View Full Version : Already HD titles that don't play?
arnezami
16th May 2007, 19:09
The first two trees in the old mkb:
umask:uv number
17:00000001
17:00800001
The same area covered by the new mkb:
umask:uv number
05:0000001C
03:0000002A
05:00000028
03:00000046
02:00000049
02:0000004F
02:00000055
02:0000005B
03:00000069
05:00000068
02:00000085
02:0000008B
04:00000091
07:00000090
17:00000080
17:00800001
The rest is all the same. So only the first tree has been divided.
It would be pretty cool to illustrate this graphically :).
[edit] Host revocations:
range:Host ID
0009:FFFF0000000B
0002:FFFF00000021
0003:FFFF00000026
0003:FFFF00000035
0002:FFFF0000004E
0003:FFFF00000054
Can somebody figure out which Software Players/versions are revoked? Thanks.
Regards,
arnezami
PS. There are no drive revocations ;) (thanks to us being careful).
Slysoft AnyDVD HD just released a new version that decrypts the new aacs discs :)
bourke
17th May 2007, 01:01
I vaguely recall posting recently that the processing key tells the LA nothing about where it came from. That's not quite true. I should have written that the processing key tells the LA nothing about which member of the group produced that key, but it definitely reveals the group (or "tree") that calculated it.
Wait, so if we obfuscate/hide the new key(s) such that they can't determine it then they wont be able to implicitly revoke the new key(s)?
In theory you're right. But as soon as a programm is released "in the wild" to decrypt "new" disks the AACS will know what processing key is comprimised.
Slysoft released a beta version to decrypt the new disks so I think the AACS must be reverse engineering right now.
Great! So the new protection is broke before the new discs are official on sale! :thanks:
Now AACS is "hacking" AnyDVD to fix their protection scheme! :rolleyes:
regards,
Li On
bourke
17th May 2007, 03:49
In theory you're right. But as soon as a programm is released "in the wild" to decrypt "new" disks the AACS will know what processing key is comprimised.
Slysoft released a beta version to decrypt the new disks so I think the AACS must be reverse engineering right now.
You are presuming that:
a) the AACS LA have better hackers than us; and
b) that the SlySoft coders are more careless than the WinDVD and PowerDVD programmers were ;-)
Otherwise they will have to revoke all processing keys again LOL!
SlySoft L33T H4X0RZ are saying 'Bring it OOOOOWN!'
arnezami
17th May 2007, 04:11
Congratulations to AnyDVD :). Looks like they did it.
So AACS (v3) is opened up already. Several days before the official release dates :D. And any bad news for DRM is good news for those that stand by their fair use rights. I'll take it.
Can somebody (maybe K40 or Adbear) confirm its working? Thanks.
Of course we want to find the new key(s) ourselves aswell...
arnezami
xyz987
17th May 2007, 09:48
Great! So the new protection is broke before the new discs are official on sale!
LOL!!!
It seems the main problem to break AACS is you need to buy the disk first!!!
No need for that! On AnyDVD forum they said they don't have the new discs yet! A user report success with the latest beta!
regards,
Li On
Did a restore with a Backup including PWDVD 7.3 and
Matrix 1 played without problem with the Xbox Drive.
Matrix 2 + 3 didn't play as expected.
Installed newest AnyDVDHD and inserted Matrix 2
and it worked ! The same with Matrix 3 .
Well done Slysoft!
My computer skills aren't good enough to go for
the new keys myself,but i'm enjoying to follow
the progress from the smart members of this
forum.
zeroprobe
17th May 2007, 10:37
Did a restore with a Backup including PWDVD 7.3 and
Matrix 1 played without problem with the Xbox Drive.
Matrix 2 + 3 didn't play as expected.
Installed newest AnyDVDHD and inserted Matrix 2
and it worked ! The same with Matrix 3 .
Well done Slysoft!
My computer skills aren't good enough to go for
the new keys myself,but i'm enjoying to follow
the progress from the smart members of this
forum.
