News for hackers. Stuff that matters.
Re:Browsers' bid for relevance is turning them into time-bombs by chriswarbo on Saturday July 09, 2016 @06:03AM (#12060819)
I don't understand why people think the Web needs Hollywood's video content. Let them build proprietary set top boxes or whatever, who cares if it's not in a browser? It's certainly not important enough to undermine the Web's principles of openness, interoperability, free access to knowledge, etc.

As far as I see it, EME would only be a loss for the Web and browser makers like Mozilla; in a similar way to, for example, losing the ability to "view source" would be a loss.

I think the real threat is from commercial entities who want EME for entirely separate reasons, i.e. Apple, Microsoft and Google, who also just-so-happen to make browsers. They can embrace/extend/extinguish the Web, by building an encryption standard into their particular browsers which none of the countless others are able to do (Firefox, Konqueror, Dillo, Netsurf, W3M, Lynx, EWW, Elinks, etc.). EME seems like an attempt to preempt such a situation, but I don't see how it can do anything to prevent it.

This is a much worse situation than some set-top box scenario, since it will bleed users from all browsers to those few with EME+plugins, and the Web will become yet another Microsoft Office document format.

Re:Browsers' bid for relevance is turning them into time-bombs by acdha on Saturday July 09, 2016 @09:44AM (#12061272)
> I don't understand why people think the Web needs Hollywood's video content. Let them build proprietary set top boxes or whatever, who cares if it's not in a browser? It's certainly not important enough to undermine the Web's principles of openness, interoperability, free access to knowledge, etc. > As far as I see it, EME would only be a loss for the Web and browser makers like Mozilla; in a similar way to, for example, losing the ability to "view source" would be a loss.

The flaw in this line of reasoning is talking about it in the past tense and referring to “the Web” as if that's some central authority distinct from the browser manufacturers which can dictate terms. EME has already shipped in Chrome, Safari, Internet Explorer, Edge, Firefox, and Opera. The alternative was something like Apple, Google, and Microsoft hammering out an agreement privately and leaving Mozilla and possibly Opera out in the cold, stuck with either Flash or slowly bleeding users to a browser which offered a better experience.

Look at Netflix's support matrix now and notice how many people can now play movies without needing to install anything:

https://help.netflix.com/en/node/23742

You're going to have a really hard time convincing most people that this is worse than the previous security, stability, and performance disaster of using NPAPI plugins. The vast majority of users think it's a plus that they can just search, click, and play without having to use a separate device or player application — how are you going to convince them that this should not be allowed?

Note also that this does not prevent the use of view source on netflix.com – only access to the decrypted video stream – and should any of the extremely rare browsers which you listed (several of which don't even support images or video of any sort!) decide they too wanted to support it, there's at least a standard process.

Re:Browsers' bid for relevance is turning them into time-bombs by corford on Saturday July 09, 2016 @02:50PM (#12062723)
From a simple usability perspective, definitely agree. I re-purposed a Dell Chromebook with Debian Jessie for my partner last weekend and the hardest thing (bearing in mind I had to delicately pop the case apart and remove a write protect screw to flash the BIOS) was getting streaming working for the on-demand stuff she likes to watch.

Netflix 'just worked' with Chrome but some French TV channels (looking at you M6!) are still stuck streaming Flash. Getting pipelight to work with Firefox took hours of fucking around and it still bombs on certain streams.

If we have to have DRM it's got to be preferable suffering it through an open standard rather than black boxes forced on us through shitty plugins riddled with security holes.

Re:Browsers' bid for relevance is turning them into time-bombs by azakai on Saturday July 09, 2016 @11:47AM (#12061795)
> Look at Netflix's support matrix

Looks terrible, there is no mention of Linux at all.

Re:Browsers' bid for relevance is turning them into time-bombs by acdha on Saturday July 09, 2016 @12:05PM (#12061905)
I get where that's coming from – I've run Linux since the mid-90s, along with other rarely supported systems like BeOS and OS/2 – but … how many people does this actually affect? Linux on the desktop remains a small minority and the percentage of Linux desktop users who are unwilling to use Chrome is even smaller.

Again, I don't love DRM but we need a reason for a significant number of people to care. We've had a couple decades for angry nerds ranting on the Internet to show results and it's hard to say that we've done anything. The one area where DRM was rolled back is music and that was a combination of widespread unencumbered CDs and, mostly, Steve Jobs scaring the music labels more than piracy.

We need a better approach to avoid repeating that cycle of failure again. Most people think Netflix is good – what's going to make them decide to cancel their subscription?

Re:Browsers' bid for relevance is turning them into time-bombs by CaptSpify on Saturday July 09, 2016 @02:49PM (#12062722)
> We've had a couple decades for angry nerds ranting on the Internet to show results and it's hard to say that we've done anything.

I'd actually argue that we have. Sure, a lot of the mp3 stuff was Jobs, but I'd argue that the game was changed so that we can't do the same with mp3s. We downloaded mp3s, but we stream movies. Now, I think streaming is superior in many ways, and I'm not bashing it, but it did change the game.

