DRM

This podcast features a keynote session entitled, "Up Against the Firewall", presented by Brenda Laurel, Chair and Professor of the Graduate Program in Design at the California College of the Arts, and Rob Tow, Science and Technology Consultant at the California College of the Arts. The session was recorded at the EDUCAUSE 2008 Western Regional Conference.

In this hour-long podcast, we present a session from the EDUCAUSE 2007 Policy Conference entitled, "Digital Entertainment on Campus: Old Lawsuits and New Business Models". This session consists of a panel discussion as well as Q&A from attendess. The panel includes:

Michael J. Bebel, CEO, Ruckus Network

Jeffrey Bronikowski, Senior Vice President, Business Development, Global Digital Initiatives Division, Universal Music Group

Larry Jacobson, Chairman and Chief Executive Officer, Cdigix

Session moderator: Susan Butler, Senior Correspondent, Billboard Magazine

The morning keynotes hinted at the [d]evolving state of DRM. Hopefully Bill McCoy will touch on his interest in Social DRM at his session tomorrow. Michael Jensen, Peter Brantley, and Ale de Vries hosted an interesting session on DRM too. In my estimation, they mostly talked around the idea of DRM and the problems one can encounter when approaching the topic. I got a late question in regarding the music publishing model and the potential for using performance rights organizations to introduce an new form of renumeration for the book trade. I approached the same topic with Brewster Kahle in our interview from 2005.

I've been a long-time critic of Digital Rights Management (DRM), not so much on philosophical grounds but on practical grounds—I just don't see how it can be made robust enough and secure enough. Those cunning cryptanalysts have come up with a theoretical timing attack against DRM which just completely undermines the concept of DRM on multi-tasking general purpose CPUs, including all desktop computers.

Cryptanalysts already known the time taken to make different calculations using the same encryption key might, in theory at least, give attackers code-breaking clues in much the same way electro-magnetic leakage or power fluctuations can be used in so-called "side-channel" attacks on secure systems. The new so-called Branch Prediction Analysis (BPA) attack is a refinement on this approach that makes code breaking feasible on commodity PCs instead of expensive high-performance kit.

A carefully written spy-process, running alongside the RSA-process, is able to collect almost all the secret bits used in an RSA signing operation by monitoring the states of a CPU. The approach yields far quicker results than statistical analysis, cryptography researchers say.