AACS encryption key controversy

{{short description|Controversy regarding copyright}}

{{Use mdy dates|date=October 2022}}

{{good article}}

Image:Sample 09-F9 protest art, Free Speech Flag by John Marcotte.svg, in blog posts on dozens of websites and as user avatars on forums such as Digg. The first fifteen bytes of the 09 F9 key are contained in the RGB encoding of the five colors, with each color providing three bytes of the key. The byte "C0" is appended in the lower right corner due to 16 not being divisible by 3.{{Cite web|url=http://www.badmouth.net/free-speech-flag/|title=Free Speech Flag|last=Marcotte|first=John|website=Badmouth.net|language=en-US|access-date=May 3, 2007|date=May 1, 2007|archive-date=May 4, 2007|archive-url=https://web.archive.org/web/20070504012547/http://www.badmouth.net/free-speech-flag/|url-status=live}}{{Cite news|url=http://www.brisbanetimes.com.au/news/web/digg-finds-the-key-is-safety-in-numbers/2007/05/14/1178995074634.html|title=Digg finds the key is safety in numbers|last=Bushell-Embling|first=Dylan|date=May 15, 2007|website=Brisbane Times|language=en|access-date=September 24, 2015|archive-date=October 9, 2007|archive-url=https://web.archive.org/web/20071009104528/http://www.brisbanetimes.com.au/news/web/digg-finds-the-key-is-safety-in-numbers/2007/05/14/1178995074634.html|url-status=live}}{{cite news|url=http://www.yalelawtech.org/trusted-computing-drm/46-dc-ea-d3-17-fe-45-d8-09-23-eb-97-e4-95-64-10-d4-cd-b2-c2/|access-date=September 24, 2015|title=46 DC EA D3 17 FE 45 D8 09 23 EB 97 E4 95 64 10 D4 CD B2 C2|first=Ben|last=S|date=March 1, 2011|quote=A 'PS3 Flag', an homage to its predecessor, the 'Free Speech Flag'|work=Yale Law & Technology|archive-date=March 10, 2011|archive-url=https://web.archive.org/web/20110310155037/http://www.yalelawtech.org/trusted-computing-drm/46-dc-ea-d3-17-fe-45-d8-09-23-eb-97-e4-95-64-10-d4-cd-b2-c2/}}{{cite news|url=http://www.jeffreythompson.org/blog/tag/aacs-encryption-key/|first=Jeff|last=Thompson|quote=An example of this is the so-called 'Free Speech Flag', seen above.|title=AACS encryption key|work=Jeff Thompson|date=August 13, 2011|access-date=September 24, 2015|archive-date=September 24, 2015|archive-url=https://web.archive.org/web/20150924191358/http://www.jeffreythompson.org/blog/tag/aacs-encryption-key/}}

{{cite book | title=Crypto Anarchy | author=Crofton, Isaak | year=2015 | pages=160 | publisher=Lulu Enterprises Incorporated | isbn=978-1329059801}}{{cite book | title=Cyberwarfare Sourcebook |author1=Kiyuna, A. |author2=L. Conyers | year=2015 | pages=291 |publisher=Lulu.com | isbn=978-1329063945}}]]

A controversy surrounding the AACS processing key arose in April 2007 when the Motion Picture Association of America and the Advanced Access Content System Licensing Administrator, LLC (AACS LA) began issuing cease and desist letters{{cite web|url=http://www.chillingeffects.org/notice.cgi?sID=03218|title=AACS licensor complains of posted key|access-date=May 4, 2007|publisher=Chilling Effects|archive-date=May 5, 2007|archive-url=https://web.archive.org/web/20070505045801/http://www.chillingeffects.org/notice.cgi?sID=03218|url-status=live}} to websites publishing a 128-bit (16-byte) number, represented in hexadecimal as 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0{{cite web|url=http://community.zdnet.co.uk/blog/0,1000000567,10005286o-2000331777b,00.htm |title=An interesting sales tactic |access-date=May 18, 2007 |date=May 11, 2007 |author=Rupert Goodwins |publisher=ZDNet UK |archive-url=https://web.archive.org/web/20070612201413/http://community.zdnet.co.uk/blog/0%2C1000000567%2C10005286o-2000331777b%2C00.htm |archive-date=June 12, 2007 |url-status=live |author-link=Rupert Goodwins }}{{cite web|url=http://www.theinquirer.net/inquirer/news/1018487/09-f9-02-9d-e3-5b-d8-41-56-c5-63-56-c0-tried-ban|archive-url=https://web.archive.org/web/20091029052629/http://www.theinquirer.net/inquirer/news/1018487/09-f9-02-9d-e3-5b-d8-41-56-c5-63-56-c0-tried-ban|url-status=unfit|archive-date=October 29, 2009|title=09 f9 11 02 9d 74 e3 5b d8 41 56 c5 63 56 88 c0 is the number they tried to ban|access-date=May 3, 2007|date=May 2, 2007|author=Nick Farrell|publisher=The Inquirer}} (commonly referred to as 09 F9),{{cite web|url=https://www.eff.org/deeplinks/2007/05/09-f9-legal-primer|title=09 f9: A Legal Primer|access-date=May 18, 2007|date=May 2, 2007|author=Fred von Lohmann|publisher=EFF|archive-date=February 18, 2015|archive-url=https://web.archive.org/web/20150218055633/http://www.eff.org/deeplinks/2007/05/09-f9-legal-primer|url-status=live}}{{cite web|url=http://www.sci-tech-today.com/news/09-F9--An-Unlikely-Star-Is-Born/story.xhtml?story_id=011001CEELPZ|title=09 F9: An Unlikely Star Is Born Thanks to Digg.com|access-date=May 18, 2007|date=May 5, 2007|author=Frederick Lane|publisher=Sci-Tech Today|archive-date=September 28, 2007|archive-url=https://web.archive.org/web/20070928040921/http://www.sci-tech-today.com/news/09-F9--An-Unlikely-Star-Is-Born/story.xhtml?story_id=011001CEELPZ|url-status=dead}} a cryptographic key for HD DVDs and Blu-ray Discs. The letters demanded the immediate removal of the key and any links to it, citing the anti-circumvention provisions of the United States Digital Millennium Copyright Act (DMCA).

In response to widespread Internet postings of the key, the AACS LA issued various press statements, praising websites that complied with their requests for acting in a "responsible manner" and warning that "legal and technical tools" were adapting to the situation.

The controversy was further escalated in early May 2007, when aggregate news site Digg received a DMCA cease and desist notice and then removed numerous articles on the matter and banned users from reposting the information.{{cite web|url=http://www.webpronews.com/insiderreports/2007/05/02/digg-embroiled-in-hd-dvd-controversy|title=Digg Embroiled In HD DVD Controversy|access-date=May 18, 2007|date=May 2, 2007|author=David Utter|publisher=WebProNews|archive-url=https://web.archive.org/web/20070506095415/http://www.webpronews.com/insiderreports/2007/05/02/digg-embroiled-in-hd-dvd-controversy|archive-date=May 6, 2007|url-status=dead}}

This sparked what some describe as a digital revolt{{cite news|url=http://www.australianit.news.com.au/story/0,24897,21659892-27317,00.html|title=Digg revolt over HD DVD codes|access-date=May 20, 2007|date=May 2, 2007|work=news.com.au|archive-url=https://web.archive.org/web/20070703232137/http://www.australianit.news.com.au/story/0,24897,21659892-27317,00.html|archive-date=July 3, 2007|url-status=dead}} or "cyber-riot"{{cite web|url=http://abclocal.go.com/wpvi/story?section=news/technology&id=5269200|title=The First Amendment vs. Patents in Web 2.0|access-date=May 20, 2007|date=May 3, 2007|author=Michael S. Malone|publisher=6abc|archive-url=https://web.archive.org/web/20090505183303/http://abclocal.go.com/wpvi/story?section=news%2Ftechnology&id=5269200|archive-date=May 5, 2009|url-status=dead}} in which users posted and spread the key on Digg, and throughout the Internet en masse, leading to a Streisand effect. The AACS LA described this situation as an "interesting new twist".{{cite news|url=http://news.bbc.co.uk/2/hi/technology/6623331.stm|title=DRM group vows to fight bloggers |access-date=May 4, 2007|date=May 4, 2007|author=Darren Waters |publisher=BBC| archive-url= https://web.archive.org/web/20070507154437/http://news.bbc.co.uk/2/hi/technology/6623331.stm| archive-date= May 7, 2007 | url-status= live}}

Background

Because the encryption key may be used as part of circumvention technology forbidden by the DMCA, its possession and distribution has been viewed as illegal by the AACS, as well as by some legal professionals.{{Cite news|url=https://www.nytimes.com/2007/05/03/technology/03code.html|title=In Web Uproar, Antipiracy Code Spreads Wildly|last=Stone|first=Brad|date=May 2, 2007|work=The New York Times|access-date=May 3, 2007|language=en-US|issn=0362-4331|archive-date=December 11, 2008|archive-url=https://web.archive.org/web/20081211105021/http://www.nytimes.com/2007/05/03/technology/03code.html|url-status=live}} Since it is a 128-bit numerical value, it was dubbed an illegal number.{{Cite web |url=http://www.bloggernews.net/16450 |title=Blogger News Network / ‘Illegal Number’ Triggers Flood of MPAA Cease-and Desist Letters |access-date=May 8, 2007 |archive-date=August 8, 2009 |archive-url=https://web.archive.org/web/20090808112602/http://www.bloggernews.net/16450 |url-status=usurped }}{{Cite web |url=http://www.ecyrd.com/ButtUgly/wiki/Main_blogentry_010507_1 |title=ButtUgly: Main_blogentry_010507_1 |access-date=May 20, 2009 |archive-date=July 1, 2024 |archive-url=https://web.archive.org/web/20240701181356/https://www.ecyrd.com/ButtUgly/wiki/Main_blogentry_010507_1 |url-status=live }}{{Cite web |url=http://bearnz.wordpress.com/2007/05/04/an-illegal-number/ |title=Protected Blog Login « WordPress.com |access-date=May 8, 2007 |archive-date=May 19, 2007 |archive-url=https://web.archive.org/web/20070519103730/http://bearnz.wordpress.com/2007/05/04/an-illegal-number/ |url-status=live }} Opponents to the expansion of the scope of copyright criticize the idea of making a particular number illegal.{{cite web | date=May 3, 2007 | url=http://freedom-to-tinker.com/node/1154 | title=Why the 09ers Are So Upset | work=Freedom to Tinker | author=Edward Felten | access-date=January 8, 2007 | archive-url=https://web.archive.org/web/20080923082334/http://freedom-to-tinker.com/node/1154 | archive-date=September 23, 2008 | url-status=dead | df=mdy-all | author-link=Edward Felten }}

Commercial HD DVDs and Blu-ray discs integrate copy protection technology specified by the AACS LA. There are several interlocking encryption mechanisms, such that cracking one part of the system does not necessarily crack other parts. Therefore, the "09 F9" key is only one of many parts that are needed to play a disc on an unlicensed player.

