2012-11-27 01:48:27.787505+01 by Dan Lyke 2 comments
Why you don't roll your own encryption. Asher Langton downloads Leaping Brain video file, discovers that player is a Python wrapper around VLC, figures out that he can save unencrypted .MOV from that, further finds that in fact the "BrainTrust™ proprietary video encryption" is that the beginning of each 1K block is XOR'd with "RANDOM_STRING".
Doh.
[ related topics: Monty Python Cryptography Video Python ]
comments in ascending chronological order (reverse):
#Comment Re: made: 2012-11-27 03:41:05.475658+01 by: other_todd [edit history]
I roll my own encryption, but it's for relatively low security stuff, because dealing with PGP is an effing pain. And I'd never pull anything as half-assed as what that guy did. I'm not saying exactly what I use, but I'll just say I haven't been seriously into recreational cryptography since I was ten years old for nothing.
[Edited to make it clear that I can do way better than the XOR fool, not that I can do way better than PGP. If I were THAT good I'd be doing crypto for a living.]
#Comment Re: made: 2012-11-27 04:02:05.037745+01 by: TheSHAD0W
Article 3 days from now: Asher Langton is charged under the DMCA for circumventing encryption.
We will not edit your comments. However, we may delete your comments, or cause them to be hidden behind another link, if we feel they detract from the conversation. Commercial plugs are fine, if they are relevant to the conversation, and if you don't try to pretend to be a consumer. Annoying endorsements will be deleted if you're lucky, if you're not a whole bunch of people smarter and more articulate than you will ridicule you, and we will leave such ridicule in place.
Flutterby™ is a trademark claimed by
Dan Lyke for the web publications at www.flutterby.com and www.flutterby.net.