News for hackers. Stuff that matters.

A comment on Tim Berners-Lee just gave us an opening to stop DRM in Web standards. Parent comment

Re:Tim Berners-Lee just gave us an opening to stop DRM in We... by nickpsecurity on Friday October 07, 2016 @03:54PM (#12663486)
What does that mean in regards to parent's comment? If it renders, it went through both a graphics driver and GPU. Therefore they're in attack surface for malicious data designed to take over privileged code and/or DMA engines.
[ Parent | on HN ]
Re:Tim Berners-Lee just gave us an opening to stop DRM in We... by rockdoe on Friday October 07, 2016 @05:39PM (#12664111)
The CDM doesn't need to do any rendering, and interaction with the GPU can be limited to writing in a designated shared memory area.
[ Parent | on HN ]
Re:Tim Berners-Lee just gave us an opening to stop DRM in We... by dogma1138 on Saturday October 08, 2016 @12:20AM (#12665654)
Because it's isolated and there is no DMA really.

There is a reason why the graphics driver is in user mode, and why the memory is virtualized.

The application doesn't have traditional DMA unless you load a privileged kernel which you can't do via a browser.

An application can't access the memory of another application via the display driver this is a solved issue.

[ Parent | on HN ]