In February 2007, a hacker using the handle arnezami posted on the Doom9 multimedia forum with a thread titled "Processing Key, Media Key and Volume ID found!!!" The discovery was methodical: HD-DVD playback software had to load the decryption key into RAM to play discs, so arnezami identified the relevant memory region, dumped it to disk, and read the hexadecimal string right out of the memory dump6. The key appeared in sample code shared on the forum as a simple C array: `{0x09,0xF9,0x11,0x02,0x9D,0x74,0xE3,0x5B,0xD8,0x41,0x56,0xC5,0x63,0x56,0x88,0xC0}`1.

Arnezami noted that the processing key worked on the very first c-value out of 512 available, remarking that "someone at the mastering facility was very lazy"1. Another forum member, evdberg, built a working program implementing the technique and confirmed it functioned perfectly1. The discovery built on existing knowledge. Arnezami stated he started the thread "knowing AnyDVD had already done it," referring to the commercial software AnyDVD HD by SlySoft, though the exact method AnyDVD used was still debated1.

The 09-F9 incident was one of the internet's first large-scale demonstrations that censoring digital information by legal threat could backfire catastrophically. The Digg Revolt specifically showed that user communities could overpower platform moderation when sufficiently motivated3.

The Free Speech Flag entered popular culture as a recognized protest symbol. Marcotte's design was studied in academic contexts, with Penn State's Antonio Ceraso analyzing it as evidence of "communal ethos" formation online3. The flag raised genuine legal questions about whether encoding a cryptographic key as colors could constitute a circumvention device under the DMCA3.

The AACS LA's cease-and-desist campaign, preserved in the Chilling Effects database, became a reference point for digital rights organizations discussing the overreach of the DMCA's anti-circumvention provisions5. The irony that publishing a number could be construed as distributing a "technology, product, service, device, component, or part thereof" was not lost on legal commentators5.

The incident also foreshadowed ongoing tensions between platform operators and their user bases. Kevin Rose's reversal on Digg set an early precedent for tech companies choosing community trust over legal compliance, a dynamic that would repeat across social media for decades to come3.

The AACS encryption system was supposed to be the entertainment industry's silver bullet against high-definition piracy. Developed jointly by Disney, Intel, Microsoft, Panasonic, Warner Bros., IBM, Toshiba, and Sony, AACS controlled access to both HD-DVD and Blu-ray content5. It was the successor to the CSS encryption used on standard DVDs, which had been cracked years earlier by the DeCSS tool. The industry was determined not to repeat that failure.

The crack started in technical obscurity. The Doom9 forum was a well-known hangout for multimedia hackers and reverse engineers. When arnezami posted the processing key in February 2007, the thread included detailed technical discussion about how AACS worked at the cryptographic level, including how the processing key was used with AES encryption to derive media keys, which in turn derived volume unique keys1. The code samples shared in the thread showed the complete decryption chain, from processing key to media key to volume unique key1.

Not everyone on the forum was thrilled. One poster accused arnezami of "playing his cards too soon," arguing that publicizing the processing key would cause software players to hide their keys more aggressively. Arnezami pushed back, saying the key had already been compromised before his thread started and urging the community to "concentrate now on doing something constructive"1.

The AACS LA's legal response was swift once the key reached mainstream visibility. Their cease-and-desist letters, filed with Chilling Effects (now Lumen), specifically targeted bloggers who had posted the key, accusing them of violating the anti-circumvention provisions of the DMCA, 17 U.S.C. §12015. The letters named specific blog URLs including ones on Blogspot platforms, showing how widely the key had scattered across even small personal sites5.

The Digg Revolt of May 1, 2007 became the defining moment. Kevin Rose's capitulation post is often cited as one of the earliest examples of a tech company siding with its users against corporate legal pressure3. But the rebellion extended far beyond Digg. The number appeared on hundreds of sites, embedded in every format users could imagine.

On the same day as the Digg Revolt, writer John Marcotte of the website Badmouth created the Free Speech Flag. He mapped the hexadecimal key directly into the flag's color values: #09F911, #029D74, #E35BD8, #4156C5, and #635688, with "C0" appended to the bottom right corner to imply "Crime Zero"3. Marcotte wrote: "We want to start a movement. A movement to reclaim personal liberties and decorporatize the laws of our nation"3. He released the flag into the public domain.

The creative responses kept coming. Musician Keith Burgun composed "Oh Nine, Eff Nine," a song whose only lyrics were the numbers of the key. "I thought it was a source of comedy that they were trying so futilely to quell the spread of this number," Burgun said. "The ironic thing is, because they tried to quiet it down it's the most famous number on the Internet"3. Users wore the code on T-shirts, wove it into poems, and integrated it into hip hop lyrics3.

The legal and academic world took notice. Matthew Rimmer of Australian National University commented that the creative responses weren't "necessarily designed to stay within the bounds of the law" but rather to "show that the law is absurd or ridiculous and should be abolished"3. Antonio Ceraso of Penn State placed the movement within a framework he called "the formation of a communal ethos... the 09 F9 tribe," and posed the pointed question: "Would five striped colors arranged into a flag constitute an anti-circumvention device under the DMCA?"3. Jeff Thompson of the Stevens Institute of Technology took Marcotte's visual encoding concept further by creating a sound file that translated the processing key into audible tones3.

The aftermath played out over months and years. Google's response to the controversy was inconsistent. While the key spread freely across Google's search results during the peak of the revolt, Rudd-O's AdSense account was suspended ten months later, a move he called "simply unbelievable" given Google's own profit from the page's traffic2. The AACS LA eventually revoked the compromised key and issued new ones, but the damage to the encryption system's credibility was done.

The incident predated and helped define the concept of the Streisand Effect for a generation of internet users. As Urban Dictionary users put it with characteristic bluntness, the key was "geek for 'F U, MPAA and AACS'"4.