That is cracking news. Arnezami it's good to read your posts again.
Johhn
17th May 2007, 18:28
LOL!!!
It seems the main problem to break AACS is you need to buy the disk first!!!
They will have been able to make a lot of progress with the upgraded players using existing disks, in the few weeks that have elapsed since the upgrades were published.
Also, they might have arrived at a preliminary solution based on existing disks which only needed verifying with new disks. Hence release a beta version and see what happens.
So it shoudn't be long before VUK's for the new titles are added to the lists.
As a matter of interest, is it possible, using an encrypted file off the disk, and the corresponding decrypted file that anydvd has produced, to calculate or otherwise deduce the VUK for that disk?
xyz987
17th May 2007, 19:33
As a matter of interest, is it possible, using an encrypted file off the disk, and the corresponding decrypted file that anydvd has produced, to calculate or otherwise deduce the VUK for that disk?
No, this is the same that cracking AES, and nobody has cracked AES.
Adbear
18th May 2007, 06:23
Yep the new Anydvd definately works fine, Have back ups of all 3 Matrix discs playing from my hardrive now, It'll be interesting to see if it works with Pirates 1 & 2 and Curse of the Golden Flower which are on their way to me
FoxDisc
18th May 2007, 15:23
the new mkb:
umask:uv number
05:0000001C
03:0000002A
05:00000028
03:00000046
02:00000049
02:0000004F
02:00000055
02:0000005B
03:00000069
05:00000068
02:00000085
02:0000008B
04:00000091
07:00000090
17:00000080
I'm getting pretty good at reading these, so I can describe what they've done. The last line I've quoted 17:00000080 means revoke all the left most 128 devices, and allow the rest of the 2^22 devices in the first of the 512 trees (we think this tree is only for software players). The first 14 lines are for allowing some of the revoked 128 and keeping others revoked. Each of the 15 lines corresponds to a different processing key that is valid.
The first line 05:0000001C revokes 4 of the first 16 players and allows 12 of them.
The next two lines form an overlapping pair that reject 6 of 16. They used a pair because some of the rejected devices weren't adjacent.
I won't do them all, but 8 of the lines revoke a single device/player. They include all the lines that start 02 or 04 and 03:00000069 (the reason they revoke a single player is that their last bit is one.) Of those 8, 6 of them revoke one and allow one, one revokes one and allows 3 and one revokes one and allows 7.
xyz987
18th May 2007, 17:08
I'm getting pretty good at reading these, so I can describe what they've done. The last line I've quoted 17:00000080 means revoke all the left most 128 devices, and allow the rest of the 2^22 devices in the first of the 512 trees (we think this tree is only for software players). The first 14 lines are for allowing some of the revoked 128 and keeping others revoked. Each of the 15 lines corresponds to a different processing key that is valid.
The first line 05:0000001C revokes 4 of the first 16 players and allows 12 of them.
The next two lines form an overlapping pair that reject 6 of 16. They used a pair because some of the rejected devices weren't adjacent.
I won't do them all, but 8 of the lines revoke a single device/player. They include all the lines that start 02 or 04 and 03:00000069 (the reason they revoke a single player is that their last bit is one.) Of those 8, 6 of them revoke one and allow one, one revokes one and allows 3 and one revokes one and allows 7.
Highly informative :thanks:
arnezami
27th May 2007, 10:18
Can somebody post the Volume IDs of both Matrix 2 and 3. ;)
Easiest is to use xt5's vid.exe (http://www.ingenieria-inversa.cl/files/vid.rar) program in combination with the xbox 360 add-on drive.
Thanks :D
arnezami
Fahzuu
27th May 2007, 10:53
Can somebody post the Volume IDs of both Matrix 2 and 3. ;)
Easiest is to use xt5's vid.exe (http://www.ingenieria-inversa.cl/files/vid.rar) program in combination with the xbox 360 add-on drive.
