6 ms·

> Serve only static media files This part I don't get. How about DRM? Unless Netflix pre-DRM all contents for all user?

Bluecobra 4y ago
I would think that media files would be already encrypted and gets decrypted by the Netflix client. Otherwise the DRM could easily be defeated by using something like Wireshark.
drewg123 4y ago
Yes, all our content is also DRMed. Else somebody could easily pirate content..
- onedr0p 4y ago
  To be fair, it already seems easily pirated. DRM is useless, if content is able to be viewed on some personal device it can be ripped and shared. I'd be curious how much effort/money companies dump into adding DRM measures, it seems like a lost cause. Maybe it just makes the execs sleep better at night.
  - Mindwipe 4y ago
    This is a myth. Netflix's DRM is sufficiently good that the Reddit Piracy subreddit has spent the last three months moaning that they have no access to 4K Netflix rips, at least for weeks or months after the content comes out. Netflix's DRM and key management systems do what they care about pretty well at this point, which is protect the initial airing of popular shows.
    - onedr0p 4y ago
      1080p rips are found within hours of the content first airing on NetFlix. You don't need to download Linux ISOs in full quality to enjoy them.
bri3d 4y ago
Encrypting assets on the fly using a per-consumer symmetric key would be prohibitively expensive, so I'm sure the media is stored pre-encrypted using a shared symmetric key. It only really matters that this key is unique per package, not per user, because once even a single user can compromise the trusted execution environment and extract either the key or the plain video stream, that piece of content is now pirated anyway. So, key reuse against the same content probably isn't really a major part of the threat model - this attacker could share the key with others, but they might as well share the decrypted content instead.

I would think that media files would be already encrypted and gets decrypted by the Netflix client. Otherwise the DRM could easily be defeated by using something like Wireshark.

drewg123 4y ago

Yes, all our content is also DRMed. Else somebody could easily pirate content..

onedr0p 4y ago
To be fair, it already seems easily pirated. DRM is useless, if content is able to be viewed on some personal device it can be ripped and shared. I'd be curious how much effort/money companies dump into adding DRM measures, it seems like a lost cause. Maybe it just makes the execs sleep better at night.
- Mindwipe 4y ago
  This is a myth. Netflix's DRM is sufficiently good that the Reddit Piracy subreddit has spent the last three months moaning that they have no access to 4K Netflix rips, at least for weeks or months after the content comes out. Netflix's DRM and key management systems do what they care about pretty well at this point, which is protect the initial airing of popular shows.
  - onedr0p 4y ago
    1080p rips are found within hours of the content first airing on NetFlix. You don't need to download Linux ISOs in full quality to enjoy them.

bri3d 4y ago

Encrypting assets on the fly using a per-consumer symmetric key would be prohibitively expensive, so I'm sure the media is stored pre-encrypted using a shared symmetric key. It only really matters that this key is unique per package, not per user, because once even a single user can compromise the trusted execution environment and extract either the key or the plain video stream, that piece of content is now pirated anyway. So, key reuse against the same content probably isn't really a major part of the threat model - this attacker could share the key with others, but they might as well share the decrypted content instead.