News for hackers. Stuff that matters.
Re:HTML5 Video and the End of Plugins by olefoo on Sunday December 07, 2014 @03:02AM (#8711623)
You don't want to encrypt your video chats with your lover? With your business associates?

I guess you Don't Have Anything To Hide™.

Re:HTML5 Video and the End of Plugins by shmerl on Sunday December 07, 2014 @03:29AM (#8711675)
EME has nothing to do with security and privacy. It's all about DRM. If you want to encrypt your video chats you'd use something like ZRTP.
Re:HTML5 Video and the End of Plugins by neohaven on Sunday December 07, 2014 @09:05AM (#8712180)
Sadly, good, solid DRM (Here's an encryption key, an encrypted file, and a secure way for me to limit when and how you can use those) is the ultimate form of Snapchat.

If you don't have DRM backing it up, the scenario is "Here's a key, a locked box, do whatever you want with the decrypted file." Which is less secure than being able to actually limit usage of the decrypted file.

Nothing here implies that I think DRM is a good thing, mind you. I just think saying something is "just DRM", as if DRM wasn't basically encryption + limitations on use.

Re:HTML5 Video and the End of Plugins by expr- on Sunday December 07, 2014 @09:14AM (#8712202)
> a secure way for me to limit when and how you can use those

That would be having them access the file in a restricted environment (literally, guards and stuff). You can't have people accessing your secrets in the comforts of their own homes and at the same time not be able to reproduce them in some form – even if an exact duplicate of the original data would be infeasible to obtain.

Re:HTML5 Video and the End of Plugins by malka on Sunday December 07, 2014 @10:38AM (#8712449)
It's the illusion of security. The DRM contains the private key (because, well, you have to decrypt it, at some point). A motivated hacker will be able to get it, and decrypt the file for its own use.
Re:HTML5 Video and the End of Plugins by shmerl on Sunday December 07, 2014 @01:43PM (#8713085)
No, as soon as you have some black box unauditable code, you shouldn't trust it for any such thing. And DRM by definition is hiding something from the user.
Re:HTML5 Video and the End of Plugins by zimbatm on Sunday December 07, 2014 @07:03AM (#8711940)
When using WebRTC then data is already encrypted on the transport layer [1], otherwise use SSL. EME is a rebranding of DRM and nothing else.

[1]: http://tools.ietf.org/html/draft-ietf-avt-dtls-srtp-07