News for hackers. Stuff that matters.
Re:Microsoft PlayReady – Complete Client Identity Compromise by somenameforme on Thursday May 09, 2024 @11:08AM (#40308998)
If you approach it at the most fundamental level, it seems like a clearly impossible goal to achieve. You are having users playing back content on their private devices, and then want to try to prevent them from copying that. That's basically impossible to achieve on somebody's own machine, and literally impossible to do once two enter into the picture. In the absolute worst case a high resolution/hertz cam on one's own screen with a quick ML software polish job, would look near to completely indistinguishable from the original content.

I imagine the reason so much money has been spent on it is because studios prefer to blame piracy than content for increasingly poor sales. So they see it as their salvation and are willing to pay big bucks, even if it's impossible. That's a primo ground for hucksters and charlatans to make a killing. Something similar happened in poker where players wanting to use fully automated software to make their decisions ended up just stepping outside the cat&mouse game and using a setup with a second computer + cam - completely and absolutely impossible to detect.

Re:Microsoft PlayReady – Complete Client Identity Compromise by bee_rider on Thursday May 09, 2024 @12:21PM (#40309803)
> In the absolute worst case a high resolution/hertz cam on one's own screen with a quick ML software polish job, would look near to completely indistinguishable from the original content.

I’m not even interested in piracy (no ethical dilemma I just can’t be bothered), but I think this would be an absolutely fantastic tech demo, and also very funny. Ultimately the video has to be displayed on a screen, so this must be the final defeat for DRM, right?

Re:Microsoft PlayReady – Complete Client Identity Compromise by kuschku on Thursday May 09, 2024 @02:04PM (#40311019)
Every now and then I do event tech for some small tech conferences, lectures, etc.

A while ago we had an issue where, under some circumstances, macbooks would enforce HDCP for their output. Obviously an issue if you're trying to record and stream a talk. And we didn't have any hdcp removal devices on hand.

So I set up a Sony FX30 with fujinon broadcast optics on a tripod, aimed at the screen. Some white balancing and adjustments to brightness and ISO curve later and the image was undistinguishable from the original.

We actually used that setup for all talks on that day, and it worked perfectly fine.

Re:Microsoft PlayReady – Complete Client Identity Compromise by layer8 on Thursday May 09, 2024 @05:29PM (#40313149)
Getting the colors right would be difficult.
Re:Microsoft PlayReady – Complete Client Identity Compromise by eddd-ddde on Thursday May 09, 2024 @11:15AM (#40309079)
I imagine in the future DRM is directly embedded in the viewers brain and if it detects pirate content it just fries you.

I genuinely can't imagine any other form of DRM being successful.

Re:Microsoft PlayReady – Complete Client Identity Compromise by LadyCailin on Thursday May 09, 2024 @01:33PM (#40310632)
Drink a verification can to continue.
Re:Microsoft PlayReady – Complete Client Identity Compromise by idle_zealot on Thursday May 09, 2024 @03:10PM (#40311870)
You could require that all devices capable of video or audio display or capture embed models to detect copyright-protected content, and only proceed with playback or capture if they are connected to the internet and are able to verify some cryptographic liscense is valid. Put all this logic in some secure processor that self-destructs at the slightest sign of potential reverse-engineering or irregular behavior, along with physical anti-tampering measures that make phreaking or uncapping any components liable to trigger self-destruction. Then make the circumvention of any of these measures or attempts to create or import non-compliant display or capture video or audio content carry some heavy criminal penalty, such that any group well-resourced enough to attempt bypass would judge doing so foolish.

That would probably "work".