Saturday, July 14, 2007

Vista content protection

Windows Vista (formerly codenamed Longhorn) has many new features compared with previous Microsoft Windows versions, covering most aspects of the operating system.

This article discusses the changes most likely to be of interest to non-technical users. The companion article, Technical features new to Windows Vista, discusses the technical advancements in Windows Vista, while the article Security and safety features new to Windows Vista discusses the security advancements. The article Management features new to Windows Vista discusses the management and administrative improvements, which may be of interest to IT professionals.The Vista Content Protection specification could very well constitute the longest suicide note in history.

Peter has drawn on a heap of sources (both public and private) to work out the implications of Microsoft wanting to make the content providers dreams come true and going to extreme lengths to try and stop a few people tampering with “premium content”. The results are going to be more unreliable systems with large processing overheads and less functionality.

Since S/PDIF doesn’t provide any content protection, Vista requires that it be disabled when playing protected content. In other words if you’ve invested a pile of money into a high-end audio setup fed from a digital output, you won’t be able to use it with protected content. Similarly, component (YPbPr) video will be disabled by Vista’s content protection, so the same applies to a high-end video setup fed from component video.

Echo cancellation will be another victim of Vista as the required feedback system will not be permitted, instead it’ll degrade the quality to stop the potential for capturing “premium content” and the legitimate users will just have to cope. This sort of audio and video degradation will occur whenever the system believes it is playing “premium content”, even if you’re doing something else important:

What makes this particularly entertaining is the fact that the downgrading/disabling is dynamic, so if the premium-content signal is intermittent or varies (for example music that fades out), various outputs and output quality will fade in and out, or turn on and off, in sync. Normally this behaviour would be a trigger for reinstalling device drivers or even a warranty return of the affected hardware, but in this case it’s just a signal that everything is functioning as intended.

It appears the user will have no control over this, if someone manages to introduce something that Vista believes is “premium content” (and we all know how bad Microsoft are at getting things right) then the constrictors will kick in, downgrading the signal and then upgrading it to the required spec but with loss in quality. This pretty much rules Vista out for use in hospital imaging systems, astronomy or anywhere else where lossy compression is verboten. This is going to be a nightmare for the hardware vendors:

Amusingly, the Vista content protection docs say that it’ll be left to graphics chip manufacturers to differentiate their product based on (deliberately degraded) video quality. This seems a bit like breaking the legs of Olympic athletes and then rating them based on how fast they can hobble on crutches.

This is also going to have serious ramifications for developers of drivers for open source operating systems like Linux, FreeBSD, etc as Vista will introduce a requirement called Hardware Functionality Scan (HFS for short) where the driver interrogates a device and gets it to attest it is legitimate (and not a software phantom). This, of course, is being done through security through obscurity and, as Peter says:

In order for this to work, the spec requires that the operational details of the device be kept confidential. Obviously anyone who knows enough about the workings of a device to operate it and to write a third-party driver for it (for example one for an open-source OS, or in general just any non-Windows OS) will also know enough to fake the HFS process. The only way to protect the HFS process therefore is to not release any technical details on the device beyond a minimum required for web site reviews and comparison with other products.

In return the hardware will be monitored for odd things happening (unexpected voltage changes, etc) and the drive can set so called “tilt switches” to let the O/S know that something bad might be happening, which will be real fun for Vista users when the virus writers figure out how to trip these from software. The hardware is also going to have to support video decompression as the CPU won’t be allowed to do that due to its vulnerable nature, which is going to constrain the codecs that “premium content” will use. This is already an issue:

This is particularly troubling for the high-quality digital cinema (D-Cinema) specification, which uses Motion JPEG2000 (MJ2K) because standard MPEG and equivalents don’t provide sufficient image quality. Since JPEG2000 uses wavelet-based compression rather than MPEG’s DCT-based compression, and wavelet-based compression isn’t on the hardware codec list, it’s not possible to play back D-Cinema premium content (the moribund Ogg Tarkin codec also used wavelet-based compression). Because *all* D-Cinema content will (presumably) be premium content, the result is no playback at all until the hardware support appears in PCs at some indeterminate point in the future.

