Hacker News Reader

I can hardly understand the motivation of the corporations keeping to invest in DRM and software activation bullshit tech despite it's obvious it is going to be cracked inevitably (and quickly).

The goal of DRM is and always have been to lock users inside a platform, not to prevent piracy. It gives companies market power because users cannot easily switch to a better alternative without losing their entire digital collection.

https://www.defectivebydesign.org/faq#copyright

> DRM is not about limiting copyright infringement. Such an argument attempts to make DRM appear beneficial to authors and is based entirely on a (very successfully advertised) misrepresentation of DRM's purpose. To illustrate the absurdity of the argument, consider the nature of file sharing: to obtain a copy of a file without permission, downloaders go to a friend or a file sharing network, not a DRM-encumbered distribution platform. If DRM existed only to prevent unauthorized sharing, every distribution method for that particular piece of media would have to be distributed by an uncrackable DRM-encumbered distribution platform, which is impossible on its own. So long as one copy becomes available without DRM, countless more are easily produced. Industry proponents of DRM are well aware that DRM is not a copyright enforcement mechanism. DRM is only marketed as a copyright enforcement mechanism to mislead authors into tolerating and even defending it.

> The goal of DRM is and always have been to lock users inside a platform,

In that case it fails to accomplish that goal for the same reason. It doesn't work and will be defeated. When you download a song, or movie, or ebook that has been stripped of its DRM you aren't tied to anything. Why introduce unnecessary annoyances for paying customers which often drives them to pirate copies that aren't crippled by DRM? As long as something works like they want it to, most people wont care what platform they use to get it.

> As long as something works like they want it to, most people wont care what platform they use to get it.

For almost anything, there are (at least in big cities and in the Internet) many vendors offering nearly the same with nearly the same quality level at nearly the same prices.

But I can't say I don't care whom do I get the same service thing every particular time. I'm more likely to choose whoever feels more nice and offers even slightly more freedom and flexibility. Once I've chosen a vendor I'm much more likely to stick with them (and choose them every time I need something else they can offer) as long as I don't feel severely dissatisfied.

E.g. once I've got a GMail (GMail is and has always been the very best e-mail service anyway, you can hardly be dissatisfied with it) account I would use everything Google if only they didn't piss me off politically (with stiff like this particular discussion subject) and scare me by terminating other's peoples accounts. But I actually am migrating everything I can away from Google and Gmail because Google seems becoming more and more evil (I even suspect RIAA only attacked ytdl after Google told them to).

That's fair, I think most people will stick with whatever easiest.

Up until some line gets crossed (like Op). The definition of the line is subjective for each user.

Very good point, and I would add that line can be moved based on individual circumstances. I've seen people complain about issues with a service, but the moment I offer an alternative and a way to migrate (painlessly for me to do, and I typically offer to help them) suddenly all is good with their service and they're sticking with it. I've even pushed a little further in the past to say I will do ALL of the work for you, just sit back and relax and in a couple hours done. Most still refuse and I don't get why once all barriers have been removed.

Maybe because it was a hush hush compromise intended to make it possible rather than impossible to watch netflix on linux at slightly reduced quality. Windows and Mac PCs with closed source browser would watch at full quality due to hardware drm. No one was motivated until now it seems to blow the lid off the weaker libre drm since a likely outcome is it just get turned off and services require hardware drm only going forward. We'll be lucky if we can still play videos on Linux or Chromium one year from now.

I wonder whether the situation will improve now that Firefox has support for hardware decoding on Linux. After all, the DRM could be completely handled by the GPU without any help from the driver. Just feed it some binary stream and tell it where to put it.

Although the issue with your compromise theory is that not all browsers are supported for high definition even on MacOS or Windows, at least theoretically (don't have a Netflix account to check). In particular, Chrome isn't supported, although Chrome-based Edge is.

From the Netflix help page on watching UHD [0]:

    Netflix is available in Ultra HD on Windows and Mac computers with:
      Microsoft Edge for Windows
      Windows 10 App
      Safari for MacOS 11.0 or later

From the Netflix help page on watching on Windows [1]:

    Windows computers support streaming in the following browser resolutions:
      Google Chrome up to 720p
      Internet Explorer up to 1080p
      Microsoft Edge up to 4K*
      Mozilla Firefox up to 720p
      Opera up to 720p
      Windows 8 app up to 1080p
      Windows 10 app up to 4K*

The situation is similar on MacOS, where only Safari supports 1080p [2]

[0] https://help.netflix.com/en/node/13444 [1] https://help.netflix.com/en/node/23931 [2] https://help.netflix.com/en/node/55764

If I can't watch movies on Linux I'll just skip watching them or torrent them. I already hate dealing with running an OSX vm just to IM my parents, and without hardware acceleration I doubt video decoding would work anyway.

