View Single Post
Old 06-05-2008, 09:04 AM   #7
Nate the great
Sir Penguin of Edinburgh
Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.Nate the great ought to be getting tired of karma fortunes by now.
 
Nate the great's Avatar
 
Posts: 12,375
Karma: 23555235
Join Date: Apr 2007
Location: DC Metro area
Device: Shake a stick plus 1
Quote:
Originally Posted by Roady View Post
As far as I understood, each DRMed Mobipocket file is encrypted with a unique media key.

This media key is then encrypted for each authorized device with a secret device key that is derived from the PID.

INTERNAL_READER_KEY is basically all you need to derive the device key from the PID if I read drmmobi correctly.

Therefore I don't understand that all the mobipocket generators (not only the one they removed) have this value in clear without protection. The Linux software even had all the debugging information including naming of these variables and of the function that use them.
Really? Damn, I wish I'd gotten a copy when it was available.
Nate the great is offline   Reply With Quote