So this will stifle the innovation in video codecs, no hardware support then no undegraded playback. This will probably rule out the use of Vista for high-def Access Grid videoconferencing. Add in on top of all this the requirements to support hardware encryption between components and all the patent licenses that are needed for this and you’ve got a recipe for disaster.

For those of us lucky enough to not be under the thumb of the Redmond monopoly this will either mean a ramp up in hardware costs across the board, or (less likely) the hardware vendors will start to sell two streams of hardware, one “Vista Certified” and costing more and another which isn’t and costs less (possibly being older hardware predating these crazy requirements).

The appearance of Windows Explorer has changed since Windows XP.

End-user features
The appearance of Windows Explorer has changed since Windows XP.
The appearance of Windows Explorer has changed since Windows XP.

* Windows Aero: The new hardware-based graphical user interface, named Windows Aero – an acronym for Authentic, Energetic, Reflective, and Open. The new interface is intended to be cleaner and more aesthetically pleasing than those of previous Windows, including new transparencies, live thumbnails, live icons, animations, and eye candy.
* Windows Shell: The new Windows shell is significantly different from Windows XP, offering a new range of organization, navigation, and search capabilities. Windows Explorer's task panel has been removed, integrating the relevant task options into the toolbar. A "Favorite links" panel has been added, enabling one-click access to common directories. The address bar has been replaced with a breadcrumb navigation system. The preview panel allows users to see thumbnails of various files and view the contents of documents. The details panel shows information such as file size and type, and allows viewing and editing of embedded tags in supported file formats. The Start menu has changed as well; it no longer uses ever-expanding boxes when navigating through Programs. The word "Start" itself has been removed in favor of a blue Windows Orb (also called "Pearl").
* Instant Search (also known as search as you type) : Windows Vista features a new way of searching called Instant Search, which is significantly faster and more in-depth (content-based) than the search features found in any of the previous versions of Windows.
* Windows Sidebar: A transparent panel anchored to the side of the screen where a user can place Desktop Gadgets, which are small applets designed for a specialized purpose (such as displaying the weather or sports scores). Gadgets can also be placed on other parts of the desktop.
* Windows Internet Explorer 7: New user interface, tabbed browsing, RSS, a search box, improved printing,[12] Page Zoom, Quick Tabs (thumbnails of all open tabs) , Anti-Phishing filter, a number of new security protection features, Internationalized Domain Name support (IDN) , and improved web standards support. IE7 in Windows Vista runs in isolation from other applications in the operating system (protected mode) ; exploits and malicious software are restricted from writing to any location beyond Temporary Internet Files without explicit user consent.

Windows Media Player 11
Windows Media Player 11

* Windows Media Player 11, a major revamp of Microsoft's program for playing and organizing music and video. New features in this version include word wheeling (or "search as you type") , a new GUI for the media library, photo display and organization, the ability to share music libraries over a network with other Vista machines, Xbox 360 integration, and support for other Media Center Extenders.
* Backup and Restore Center: Includes a backup and restore application that gives users the ability to schedule periodic backups of files on their computer, as well as recovery from previous backups. Backups are incremental, storing only the changes each time, minimizing the disk usage. It also features Complete PC Backup (available only in Ultimate, Business, and Enterprise versions) which backs up an entire computer as an image onto a hard disk or DVD. Complete PC Backup can automatically recreate a machine setup onto new hardware or hard disk in case of any hardware failures. Complete PC Restore can be initiated from within Windows Vista, or from the Windows Vista installation CD in the event the PC is so corrupt that it cannot start up normally from the hard disk.
* Windows Mail: A replacement for Outlook Express that includes a new mail store that improves stability,[13] and features integrated Instant Search. It has the Phishing Filter like IE7 and Junk mail filtering that is enhanced through regular updates via Windows Update.[14]
* Windows Calendar is a new calendar and task application.
* Windows Photo Gallery, a photo and movie library management application. WPG can import from digital cameras, tag and rate individual items, adjust colors and exposure, create and display slideshows (with pan and fade effects) , and burn slideshows to DVD.
* Windows DVD Maker, a companion program to Windows Movie Maker that provides the ability to create video DVDs based on a user's content. Users can design a DVD with title, menu, video, soundtrack, pan and zoom motion effects on pictures or slides.
* Windows Media Center, which was previously exclusively bundled as a separate version of Windows XP, known as Windows XP Media Center Edition, has been incorporated into the Home Premium and Ultimate editions of Windows Vista.
* Games and Games Explorer: Games included with Windows have been modified to showcase Vista's graphics capabilities. New games are Chess Titans, Mahjong Titans and Purble Place. A new Games Explorer special folder holds shortcuts and information to all games on the user's computer.

