Alright alright settle down. When I first heard the recording I knew people would pick up on this. I think my reaction was "ouch!"
Ashley's slip about Open source not being as secure is simply not true. Some of the best crypto in the world is open, but obviously the generated key isn't. Yes there is Open source DRM, but if we choose some open source DRM, honestly would we all be happy? Remember DRM is DRM in any form. Cheers Ian Forrester This e-mail is: [] private; [] ask first; [x] bloggable Senior Producer, BBC Backstage BC5 C3, Media Village, 201 Wood Lane, London W12 7TP email: [EMAIL PROTECTED] work: +44 (0)2080083965 mob: +44 (0)7711913293 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Sent: 31 October 2007 14:19 To: [email protected] Subject: Re: [backstage] Ashley Highfield on iPlayer - 26min Interview I have yet to recieve an answer to the BBC's false claims, why is this? The BBC claimed: > There is no open source digital right managment All I have to do to prove this false, is to demonstrate that 1 Open Source DRM solution exists. You must therefore disprove that all the following exist: http://www.sidespace.com/products/medias/ https://dream.dev.java.net/ http://sourceforge.net/projects/openipmp The BBC: > If you have digital rights managment how can you then have it open > source, if it's open source people will be able to find out how it works and > get round it. How does that differ from your proprietary solution? I have presented basic security proof that making code proprietary is not capable of securing the algorithm. Tell me Mr Highfield, do you ever use Chip and PIN? If so why? You said if people know how something works they can "get round" the security, and yet EMV publish the specifications and I can't charge money to other peoples card. I have asked the BBC to explain this and yet you refuse. Why? There are also ways of deploying a more secure system using openly specified protocols which would allow it to run platform neutral (didn't the trust order you to do that, what is the penalty for failing to comply with orders from regulators? Will someone end up in jail?) Either justify your claims so the security community can examine them and if necessary point out the flaws in them. Or offer a full public apology and remove the person who allowed these untruths to be broadcast from the BBC. And then perhaps you could provide the real reason you won't use an open scheme. And yet BBC staff seem to think that long debates about "copyright" are significantly more worthwhile than explaining claims which contradict some of the most profound security experts around. Andy -- Computers are like air conditioners. Both stop working, if you open windows. -- Adam Heath - Sent via the backstage.bbc.co.uk discussion group. To unsubscribe, please visit http://backstage.bbc.co.uk/archives/2005/01/mailing_list.html. Unofficial list archive: http://www.mail-archive.com/[email protected]/ - Sent via the backstage.bbc.co.uk discussion group. To unsubscribe, please visit http://backstage.bbc.co.uk/archives/2005/01/mailing_list.html. Unofficial list archive: http://www.mail-archive.com/[email protected]/