Thanks :D
arnezami
Hi, I only have Matrix 2 Here right now, but that would be:
40 00 33 07 01 04 10 05 57 47 48 44 56 4D 00 00
Matrix 3 :400018074404200457474844564D0000
arnezami
27th May 2007, 12:08
Thanks guys :).
Galileo2000
27th May 2007, 18:34
I confirm those keys for Matrix 2 and 3.
I also confirm that AhyDVD HD 6.1.5.5 plays and rips them fine.
And yes, I am back.
arnezami
27th May 2007, 18:36
I confirm those keys for Matrix 2 and 3.
I also confirm that AhyDVD HD 6.1.5.5 plays and rips them fine.
And yes, I am back.
Thanks for the confirmation. Are the discs from the Trilogy the same as from the Ultimate Collection btw? And who has got which?
And welcome back :).
arnezami
Galileo2000
27th May 2007, 19:06
Thanks for the confirmation. Are the discs from the Trilogy the same as from the Ultimate Collection btw? And who has got which?
And welcome back :).
arnezam
Thanks arnezami.
I have the Trilogy. I am pretty sure they are the same as in the Ultimate collection, although I don't have access to the Ultimate at the moment.
Thanks arnezami.
I have the Trilogy. I am pretty sure they are the same as in the Ultimate collection, although I don't have access to the Ultimate at the moment.
Ultimate disc or same for HD-DVD side but just have a DVD stuck on the other side for the extra extras.
Bystander
28th May 2007, 14:49
Why not reverse AnyDVD. It's not even protected with a packer or Asprotect, Armadillo, ASPack, Execrytor? Nothing.
Revgen
29th May 2007, 00:33
Why not reverse AnyDVD. It's not even protected with a packer or Asprotect, Armadillo, ASPack, Execrytor? Nothing.
I think Arnezami and the rest of the guys can figure it out without stealing from the AnyDVD authors once they get their hands on the Matrix discs.
Galileo2000
29th May 2007, 02:10
I think Arnezami and the rest of the guys can figure it out without stealing from the AnyDVD authors once they get their hands on the Matrix discs.
SlySoft said over and over again they do not use any free code from doom9.
I have a reason to believe it.
I think it is totally inappropriate to reverse Any DVD. It is commercial application first and no one would have a feeling of achievement second.
International guerilla army should be able to do more than tiny company from the tiny island.
Bystander
29th May 2007, 02:26
Coming from a group that reverse engineered AACS... lol
Galileo2000
29th May 2007, 03:17
Coming from a group that reverse engineered AACS... lol
AACS is...you know what.
SlySoft is an ally.
Orion17
29th May 2007, 04:00
AACS is...you know what.
SlySoft is an ally.
Agree with Galileo2000. Just because Slysoft figured it out does'nt meen it is right to use their work. I have total faith in the brains on this forum...you know who you are ;)
arnezami
29th May 2007, 06:30
*sigh*
Ok. Instead of speculating about AnyDVD you can now start wondering how it is possible for awhitehead to post 2 VUKs for MKB v3 discs (http://forum.doom9.org/showthread.php?p=1008594#post1008594
).
Yes: The Graduate and 3 Days of the Condor are MKB v3 discs. :D
I think some/many of you know what this might mean. We don't want to go into this right now...
Just be happy :).
Regards,
arnezami
Fahzuu
29th May 2007, 07:04
Yes: The Graduate and 3 Days of the Condor are MKB v3 discs. :D
:)
-------------
eousphoros
29th May 2007, 07:33
arnezami,
If you decide to update aacskeys could you take a look at what I had to change in aacskeys in order to get it working properly in linux and port those small changes over? I believe the only major change I had to do (besides adding the sha1 check to the older release you had) was adding a directory parameter and a device parameter as below:
int LoadMediaKeyBlockFile(char * drive_name, char * dir_name)
The hacked abomination is at
http://forum.doom9.org/showthread.php?p=1001014#post1001014
And this is great news!! :D
vBulletin® v3.8.11, Copyright ©2000-2026, vBulletin Solutions Inc.