How Firefox Will Handle DRM In HTML
An anonymous reader writes "Last year the W3C approved the inclusion of DRM in future HTML revisions. It's called Encrypted Media Extensions, and it was not well received by the web community. Nevertheless, it had the support of several major browser makers, and now Mozilla CTO Andreas Gal has a post explaining how Firefox will be implementing EME. He says, 'This is a difficult and uncomfortable step for us given our vision of a completely open Web, but it also gives us the opportunity to actually shape the DRM space and be an advocate for our users and their rights in this debate. ... From the security perspective, for Mozilla it is essential that all code in the browser is open so that users and security researchers can see and audit the code. DRM systems explicitly rely on the source code not being available. In addition, DRM systems also often have unfavorable privacy properties. ... Firefox does not load this module directly. Instead, we wrap it into an open-source sandbox. In our implementation, the CDM will have no access to the user's hard drive or the network. Instead, the sandbox will provide the CDM only with communication mechanism with Firefox for receiving encrypted data and for displaying the results.'"
As with all DRM schemes, it's only a matter of time before this is broken. However, to save the decrypted content to the hard drive, one has to, well, have access to the hard drive. Does Firefox's architecture actually get in the way of users eventually pirating the content? Might have to switch browsers if that's the case.
THIS is a good reason to oust a Mozilla CEO.
Given the recent update, I suspect the answer will be the same for both.
(I feel like this joke is nerdy even by slashdot standards.)
Mozilla just ousted their chair over something that screws over far fewer people than this.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
You can either have open source or DRM - anything where the end user has control of the software can be broken, period. Trying to keep people from messing with your DRM is a losing battle, anyway - there are always more bored hackers that will break whatever scheme you come up with.
Beyond that, why would you bother with a browser-specific technology? It's yet another thing that looks shiny in the 'features' column but no one will ever use, because the market share is too low to justify it. Oh, and Microsoft and Apple will implement it differently, and Google won't bother. So, pissing off open source folks to implement a 'feature' that nobody will actually use?
Meh.
Why can't I mod "-1 Idiot"?
Current number of websites using EME is 0.
Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
PaleMoon is a Firefox fork that appears to be doing very well. I dont know for sure, but I suspect they will correctly sort this into the unwanted features bucket and skip it.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
What we need to do is figure out how to apply DRM to the personal information emanating from our machines. You will then be able to lawfully defend against those who profit from that information. Of course you could work out an arrangement to get a slice of the gross coinage as well ;).
Current number of websites using MEME is over 9000.
Get free satoshi (Bitcoin) and Dogecoins
As I said before, this is an ideological loss for no practical gain. Now that we've lost, let's release browser plugins to break the shit out of EME, forcing DRM back into shitty proprietary browser extensions that have to be installed one user at a time!
"When information is power, privacy is freedom" - Jah-Wren Ryel
Oh look. Here's a whole _page_ of Ayn Rand quotes about compromise
or...
http://aynrandlexicon.com/lexi...
Many folks have a go at the idea that they can somehow tame evil or compromise with it without being tainted too much. I'm not sure this has ever really worked out.
There is a lot to like about the Richard Stallmans of the world. They are clear about the what and the why, and they stick to their guns.
My opinions are my own, and do not necessarily represent those of my employer.
Of course, it's useful to cooperate and work on standards, but when you put that above your own principles -- in the case of Mozilla, that should be "an open and accessible internet" -- you're essentially dead.
If W3C institutes a bad standard, you don't have to follow them. Instead, Mozilla should've told them that they're not following suit, or even that this is the last drop and W3C can go fuck itself, and find a more creative solution to the problem of financing the internet's infrastructure.
But this is an open-source browser we're talking about. If we don't want DRM, we can make a build of it without the DRM piece.
Companies will use DRM schemes whether they're supported by browsers or not. I don't entirely agree with Firefox deciding to implement EME, but it doesn't actually matter all that much.
Gopher over TOR.
"Flyin' in just a sweet place,
Never been known to fail..."
How long before someone codes a module to bypass the DRM handling?
From Cory Doctorow's article today...
So it's a method to run untrusted, potentially hostile code in a jail to minimize the harm it can do to the user and the host system. (In an open source setting you must assume all closed code is hostile)
Can they do this to other plugins too? Like flash?