AACS can be used to revoke a key of a specific playback device, after it is known to have been compromised, as it has for WinDVD.{{cite web | url = https://arstechnica.com/news.ars/post/20070126-8710.html | title = AACS key revoked | access-date = May 2, 2007 | date = January 26, 2007|website=Ars Technica|author=Ken Fisher | archive-url= https://web.archive.org/web/20070510002601/http://arstechnica.com/news.ars/post/20070126-8710.html| archive-date= May 10, 2007 | url-status= live}} The compromised players can still be used to view old discs, but not newer releases without encryption keys for the compromised players. If other players are then cracked, further revocation would lead to legitimate users of compromised players being forced to upgrade or replace their player software or firmware in order to view new discs. Each playback device comes with a binary tree of secret device and processing keys. The processing key in this tree, a requirement to play the AACS encrypted discs, is selected based on the device key and the information on the disc to be played. As such, a processing key such as the "09 F9" key is not revoked, but newly produced discs cause the playback devices to select a different valid processing key to decrypt the discs.{{cite web|url=https://financialcryptography.com/mt/archives/000908.html|title=Hal Finney on 'AACS and Processing Key'|author=Hal Finney|date=May 3, 2007|access-date=May 18, 2007|author-link=Hal Finney (cypherpunk)|archive-date=September 28, 2007|archive-url=https://web.archive.org/web/20070928164521/https://financialcryptography.com/mt/archives/000908.html|url-status=live}}

{{anchor|TIMELINE}}Timeline of AACS cracking

= 2006 =

On December 26, 2006, a person using the alias muslix64 published a utility named BackupHDDVD and its source code on the DVD decryption forum at the website Doom9.{{cite web | url = http://forum.doom9.org/showthread.php?t=119871 | title = BackupHDDVD, a tool to decrypt AACS protected movies | access-date = April 9, 2007 | date = December 26, 2006 | author = Muslix64 | work = Doom9's Forum | archive-url= https://web.archive.org/web/20070322232629/http://forum.doom9.org/showthread.php?t=119871| archive-date= March 22, 2007 | url-status= live}} BackupHDDVD can be used to decrypt AACS protected content once one knows the encryption key.{{cite web | url = http://www.aacsla.com/specifications/AACS_Spec_HD_DVD_Recordable_0.921_20060725.pdf | title = Advanced Access Content System (AACS) | access-date = April 9, 2007 | date = July 25, 2006 | author = Intel Corporation | author2 = ((International Business Machines Corporation)) | author3-link = Matsushita Electric Industrial Co., Ltd. | author3 = Matsushita Electric Industrial Co., Ltd. | author4-link = Microsoft Corporation | author4 = Microsoft Corporation | author5-link = Sony Corporation | author5 = Sony Corporation | author6-link = Toshiba Corporation | author6 = Toshiba Corporation | author7-link = The Walt Disney Company | author7 = The Walt Disney Company | author8-link = Warner Bros | author8 = Warner Bros. | archive-url = https://web.archive.org/web/20070209114257/http://www.aacsla.com/specifications/AACS_Spec_HD_DVD_Recordable_0.921_20060725.pdf | archive-date = February 9, 2007 | url-status = dead | author2-link = International Business Machines Corporation | author-link = Intel Corporation }} muslix64 claimed to have found title and volume keys in main memory while playing HD DVDs using a software player, and that finding them is not difficult.{{cite web | date=December 28, 2006 | url=http://www.techamok.com/?pid=1849 | title=HD DVD Content Protection already hacked? | work=TechAmok | access-date=January 2, 2007 | archive-date=September 10, 2023 | archive-url=https://web.archive.org/web/20230910210905/http://www.techamok.com/?pid=1849 | url-status=live }}

= 2007 =

On January 1, 2007, muslix64 published a new version of the program, with volume key support.{{cite web | url = http://forum.doom9.org/showpost.php?s=61e391f4db570e16e4f05a98ffa97f6d&p=924731&postcount=245 | title = BackupHDDVD, a tool to decrypt AACS protected movies | access-date = April 9, 2007 | date = January 2, 2007 | author = Muslix64 | archive-date = September 29, 2007 | archive-url = https://web.archive.org/web/20070929102737/http://forum.doom9.org/showpost.php?s=61e391f4db570e16e4f05a98ffa97f6d&p=924731&postcount=245 | url-status = live }} On January 12, 2007, other forum members detailed how to find other title and volume keys, stating they had also found the keys of several movies in RAM while running WinDVD.

