News for hackers. Stuff that matters.

A comment on Tim Berners-Lee approves Web DRM, but W3C members have two weeks to appeal. Parent comment

Re:Tim Berners-Lee approves Web DRM, but W3C members have tw... by Buge on Friday July 07, 2017 @11:40PM (#14723942)
>Video playback only has one code path, instead of totally separate browser and plugin video pipelines. Video codecs are complex, so this means less security attack surface.

Nope. For any effective DRM (aka what all browsers use) the video codec decoding happens inside the DRM module. Otherwise anyone could just patch the open source browser and grab the decrypted compressed content coming out of the module. In reality, they can only grab the decrypted decompressed content.

[ Parent | on HN ]
Re:Tim Berners-Lee approves Web DRM, but W3C members have tw... by om2 on Saturday July 08, 2017 @12:42AM (#14724118)
In the browser I'm most familiar with the internals of: most of the playback logic is done by shared software, and the decode of the video track is done in hardware in the common case, for both encrypted and unencrypted videos. There are some forks in the path but a lot of commonality.
[ Parent | on HN ]