News for hackers. Stuff that matters.

A comment on Tim Berners-Lee approves Web DRM, but W3C members have two weeks to appeal. Parent comment

Re:Tim Berners-Lee approves Web DRM, but W3C members have tw... by pmoriarty on Friday July 07, 2017 @03:26PM (#14721306)
"It's just the "Do you want to allow Flash to play this cool video?" story all over again."

Another comparison to existing tech is Javascript. A lot of sites break if you disable Javascript in your browser, but if you enable it you open yourself to Javascript vulnerabilities.

[ Parent | on HN ]
Re:Tim Berners-Lee approves Web DRM, but W3C members have tw... by khedoros1 on Friday July 07, 2017 @03:52PM (#14721509)
Open browsers have open, auditable Javascript engines. There can be vulnerabilities, but you aren't waiting for some company to put out a closed patch containing a fix. EME blobs are like Flash plugin blobs.

So, it's similar in the sense that enabling JS increases the potential attack surface, just like installing EME/Flash/whatever does. But at least the JS engine can be examined by whoever wants to.

[ Parent | on HN ]