Live data from Hacker News

The Quest for Netflix on Asahi Linux

da.vidbuchanan.co.uk

31–40 of 293 posts

Re: The Quest for Netflix on Asahi Linux

#31

Earlier quoted context omitted.

At the end of the day, the user's hardware/software has to be given a decryption key for the content, and the DRM scheme is all about obfuscating that encryption key so that users can't find it.

I’d say that a key stored on hardware is not merely obfuscated, when that hardware is designed to prevent you from recovering the key.

The hardware ultimately has to decrypt and play the content, so you can use it as a decryption oracle even if you can't extract the key itself.

Re: The Quest for Netflix on Asahi Linux

#32
post #3

Just goes to show that the DRM is just security through obscurity.

security through obscurity is generally not about keeping a well known encryption scheme's keys "private". It's generally about not knowing how a system works at all. In this case (and the same for blurays actually), we know exactly how the system works, given the keys we could decrypt the content, but the keys are kept "well" protected (depending on widevine level, different levels of protection). In BluRay land enough player keys have leaked to make it basically irrelevant. It's also harder to determine whose keys are being used to decrypt, making it harder to revoke. In an online widevine world where one has to use one's baked in device keys to get the content key, its much easier to determine if a single device's key is being used an abnormal amount of time and then revoke it.

while one can view the efforts to protect a widevine l3 key as security through obscurity, its mostly there to make the effort hard enough that most people are interested in doing it, than to keep it perfectly secure.

Re: The Quest for Netflix on Asahi Linux

#33

> I don't care very much about Netflix - the UX offered by BitTorrent is superior What a laughable statement. I'll copy paste all of his blogspots on my blog and say I prefer the UX of my blog.

Well, searching for a movie you want to watch often comes up empty on netflix unfortunately. For those use cases, there's a big difference. For just watching what's provided, netflix has a better experience.

Re: The Quest for Netflix on Asahi Linux

#35

Earlier quoted context omitted.

True for Widevine L3, which is what the article is talking about. Not true in general, and not true for L2 or L1.

At the end of the day, the user's hardware/software has to be given a decryption key for the content, and the DRM scheme is all about obfuscating that encryption key so that users can't find it.

Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).

Re: The Quest for Netflix on Asahi Linux

#36
post #4

> This should be alarming to anyone with a stake in content "protection". Look how many hoops I had to jump through just to legally watch Netflix as a paying customer! This tells me I should just stay on macOS or Windows rather than go on a Safari hunt for getting Netflix working on a ARM Linux machine.

The browser compatability is still a bit of a mess on those OSes. The only way to get the full resolution on MacOS is to use some specific combinations of Safari and MacOS versions. If youre using OSX or using Chrome/FF you're limited to 720p https://help.netflix.com/en/node/23742

Resolution:

Google Chrome

Up to 720p on Windows, Mac, and Linux

Up to 1080p on Chrome OS

Microsoft Edge up to 4K*

Mozilla Firefox up to 720p

Opera up to 720p

Safari

Up to 4K on macOS 11.0 or later

Up to 1080p on macOS 10.11 through 10.15

*Streaming in 4K requires an HDCP 2.2 compliant connection to a 4K capable display, Intel's 7th generation Core CPU, and the latest Windows updates. Check with the manufacturer of your system to verify specifications.

^ is this the lawyers or the programmers' doing?

Re: The Quest for Netflix on Asahi Linux

#37
post #30

Excellent writeup. Asahi is my daily driver, but I've never had the need for either Spotify or Netflix. I guess the gospel of RMS and the FSF over the past few decades has steered me away from anything DRM-related.

Spotify has alternative clients like raspotify, so there you should have alternatives that don't need hacks. There's also a web client.

raspotify/spotifyd aren't alternative desktop clients, they're connect clients, great if you want to modern-ify an old amplifier, but not useful for streaming.

All of the native desktop clients (psst, spot, etc) are missing quite a few features compared to the official client, and spotify-tui is nowhere near as nice to use.

Re: The Quest for Netflix on Asahi Linux

#38

Earlier quoted context omitted.

At the end of the day, the user's hardware/software has to be given a decryption key for the content, and the DRM scheme is all about obfuscating that encryption key so that users can't find it.

Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).

If it hasn't been broken, then where do all those 4K HDR torrents come from?

Re: The Quest for Netflix on Asahi Linux

#40
post #30

Excellent writeup. Asahi is my daily driver, but I've never had the need for either Spotify or Netflix. I guess the gospel of RMS and the FSF over the past few decades has steered me away from anything DRM-related.

Spotify has alternative clients like raspotify, so there you should have alternatives that don't need hacks. There's also a web client.

The web client seems to install some DRM packages.

I've used ncspot extensively when on little ARM boxes - it requires a premium account, which I have, and it's just a nice little curses interface to Spotify, written in Rust, that seems to work on everything with a minimal of resource use.

Post reply on HN