News

DVD Security Group Says It Fixed Flaws

The group behind security measures for next-generation DVDs said Monday it has fixed a leak that allowed hackers to discover the keys for unlocking movies on HD DVD and Blu-ray discs.

Makers of software for playing the discs on computers will offer patches containing new keys and closing the hole that allowed observant hackers to discover ways to strip high-def DVDs of their protection.

Digital rights management protection, or DRM, is intended to prevent copying of the movies. Hackers working late last year and early this year were able to observe computer code found on the PC-based DVD players and discover keys that unlock protections on all high-def discs, so copies could be made.

On Monday, the group that developed the Advanced Access Content System said it had worked with device makers to deactivate those keys and refresh them with a new set.

Companies such as Corel Corp., which owns InterVideo, makers of a popular PC-based playback software, will also distribute more secure versions, said Michael Ayers, chairman of the AACS License Administrator.

"The device keys associated with the InterVideo player are being deactivated and InterVideo has updated its player," Ayers said. "They are taking steps that block off access to the inner workings of the application."

New high-def DVDs will include updated keys and instructions for older versions of the PC-playback software not to play discs until the software patch has been installed.

Corel has told users of its software that failure to download the free patch will disable the ability to play high-def DVDs.

Stand-alone DVD players, such as the Toshiba HD DVD player and the Sony Blu-ray player, are not affected by Monday's announcement. So far, no problems have been found with their security.

Ayers said future assaults by hackers can be similarly fixed by replacing compromised keys with new ones.

"AACS is a high-profile technology and is protecting high-profile content, so we fully expect there will be future attempts," Ayers said.

Featured

  • Microsoft Offers Support Extensions for Exchange 2016 and 2019

    Microsoft has introduced a paid Extended Security Update (ESU) program for on-premises Exchange Server 2016 and 2019, offering a crucial safety cushion as both versions near their Oct. 14, 2025 end-of-support date.

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Notebook

    Microsoft Centers AI, Security and Partner Dogfooding at MCAPS

    Microsoft's second annual MCAPS for Partners event took place Tuesday, delivering a volley of updates and directives for its partners for fiscal 2026.

  • Microsoft Layoffs: AI Is the Obvious Elephant in the Room

    As Microsoft doubles down on an $80 billion bet on AI this fiscal year, its workforce reductions are drawing scrutiny over whether AI's ascent is quietly reshaping its human capital strategy, even as official messaging avoids drawing a direct line.