Couldn't the software simply fetch the token and display it to the user for manual input? It seems like the software's automatic use of the token is somehow breaking part of the DMCA. Is it actually illegal to display returned data from a web request? Is the manual input of "keys" legitimately a possible loophole? Did any of the early DVD rippers require manually adding keys?