On or about January 13, a title key was posted on pastebin.com in the form of a riddle, which was solved by entering terms into the Google search engine. By converting these results to hexadecimal, a correct key could be formed.{{cite web | url = http://it.slashdot.org/article.pl?sid=07/01/13/181222 | title = Decryption Keys For HD-DVD Found, Confirmed | access-date = April 9, 2007 | date = January 13, 2007 | author = kad77 | work = Slashdot | archive-date = July 1, 2024 | archive-url = https://web.archive.org/web/20240701181339/http://it.slashdot.org/article.pl?sid=07/01/13/181222 | url-status = live }} Later that day, the first cracked HD DVD, Serenity, was uploaded on a private torrent tracker.{{cite web| url=https://arstechnica.com/news.ars/post/20070115-8622.html| title=First pirated HD DVD movie hits BitTorrent| first=Jeremy| last=Reimer| date=January 15, 2007| website=Ars Technica| access-date=June 14, 2017| archive-date=January 22, 2009| archive-url=https://web.archive.org/web/20090122112554/http://arstechnica.com/news.ars/post/20070115-8622.html| url-status=live}} The AACS LA confirmed on January 26 that the title keys on certain HD DVDs had been published without authorization.{{cite news | date = January 26, 2007 | url = http://news.bbc.co.uk/1/hi/technology/6301301.stm | title = Hi-def DVD security is bypassed | publisher = BBC | access-date = January 26, 2007 | archive-url= https://web.archive.org/web/20070203051439/http://news.bbc.co.uk/1/hi/technology/6301301.stm| archive-date= February 3, 2007 | url-status= live}}

Doom9.org forum user arnezami found and published the "09 F9" AACS processing key on February 11:

{{quote|sign=arnezami, February 11, 2007{{cite web|url=http://forum.doom9.org/showthread.php?p=952954#post952954 |title=Processing Key, Media Key and Volume ID found|access-date=May 4, 2007|date=February 11, 2007|author=arnezami|work=Doom9's Forum|archive-url=https://web.archive.org/web/20070504041039/http://forum.doom9.org/showthread.php?p=952954#post952954|archive-date= May 4, 2007|url-status= live}}|text=Nothing was hacked, cracked or even reverse-engineered btw: I only had to watch the "show" in my own memory. No debugger was used, no binaries changed.}}

This key is not specific to any playback device or DVD title. Doom9.org forum user jx6bpm claimed on March 4 to have revealed CyberLink's PowerDVD's key, and that it was the key in use by AnyDVD.{{cite web | url = http://forum.doom9.org/showthread.php?p=965425#post965425 | title = PowerDVD private key | access-date = April 9, 2007 | date = March 3, 2007 | author = jx6bpm | work = Doom9's Forums | archive-date = September 29, 2007 | archive-url = https://web.archive.org/web/20070929091537/http://forum.doom9.org/showthread.php?p=965425#post965425 | url-status = live }}

The AACS LA announced on April 16 that it had revoked the decryption keys associated with certain software high-definition DVD players, which will not be able to decrypt AACS encrypted disks mastered after April 23, without an update of the software.{{cite magazine | date = April 16, 2007 | url = http://www.infoworld.com/d/security-central/hd-dvd-blu-ray-protection-in-question-after-attacks-566 | title = HD DVD, Blu-ray protection in question after attacks | magazine = InfoWorld | access-date = November 11, 2012 | archive-date = July 1, 2024 | archive-url = https://web.archive.org/web/20240701181341/https://www.infoworld.com/article/2663010/hd-dvd--blu-ray-protection-in-question-after-attacks.html | url-status = live }}{{cite web | date = May 3, 2007 | author = Rick Merritt | publisher = EETimes | title = The real casualty in high def DVD revolt | access-date = November 11, 2012 | url = http://www.eetimes.com/electronics-news/4071352/The-real-casualty-in-high-def-DVD-revolt?pageNumber=1 | archive-date = July 1, 2024 | archive-url = https://web.archive.org/web/20240701181405/https://www.eetimes.com/The-real-casualty-in-high-def-DVD-revolt/?pageNumber=1 | url-status = live }}

On May 17, one week before any discs with the updated processing key had reached retail, claims were reported of the new keys having been retrieved from a preview disc of The Matrix Trilogy.{{cite web | date= May 17, 2007 | author = Ryan Paul| publisher = Arstechnica | title = Latest AACS revision defeated a week before release | access-date = May 17, 2007 | url = https://arstechnica.com/news.ars/post/20070517-latest-aacs-revision-defeated-a-week-before-release.html| archive-url= https://web.archive.org/web/20070519060547/http://arstechnica.com/news.ars/post/20070517-latest-aacs-revision-defeated-a-week-before-release.html| archive-date= May 19, 2007 | url-status= live}} On May 23, the key 45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2 was posted on Edward Felten's Freedom to Tinker Blog{{cite web | url = https://freedom-to-tinker.com/blog/felten/you-can-own-integer-too-get-yours-here/#comment-11798 | date = May 23, 2007 | author = BtCB | publisher = Freedom to Tinker | title = You Can Own An Integer Too | access-date = December 12, 2012 | archive-date = January 31, 2013 | archive-url = https://web.archive.org/web/20130131152118/https://freedom-to-tinker.com/blog/felten/you-can-own-integer-too-get-yours-here/#comment-11798 | url-status = live }} and confirmed a week later by arnezami on Doom9 as the new processing key (MKB v3).{{cite web| url = http://forum.doom9.org/showthread.php?p=1008940 | date = May 30, 2007 | author = arnezami | title = New Processing Key found!! (MKB v3 is now open) | work = Doom9's Forum | access-date = May 30, 2007 | archive-url= https://web.archive.org/web/20070601155540/http://forum.doom9.org/showthread.php?p=1008940#post1008940| archive-date= June 1, 2007 | url-status= live}}

