News for hackers. Stuff that matters.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by featherverse on Monday September 18, 2017 @04:05PM (#15279052)
I would suggest not underestimating Mozilla's market influence.

It would be possible to create a browser that displays DRM content and ignores DRM. The only thing that content publishers could do is ban that browser. And then it would adapt to disguise itself as other browsers.

DRM on the web can only happen if all of the major players (that is, browser publishers) agree to play along.

I am very excited about this news, this is probably the most important news in weeks, and could impact the Internet for years to come.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by objclxt on Monday September 18, 2017 @05:34PM (#15279815)
> I would suggest not underestimating Mozilla's market influence.

They have no market influence. They have maybe ~10% of the market globally (I've seen figures between 5-15%), and that's primarily desktop - which is decreasing daily. On mobile it's even worse (probably less than 1%).

Any influence they have solely extends to the desktop, and that's not the primary way people are interacting with the internet nowadays.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by civilian on Monday September 18, 2017 @06:48PM (#15280374)
Market share isn't immutable! Market share changes based on capabilities. I dropped IE for FF when I got a basic understanding of computers, I dropped FF when it became clear it was a memory hog, and now I kind of toggle between Chrome and FF. I think that, with killer features like breaking out of DRM, the market share could change.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by objclxt on Monday September 18, 2017 @07:14PM (#15280520)
> I think that, with killer features like breaking out of DRM, the market share could change.

That's not a killer feature to the market: I bet 99/100 people don't know what DRM is or what it stands for. They just care that they can watch videos or not.

For better or the worse the overwhelming majority of browser users don't know, care, or have any idea about how the internet is standardized, how DRM works, and why it matters to them.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by baddox on Tuesday September 19, 2017 @01:31AM (#15282033)
I actually don't see how using the browser would provide any practical value. If you pay for a streaming service you might as well just watch the legit DRM'd version. If you're watching a pirate stream you might as well stream from a pirate who cracked the DRM on their side.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by xvilka on Monday September 18, 2017 @08:29PM (#15280876)
Of course for the worse. As usual worst things in the world come with a silent agreement of majority.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by hyperdunc on Monday September 18, 2017 @11:21PM (#15281543)
Ignorance != agreement
Re:W3C abandons consensus, standardizes DRM, EFF resigns by veeti on Monday September 18, 2017 @08:27PM (#15280865)
> I think that, with killer features like breaking out of DRM, the market share could change.

Indeed, that would kill Firefox once and for all.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by nf05papsjfVbc on Tuesday September 19, 2017 @08:39AM (#15284080)
Unless you value the fact that Firefox comes from an organisation which values the freedom of the user and are willing to tolerate a dip in quality (as perceived by the typical user, not a techie) compared to a product from an organisation which has far greater resources at its disposal, and unless a lot of other people are going to do the same, it'll never work.

I use Firefox and almost never use another browser but I'm afraid over time, it's share of the market will fall. This news makes me fear so even more. I do hope I am proven wrong though. I've seen one monopolist fall. I do hope I see many more.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by mirimir on Monday September 18, 2017 @10:42PM (#15281384)
Indeed. People who want nothing to do with DRM will want alternatives. Once DRM-integrated browsers are compromised at scale, more people will want alternatives.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by featherverse on Saturday September 23, 2017 @10:56AM (#15320007)
> They have no market influence.

In other words you have no idea what you're talking about, and why should anything else you say be treated any differently?

Re:W3C abandons consensus, standardizes DRM, EFF resigns by subroutine on Tuesday September 19, 2017 @12:27AM (#15281775)
If what the above says is true (Though Im not sure it is possible), and Mozilla can provide a way to display DRM content without adopting DRM standard, I would think that would increase its marketshare.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by featherverse on Saturday September 23, 2017 @10:58AM (#15320017)
You nailed it.

The user cares about access to content. The user does not care about DRM. The user does not care about corporate interests. Ad blockers are proof of this. The user wants what they want, and the people who provide that to them with the fewest hassles are the ones who win.

