Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Trying to extract Widewine key: A journey to failure

github.com

Post reply on HN
Print view View original

71–80 of 133 posts

Re: Trying to extract Widewine key: A journey to failure

#71

Post by beefjerkins »

matheusmoreira wrote: post #69
azalemeth wrote: post #11

From the repo: >It is my honest opinion that DRM is a malignant tumor growing upon various forms of media, and that people that either implement or enforce implementation are morally repugnant and do no good to society. With that in mind, I was sad to learn in May 2021 that the original extension would soon be rendered obsolete. I really can't agree more. I don't use, and never have, services that require DRM. I buy…

DRM is merely a symptom of the copyright disease. People actually want to believe data is scarce when it's not. When proven wrong, they make technology to force scarcity. It makes products and services worse for everyone and even then it barely works. The only way to stop this is to abolish copyright.

I agree that our current copyright system is certainly out of hand, but it does serve a purpose. Out of curiosity, what system would you suggest in its stead?

Re: Trying to extract Widewine key: A journey to failure

#72

Post by matheusmoreira »

beefjerkins wrote: post #71
matheusmoreira wrote: post #69

Earlier quoted context omitted.

DRM is merely a symptom of the copyright disease. People actually want to believe data is scarce when it's not. When proven wrong, they make technology to force scarcity. It makes products and services worse for everyone and even then it barely works. The only way to stop this is to abolish copyright.

I agree that our current copyright system is certainly out of hand, but it does serve a purpose. Out of curiosity, what system would you suggest in its stead?

Maybe patronage schemes? Crowdfunding? I have no idea. I just know that we can't go on like this.

The only way to enforce copyright in the 21st century is to destroy computing freedom. I'd rather sacrifice the entire copyright industry than have computers that only run software they approve.

Re: Trying to extract Widewine key: A journey to failure

#73

Post by CamperBob2 »

SilverRed wrote: post #64
elcritch wrote: post #46

Earlier quoted context omitted.

In theory DRM could be mathematically perfect. However DRM relies on actual implementations both in software and hardware and shares a lot with broader security. Software implementations can have bugs but it’s relatively easy to ship fixes. The hardware level however is where it becomes very difficult to ensure a valid implementation of “secure compute” or “trusted zones” which are key to DRM and general security, pa…

How can DRM ever be perfect? It relies on your computer to be able to decrypt the data so it an never be "mathematically perfect" like regular encryption can be. Current DRM is all about shoving the decryption part as deep in to a chip as possible and betting on the fact that it is physically too hard to extract that info. So it will always be exploitable with some amount of effort.

It can depend on online keys that can be changed by the rightsholder at will.

"The Internet is the ultimate dongle" - John Carmack

Re: Trying to extract Widewine key: A journey to failure

#74

Post by bawolff »

YetAnotherNick wrote: post #59

Can someone explain what's the point of DRM for video streaming when you can do screen recording so easily. It could make sense in books and games but why is netflix such a heavy proponent for it?

Depending on the solution,it might involve watermarking so that they can trace where the streams that end up on the internet come from and cut off those users. If nothing else, im sure it shows up in the analytics if someone's netflix account is 24/7 streaming every episode of every show without break.

Although the real answer is probably: studios require it in their contracts and netflix has to play nice.

Re: Trying to extract Widewine key: A journey to failure

#75

Post by zucker42 »

Hasn't this person committed a crime if they are in the U.S.?[1]

Not that I think that this is morally wrong, just that I've always been concerned that people who try this and gain enough attention could face legal penalties. I would not do something like this without taking measures to stay anonymous. A similar case is the PS3 hacking case.

[1] https://www.law.cornell.edu/uscode/text/17/1201

Re: Trying to extract Widewine key: A journey to failure

#76

Post by [deleted] »

azalemeth wrote: post #11

From the repo: >It is my honest opinion that DRM is a malignant tumor growing upon various forms of media, and that people that either implement or enforce implementation are morally repugnant and do no good to society. With that in mind, I was sad to learn in May 2021 that the original extension would soon be rendered obsolete. I really can't agree more. I don't use, and never have, services that require DRM. I buy…

[deleted]

Re: Trying to extract Widewine key: A journey to failure

#77

Post by SilverRed »

CamperBob2 wrote: post #73
SilverRed wrote: post #64

Earlier quoted context omitted.

How can DRM ever be perfect? It relies on your computer to be able to decrypt the data so it an never be "mathematically perfect" like regular encryption can be. Current DRM is all about shoving the decryption part as deep in to a chip as possible and betting on the fact that it is physically too hard to extract that info. So it will always be exploitable with some amount of effort.

It can depend on online keys that can be changed by the rightsholder at will. "The Internet is the ultimate dongle" - John Carmack

You still have to deliver the new keys to the clients. As long as the client can decrypt the file, the client can also decrypt and dump it to storage. And if the top pirates keep their methods secret, you can change the keys all you want and not know how they are extracting them each time.

Re: Trying to extract Widewine key: A journey to failure

#78

Post by joshmn »

The majority of media-based DRM implementations are completely bunk and fundamentally broken. You — yes, you, reader — are able to take advantage of DRM implementations and break their fundamental premise without much effort. What's the point if someone with a faint degree of technical ability can redirect your content? I'd argue you're just putting lipstick on a pig.

The idea itself is nice; I get the point. If I'm a studio I want people to pay for the product. DRM doesn't encourage people do that at all. It's like the idea of media blackouts in local markets: you're just driving people to alternative sources, not to buy a cable package.

Re: Trying to extract Widewine key: A journey to failure

#79

Post by rossjudson »

azalemeth wrote: post #11

From the repo: >It is my honest opinion that DRM is a malignant tumor growing upon various forms of media, and that people that either implement or enforce implementation are morally repugnant and do no good to society. With that in mind, I was sad to learn in May 2021 that the original extension would soon be rendered obsolete. I really can't agree more. I don't use, and never have, services that require DRM. I buy…

Let me see if I understand your position. "Laws are stupid because there are criminals who do crime anyway, and laws don't stop them."

Does that sum it up?

Re: Trying to extract Widewine key: A journey to failure

#80

Post by Godel_unicode »

codetrotter wrote: post #68
toxik wrote: post #28

Earlier quoted context omitted.

I don’t understand how it can ever be secure unless you let some DRM representatives basically come and do inspections. Fundamentally, you are going to show a video and play an audio stream. Fundamentally, it can be recaptured perfectly because it must be displayed and played perfectly. There is simply no way around it. DRM can only make life hard for the regular Joes.

> I don’t understand how it can ever be secure unless you let some DRM representatives basically come and do inspections. Oh god, that’s a level of hell I haven’t even imagined. I wonder if the future could ever become as dystopian as that for real. What it would take for that to happen, and how.

I see you've never worked with Oracle...
Post reply on HN