DMCA notices and Digg

{{Wikinews|Digg.com suffers user revolt}}

Image:HD DVD Night Digg Frontpage before rose blog post screenshot.png

As early as April 17, 2007, AACS LA had issued DMCA violation notices, sent by Charles S. Sims of Proskauer Rose.{{cite web | url = http://www.the-trukstop.com/articles/2007/aftermath_of_digg_revolt.html | author = Davies, Greg | publisher = TheTrukstoP.com | title = The Aftermath of the Digg Revolt: What now? | access-date = May 3, 2007 | date = May 3, 2007 | archive-date = October 11, 2007 | archive-url = https://web.archive.org/web/20071011232855/http://the-trukstop.com/articles/2007/aftermath_of_digg_revolt.html | url-status = live }}{{cite web | url = http://www.chillingeffects.org/anticircumvention/notice.cgi?NoticeID=7180 | title = DMCA Takedown Notice | access-date = May 2, 2007 | date = April 17, 2007 | archive-date = May 1, 2007 | archive-url = https://archive.today/20070501142853/http://www.chillingeffects.org/anticircumvention/notice.cgi?NoticeID=7180 | url-status = dead }} Following this, dozens of notices were sent to various websites hosted in the United States.{{cite web | url = http://www.tgdaily.com/content/view/31859/97/ | title = AACS Takedowns Backfire | access-date = May 2, 2007 | date = May 1, 2007 | archive-url = https://web.archive.org/web/20070504015619/http://www.tgdaily.com/content/view/31859/97/ | archive-date = May 4, 2007 | url-status = dead | df = mdy-all }}

On May 1, 2007, in response to a DMCA demand letter, technology news site Digg began closing accounts and removing posts containing or alluding to the key. The Digg community reacted by creating a flood of posts containing the key, many using creative ways of disguising the key,{{cite web|last1=Rhysider|first1=Jack|title=Ep 16: Elijah|url=https://darknetdiaries.com/episode/16/|website=Darknet Diaries|publisher=Jack Rhysider|access-date=May 11, 2018|archive-date=May 12, 2018|archive-url=https://web.archive.org/web/20180512043714/https://darknetdiaries.com/episode/16/|url-status=live}}{{Failed verification|date=March 2024|reason=The site being linked to isn't Digg!}} by semi-directly or indirectly inserting the number, such as in song or images (either representing the digits pictorially or directly representing bytes from the key as colors) or on merchandise.{{cite web | url = http://yro.slashdot.org/article.pl?sid=07/05/02/0235228 | title = Digg.com Attempts To Suppress HD-DVD Revolt | access-date = May 2, 2007 | date = May 1, 2007 | work = Slashdot | archive-date = July 1, 2024 | archive-url = https://web.archive.org/web/20240701181350/http://yro.slashdot.org/article.pl?sid=07/05/02/0235228 | url-status = live }} At one point, Digg's "entire homepage was covered with links to the HD-DVD code or anti-Digg references."{{cite magazine|title=Digg's DRM Revolt|author=Andy Greenberg|date=May 2, 2007|magazine=Forbes|url=https://www.forbes.com/2007/05/02/digital-rights-management-tech-cx_ag_0502digg.html|url-status=live |archive-url=https://web.archive.org/web/20070504173353/http://www.forbes.com/technology/2007/05/02/digital-rights-management-tech-cx_ag_0502digg.html |archive-date=May 4, 2007}} Eventually the Digg administrators reversed their position, with founder Kevin Rose stating:

{{quote|But now, after seeing hundreds of stories and reading thousands of comments, you've made it clear. You'd rather see Digg go down fighting than bow down to a bigger company. We hear you, and effective immediately we won't delete stories or comments containing the code and will deal with whatever the consequences might be.{{cite web| url =http://blog.digg.com/?p=74 | title =Digg This: 09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0 | access-date =May 2, 2007 | author =Kevin Rose | author-link =Kevin Rose | date =May 1, 2007 | work =Digg the Blog | publisher =Digg Inc | archive-url= https://web.archive.org/web/20070504054516/http://blog.digg.com/?p=74| archive-date=May 4, 2007 | url-status= dead}}{{cite news |url=http://news.bbc.co.uk/2/hi/technology/6615047.stm |title=DVD DRM row sparks user rebellion | access-date = May 2, 2007 |date = May 2, 2007 |publisher=BBC| archive-url= https://web.archive.org/web/20070516215800/http://news.bbc.co.uk/2/hi/technology/6615047.stm| archive-date= May 16, 2007 | url-status= live}}{{cite web|title=AACS Key Censorship Leads to First Internet Riot|author=Marcus Yam|date=May 2, 2007|url=http://www.dailytech.com/aacs+key+censorship+leads+to+first+internet+riot/article7129.htm|access-date=October 29, 2008|archive-url=https://web.archive.org/web/20081006072750/http://www.dailytech.com/AACS+Key+Censorship+Leads+to+First+Internet+Riot/article7129.htm|archive-date=October 6, 2008|url-status=dead}}}}

= Legal opinions =

Lawyers and other representatives of the entertainment industry, including Michael Avery, an attorney for Toshiba Corporation, expressed surprise at Digg's decision, but suggested that a suit aimed at Digg might merely spread the information more widely.

