topic Re: Blu-Ray Finalize Vulnerability? in Governance, Risk, Compliance

Blu-Ray Finalize Vulnerability?

ghawkguy — Tue, 16 Feb 2021 18:06:05 GMT

I work for a large Defense Contractor and we require closed and closely monitored media. Much of the data we use comes to us on Blu-Ray discs that are scanned/finalized and approved to be in a classified space. We just received word from our Program Security that there is some sort of vulnerability where Blu-Ray discs cannot be closed/finalized, so we are to put a hard-stop on using them. Does anyone have information on this? I haven't been able to find anything...yet.

Re: Blu-Ray Finalize Vulnerability?

jenny24 — Wed, 17 Feb 2021 05:53:44 GMT

The Advanced Access Content System (AACS) is a standard for content distribution and digital ... On Blu-ray discs, the Volume ID is stored in the BD-ROM Mark. ... On 5 June 2009, the licensing agreements for AACS were finalized, which were ... The AACS key extractions highlight the inherent weakness in any DRM system

Re: Blu-Ray Finalize Vulnerability?

AppDefects — Thu, 18 Feb 2021 02:38:59 GMT

The fact they CAN'T be finalized is what makes them rewritable! I found a great article here on dealing with "unfinalized vs closing" disks.