3 ms·
Nit, since this confused me when I was looking for more context: for whatever reason, Widevine security levels are ordered in decreasing security (whereas the a
by vitus 7y ago
Nit, since this confused me when I was looking for more context: for whatever reason, Widevine security levels are ordered in decreasing security (whereas the article has them backwards).
Widevine on Linux only supports L3, which means that there's no guarantee that any processing is done inside the CPU's trusted execution environment. Which, uh, reads as "no security guarantee" to me.
- swiley 7y agoI’m not really ok with other people’s code running on my Secure Enclave. BitTorrented video has no security guarantee either.
- Mindwipe 7y ago> I’m not really ok with other people’s code running on my Secure Enclave. All the code that runs on your secure enclave is other people's code.
- saagarjha 7y agoDepends on the device, of course.
- vitus 7y agoThe security guarantee here isn't for the user, though. It's more of a placebo effect for the content producers.
- bobajeff 7y agoThat's the funny thing about this whole thing they keep using terms like security when what they're really talking about is anti-saving/copying/skipping/fastforwarding and region blocking.
- yaur 7y agoIn order to get the highest level protection in widevine (the numbering is confusing) the decryption code and secure media path all need to be provisioned by the OEM. In otherwords the “other people” running code in the Secure Enclave is the device manufacturer. If you don’t trust them you are already sunk.
- vbezhenar 7y agoWhat I don't understand: with highest level protection does HDMI sends encrypted stream which is supposed to be decrypted by chip in display (which should support DRM, of course) or decoding happens in PC and HDMI carried decoded signal? Because if latter is the case, it should be more or less trivial to just save stream from HDMI, so those protections mean nothing and trivially by-passed by available hardware.
- Crespyl 7y agoUsually these systems require HDCP support, which theoretically allows verification of the whole chain, PC to HDMI cable to display; any "unapproved" devices in the middle would be detected and prevent display. In practice, the HDCP master key was leaked years ago and it's pretty straight forward to get an HDCP stripper device and a capture card.
- deleted 7y ago[deleted]