Has that Cinavia nonsense been cracked though? It's the reason I haven't knowingly bought anything Sony in the last decade.

If I made a facemask with that printed on it (as a QR code or whatever) would google stop trying to identify my face? Or would that paint a huge red target on my face?

Probably a good idea to also incorporate that into some very-clearly-satire related artwork on the mask, to help with the legality. :)

Some HN'ers might be too young to remember the DeCSS [0] saga and, in particular, the t-shirts.

The EFF, who successfully represented two defendants accused of publishing the DeCSS source code in the two main cases, has the details [1]:

> In Bunner, the [ DVD Copy Control Association ] summarily dismissed its claims after the California Supreme Court ruled that computer programs could be preliminarily restrained from publication only in very narrow circumstances. The California Court of Appeals ruled that those circumstances were not met in Mr. Bunner's case because the program was not a trade secret at the time it was published, but instead was widely available around the world.

> In Pavlovich, the California Supreme Court ruled that Matthew Pavlovich, a Texas resident who published DeCSS on the Internet, could not be forced to stand trial in California. The landmark decision laid out clear jurisdiction rules for claims arising from publishing information on the Internet. DVD CCA's attempt to seek U.S. Supreme Court review of the decision was also rejected.

Additionally, the one known author of DeCSS was acquitted in a criminal trial in Norway.

Obligatory EFF donation link: https://supporters.eff.org/donate/

--

[0]: https://en.wikipedia.org/wiki/DeCSS

[1]: https://www.eff.org/cases/dvdcca-v-bunner-and-dvdcca-v-pavlo...

--

EDIT: See also "AACS encryption key controversy" and the "free speech flag": https://en.wikipedia.org/wiki/AACS_encryption_key_controvers...

WideVine has support for revoking private keys if they get leaked, which duped a bunch of smart TV customers before. I'm pretty sure the key is useless already, or will be very soon. Google can just roll new keys whenever the old ones get published through their Chrome update mechanisms.

See https://np.reddit.com/r/netflix/comments/jq9wdb/netflix_capp...

What would Google do if I emailed it to my own gmail account?

Delete the email? Ban me?

I emailed you the key, please report if you are banned so we can all learn the answer

"As per our phone conversation, ..."

Sure, why not both?

They deleted/locked accounts for less during the G+ real name frenzy.

It is also on factordb: http://factordb.com/index.php?query=229526192260060317332780...

https://web.archive.org/web/20201113115225/https://news.ycom...

Geez, man! At least format it correctly so folks can copy and paste! :-)

Or, just provide the various components:

  p = 49429002897777261000839566786960900348661596779839481928152034285352681641807686782292757653824830822496391192085567895071852258385592280527115222429444042313542936301974046594875899181233742229945549738766655661560628018266563543784515148821370566306893780280151659623161213410927305309695027848755504091783

  q = 53602170802863928289500972217307025477290164757146419371852251620670300136901587204821451746991406880988053571342615187459978423766579984968561470104139545987787266751875098417999761783952366342302556060906681062460952347680147798276356366502237505269309185857430061068092584194979239221868593482021566547439

  n = 2952619226006031733278005132921693726100042011592660779869675820212138145939883834312253789060663461194528411412874982355146048292836507534000115353036163880492136645451564382009196182566124637478277389304691251397819894417106558057773147299342857185830516918343274468842497499522414750028740163342718036209925403503207235945059541974923084211147227388348091101183403929204074586611952779802158116643840147678791643283706927948872797793849591629882391903699724329001797545580009544763555067611040895630150211640906898700482769873702547829023169433411394249565049633221004211830736052381384491512655254513796679593737

  d = 142033101700003260678755863863267700134374886049156296238778043258513471417667391237505300342672722921505586813412391537592394712287451780540489111338082979901966887630936873112829448279475520471433931949082770983040743133849146064289054900225131501940560027662491217132619227565578893295128589581903273904124801461070363532834633728769178636552784294153467969250254358604276515140477045217505629092433114246051368410587618590542410950189868285511930901887132942539241081579465767831350539339965000260768249119651905050152151634478714116343168832447694793716937575319879226685046081583200335708696821445923072794535

  e = 65537

Thanks! Also shared on Aether (getaether.net) just in case

Disclaimer: I am not affiliated with the Aether software/platform.

Wait why does it need a private key that's pushed to everyone's device? How does that actually secure anything?

I skimmed the code but I'm still not seeing it.

Technically: one must have the private key to perform decryption. There are many schemes that attempt to protect the original key and derive a decryption key, or do various other things to prevent disclosure of the private side of a key pair.

Practically: the point is not to "secure" anything, but to make it obvious that any infringement is due to "circumventing a protection device." Circumvention is also not allowed under DMCA, because it was obvious to the authors of the law that to view content one must indeed decrypt it.

It is also here: https://pastebin.com/0U14ahpm