|
|
Author
|
Topic: root pasword Doremi DCP2000
|
|
|
|
Scott Norwood
Film God
![](http://www.film-tech.com/ubbmembers/30f.jpg)
Posts: 8146
From: Boston, MA. USA (1774.21 miles northeast of Dallas)
Registered: Jun 99
|
posted 07-03-2012 11:28 PM
Obviously, this is Brad's forum and he can do as he pleases.
That said, I am of two minds on this topic:
I can completely understand that manufacturers withhold some information from the "general public" and make it available on a "need to know" basis; we should respect this and not post anything that might encourage unqualified people to cause serious harm to the equipment. It is in no one's interest to do things that might result in lost shows or anything else that would give the industry a bad reputation.
Still, I absolutely cannot stand the secrecy and paranoia that is associated with D-cinema. I strongly believe that the installation manuals should include all of the information that is necessary to install and repair the equipment, which (as far as I know), none of them does (just try finding marriage passwords anywhere). The owner of the equipment should be entitled to receive this information, and the fact that this does not happen is a travesty. I could accept the idea that "using this password voids your warranty" or something along those lines, but withholding it completely is shameful.
My inclination at this point is that we should err on respecting the manufacturers' wishes for the good of the industry, but that opinion may change at some point. The secrecy issue is more of a DCI problem than a manufacturer problem, anyway.
| IP: Logged
|
|
|
Brad Miller
Administrator
![](http://www.film-tech.com/ubbmembers/02a.jpg)
Posts: 17775
From: Plano, TX (36.2 miles NW of Rockwall)
Registered: May 99
|
posted 07-04-2012 01:33 AM
Monte, you sure are wrong about a lot of stuff lately.
There is no set policy against posting passwords. It's just common sense not to. Anyone who has legitimate training to work on a piece of equipment already knows the passwords or can easily request them from the manufacturer.
I don't know Cristian's level of experience or what his need for the root password is, but he should be able to email Doremi, identify himself, explain why he needs it and receive the root password from them if there is a reason for him to have it.
The whole DCI security thing is quite the ridiculous waste of time though. Just look at marriage.
Scenario #1 Some idiot wants to poke around inside a projector, either for the "cool factor" to try and see how it works, or he is an evildoer and is trying to figure out how to copy the movie. Without him knowing the marriage password, he simply breaks the machine from being able to play back. At the end of the day, this idiot wouldn't have the technical knowledge on how to tap into the system anyway!
Scenario #2 A highly experienced technician who just can't wait for the latest Madea movie to hit bluray cracks the system open to tie in for a copy. Ummmm, duh...anyone with this level of knowledge knows the damn marriage password anyway!
Scenario #3 Whoever (idiot or technician) just points a friggin' camera at the screen. Since there is no mechanical shutter in a DLP projector, flicker isn't even a concern.
Now how did DCI security actually make ANY difference in the above?
| IP: Logged
|
|
|
|
|
|
|
Olivier Lemaire
Expert Film Handler
Posts: 118
From: Paris, Ile de France, France
Registered: Jan 2010
|
posted 07-05-2012 02:46 PM
Dave, Rick: On a DCI machine, having the "root" password (or "Administrator" if running MS Windows), should not lead to the capability of deciphering encrypted assets -> the Security Manager is FIPSed and the machine must prevents this kind of trick. Even physical access to the machine should not lead to such a security breakage. If you can demonstrate that with the root password, you can decipher an encrypted essence, you should report it to the manufacturer and/or the company that did certified this machine as DCI... they will probably recruit you pretty quickly (and have this kind of security flaw fixed urgently...).
Dave: Getting the root password (or "Administrator") of a given machine you've got physical access in is pretty piece of cake for any geek out there - no matter the brand. At maximum, it will require time for a password cracker... not that much considering GPU power of a 300 USD video card nowadays. This is anyway not the point of DCI security: the point is to protect the asset, not the machine.
All that said, having the "root" (or "Administrator") access, anyone can wreak the machine pretty easily - that could be posing an issue for maintenance contracts with integrators. But, it is needed for some specific operations (mostly maintenance). If you are in charge of such operations, you should ask for it at support@doremicinema.com
Surely it's not a good idea, regarding general susceptibility, to publish the default password on a public forum, but one must admit that it is already done on some other countries... And some others will add that there is no security thru obscurity anyway
On some manufacturer documentations, the default root password still exist: just forage docs publicly available at manufacturer website and in less than 30mn. On these docs, you'll see too that they recommend to change this password if you want to be the only guy to be able to take care of the unit maintenance.
| IP: Logged
|
|
|
|
All times are Central (GMT -6:00)
|
|
Powered by Infopop Corporation
UBB.classicTM
6.3.1.2
The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion
and agrees to release the authors from any and all liability.
|