{{quote|text=If you try to stick up for what you have a legal right to do, and you're somewhat worse off because of it, that's an interesting concept.|sign=Michael Avery, Toshiba Corp, May 3, 2007{{cite news|url=https://www.latimes.com/archives/la-xpm-2007-may-03-fi-revolt3-story.html|title=User rebellion at Digg.com unearths a can of worms|access-date = May 4, 2007|date = May 3, 2007|author=Alex Pham|author2=Joseph Menn|work=Los Angeles Times (latimes.com)}}}}

The American Bar Association's eReport published a discussion of the controversy,{{cite journal |url=http://www.abanet.org/journal/ereport/my11blog.html |archive-url=https://archive.today/20070623215230/http://www.abanet.org/journal/ereport/my11blog.html |url-status=dead |archive-date=June 23, 2007 |title=It's No Secret: Code Stirs Up a Web Storm: Lawyers question whether Web site can be forced to remove posts |date=May 11, 2007 |access-date=May 11, 2007 |journal=ABA Journal |author=Stephanie Francis Ward}} in which Eric Goldman at Santa Clara University's High Tech Law Institute noted that the illegality of putting the code up is questionable (that Section 230 of the Communications Decency Act may protect the provider when the material itself is not copyrighted), although continuing to allow posting of the key may be "risky", and entertainment lawyer Carole Handler noted that even if the material is illegal, laws such as the DMCA may prove ineffective in a practical sense.

Impact

In a response to the events occurring on Digg and the call to "Spread this number", the key was rapidly posted to thousands of pages, blogs and wikis across the Internet.{{cite web|url=http://rudd-o.com/archives/2007/04/30/spread-this-number/|title=Spread this number|access-date=May 2, 2007|date=April 30, 2007|archive-url=https://web.archive.org/web/20070502002957/http://rudd-o.com/archives/2007/04/30/spread-this-number/|archive-date=May 2, 2007|url-status=dead}}{{cite web|url=https://lists.wikimedia.org/pipermail/wikien-l/2007-May/070489.html|title=HD DVD key and the spam blacklist|access-date=May 4, 2007|date=May 2, 2007|author=Tim Starling|publisher=WikiEN-L mailing list|archive-date=June 19, 2014|archive-url=https://web.archive.org/web/20140619012935/http://lists.wikimedia.org/pipermail/wikien-l/2007-May/070489.html|url-status=live}} The reaction was an example of the Streisand effect.{{cite web|url=http://techdirt.com/articles/20070501/202154.shtml|title=AACS Discovers The Streisand Effect: The More You Try To Suppress Something, The More Attention It Gets|author=Mike Masnick|date=May 2, 2007|access-date=May 3, 2007| archive-url= https://web.archive.org/web/20070504014929/http://techdirt.com/articles/20070501/202154.shtml| archive-date= May 4, 2007 | url-status= live}}

Intellectual property lawyer Douglas J. Sorocco noted, "People are getting creative. It shows the futility of trying to stop this. Once the information is out there, cease-and-desist letters are going to infuriate this community more." Outside the Internet and the mass media, the key has appeared in or on T-shirts, poetry, songs and music videos, illustrations and other graphic artworks,{{cite news |url=https://www.wired.com/entertainment/hollywood/multimedia/2007/05/crackkdown_protest |title=Photoshop Rebels Rip Great HD DVD Clampdown |work=Wired News |date=May 3, 2007 |access-date=May 3, 2007}} tattoos and body art,{{cite web |url=https://arstechnica.com/news.ars/post/20070504-aacs-la-internet-revolt-be-damned-this-fight-is-not-over.html |title=AACS LA: Internet "revolt" be damned, this fight is not over

|work=Ars Technica |date=May 4, 2007 |access-date=May 4, 2007

| archive-url= https://web.archive.org/web/20070508220002/http://arstechnica.com/news.ars/post/20070504-aacs-la-internet-revolt-be-damned-this-fight-is-not-over.html| archive-date= May 8, 2007 | url-status= live}} and comic strips.{{cite web |url=http://www.dieselsweeties.com/archive.php?s=1744 |work=Diesel Sweeties |date=May 10, 2007 |last=Stevens |first=R. |access-date=May 10, 2007 |title=Kill Me Three Times, Shame On Rasputin| archive-url= https://web.archive.org/web/20070513024305/http://www.dieselsweeties.com/archive.php?s=1744| archive-date= May 13, 2007 | url-status= live}} The Linux kernel also incorporated a copy of the key for 17.5 years, originally added in 2007 by David Woodhouse as part of the red zone logic{{cite web|url=https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b46b8f19c9cd4|title= Increase slab redzone to 64bits|publisher=kernel.org|author=David Woodhouse}} and subsequently removed as a routine cleanup in 2024.{{cite web|url=https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4a24bbabc8|title=slab: delete useless RED_INACTIVE and RED_ACTIVE|publisher=kernel.org|author=Chengming Zhou}}