Free software is becoming more and more common. Sure, it moves slower than proprietary software, but I'd argue that's a feature, not a bug. We now have MS open-sourcing a lot of stuff, and including bash in their stack. Apple is trying to become more open, and focus more on privacy. Linux is getting more games than ever.

I really view this new DRM scheme as a desperate attempt from a dying industry. And I do think eventually we'll look back, thinking it was absurd.

Re:Browsers' bid for relevance is turning them into time-bombs by azakai on Saturday July 09, 2016 @02:23PM (#12062599)
Linux might be a small (but rising) percentage. But the bigger point is that Linux is a free operating system. If Linux can't run web content, that means

1. You need to pay someone for an OS in order to view the web.

2. The OS market isn't open, someone else can't just make an OS that people will use, because it can't view the web.

Re:Browsers' bid for relevance is turning them into time-bombs by acdha on Saturday July 09, 2016 @02:37PM (#12062667)
You seem to be ignoring the fact that Chrome for Linux exists but even if it didn't, it seems liked you're trying to argue that other people should be compelled to support your operating system of choice, not to mention conflating a small percentage of content with “the web".

Was the OS market not open when Flash for Linux didn't exist? FreeBSD? TempleOS?

What percentage of content needs to use EME before you “can't view the web”? If everything else but Netflix works, is the web open or closed?

More to the point, what do you expect to accomplish here – is hyperbole going to convince people to use Linux, cancel their Netflix/Amazon/etc. subscription, etc? If not, I would again suggest finding an argument which will appeal to a non-trivial number of people. Why should they care enough to change their spending or contact their representatives?

Re:Browsers' bid for relevance is turning them into time-bombs by khedoros on Sunday July 10, 2016 @03:10AM (#12064818)
> What percentage of content needs to use EME before you “can't view the web”? If everything else but Netflix works, is the web open or closed?

If the EME are part of the HTML5 standard, but in practice they require some proprietary blob to operate, then the web isn't completely open. It doesn't mean that it's completely closed. Whether that matters depends, I suppose, on whether you want to take a pragmatic or ideological stance.

> More to the point, what do you expect to accomplish here

Does a complaint have to be a call to action?

> If not, I would again suggest finding an argument which will appeal to a non-trivial number of people.

I don't think an argument, as such, will sway many people. If EME (or similar closed technologies) cause enough problems for enough people (for some definition of "enough"), that will change peoples' opinions. Things have to get really, really bad before most people will ask for change.

Re:Browsers' bid for relevance is turning them into time-bombs by smallnamespace on Saturday July 09, 2016 @02:44PM (#12062692)
You already need to pay someone for a computer to view the web, and OS costs are bundled in as part of that.

The OS market wouldn't be open anyway, because it naturally forms a monopoly/oligopoly.

Re:Browsers' bid for relevance is turning them into time-bombs by tux1968 on Saturday July 09, 2016 @12:22PM (#12061989)
Netflix works great with Chrome on Linux.
Re:Browsers' bid for relevance is turning them into time-bombs by michaelmrose on Saturday July 09, 2016 @12:28PM (#12062031)
This is why I canceled my subscription. Decidedly half assed support. I'm aware of pipelight, recent versions of chrome etc.
Re:Browsers' bid for relevance is turning them into time-bombs by chriswarbo on Sunday July 10, 2016 @10:27AM (#12065677)
> Look at Netflix's support matrix now and notice how many people can now play movies without needing to install anything:

That support matrix seems to be "Windows or OSX". If you want to make an encryption standard which works on Windows and OSX, why not get Microsoft and Apple around a table to hammer out an OS service/library?

Sounds easier than getting Microsoft (IE/Edge), Apple (Safari), Google (Chrome), Mozilla and Opera around a table to do the same thing at the browser level.

Re:Browsers' bid for relevance is turning them into time-bombs by sievebrain on Saturday July 09, 2016 @06:34AM (#12060885)
I understand and sympathise with that argument, but View Source is already useless on most large sites due to extensive use of JS rendering and minification. Modern web sources aren't meant to be read by humans and it's really only one or two steps above being handed a compiled binary.

Also: Firefox is quite capable of following Apple, Microsoft and Google. The idea that MozCorp is not a Corp isn't right either.

So whilst "the web should not support rights management and voluntarily cede such content to other platforms" is a perfectly reasonable argument, I don't think the sanctity of View Source or Mozilla is a supporting point in favour.

Re:Browsers' bid for relevance is turning them into time-bombs by nanch on Saturday July 09, 2016 @10:33AM (#12061376)
Respectfully, all of your points regarding the triviality of view-source here are just wrong. Here's a test for you: go to a page and view-source; what do you see?

> View Source is already useless on most large sites

No it isn't. Web devs can easily read source on almost all sites all the time.

> Modern web sources aren't meant to be read by humans

Yes they are - that why we've got view-source.

> and it's really only one or two steps above being handed a compiled binary.

That's the point - it's NOT compiled binary.

The sanctity of View Source is exactly what's in question here, and I stand in the group that says "no" to closed-source web specifications.

