iTunes v6 FairPlay DRM Cracked

luaine writes with an Engadget article claiming the cracking of iTunes v6 FairPlay DRM. From the article: "[A] new app called QTFairUse6 looks like it can now be used (with some amount of difficulty) to dump iTunes version 6.0.4 - 6.0.5 files of their chastely protection." At present this is a Windows-only tool for those who are "not afraid to get [their] hands dirty with a little python." Engadget does not provide a link to QTFairUse6, and neither will we. We've run several DRM stories recently, but it's been 19 months since Cracking iTunes' DRM with JHymn.

Re:Uh...

[rob_squared]

Any why won't you provide a link to the software?

They won't, but I will: http://hymn-project.org/forums/viewtopic.php?t=155 3 [hymn-project.org]

A Link to a download

[smitingpurpleemu]

Here you go: http://hymn-project.org/forums/viewtopic.php?t=155 3 [hymn-project.org]

No, they don't.

[mrchaotica]

iMovie works by decompressing and recompressing the music, resulting in a loss of quality. Apparently, this new software works by extracting the compressed stream after it has been decrypted, giving it the distinct advantage of being lossless.

Of course, it doesn't do me any good, since it only works in Windows...

Re:Another Stupid Headline

[dschuetz]

iTunes wasn't cracked. Fairplay DRM was cracked.

And it wasn't even that. According to this forum entry [hymn-project.org], all the hack does is tie into the audio "output" side of iTunes and skim off the decoded AAC stream, writing it to a file. One step above grabbing it at the sound card, but certainly not a crack of the DRM itself.

What's astounding is how many people seem to consider this "a step in the right direction," when it's really a "step in a totally different direction that will do nothing for actually breaking the DRM itself." Then again, maybe I shouldn't be *too* surprised.... :(

nothing was cracked

[vafada]

FairPlay wasn't cracked.. this python script attaches to iTunes.exe..... reads the memory when you play a track and creates a dump for the AAC file... its a very nice scripts... but again... nothing was cracked

Re:been there, done that

[mrchaotica]

I just don't see the point of removing the DRM from a paid for iTunes file

Two reasons:

1. Sooner or later you will either lose your decryption key or want to use the file on an unsupported platform.
2. It's the principle of the thing!

With some amount of difficulty?

[MDMurphy]

That's the part that makes it worthless.

Music from iTunes is already compressed a fair bit. Yes, you'll lose some fidelity, but the copy to CD and re-rip has always been there if you're not too picky but seriously DRM-phobic.

But other than single-track purchasing, the whole point of the ITMS is convenience. If you want music a single click away it's there. If you want it a click away, but are willing to go through hoops to remove the DRM you kinda lost the convenience part, so what's the point?

If you wanted cheap music, at least an ablbum at a time, borrowing or buying used CDs, ripping them yourself then returning ( or re-selling ) them is an option. If you look at the price of a used CD, minus the price you get selling it back the next day, it's going to be cost competitive with ITMS purchase. Heck, splitting the price of a new album with 2 friends and you all rip it before selling it is going to be a better price. Illegal, yes, but no more so than de-DRMing

So if that's an option, why would you buy from ITMS in the first place if you're going to go through pains to de-DRM it? Poor impulse control? If you can get it for the same price ( or cheaper ) by getting the CD and ripping yourself AND less hassle than removing DRM, why not do just that?

Which is why I think any DRM removal that is more than a single click just silly.

Re:Another Stupid Headline

[TheRaven64]

all the hack does is tie into the audio "output" side of iTunes and skim off the decoded AAC stream,

Not quite. It grabs the audio when it is decrypted, but not yet decoded. I.e. it grabs the raw AAC frames. These can then be inserted into a proper container file and tagged with metadata. This process needs to be automated, but it should be soon.

The good thing about this approach is that, unlike capturing the audio, it accesses it before the AAC stream has been decompressed, meaning that you don't have to recompress it, adding artefacts.

ed2k link

[Anonymous Coward]

remember to remove spaces

ed2k://|file|QTFairUse6-1.0.zip|112618|E3BEE68DD29 6F9FA88AC9BBCD121D129|/

Re:Macs have this ability - via iMovie

[Mister Whirly]

No, they would actually rather have you come to their shows and buy stuff. That way they get 100% of the profit. I manage bands and talk to musicians all the time. They would rather you illegaly download their music and have you exposed to it - that increases the chance that you will come to see them live, where they can actually make money. Most bands I know don't see CDs as money makers, but as the way to get you to the money maker.

Re:Another Stupid Headline

[john82]

If it's the only reason the iTMS uses DRM is because of "the executives", then why don't labels get to choose whether or not they want DRM on songs they sell through iTunes?

RIAA is the one insisting on DRM.

Re:Another Stupid Headline

[Buran]

Not all artists who publish via the iTMS are part of the RIAA. (or their labels, or whatever is the best description).

Re:Another Stupid Headline

[fossa]

I did this. I bought an unlocked GSM phone and moved my SIM card to it. Worked fine, but was quite expensive and required some research to get the proper North American dual band phone (tri-bands with two European bands and one of the two North American bands are much more common and typically sold as "world phones"). Try convincing your friends (the ones who haven't lived in Europe long enough to buy a cell phone there) that this is the way to go when they get a new phone "for free" every few years. (Indeed, one of the big reasons I finally did it was that my locked phone broke a month out of warranty with seven months left on my stupid contract. I'm currently trying pre-paid + VoIP.) So, yes, it won't happen due to the will of the general public.

Re:Uh...

[Fordiman]

It works, and works well.

Also, it doesn't actually require any mucking about in python; it works out of the box, once python's installed. If you're mucking about, it better be to add 'faad -a dump_xx.decoded.aac dumpxx.aac' to the end of the dump process.

Meanwhile, the link in the forum linked by the engadget article is to rapidshare.de. I hate these things, and I assume most others do. Additionally, that zip doesn't have FAAD in it. So, I took the liberty of putting it in and hosting it myself. It's not offshore, and I'm nothing like anonymous, so the first Cease and Desist will get it off my site. If I get a lawsuit instead, you can be sure I'm going to grab the EFF's attention on the matter.

QTFairUse w/ FAAD [fordi.org]
Python 2.4.3 (required) [python.org]

Enjoy!