Everyone needs to appreciate that "cost" is a gigantic hassle to most people, no matter how much money they have. The concept of owning their content is another big consideration for people, which is why we saw "rental" models for video streaming fail in the past compared to "ownership" models.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by admax88q on Tuesday September 19, 2017 @12:44AM (#15281858)
> It would be possible to create a browser that displays DRM content and ignores DRM.

The DMCA makes this illegal. No browser vendor is going to take that risk. Maybe some anonymous developers will release a firefox fork or similar, but that's a big risk. Not to mention, most groups who pirate content tend to keep their methods secret and only release the content.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by featherverse on Saturday September 23, 2017 @10:59AM (#15320020)
The only people who give a @!#$ about the DMCA are lawyers. It's going to be repealed eventually.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by rplnt on Tuesday September 19, 2017 @07:55AM (#15283780)
DMCA has no reach outside of USA.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by Mindwipe on Tuesday September 19, 2017 @02:11PM (#15287241)
But multiple regional equivalents exist.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by zentiggr on Tuesday September 19, 2017 @09:19AM (#15284323)
Well, it didn't until TPP, and what's to stop more agreements pushed through closed channels to make it truly global?
Re:W3C abandons consensus, standardizes DRM, EFF resigns by idbehold on Monday September 18, 2017 @04:08PM (#15279079)
So hopefully Firefox will simply display DRM content and ignore any restriction DRM imposes.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by Crespyl on Monday September 18, 2017 @04:36PM (#15279289)
EME plugins will use whatever user-hostile platform-specific opaque techniques necessary to communicate with the host OS in their attempt to ensure compliance.

If the browser interferes with them, or the OS can't promise a "secure" chain from plugin-output > display, they can just refuse to stream the content.

You can bet EME plugins will be highly platform specific, and poorly supported, if at all, on platforms that respect their users.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by icebraining on Monday September 18, 2017 @06:01PM (#15280068)
Firefox will heavily sandbox their EME plugins. They get no direct access to the host OS.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by Crespyl on Monday September 18, 2017 @08:43PM (#15280944)
Anyone taking bets on how long it will be before CDMs start requiring extensions that allow access to platform Output Protection/HDCP mechanisms?

If nothing else, the standard already allows for the CDM to access the network (albeit managed by the user-agent) which means, for example, it could ping Microsoft to ask about this particular Win10 computer (as identified by user agent, IP address, and/or user account data from the content provider).

Netflix/Microsoft/Hollywood/etc. aren't going to stop until they can close the loop as much as possible, with MS and hardware manufacturers already working to tighten things from the other end (see HDCP and the various frameworks for "protected content" that MS has been working towards).

Either providers will push to integrate those platform-level frameworks, or they'll just stop offering content to web browsers entirely.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by kagamine on Tuesday September 19, 2017 @03:36AM (#15282514)
> with MS and hardware manufacturers already working to tighten things from the other end (see HDCP and the various frameworks for "protected content" that MS has been working towards).

HN users would do well to keep this in mind the next time they are singing MS's praises about how MS are embracing open source and becoming the savior of all things programming.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by pjmlp on Tuesday September 19, 2017 @02:08AM (#15282162)
Apple and Google also have platform-level frameworks on their OSes.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by smsm42 on Monday September 18, 2017 @04:59PM (#15279511)
Probably not while Mozilla Foundation is a US organization.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by jandrese on Monday September 18, 2017 @04:07PM (#15279060)
Wouldn't publishers just refuse to distribute keys to said browser?
Re:W3C abandons consensus, standardizes DRM, EFF resigns by wyager on Monday September 18, 2017 @04:08PM (#15279080)
You build a plugin framework that lets users pirate keys without exposing the author to excessive DMCA risk.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by jandrese on Monday September 18, 2017 @04:10PM (#15279099)
I think the author of such a plugin would be at considerable legal risk.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by featherverse on Saturday September 23, 2017 @11:02AM (#15320037)
So are all major piracy operations in existence today and yet most of them operate without any real penalties. Look at The Pirate Bay and Giganews, both of those have been operating under enormous "legal risk" for over a decade.

Piracy is never going away and this re-run of corporations trying to control content created by people (corporations are not people) will fail the same way that every single previous effort has failed. Piracy will outlive the old fools pushing for these programs.

