ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Fixed BBC iPlayer hacked again

Tom Espiner ZDNet.co.uk

Published: 14 Mar 2008 17:00 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Just hours after the BBC said it had fixed the iPlayer streamed TV service to prevent DRM-free file downloads, a London-based programmer has bypassed the new protection.

Paul Battley, a developer for crowd-sourced reviews site Reevoo, wrote on his blog on Thursday that he had "defeated" the fixed iPlayer code.

"BBC News proudly announced the BBC's victory over those of us who had figured out how to download their iPhone iPlayer streams," wrote Battley. "I am happy to announce that I've defeated them once again!"

Speaking to ZDNet.co.uk on Friday, Battley said that he had asked a colleague to use an iPod Touch, combined with a debugging proxy, to watch communications made by a legitimate iPlayer access. Battley then used plug-in requests to look through the Javascript to work out the changes that had been made to the iPlayer code. He then rewrote his own original Ruby iPlayer interface "hack" code.

Read this

Feature
Special report: The top five internal security threats

What should an employer watch out for?

Read more +

"I did it mostly for entertainment and for the challenge of doing it," said Battley. "Also, I'm a Linux user, and the BBC iPlayer originally was only for Windows — I felt a bit alienated. The BBC released the iPhone version of iPlayer, and there's no Linux support."

Battley added that one version of iPlayer does stream to devices that can use Flash Player, and that Flash does work on x86 versions of Linux. However, unhacked versions of the iPhone don't have Flash capabilities.

The iPlayer hack released on Thursday can run on Linux, Windows and Mac operating systems, Battley claimed, and circumvents Windows-based digital rights management. Legitimate iPlayer downloads expire after a fixed time-period of 30 days on a PC. In a test on a Ubuntu desktop PC, ZDNet.co.uk confirmed that Battley's program works as claimed, successfully downloading an unencumbered copy of the TV programme 10 Days To War — These Things Are Always Chaos and playing it on the non-Windows DRM-compliant VLC video client.

The BBC had not responded to a request for comment at the time of writing. However, in its story announcing that the iPlayer had been fixed, the BBC stated that it expected people to hack the iPlayer again.

"The BBC admitted that it was most likely facing a cat-and-mouse game with hackers intent on circumventing copy protection," said the BBC story. "It's an ongoing, constant process and one which we will continue to monitor," said the corporation in a statement.

Thanks to reader dogStar for alerting ZDNet.co.uk

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
26 out of 29 people found this useful



Company/Topic Alerts

Create a new alert from the list below:





Related Jobs

Web Developer, Stafford 20,000-30,000

The company has an impressive list if clients including Ministry of Sound and the BBC and are renown to be pioneers within the media industry. A ...

Senior Web Developer in Stafford area 26,000-32,000

Specialising in bespoke implementations in the music and educational markets, they boast an impressive list of clients including Ministry of Sound ...

S48892: SAP Specialist - 3rd Line Support

Monitor vendors release notes and plan necessary upgrades and patches as required. Monitor and test system backups. SAP Specialist - 3rd Line Support ...

Sentry Posts Blog

Mobile Linux Better For Mobile Busines...

Mobile Linux Better For Mobile Business Apps? Author: Eric Everson, MyMobiSafe.com As mobile Linux is carving it’s footprint on the future of mobile application development, the... More

Post a comment

DWP downplays security breach

The Department for Work and Pensions (DWP) has admitted that some of its staff have been forwarding passwords with password protected material. An email that was leaked on the 'Dizzy... More

Post a comment

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation