The Quest for Netflix on Asahi Linux • Hacker News Board

Re: The Quest for Netflix on Asahi Linux

#51

Post by a257 » Thu, Mar 09, 2023, 6:12 PM UTC

mardifoufs wrote: post #35

babypuncher wrote: post #13

Earlier quoted context omitted.

At the end of the day, the user's hardware/software has to be given a decryption key for the content, and the DRM scheme is all about obfuscating that encryption key so that users can't find it.

Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).

L1 has been bypassed by piracy groups for years (through social engineering). They just don't share the keys publicly because it would give their opponents an advantage. See [1].

[1] https://news.ycombinator.com/item?id=29702110

Re: The Quest for Netflix on Asahi Linux

#52

Post by judge2020 » Thu, Mar 09, 2023, 6:17 PM UTC

arsome wrote: post #18

Does this actually get 1080p? I thought L3 was limited to 720? L3 is weak enough that you can dump it by just hooking the decoders.

Entirely depends on what the streaming service feeds you. IIRC Disney+ drops you to 480p.

Re: The Quest for Netflix on Asahi Linux

#53

Post by bqmjjx0kac » Thu, Mar 09, 2023, 6:22 PM UTC

gray_-_wolf wrote: post #48

> The only officially supported way to use Widevine on Linux is using Chrome on an x86_64 CPU. To be precise it is "The only officially supported way to use Widevine on Linux is using Chrome on an x86_64 CPU using glibc." In other words, even though I have x86_64 cpu, since I'm on alpine, I'm fucked anyway.

I see Alpine Linux uses musl instead of glibc. Theoretically, couldn't you install or build glibc anyway and launch Chrome with LD_LIBRARY_PATH=/path/to/glibc?

Re: The Quest for Netflix on Asahi Linux

#54

Post by DeathArrow » Thu, Mar 09, 2023, 6:33 PM UTC

grishka wrote: post #38

mardifoufs wrote: post #35

Earlier quoted context omitted.

Eehhh at the end of the day, L1 is still almost impossible to bypass and hasn't been broken in years. So it still works, meaning it doesn't really matter even if it's security by obscurity (I dont think it qualifies for the term but anyways).

If it hasn't been broken, then where do all those 4K HDR torrents come from?

From cracked HDMI HDCP?

Re: The Quest for Netflix on Asahi Linux

#55

Post by a257 » Thu, Mar 09, 2023, 6:35 PM UTC

no_time wrote: post #14

klodolph wrote: post #12

Earlier quoted context omitted.

True for Widevine L3, which is what the article is talking about. Not true in general, and not true for L2 or L1.

I'd argue the same goes for L1 and L2. But the obscurity is provided by the silicon packaging process. Would be nice to crowdfund a lab to break these hardware backed treachery schemes.

While cracking the hardware is an interesting technical challenge, it is certainly not the only method. Security is only as good as the weakest link -- the human factor. Thus, piracy groups are able to use social engineering to crack Widevine without relying on advanced laboratories. See [1].

[1] https://news.ycombinator.com/item?id=29702110

Re: The Quest for Netflix on Asahi Linux

#56

Post by jacobmartin » Thu, Mar 09, 2023, 6:43 PM UTC

> Or rather, that was all true at the time when I first investigated Widevine-on-Asahi, several months ago. A few weeks ago, Google decided to enter the 21st century and started shipping aarch64 userspaces on certain Chromebook models. This means that "Widevine-in-Chrome-on-Linux-on-aarch64" does exist. The ChromeOS blob extraction process works as before, and the Pi Foundation conveniently packages it as a .deb for Pi users.

Not the point of the article but this is great news that I learned just now. I can finally upgrade to aarch64 chrome on my Raspberry Pis.

Re: The Quest for Netflix on Asahi Linux

#57

Post by no_time » Thu, Mar 09, 2023, 6:51 PM UTC

judge2020 wrote: post #49

no_time wrote: post #14

Earlier quoted context omitted.

I'd argue the same goes for L1 and L2. But the obscurity is provided by the silicon packaging process. Would be nice to crowdfund a lab to break these hardware backed treachery schemes.

The same goes for the HSMs that power the internet's certificate authorities then. If there were a precise enough CT scan that could read the current state of atoms and flash, we'd have a major security problem. The only reason L1 doesn't prevent people from pirating 4K HDR movies is because the Nvidia Shield has a bypass, and Google is too afraid to revoke its keys (or maybe Nvidia is paying millions of dollars a ye…

Ah the Tegra X1 bootrom exploit is the gift that just keeps on giving. I instantly bought a switch when the news came out.

Re: The Quest for Netflix on Asahi Linux

#58

Post by jvanderbot » Thu, Mar 09, 2023, 6:54 PM UTC

bqmjjx0kac wrote: post #53

gray_-_wolf wrote: post #48

> The only officially supported way to use Widevine on Linux is using Chrome on an x86_64 CPU. To be precise it is "The only officially supported way to use Widevine on Linux is using Chrome on an x86_64 CPU using glibc." In other words, even though I have x86_64 cpu, since I'm on alpine, I'm fucked anyway.

I see Alpine Linux uses musl instead of glibc. Theoretically, couldn't you install or build glibc anyway and launch Chrome with LD_LIBRARY_PATH=/path/to/glibc?

You should see all the "system" libraries I have sitting in /opt//lib for each

Re: The Quest for Netflix on Asahi Linux

#59

Post by [deleted] » Thu, Mar 09, 2023, 6:57 PM UTC

judge2020 wrote: post #49

no_time wrote: post #14

Earlier quoted context omitted.

I'd argue the same goes for L1 and L2. But the obscurity is provided by the silicon packaging process. Would be nice to crowdfund a lab to break these hardware backed treachery schemes.

The same goes for the HSMs that power the internet's certificate authorities then. If there were a precise enough CT scan that could read the current state of atoms and flash, we'd have a major security problem. The only reason L1 doesn't prevent people from pirating 4K HDR movies is because the Nvidia Shield has a bypass, and Google is too afraid to revoke its keys (or maybe Nvidia is paying millions of dollars a ye…

[deleted]

Re: The Quest for Netflix on Asahi Linux

#60

Post by duxup » Thu, Mar 09, 2023, 6:58 PM UTC

aidenn0 wrote: post #23

jasoneckert wrote: post #10

Excellent writeup. Asahi is my daily driver, but I've never had the need for either Spotify or Netflix. I guess the gospel of RMS and the FSF over the past few decades has steered me away from anything DRM-related.

In terms of freedom of using compute devices, RMS has a point. In terms of freedom of using media, I'm less annoyed by Spotify or Netflix than I am by "purchases" of media that have DRM. It's clear that one is renting with the streaming services, but Amazon can revoke permission for me to read books I have purchased or Valve can revoke permission for me to play games I have purchased, we are truly living in a dystopi…

Yeah the subscription services for media I like and I feel like the proposition is straightforward. I pay per month for access to a massive catalog of media. If I don’t like it I can just stop and maybe subscribe elsewhere.

It seems quite fair. There’s no mystery that it is a rental situation.