3 ms·
Catch-22. Credibility is less because it was posted anonymously as a dump of hex to paste-bin, therefore eliminating any authority that would come if this pers
by reduxredacted 16y ago
Catch-22.
Credibility is less because it was posted anonymously as a dump of hex to paste-bin, therefore eliminating any authority that would come if this person was a well-known security researcher. If the author had credibility and wanted to use his/her reputation to make the post more credible, he'd have the pleasure of a herd of lawyers and law enforcement at his door, assuming that he lives in a country with anti-circumvention laws. So his only choice is to keep it to himself or post anonymously, taking away any credibility that comes with authority in a subject.
Regardless, someone will test this soon enough and determine if this non-credible post is credible or just a creative bunch of social engineering. That it's garnered this much attention this quickly (take a look at your major social news sites ... and tech blogs) should scare industry insiders. The mere HOPE that some random posting on pastebin would topple HDCP and bring a possible end to device interoperability would get this much attention truly highlights what a dismal mess HDCP is. If it's The Real Thing(tm), we'll know when the master key is used to generate a random device key and 80% of the time the signal is decrypted properly without having to turn both devices off and back on.
And if it is true, I hope our friend that posted it took some pretty serious precautions to protect his own anonymity.