AFAIK the most succesfull attack was the memory dumping, by searching the memory while playing or by crashing the program when loading, I think arnezami's key was found on a crashed memory dump while PDVD was loading so TAKU might be loading-crashing&dumping a software player and looking for the previously known keys then repeat the process with a new disc.
__________________
< War is Peace; Freedom is Slavery; Ignorance is Strength!>
^__^
(oo)\_______
(__)\.......)\/\
. . ||----w |
. . || . . ||
|