3 ms·

Since the topic is DRM, and DRM only works if you don't know how it works... > Since the only objective is decrypting content it'll presumably be more practica

Since the topic is DRM, and DRM only works if you don't know how it works... > Since the only objective is decrypting content it'll presumably be more practical to port (and reverse engineer) I cannot comprehend the confusion of ideas that could provoke such a suggestion. Do you really believe open source platforms will get an open source module? Do you think it'll be anything but a black box whose nature, by definition, precludes anyone knowing what it does? Where will you get your guarantees about security vulnerabilities, when the very nature of the code will be, must be such that it is as difficult to discern its purpose and mechanism of operation as possible.

rainforest 13y ago
Perhaps I could have been more clear; when I say "porting" I mean from the perspective of a vendor. The current status quo is that content is available only where Adobe can be bothered to provide Flash. Given that constructing a "secure" black is a smaller task than providing a standardised runtime environment, it's feasible that vendors might target more than just Windows and OSX. This has nothing to do with source availability. w.r.t easier reverse engineering, given the behaviour is constrained to the target blob and the interface is standardised, liberating content should be simplified. As far as security vulnerabilities go the choice still remains, run the blob or don't view the content.
- wmf 13y ago
  OTOH, it will be impossible to port CDMs to browsers that don't allow CDM plugins. Do we think Safari or Metro IE are going to allow them?
  - rainforest 13y ago
    The same can be said of Flash, however. The other side of that coin is that content will never be available DRM free, so I'm not sure if it's an important point; mobile content delivery is normally achieved via apps, or in the BBC iPlayer's case, in the browser, "protected" by a client certificate.
    - wmf 13y ago
      Flash is specifically grandfathered by browsers but EME isn't.

rainforest 13y ago

Perhaps I could have been more clear; when I say "porting" I mean from the perspective of a vendor. The current status quo is that content is available only where Adobe can be bothered to provide Flash. Given that constructing a "secure" black is a smaller task than providing a standardised runtime environment, it's feasible that vendors might target more than just Windows and OSX. This has nothing to do with source availability. w.r.t easier reverse engineering, given the behaviour is constrained to the target blob and the interface is standardised, liberating content should be simplified. As far as security vulnerabilities go the choice still remains, run the blob or don't view the content.

wmf 13y ago
OTOH, it will be impossible to port CDMs to browsers that don't allow CDM plugins. Do we think Safari or Metro IE are going to allow them?
- rainforest 13y ago
  The same can be said of Flash, however. The other side of that coin is that content will never be available DRM free, so I'm not sure if it's an important point; mobile content delivery is normally achieved via apps, or in the BBC iPlayer's case, in the browser, "protected" by a client certificate.
  - wmf 13y ago
    Flash is specifically grandfathered by browsers but EME isn't.