Hacker News Reader

How feasible would it be, instead of encryption/decryption in the browser source code (which can be defeated easily), to do decryption and rendering in javascript, perhaps with emscripten + asm.js optimizations? That should provide a reasonable amount of security through obscurity.

View on HN

The problem, as with any DRM scheme is that the plaintext is available somewhere. Figure out where the buffer is, read it via the JS console (or Pin if the browser won't cooperate) and you're done. Asm.js probably offers as much protection as a normal binary, although the niceties of the JS runtime might make developing patches to dump streams easier than in native code.

I'd definitely say it's feasible, although I'm not sure it would add much beyond what Flash/Silverlight already provide.

Reply on news.ycombinator.com