I'm not saying piracy is the answer, but once these troublesome corporate fools have all died sanity will return to the market and piracy will be replaced by pro-consumer models.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by noir_lord on Monday September 18, 2017 @04:41PM (#15279352)
If they where in the US.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by DCKing on Monday September 18, 2017 @05:25PM (#15279742)
Lots of this stuff is so US focused. Any European nation for one will let you reverse engineer stuff you buy or download to your own heart's content in the safety of your own home. I expect many countries in the world are civilized like that.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by dannyobrien on Monday September 18, 2017 @10:34PM (#15281357)
Almost every country, with the exception of Israel, has implemented the anti-DRM provisions of the WIPO Copyright Treaty using similar language to the United States, or worse. In the European countries, it's embodied in the European Copyright Directive: https://en.wikipedia.org/wiki/Copyright_Directive#Technologi...

That's one of the reason why we argued so strongly that the W3C should include a covenant. Even if EFF continues to successfully obtain temporary exemptions from the DMCA in the tri-annual review, we can't do that for security researchers or lobby for similar fair use exemptions in every country.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by DCKing on Tuesday September 19, 2017 @03:28AM (#15282483)
You're right. I've done some digging, and some similar language has been implemented at least in the Netherlands (for the Dutch, this is article 29a of our Auteurswet). Although it's somewhat vague, it does bum me out. It seems the Dutch implementation has not been enforced all that often (mostly to combat game console mod chips), but it has been used to fight security researchers publishing stuff on security weaknesses in our public transport RFID cards... Thought we were better than that.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by noir_lord on Tuesday September 19, 2017 @05:38AM (#15283059)
It's a terrain, some points are higher than others.

Not convinced any country isn't underwater though.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by versteegen on Tuesday September 19, 2017 @01:16PM (#15286575)
New Zealand isn't a party to that WIPO treaties [1], but it does have a law implementing restrictions on circumventing Technological protection measures (TPM) [2]. But unlike the DMCA, the NZ law lists lots of exceptions that allow you to circumvent TPMs. In fact it says "Nothing in this Act prevents any person from using a TPM circumvention device to exercise a permitted act under Part 3." Part 3 of the Copyright 1994 [3] is the (very long) part that lists everything you can do with a copyrighted work, including the NZ equivalent of fair use, research, education, archiving, backup, decompiling software, etc, etc.

[1] http://www.copyright.org.nz/international.php

[2] http://www.legislation.govt.nz/act/public/2008/0027/latest/D...

[3] http://www.legislation.govt.nz/act/public/1994/0143/latest/D...

Re:W3C abandons consensus, standardizes DRM, EFF resigns by mfukar on Tuesday September 19, 2017 @08:20AM (#15283959)
> download to your own heart's content in the safety of your own home

Nein.

Re:W3C abandons consensus, standardizes DRM, EFF resigns by wolfgke on Monday September 18, 2017 @05:37PM (#15279842)
> I think the author of such a plugin would be at considerable legal risk.

If they are caught... ;-)

Re:W3C abandons consensus, standardizes DRM, EFF resigns by QAPereo on Monday September 18, 2017 @04:29PM (#15279230)
That sounds like a strong case for anonymous authorship.
Re:W3C abandons consensus, standardizes DRM, EFF resigns by btown on Monday September 18, 2017 @09:05PM (#15281036)
> displays DRM content and ignores DRM

Nothing says "attempting to survive as a legitimate corporate entity" like "let's flagrantly violate https://en.wikipedia.org/wiki/WIPO_Copyright_and_Performance... ..."

Re:W3C abandons consensus, standardizes DRM, EFF resigns by mirimir on Monday September 18, 2017 @10:44PM (#15281400)
Who needs to "survive as a legitimate corporate entity"? All you need is to publish a browser. And basic browsers aren't that hard. Just be anonymous.

Edit: If oligarchs create unworkable rules, why not create a new game?

Re:W3C abandons consensus, standardizes DRM, EFF resigns by AnssiH on Monday September 18, 2017 @05:04PM (#15279566)
I don't believe this formal standardization will affect end-user web browser features.

All major browsers (Firefox, Chrome, IE, Edge, Safari) have already included HTML EME DRM support for years, so it is a de-facto standard already.