4 ms·
But Widevine is not just one system, there are multiple security levels. Software-only version (L3) that runs in chrome CDM on desktops (SD quality) can be defe
by zb3 9y ago
But Widevine is not just one system, there are multiple security levels. Software-only version (L3) that runs in chrome CDM on desktops (SD quality) can be defeated easily (it uses arxan's TransformIT as an OEMCrypto implementation), but in order to break L1 you'd need to break into the TrustZone which is much harder, and even if you did it on a particular device, Google could revoke certificate for that device or even device model.
- exikyut 9y agoOh. :( Kinda depressing to know there actually are competent implementations out there.
- zb3 9y agoThis worries me because they know they can't implement strong DRM systems while respecting users' right to control their own devices. So with "TrustZone", "Secure Boot" and other things like that, they don't respect that right anymore[0], and unfortunately EFF doesn't point this out in their article. [0] https://www.gnu.org/philosophy/can-you-trust.en.html https://www.gnu.org/philosophy/can-you-trust.en.html
- exikyut 9y agoVery good point. I wonder if this is deliberate: the EFF surely realize this themselves, but maybe they don't want to mention it because of precisely the reason you mention, and the fact that the EFF don't want to jeopardize anyone misinterpreting their opinions and positions on the subject.