41–50 of 293 posts
I was looking into this very problem yesterday! Terribly scared by widewine, I ended up building webkit with eme support enabled, then enabled the relevent setting in the nyxt browser. Seems to be working fine so far.
So are you using Widevine?
Earlier quoted context omitted.
Spotify has alternative clients like raspotify, so there you should have alternatives that don't need hacks. There's also a web client.
raspotify/spotifyd aren't alternative desktop clients, they're connect clients, great if you want to modern-ify an old amplifier, but not useful for streaming. All of the native desktop clients (psst, spot, etc) are missing quite a few features compared to the official client, and spotify-tui is nowhere near as nice to use.
Excellent writeup. Asahi is my daily driver, but I've never had the need for either Spotify or Netflix. I guess the gospel of RMS and the FSF over the past few decades has steered me away from anything DRM-related.
Spotify has alternative clients like raspotify, so there you should have alternatives that don't need hacks. There's also a web client.
Earlier quoted context omitted.
At the end of the day, the user's hardware/software has to be given a decryption key for the content, and the DRM scheme is all about obfuscating that encryption key so that users can't find it.
Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).
Earlier quoted context omitted.
In terms of freedom of using compute devices, RMS has a point. In terms of freedom of using media, I'm less annoyed by Spotify or Netflix than I am by "purchases" of media that have DRM. It's clear that one is renting with the streaming services, but Amazon can revoke permission for me to read books I have purchased or Valve can revoke permission for me to play games I have purchased, we are truly living in a dystopi…
Instead of “buy”, they should be labeled “rentals - as long as provider exists or chooses to give you access”.
Earlier quoted context omitted.
I’d say that a key stored on hardware is not merely obfuscated, when that hardware is designed to prevent you from recovering the key.
The hardware ultimately has to decrypt and play the content, so you can use it as a decryption oracle even if you can't extract the key itself.
Not that it really matters, since HDCP has been cracked. There are a lot of holes here and a lot of problems with DRM.
To be precise it is "The only officially supported way to use Widevine on Linux is using Chrome on an x86_64 CPU using glibc."
In other words, even though I have x86_64 cpu, since I'm on alpine, I'm fucked anyway.
Earlier quoted context omitted.
True for Widevine L3, which is what the article is talking about. Not true in general, and not true for L2 or L1.
I'd argue the same goes for L1 and L2. But the obscurity is provided by the silicon packaging process. Would be nice to crowdfund a lab to break these hardware backed treachery schemes.
The only reason L1 doesn't prevent people from pirating 4K HDR movies is because the Nvidia Shield has a bypass, and Google is too afraid to revoke its keys (or maybe Nvidia is paying millions of dollars a year to rights holders for their 'lost sales' from pirated movies at the hands of the Nvidia Shield).
Earlier quoted context omitted.
Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).
If it hasn't been broken, then where do all those 4K HDR torrents come from?
0: https://forum.xda-developers.com/t/nvidia-shield-pro-widevin...