Hack Unlocks AirTunes Private Key, Allows Streaming to Any Device

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
  • ~IronMan~
    Admin
    • Nov 2006
    • 21300

    Hack Unlocks AirTunes Private Key, Allows Streaming to Any Device

    Inside the Airport Express. Photo Steve Jurvetson / Flickr


    Shairport is an open source Perl script which lets hardware and software receive AirTunes music from iTunes. Developer James Laird came up with it so his girlfriend could stream music in her new house, and has released it for any and all to use.

    Apple uses a public key encryption scheme for AirTunes streaming. This lets anyone encrypt and stream audio to the AirPort Express (or other compatible device), but iTunes would only stream to Apple devices. Now, with Shairport, iTunes can be tricked into streaming audio to anything at all.

    Laird did this by cracking open the AirPort Express (literally), dumping the ROM and then searching around for the private key. Apparently this was easy to find as Apple had hidden the private key “in the ROM image, using a scheme that made the de-obfuscation code itself stand out like a flare.” He then cracked the crypto and now has the key.

    This is combined with an ALAC (Apple Lossless Audio Codec) decoder to make a small package that can be installed on computer. It’s unlikely that hardware manufacturers will risk using this solution, but it’s easy to see how a home user could install it on an unused computer or even a Linux-based router.

    When up and running, the Shairport machine shows up as a regular AirTunes share in iTunes, or on your iPad or iPhone, and works just as you’d expect, so Laird’s girlfriend can use it just like her old AirPort Express.

    I wonder if Apple will close this hole? It seems pointless to do so, as this hack will likely only be used by intrepid hackers such as you, dear Gadget Lab reader. Still, with Apple, you never know.

    ShairPort 0.01 released [Mafipulation via Hacker News via Apple Insider]

    See Also:







    Powered By WizardRSS.com | Full Text Feed | Amazon Affiliate
    DONATE & SUPPORT US




Working...
X