that you believe might benefit you personally while the said hacker in question and those of us that tend to believe more in selflessness rather than selfishness might tend to believe that Apple has no business creating closed protocols in the first place. They preach "open" (as with Safari and HTML5) when it suits them and "do" closed (and keep quiet about it most of the time) also when it suits them. Some of us call that hypocrisy, but then others recognize they are simply greedy and controlling people at the other end of the spectrum and so it should be expected. Like the religions that believe you should "convert or die", they tend not to respect other people's rights to disagree with them in the first place, which is precisely why I don't respect them since I believe in mutual respect, not greed and forcing one's will on another. Yet it would be the height of non-reality to think we don't have to live in a world full of greed and few of us are prepared to grow our own food these days, let alone make our own iPod hardware (and thus the reasons for hacking in the first place).

Society keeps forgetting about "minority rights" when they point out majority rules. I think most hackers do it purely to equalize the playing field. For example, the consortium said NO DVD players for Linux unless someone PAYS them for the license. That goes 100% against the Linux philosophy, however and most Linux users simply want to watch their bought and paid for DVD movies on their bought and paid for DVD hardware with their operating system of choice (while similar users get software included with their OS of choice, but of course they simply work the fee into the price of the OS while Linux is pretty much FREE and attracts users who want information in general to be free. Thus hacking brought about the software players the Linux way FOR Linux. It's both arrogant and ignorant for corporations to think that it would happen any other way when they make licensing ultimatums to a group of people that believe in free information. Yet they still sell DVD hardware to the Linux crowd, whom they expect to simply not use them to play actual DVDs. Go figure.

Does Apple keep OSX from being licensed for use with any hardware because they want to protect OSX or because they want to force you to buy only THEIR hardware so they don't have to compete directly with other hardware? I think we all know it's the latter. Greedy intent leads to anti-greed reactions on the other side. For every force there's an equal but opposite force yet people still seem shocked when they see it in action and beg others to conform to THEIR view instead of realizing those people have moved beyond the greedy "ME" point of view and into the more sociable "WE" point of view. I see GOD as a "we" kind of person in most religions yet the followers always seem to be "me" types. No wonder He he seems to get angry at them all the time.... Clearly, I must have read a different book than the right-wing conservatives when it comes to the Bible. Perhaps their book was the Golf Bible? :D

Of course those that don't believe in deities tend to also often think mostly from their own personal point-of-view rather than society as a whole as well, which would probably explain why greed is so rampant on Earth and why we have starving people on a planet that makes more than enough food to go around. It's MINE and NOT YOURS! Hands off! Now kindly go starve to death in the corner over there while I enjoy my cake. :cool:
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.