Tim Berners-Lee approves Web DRM, but W3C members have two weeks to appeal

Post by the8472 » Fri, Jul 07, 2017, 10:37 PM UTC

metajack wrote: post #71

cyphar wrote: post #44

Earlier quoted context omitted.

> This one is likely the best of the three. I don't agree. Ignoring the massive injustice of ramming proprietary extensions into an open standard, standardising DRM has several secondary detriments to the free culture movement. In fact, standardising EME might actually be the worst of the three choices (the best being no DRM of course). Non-standard extensions are better to the movement (though still disastrous) than…

It's a bit tough to argue we should keep computers insecure and hope people get annoyed and change their minds. Keeping people's computers safe is a primary goal of browser vendors, and this improves that state of affairs. Sure, DRM sucks, but at least the vendors can't root your machine and install keyloggers now.

Post by the8472 » Fri, Jul 07, 2017, 10:45 PM UTC

samsonradu wrote: post #87

the8472 wrote: post #79

Earlier quoted context omitted.

The server can send an encrypted blob to your browser which hands it off to the DRM module which can hand it off to the system's ring -2 PAVP/Trustzone/etc. stuff that only runs signed firmware which passes it encrypted over the PCIe bus to the gfx hardware which passes it encrypted via HDCP2 to the monitor. So in principle fully encrypted paths that can'e be screengrabbed exist. Not all DRM makes use of those compon…

Thanks for the detailed description. > .. which passes it encrypted via HDCP2 to the monitor. And where does the decryption actually takes place? > EDIT https://en.wikipedia.org/wiki/High-bandwidth_Digital_Content... > In order to make a device that plays HDCP-enabled work, the manufacturer must obtain a license from Intel subsidiary Digital Content Protection LLC, pay an annual fee, and submit to various conditions.…

  - hardware-assisted encrypted pipelines (described above)
  - kernel module assisted
  - pure userspace obfuscated code

Post by the8472 » Fri, Jul 07, 2017, 10:48 PM UTC

metajack wrote: post #83

cyphar wrote: post #53

Earlier quoted context omitted.

Not to be a pedant (who am I kidding), but this is actually one of the examples where distinguishing between "free software" and "open source" is more than a philosophical disagreement. You actually can create an open source DRM solution, because none of the OSI definition[1] makes reference to user freedom or other issues that DRM violates. As far as the OSI is concerned, DRM is can be released under an OSI license.…

CDMs are sandboxed, which is an improvement over the NPAPI plugins. I don't think we have to worry much about Sony rootkit attacks at least.

Post by phit_ » Fri, Jul 07, 2017, 10:53 PM UTC

bubblethink wrote: post #91

seltzered_ wrote: post #68

A younger version of myself would be against Web DRM, but these days I wonder if there's a potential for it to help in democratizing distribution among indie content producers. Ideally I'd have some time to piece together an essay, but the major points are: 1) Ted Nelson's vision on how Project Xanadu would have some form of copyright protection / micropayments for authors. 2) Independent content creators that have c…

>democratizing distribution among indie content producers So I have this idea for a video/audio streaming website that operates like an open market. Website operator makes a cut for infrastructure costs. Other than that, the site runs pretty much on its own. No content deals, no drm, no geo restrictions, no ads. Some safeguards to limit abuse. A producer puts up content. Consumers consume content. Revenues are split…

Post by bubblethink » Fri, Jul 07, 2017, 10:58 PM UTC

phit_ wrote: post #98

bubblethink wrote: post #91

Earlier quoted context omitted.

>democratizing distribution among indie content producers So I have this idea for a video/audio streaming website that operates like an open market. Website operator makes a cut for infrastructure costs. Other than that, the site runs pretty much on its own. No content deals, no drm, no geo restrictions, no ads. Some safeguards to limit abuse. A producer puts up content. Consumers consume content. Revenues are split…

so Patreon plus content hosting?