4 ms·

Apple (and to a lesser extent Android) have already gone this route, and Windows 11 originally wanted to push _hard_ on enforcing the presence of more platform

Apple (and to a lesser extent Android) have already gone this route, and Windows 11 originally wanted to push _hard_ on enforcing the presence of more platform security. DRM schemes already perform remote attestation before you can stream 4K Netflix. Linux and Open Source may be one of the last remaining barriers to this becoming widespread. It's one of the main reasons I whole-heartedly support Valve and their Steam Deck ambitions, and encourage everyone to do the same. Money trumps everything else, so as long as the money to be made from supporting SteamOS > money thought to be saved from piracy, I believe we can still thwart this.

transpute 4y ago
> DRM schemes already perform remote attestation before you can stream 4K Netflix. On Intel clients, this is done via the Management Engine, bypassing both the CPU and operating system, as the ME can control display output.
- SturgeonsLaw 4y ago
  Is there any mechanism for it to validate that the thing connected to the display output is an unmodified monitor which also implements DRM? Otherwise it would be almost trivial to have a device with HDMI-in that gets a pixel perfect feed of the protected stream.
  - userbinator 4y ago
    Yes, that's called HDCP. The master key was cracked long ago for older versions.
    - toast0 4y ago
      For new versions, you can get a converter; hdcp 2.2 -> hdcp 1.4 and then use whatevee breakage on 1.4. So it's only effective if you don't search.
      - lfodofod 4y ago
        You can’t produce good quality rips like this, if that was the best solution the DRM people would have won.
        callesgg 4y ago
        You can produce pixel perfect rips. But since the resulting video file is so large you will "need" to compress it, and then you get compression on compression artefacts.
        lfodofod 4y ago
        Yes, indeed. Pixel perfect rips of already compressed streams, immensely blowing up the size and requiring another round of lossy compression to actually be useful.
        tjoff 4y ago
        And the result after recompression is impeccable so it is not a big deal. It is just a bit cumbersome.
        lfodofod 4y ago
        The result after recompression is far from impeccable.
        tjoff 4y ago
        On high bitrate content you wouldn't notice.
        lfodofod 4y ago
        Sure, but you get to push your encoder settings far less than you otherwise could. You always end up with either significantly bigger files or significantly lower quality.
- alexklarjr 4y ago
  doubt it, should be on OS level, gpu control for all possible vendors and output formats is impossible without gpu driver support.
  - transpute 4y ago
    It's specific to the Intel GPU. Intel PAVP (Protected Audio-Video Path). See page 192 of Intel's "Platform Embedded Security Technology Revealed" (2014), https://link.springer.com/book/10.1007/978-1-4302-6572-6 https://link.springer.com/book/10.1007/978-1-4302-6572-6

transpute 4y ago

> DRM schemes already perform remote attestation before you can stream 4K Netflix. On Intel clients, this is done via the Management Engine, bypassing both the CPU and operating system, as the ME can control display output.

SturgeonsLaw 4y ago
Is there any mechanism for it to validate that the thing connected to the display output is an unmodified monitor which also implements DRM? Otherwise it would be almost trivial to have a device with HDMI-in that gets a pixel perfect feed of the protected stream.
- userbinator 4y ago
  Yes, that's called HDCP. The master key was cracked long ago for older versions.
  - toast0 4y ago
    For new versions, you can get a converter; hdcp 2.2 -> hdcp 1.4 and then use whatevee breakage on 1.4. So it's only effective if you don't search.
    - lfodofod 4y ago
      You can’t produce good quality rips like this, if that was the best solution the DRM people would have won.
      - callesgg 4y ago
        You can produce pixel perfect rips. But since the resulting video file is so large you will "need" to compress it, and then you get compression on compression artefacts.
        lfodofod 4y ago
        Yes, indeed. Pixel perfect rips of already compressed streams, immensely blowing up the size and requiring another round of lossy compression to actually be useful.
        tjoff 4y ago
        And the result after recompression is impeccable so it is not a big deal. It is just a bit cumbersome.
        lfodofod 4y ago
        The result after recompression is far from impeccable.
        tjoff 4y ago
        On high bitrate content you wouldn't notice.
        lfodofod 4y ago
        Sure, but you get to push your encoder settings far less than you otherwise could. You always end up with either significantly bigger files or significantly lower quality.
alexklarjr 4y ago
doubt it, should be on OS level, gpu control for all possible vendors and output formats is impossible without gpu driver support.
- transpute 4y ago
  It's specific to the Intel GPU. Intel PAVP (Protected Audio-Video Path). See page 192 of Intel's "Platform Embedded Security Technology Revealed" (2014), https://link.springer.com/book/10.1007/978-1-4302-6572-6 https://link.springer.com/book/10.1007/978-1-4302-6572-6