3 ms·

I’m not really ok with other people’s code running on my Secure Enclave. BitTorrented video has no security guarantee either.

by swiley 7y ago

Mindwipe 7y ago
> I’m not really ok with other people’s code running on my Secure Enclave. All the code that runs on your secure enclave is other people's code.
- saagarjha 7y ago
  Depends on the device, of course.
vitus 7y ago
The security guarantee here isn't for the user, though. It's more of a placebo effect for the content producers.
- bobajeff 7y ago
  That's the funny thing about this whole thing they keep using terms like security when what they're really talking about is anti-saving/copying/skipping/fastforwarding and region blocking.
yaur 7y ago
In order to get the highest level protection in widevine (the numbering is confusing) the decryption code and secure media path all need to be provisioned by the OEM. In otherwords the “other people” running code in the Secure Enclave is the device manufacturer. If you don’t trust them you are already sunk.
- vbezhenar 7y ago
  What I don't understand: with highest level protection does HDMI sends encrypted stream which is supposed to be decrypted by chip in display (which should support DRM, of course) or decoding happens in PC and HDMI carried decoded signal? Because if latter is the case, it should be more or less trivial to just save stream from HDMI, so those protections mean nothing and trivially by-passed by available hardware.
  - Crespyl 7y ago
    Usually these systems require HDCP support, which theoretically allows verification of the whole chain, PC to HDMI cable to display; any "unapproved" devices in the middle would be detected and prevent display. In practice, the HDCP master key was leaked years ago and it's pretty straight forward to get an HDCP stripper device and a capture card.
  - deleted 7y ago
    [deleted]

3 ms·

I’m not really ok with other people’s code running on my Secure Enclave. BitTorrented video has no security guarantee either.

by swiley 7y ago

I’m not really ok with other people’s code running on my Secure Enclave. BitTorrented video has no security guarantee either.

Mindwipe 7y ago
> I’m not really ok with other people’s code running on my Secure Enclave. All the code that runs on your secure enclave is other people's code.
- saagarjha 7y ago
  Depends on the device, of course.
vitus 7y ago
The security guarantee here isn't for the user, though. It's more of a placebo effect for the content producers.
- bobajeff 7y ago
  That's the funny thing about this whole thing they keep using terms like security when what they're really talking about is anti-saving/copying/skipping/fastforwarding and region blocking.
yaur 7y ago
In order to get the highest level protection in widevine (the numbering is confusing) the decryption code and secure media path all need to be provisioned by the OEM. In otherwords the “other people” running code in the Secure Enclave is the device manufacturer. If you don’t trust them you are already sunk.
- vbezhenar 7y ago
  What I don't understand: with highest level protection does HDMI sends encrypted stream which is supposed to be decrypted by chip in display (which should support DRM, of course) or decoding happens in PC and HDMI carried decoded signal? Because if latter is the case, it should be more or less trivial to just save stream from HDMI, so those protections mean nothing and trivially by-passed by available hardware.
  - Crespyl 7y ago
    Usually these systems require HDCP support, which theoretically allows verification of the whole chain, PC to HDMI cable to display; any "unapproved" devices in the middle would be detected and prevent display. In practice, the HDCP master key was leaked years ago and it's pretty straight forward to get an HDCP stripper device and a capture card.
  - deleted 7y ago
    [deleted]