Windows Mobility Center.
Windows Mobility Center.

* Windows Mobility Center is a control panel that centralizes the most relevant information related to mobile computing (brightness, sound, battery level / power scheme selection, wireless network, screen orientation, presentation settings, etc.).
* Windows Meeting Space replaces NetMeeting. Users can share applications (or their entire desktop) with other users on the local network, or over the Internet using peer-to-peer technology (higher versions than Starter and Home Basic can take advantage of hosting capabilities, limiting previous to "join" mode only)
* Shadow Copy automatically creates daily backup copies of files and folders. Users can also create "shadow copies" by setting a System Protection Point using the System Protection tab in the System control panel. The user can be presented multiple versions of a file throughout a limited history and be allowed to restore, delete, or copy those versions. This feature is available only in the Business, Enterprise, and Ultimate editions of Windows Vista and is inherited from Windows Server 2003.[15]

Windows Update with Windows Ultimate Extras
Windows Update with Windows Ultimate Extras

* Windows Update: Software and security updates have been simplified,[16] now operating solely via a control panel instead of as a web application. Windows Mail's spam filter and Windows Defender's definitions are updated automatically via Windows Update. Users that choose the recommended setting for Automatic Updates will have the latest drivers installed and available when they add a new device.
* Parental controls: Allows administrators to control which websites, programs, and games each standard user can use and install. This feature is not included in the Business or Enterprise editions of Vista.
* Windows SideShow: Enables the auxiliary displays on newer laptops or on supported Windows Mobile devices. It is meant to be used to display device gadgets while the computer is on or off.
* Speech recognition is integrated into Vista.[17] It features a redesigned user interface and configurable command-and-control commands. Unlike the Office 2003 version, which works only in Office and WordPad, Speech Recognition in Windows Vista works for any accessible application. In addition, it currently supports several languages: British and American English, Spanish, French, German, Chinese (Traditional and Simplified) , and Japanese.
* New fonts, including several designed for screen reading, and improved Chinese (Yahei, JhengHei) , Japanese (Meiryo) and Korean (Malgun) fonts. See . ClearType has also been enhanced and enabled by default.
* Problem Reports and Solutions, a control panel which allows users to view previously sent problems and any solutions or additional information that is available.
* Improved audio controls allow the system-wide volume or volume of individual audio devices and even individual applications to be controlled separately. New audio functionalities such as Room Correction, Bass Management, Speaker Fill and Headphone virtualization have also been incorporated.
* Windows System Assessment Tool is a tool used to benchmark system performance. Software such as games can retrieve this rating and modify its own behavior at runtime to improve performance. The benchmark tests CPU, RAM, 2-D and 3-D graphics acceleration, Graphics Memory and Hard disk space.[18][19]
* Windows Ultimate Extras: The Ultimate Edition of Windows Vista provides access to extra games and tools, available through Windows Update. This replaces the Microsoft Plus! software bundle that was sold alongside prior versions of Windows.
* Disk Management: A utility to modify hard disk drive partitions, including shrinking, creating and formatting new partitions.
* Performance Diagnostic Console includes various tools for tuning and monitoring system performance and resources activities of CPU, disks, network, memory and other resources. It shows the operations on files, the opened connections, etc.