On Tuesday afternoon, May 1, 2007, a Google search for the key returned 9,410 results,{{cite web|url=http://www.darkreading.com/document.asp?doc_id=123127&WT.svl=cmpnews1_1|title=HD DVD Blu-Ray Decryption Key Widely Posted Online|access-date=May 3, 2007|date=May 2, 2007|author=Thomas Claburn|publisher=Dark Reading|work=Information Week |archive-url = https://web.archive.org/web/20070610103122/http://www.darkreading.com/document.asp?doc_id=123127&WT.svl=cmpnews1_1 |archive-date = June 10, 2007}} while the same search the next morning returned nearly 300,000 results. On Friday, the BBC reported that a search on Google shows almost 700,000 pages have published the key, despite the fact that on April 17, the AACS LA sent a DMCA notice to Google, demanding that Google stop returning any results for searches for the key.{{cite news | last = Mann | first = Justin | title = AACS LA tells Google to stop indexing hack - or else | publisher = TechSpot | date = May 1, 2007 | url = http://www.techspot.com/news/25130-aacs-la-tells-google-to-stop-indexing-hack--or-else.html | access-date = May 5, 2007| archive-url= https://web.archive.org/web/20070503104422/http://www.techspot.com/news/25130-aacs-la-tells-google-to-stop-indexing-hack--or-else.html| archive-date= May 3, 2007 | url-status= live}}{{cite web|url=http://www.chillingeffects.org/notice.cgi?sID=03218|title=AACS licensor complains of posted key|publisher=Chilling Effects|access-date=May 5, 2007|date=April 17, 2007|archive-date=May 5, 2007|archive-url=https://web.archive.org/web/20070505045801/http://www.chillingeffects.org/notice.cgi?sID=03218|url-status=live}}

Widespread news coverage{{cite web| url=https://www.cnet.com/news/unhappy-digg-users-bury-site-in-protest |title=Unhappy Digg users bury site in protest |website=CNET |first=Steven |last=Musil |date=May 2, 2007 |archive-url=https://web.archive.org/web/20110616070415/http://news.cnet.com/8301-10784_3-9714898-7.html |archive-date=June 16, 2011}}{{cite web |url=https://www.nbcnews.com/id/wbna18443904 |title=Digg reluctantly bows to user demands |date=May 2, 2007 |website=NBC News |access-date=April 17, 2020 |archive-date=July 1, 2024 |archive-url=https://web.archive.org/web/20240701181343/https://www.nbcnews.com/id/wbna18443904 |url-status=live }}{{cite web |url=https://www.foxnews.com/wires/2007May02/0,4670,TechBitDiggRebellion,00.html |title=Users rebel at user-recommendation site|agency=Associated Press |first1=Anick |last1=Jesdanun |date=May 9, 2007 |website=Fox News |archive-url=https://web.archive.org/web/20070509033240/https://www.foxnews.com/wires/2007May02/0,4670,TechBitDiggRebellion,00.html |archive-date=May 9, 2007 |url-status=dead}} included speculation on the development of user-driven websites,{{cite news|url=http://www.sfgate.com/cgi-bin/article.cgi?file=/c/a/2007/05/03/MNG4RPK18J1.DTL |title=User revolt at Digg.com shows risks of Web 2.0 |author=Verne Kopytoff |access-date=May 3, 2007 |date=May 3, 2007 |work=The San Francisco Chronicle |archive-url=https://web.archive.org/web/20070505021941/http://www.sfgate.com/cgi-bin/article.cgi?file=%2Fc%2Fa%2F2007%2F05%2F03%2FMNG4RPK18J1.DTL |archive-date=May 5, 2007 |url-status=live }} the legal liability of running a user-driven website,{{cite web|url=http://blogs.pcworld.com/staffblog/archives/004292.html|title=Mob's Win is Digg's Loss|author=Tom Spring|access-date=May 3, 2007|archive-url=https://web.archive.org/web/20070504172610/http://blogs.pcworld.com/staffblog/archives/004292.html|archive-date=May 4, 2007|url-status=dead}} the perception of acceptance of DRM,{{cite web|url=http://blogs.zdnet.com/carroll/?p=1685|title=A Digg riot and AACS|author=John Carroll|access-date=May 3, 2007|archive-url=https://web.archive.org/web/20070504084823/http://blogs.zdnet.com/carroll/?p=1685|archive-date=May 4, 2007|url-status=dead}} the failure as a business model of "secrecy based businesses ... in every aspect" in the Internet era,[https://archive.today/20070623215230/http://www.abanet.org/journal/ereport/my11blog.html It’s No Secret: Code Stirs Up a Web Storm] and the harm an industry can cause itself with harshly-perceived legal action.{{cite news| last = Dvorak | first = John C. | title= Digg's DVD-decoder fiasco: Lawyers' efforts can be counterproductive | publisher = Dow Jones MarketWatch | date = May 3, 2007}}

In an opposing move, Carter Wood of the National Association of Manufacturers said they had removed the "Digg It" link from their weblog:{{cite web|url=http://www.shopfloor.org/2007/05/03/intellectual-property-dust-up-digg/ |title=Intellectual Property Dust-Up: Digg |author=Carter Wood |date=May 3, 2007 |access-date=August 7, 2008 |url-status=dead |archive-url=https://web.archive.org/web/20090505165752/http://www.shopfloor.org/2007/05/03/intellectual-property-dust-up-digg/ |archive-date=May 5, 2009 }}

{{quote|Until the Digg community shows as much fervor in attacking intellectual piracy as attacking the companies that are legitimately defending their property, well, we do not want to be promoting the site by using the "Digg It" feature.}}