Re:Browsers' bid for relevance is turning them into time-bombs by Frondo on Saturday July 09, 2016 @03:39PM (#12062926)
"Yes they are - that why we've got view-source."

So, uhh, I tried to view-source on a gmail tab. A solid wall of code. There's nothing there meaningful, not like the web pages of 1999 used to be.

If you're telling me you can browse the wall of code on a site like gmail.com and learn new tips and tricks from it, well, pull the other one, it's got bells on.

Re:Browsers' bid for relevance is turning them into time-bombs by alehander42 on Monday July 11, 2016 @04:37AM (#12069683)
oh come on, just use firebug or developer tools and the html tree tab: you have an entire inbrowser IDE for the webpage including even deminified JS
Re:Browsers' bid for relevance is turning them into time-bombs by CaptSpify on Saturday July 09, 2016 @02:56PM (#12062753)
I personally agree that sites with obfuscated JS are hard to read, and are pushing boundaries close to binary. I also think, it's absurd to use that as an argument.

Some sites are pushing shitty, hard to read code, sure. But instead of allowing them to continue working against the spirit of the system, we should shame them, and use them as examples of what not to do. If a couple of bad politicians abuse their system, we don't say "fuck it. lets go back to a monarchy"

Re:Browsers' bid for relevance is turning them into time-bombs by sievebrain on Sunday July 10, 2016 @06:33AM (#12065166)
It's not "some" sites, it's nearly all.

Heck I picked the front page of BBC News and opened it up. Wall of minified JS. Further down the page we see something that vaguely resembles normal HTML except for stuff like this:

<div id=markets_index_promo class="hidden" data-comp-meta="{&quot;id&quot;:&quot;markets_index_promo&quot;,&quot;type&quot;:&quot;remote-portlet&quot;,&quot;handler&quot;:&quot;remotePortlet&quot;,&quot;deviceGroups&quot;:null,&quot;opts&quot;:{&quot;assetId&quot;:&quot;10263779&quot;,&quot;id&quot;:&quot;market_data\/markets_index_promo&quot;,&quot;loading_strategy&quot;:&quot;post_load&quot;,&quot;position_info&quot;:{&quot;instanceNo&quot;:1,&quot;positionInRegion&quot;:3,&quot;lastInRegion&quot;:false,&quot;lastOnPage&quot;:false,&quot;column&quot;:&quot;secondary_column&quot;}}}">

Re:Browsers' bid for relevance is turning them into time-bombs by GauntletWizard on Sunday July 10, 2016 @02:41PM (#12066646)
It's no longer practical to ship source JS, if it ever was. Filesize limitations and frameworks that require recompilation are a significant chunk of the magic of the modern web.
Re:Browsers' bid for relevance is turning them into time-bombs by PavlovsCat on Saturday July 09, 2016 @01:09PM (#12062265)
> Modern web sources aren't meant to be read by humans and it's really only one or two steps above being handed a compiled binary.

Modern web sources are also made by people out for money and/or marketing, who by now even seem to have forgotten about graceful degradation and other things that would slow them down.

You don't ask IKEA what the best wood for a solid table is, what means "best" for them has to do with money and the ability to produce in bulk, while a carpenter who worked with all sorts of wood and isn't bothered about those restraints as much will give you a completely different answer. That's kind of how the web became, because IKEA is making more money with selling tables than master carpenters, or even just because they occured later chronologically, because they are "more modern" (which says nothing about quality and only something about time), they are now somehow seen as experts on tables.

Re:Browsers' bid for relevance is turning them into time-bombs by Qwertious on Saturday July 09, 2016 @11:21PM (#12064440)
This is because the Web is no longer a document viewer; it's a VM. A true modern "view source" button would just take us to the github page.
Re:Browsers' bid for relevance is turning them into time-bombs by WorldMaker on Monday July 11, 2016 @05:11PM (#12074676)
Don't forget too that for all the arguments about obfuscated or complex JS today there have been many of the same arguments for as long as server side scripting has been in use, too. The web has long been more than just "simple documents" that are easily View Sourced. That's always been part of the Web's longevity and dominance versus stricter cousins like Gopher.

It's interesting that in some ways today's JS heavy client apps are more open than similar server side apps from even just a couple years ago: obfuscated code is still viewable client side and browsers are good at providing deminified views in browser dev tools, and if sourcemaps are left in then you can jump directly to the unobfuscated/deminified sources in browser dev tools. Plus, most communications between chunky JS apps and their servers increasingly use friendly REST protocols, which again is its own sort of win for discoverability and friendliness to an informed user poking around inside of how things work.

Re:Browsers' bid for relevance is turning them into time-bombs by chriswarbo on Sunday July 10, 2016 @10:35AM (#12065704)
Incidentally, most of the pages on my site ( chriswarbo.net ) have a "view source" link which goes to the git source (not on GitHub though, since their service is proprietary)

:)

Re:Browsers' bid for relevance is turning them into time-bombs by imaginenore on Saturday July 09, 2016 @08:49AM (#12061142)
Because distributing boxes is orders of magnitude more expensive than distributing over the existing infrastructure (the internet).