Did BN change DRM scheme AGAIN?

[ownedbycats]

Originally Posted by Renate

And there are no new directories anywhere?
And the count of files is exactly two different? (dir /s)

Then it's an outage. Their authorization infrastructure bit it.

I know nobody said anything about libraries/OverDrive, but that checks out ok.

Are there any free books available now through B&N (with DRM)?

$0.99 is too rich for my blood.

There's a whole section for free books - I think this one was one of the weekend freebies.

[issybird]

I have a $20 BN gift card and it seems I waited too long. I have only myself to blame. I have the Nook app on my Windows 11 computer and I thought I had time.

[ownedbycats]

Originally Posted by issybird

I have a $20 BN gift card and it seems I waited too long. I have only myself to blame. I have the Nook app on my Windows 11 computer and I thought I had time.

Splurge on a physical book, perhaps? At least until they figure out a way to DRM those.

[issybird]

Originally Posted by ownedbycats

Splurge on a physical book, perhaps? At least until they figure out a way to DRM those.

Or gift wrap or greeting cards or sumthin. It can be used. Just the same, I’m hoping they’ll crack the DRM one more time and then I’ll leap on it. But as you say, the gift card can be used. It would have been nice to treat myself to a wishlist book that’s never gone on sale, but as I said, I have only myself to blame. I’m in wait and see mode.

[Renate]

Hey ownedbycats

Your new book is just a train wreck.
It has "compression" on encrypted files.
The order of everything is different and sizes of things are different.

Are there other books with a problem or is this a one off?
Or is it "creation on the fly" that is broken?

Wow, what a cumbersome way to run a business.
They are "processing" my order.

How the heck do you download???

Even for free I spent too much.

[ownedbycats]

I used the Windows Nook app - unfortunately it's no longer available, but I had it already installed and it still worked. It downloads a book somewhere 50 subfolders into one of the appdata folders.

[Renate]

Originally Posted by ownedbycats

I used the Windows Nook app - unfortunately it's no longer available...

Lol! Bite me, B&N.

We're sorry, but the ability to sideload NOOK purchased content has been discontinued. We apologize for any inconvenience.

—NOOK Customer Care (@NOOK_Care) September 17, 2014

I guess that I'm just a decade too late.

I guess that screwing up the DRM is just their way of putting a nail in the coffin.

[ownedbycats]

Honestly, them killing off the Nook app probably should've been a warning sign that something like this would happen - assuming its not just some outage or whatever.

[Renate]

Or maybe your Windows app is stripping the rights so as to allow you only to save non-DRM files?
That would jive with everything (attempted to) compress.

Did it update itself recently?

[ownedbycats]

I haven't noticed any update. I failed to mention that it error'd the first time I tried to download the book but the second time worked.

[Renate]

Hmm, you need WireShark to see what it was asking of B&N.

[GeorgeYellow]

I stand corrected. There is a difference.

Old titles, in their rights.xml have

<encryptedKey keyInfo=\"passHash\">XXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX</encryptedKey>

New titles:

<encryptedKey>XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXX</encryptedKey>

This seems to be a new change to downloaded books. The tools should fail to extract a book key, since the key is no longer encrypted using the per-user key and the padding will be incorrect.

[Renate]

Originally Posted by GeorgeYellow

This seems to be a new change to downloaded books.

I'm not saying that you're wrong, but how do you know that they just didn't drop (intentionally or otherwise) the XML attribute keyInfo="passHash" ?

Have you tried just writing that in?

[GeorgeYellow]

Originally Posted by Renate

I'm not saying that you're wrong, but how do you know that they just didn't drop (intentionally or otherwise) the XML attribute keyInfo="passHash" ?

Have you tried just writing that in?

The point is that indicates a new key encryption.

The "passHash" encryption is publicly documented, and is rather simple.
It's AES-CBC-128, and the key is the first 16 bytes of the 20 byte base64-decoded 'cchashdata', with an IV of all 0's.

The new 'rights.xml' keys cannot not be decrypted with this key.

[ownedbycats]

Odd that I didn't get a rights.xml at all. The only thing I can think of is that I'm in Canada - considering that I had to use a workaround to access the app in the first place.