Media coverage initially avoided quoting the key itself. However, several US-based news sources have run stories containing the key, quoting its use on Digg,{{cite web|last=Buchanan |first=Matt |title=Breaking: Digg Riot in Full Effect Over Pulled HD-DVD Key Story |website=Gizmodo |date=May 2, 2007 |url=https://gizmodo.com/gadgets/geeks-will-not-be-silenced/breaking-digg-riot-in-full-effect-over-pulled-hd+dvd-key-story-256982.php |access-date=May 4, 2007 |archive-url=https://web.archive.org/web/20070504223406/http://gizmodo.com/gadgets/geeks-will-not-be-silenced/breaking-digg-riot-in-full-effect-over-pulled-hd%2Bdvd-key-story-256982.php |archive-date=May 4, 2007 |url-status=live }}{{cite news | last = Berger | first = Adam | title = HD-DVD cracked, Digg users causes an uproar | publisher = Gadgetell | date = May 2, 2007 | url = http://www.gadgetell.com/tech/comment/hd-dvd-cracked-digg-users-causes-an-uproar/ | access-date = May 4, 2007 | archive-date = January 6, 2008 | archive-url = https://web.archive.org/web/20080106121850/http://www.gadgetell.com/tech/comment/hd-dvd-cracked-digg-users-causes-an-uproar/ | url-status = dead }}{{cite news | last = Beal | first = Andy | title = Rose Hands Over Digg Control | publisher = WebProNews | date = May 2, 2007 | url = http://www.webpronews.com/blogtalk/2007/05/02/rose-hands-over-digg-control | access-date = May 4, 2007 | archive-url = https://web.archive.org/web/20070504022224/http://www.webpronews.com/blogtalk/2007/05/02/rose-hands-over-digg-control | archive-date = May 4, 2007 | url-status = dead | df = mdy-all }}{{cite news | last = Lane | first = Frederick | title = Digg This: Web 2.0, Censorship 0 | publisher = Newsfactor.com | date = May 2, 2007 | url = http://www.newsfactor.com/news/Digg-This--Web-2-0--Censorship-0/story.xhtml?story_id=0020006M7M5U | access-date = May 4, 2007 | archive-url = https://web.archive.org/web/20070509025841/http://www.newsfactor.com/news/Digg-This--Web-2-0--Censorship-0/story.xhtml?story_id=0020006M7M5U | archive-date = May 9, 2007 | url-status = dead | df = mdy-all }}{{cite magazine | last = Singel | first = Ryan | title = HD DVD Battle Stakes Digg Against Futility of DRM | magazine = Wired News | date = May 3, 2007 | url = https://www.wired.com/entertainment/hollywood/news/2007/05/digglegal | access-date = May 3, 2007 | archive-date = October 1, 2008 | archive-url = https://web.archive.org/web/20081001110509/http://www.wired.com/entertainment/hollywood/news/2007/05/digglegal? | url-status = live }}{{cite news | last = Zuckerman | first = Ethan | title = Does The Number have a lesson for human rights activists? | publisher = Worldchanging | date = May 3, 2007 | url = http://www.worldchanging.com/archives/006626.html | access-date = May 5, 2007 | archive-url = https://web.archive.org/web/20070508024819/http://www.worldchanging.com/archives/006626.html | archive-date = May 8, 2007 | url-status = dead | df = mdy-all }}

though none are known to have received DMCA notices as a result. Later reports have discussed this, quoting the key.{{cite news | last = Newitz | first = Annalee | author-link=Annalee Newitz | title = Number game | publisher = Metroactive | date = May 23–29, 2007 | url = http://www.metroactive.com/metro/05.23.07/work-0721.html | access-date = May 24, 2007 | archive-url= https://web.archive.org/web/20070608145403/http://www.metroactive.com/metro/05.23.07/work-0721.html| archive-date= June 8, 2007 | url-status= live}} Current TV broadcast the key during a Google Current story on the Digg incident on May 3, 2007, displaying it in full on screen for several seconds and placing the story on the station website.{{cite web | url=http://www.current.tv/google/GC03104 | title=Can You Digg It? | author=Conor Knighton |date = May 3, 2007 |access-date=May 5, 2007 |archive-url = https://web.archive.org/web/20070507063341/http://www.current.tv/google/GC03104 |archive-date = May 7, 2007| author-link=Conor Knighton }}

On May 1, 2007, Wikipedia locked out the page named for the number "to prevent the former secret from being posted again". The page on HD DVD was locked as well, to keep out "The Number".{{cite magazine|url=https://www.wired.com/epicenter/2007/05/wikipedia_locks/|title=Wikipedia Locks Out "The Number"|access-date=July 5, 2010|magazine=Wired|first=Paul|last=Boutin|date=May 1, 2007| archive-url= https://web.archive.org/web/20100724093713/http://www.wired.com/epicenter/2007/05/wikipedia_locks/| archive-date= July 24, 2010 | url-status= dead}} This action was later reversed. No one has been arrested or charged for finding or publishing the original key.{{Unreliable source?|date=March 2024}}

= AACS LA reaction =

On May 7, 2007, the AACS LA announced on its website that it had "requested the removal solely of illegal circumvention tools, including encryption keys, from a number of web sites", and that it had "not requested the removal or deletion of any ... discussion or commentary". The statement continued, "AACS LA is encouraged by the cooperation it has received thus far from the numerous web sites that have chosen to address their legal obligations in a responsible manner."{{cite web|url=http://www.aacsla.com/|title=Home : AACS - Advanced Access Content System|access-date=May 10, 2007|publisher=AACS LA| archive-url= https://web.archive.org/web/20080724114435/http://aacsla.com/| archive-date=July 24, 2008| url-status= live}} BBC News had earlier quoted an AACS executive saying that bloggers "crossed the line", that AACS was looking at "legal and technical tools" to confront those who published the key, and that the events involving Digg were an "interesting new twist".

See also

References

{{clear}}

{{Reflist|colwidth=30em}}