Alright alright settle down.

When I first heard the recording I knew people would pick up on this. I think 
my reaction was "ouch!"

Ashley's slip about Open source not being as secure is simply not true. Some of 
the best crypto in the world is open, but obviously the generated key isn't.

Yes there is Open source DRM, but if we choose some open source DRM, honestly 
would we all be happy? Remember DRM is DRM in any form.

Cheers

Ian Forrester

This e-mail is: [] private; [] ask first; [x] bloggable

Senior Producer, BBC Backstage
BC5 C3, Media Village, 201 Wood Lane, London W12 7TP
email: [EMAIL PROTECTED]
work: +44 (0)2080083965
mob: +44 (0)7711913293
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Sent: 31 October 2007 14:19
To: [email protected]
Subject: Re: [backstage] Ashley Highfield on iPlayer - 26min Interview

I have yet to recieve an answer to the BBC's false claims, why is this?

The BBC claimed:
> There is no open source digital right managment

All I have to do to prove this false, is to demonstrate that 1 Open Source DRM 
solution exists.
You must therefore disprove that all the following exist:
http://www.sidespace.com/products/medias/
https://dream.dev.java.net/
http://sourceforge.net/projects/openipmp

The BBC:
> If you have digital rights managment how can you then have it open 
> source, if it's open source people will be able to find out how it works and 
> get round it.

How does that differ from your proprietary solution?
I have presented basic security proof that making code proprietary is not 
capable of securing the algorithm.

Tell me Mr Highfield, do you ever use Chip and PIN?
If so why?
You said if people know how something works they can "get round" the security, 
and yet EMV publish the specifications and I can't charge money to other 
peoples card.

I have asked the BBC to explain this and yet you refuse. Why?

There are also ways of deploying a more secure system using openly specified 
protocols which would allow it to run platform neutral (didn't the trust order 
you to do that, what is the penalty for failing to comply with orders from 
regulators? Will someone end up in
jail?)

Either justify your claims so the security community can examine them and if 
necessary point out the flaws in them. Or offer a full public apology and 
remove the person who allowed these untruths to be broadcast from the BBC. And 
then perhaps you could provide the real reason you won't use an open scheme.

And yet BBC staff seem to think that long debates about "copyright"
are significantly more worthwhile than explaining claims which contradict some 
of the most profound security experts around.

Andy

--
Computers are like air conditioners.  Both stop working, if you open windows.
                -- Adam Heath
-
Sent via the backstage.bbc.co.uk discussion group.  To unsubscribe, please 
visit http://backstage.bbc.co.uk/archives/2005/01/mailing_list.html.  
Unofficial list archive: http://www.mail-archive.com/[email protected]/

-
Sent via the backstage.bbc.co.uk discussion group.  To unsubscribe, please 
visit http://backstage.bbc.co.uk/archives/2005/01/mailing_list.html.  
Unofficial list archive: http://www.mail-archive.com/[email protected]/

Reply via email to