09 F9: A Simple Way to Stand Up Against the Latest Assault on Digital Rights

I have a number, and therefore I am a free person. That's the message more than a million protesters across the Internet have been broadcasting throughout the month of May as they publish "09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0," the 128-bit number familiarly known as 09 F9. Why would so many people create MySpace accounts using this number, devote a Wikipedia entry to it, post it thousands of times on news-finding site Digg, share pictures of it on photo site Flickr, and emblazon it on T-shirts?

They're doing it to protest kids being threatened with jail by entertainment companies. They're doing it to protest bad art, bad business, and bad uses of good technology. They're doing it because they want to watch Spider-Man 3 on their Linux machines.

In case you don't know, 09 F9 is part of a key that unlocks the encryption codes on HD-DVD and Blu-ray DVDs. Only a handful of DVD players are authorized to play these discs, and if you don't own one of them, you can't watch Spidey in high definition -- even if you purchase the DVD lawfully and aren't doing any copying. For many in the tech community, this encryption scheme, known as the Advanced Access Content System (AACS), felt like a final slap in the face from an entertainment industry whose recording branch sues kids for downloading music and whose movie branch makes crappy sequels that you can't even watch on your good Linux computer (you guessed it -- not authorized).

When a person going by the screen name arnezami managed to uncover and publish the AACS key in February, other people immediately began reposting it. They did it because they're media consumers angry about the AACS and they wanted Hollywood and the world to know that they don't need no stinkin' authorized players. That's when the Motion Picture Association of America and the AACS Licensing Administrator (AACS LA) started sending out the cease and desist letters. Lawyers for the AACS LA argued that the number could be used to circumvent copy protection measures on DVDs and posting it was therefore a violation of the anticircumvention clauses in the Digital Millennium Copyright Act. They targeted blogs and social networks with cease and desists, even sending notice to Google that the search engine should stop returning results for people searching for the AACS key (as of this writing, Google returns nearly 1.5 million pages containing it).

While some individuals complied with the AACS LA, in many cases community sentiment was so overwhelming that it was impossible to quell the tide of hexadecimal madness. Popular news site Digg tried to take down articles containing the number, and for a while it appeased the AACS LA. But Digg is a social network whose content is determined by millions of people, and as soon as Digg staffers took down one number, it would pop up in hundreds of other places. At last Digg's founder, Kevin Rose, gave up and told the community that if Digg got sued, it'd go down fighting. Many other sites, such as Wikipedia and Wired.com, deliberately published the number in articles, daring the AACS LA to sue them. Sites like MySpace and LiveJournal are also rife with the number -- like Digg, these sites are made up entirely of user content, and it would be practically impossible for administrators to scrub the number out.

The AACS key protests have become so popular because they reach far beyond the usual debates over copyright infringement. This isn't about my right to copy movies -- it's about my right to play movies on whatever machine I want to. The AACS scheme is the perfect planned obsolescence generator. It will absolutely force people to upgrade their existing DVD players because soon they won't be authorized to play new DVDs. Even worse, the AACS scheme allows movie companies to revoke authorized status for players. Already, the AACS LA has revoked the authorized status of the WinDVD media player, so anybody who invested in WinDVD will have to reinvest in a new player -- at least, until that player's authorized status is revoked too.