All plugins that Firefox uses run in a separate container already. I do not know what the cost of jailing said container would be.
Rather that deal with it in such a complex way, they should just do what linux did for years with MP3s. Popup box "This is an MP3, we can install the thing you need to listen to it, but it's not open source. Do you want it? Yes/No" Simple as that. Let users chose. I don't see how this is any different.
Then they can let their plugin community quietly subvert the entire mechanism, just like they have everything else, and the industry will abandon it.
They left the best part of the article out: with the move to EME we finally can get away from those lousy insecure plugins from Adobe. All thanks to our new CDM from Adobe! ... Oh wait. n/m.
Not to mention GnuZilla.
All plugins that Firefox uses run in a separate container already. I do not know what the cost of jailing said container would be.
Google created Native Client, which includes a statically verifiable subset of x86 instructions that a compiler can target, which makes a userspace jail straightforward to implement. Mozilla has no interest in implementing any of the Native Client stack. Instead, it wants people to compile C to JavaScript using Emscripten and then run that JavaScript in an optimizing virtual machine.
Brendan Eich may have had some opinions that people don't like, but at least he stuck to his morals. Now that he's gone, the new CTO, this Andreas Gal, seems more likely to compromise. DRM is evil, but Dr. Gal thinks he's clever, and is trying to wrap it in an open-source sandbox. Let the exploits come.
Oh well, now I do have an actual reason to boycott Firefox.
Have a nice time.
Fine for me.
But relase this stuff as an extension.
An "Official Extension" written directly by Mozilla, properly advertised and recommended and all that, if you wish. But make an extension.
Then watch the % of users using it (and laugh, but that's IMHO).
Mastering the English language is fucking easy: all you have to do is to put an f* word in every fucking sentence.
Obviously you are correct. A UI which exposes control interfaces to the user is bad. The future is to expose control interfaces ONLY to remote ad agencies, and keep the dirty users in their place.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
if/when browser mfgs. do this -- I will simply keep switching browsers. Plain and simple. When they all do this I will write my own //GH
Translation: We don't like this, but if we boycott it we are going to lose users to browsers run by companies more concerned about keeping media companies happy so they can keep licensing content.
Youtube uses EME for 1080p streams, no EME and you only get 720p or lower
They can shape the DRM space by refusing to accommodate it. Anything else is de facto acceptance of it.
Or I could have just kept reading to the next line where they say pretty much the same thing.
Hmm, looks like it's not updated anymore so probably not ideal.
Mozilla did not "oust" him. He stepped down after the wider community spoke up. This is being forced by a bunch of DRM happy corps (MS, Apple, Google) and their media industry buddies (Netflix, MPAA, et. al.)
yeah..
anyways, the idea is that closed source plugins would talk directly to signed video drivers.
now, nobody could have an open vision of web where thats feasible.
world was created 5 seconds before this post as it is.
http://slashdot.org/comments.p...
Well, here you are standing on principles. :)
You wanted to watch Youtube vids, so you run Google Chrome, which has even more liberal implementation of this DRM.
You didn't boycott Youtube.
So, this is why Firefox is implementing it. They no longer have the leverage. Google Chrome is bundled with Flash, with Adobe Acrobat, with Oracle Java. It is pushed on every google website people interact with - Search, Plus, Docs, Youtube, Translate. There's the google app store, ChromeOS, Android...
I doubt Brendan would have held out against this either. Firefox' choice is to accede to its users, or become even more marginalised.
I'm glad they are using their limited remaining leverage to try and at least ensure user privacy and security and offer something that is cross-platform, with an open source auditable wrapper and actually works under Linux.
-- perl -e'print pack"H*","6e656d6f406d38792e6f7267"'
There are other options as well.
You have a LOT of Windows and Shareware, in that list. ;-)
I browse from a 1995 era SGI, and a QNX Neutrino RTOS VM. I'm contemplating Acorn RiscOS on a RaspberryPi.
"Flyin' in just a sweet place,
Never been known to fail..."
But who would win in a fight? RMS or Ayn?
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
Oh, and BTW, I find that https://addons.mozilla.org/en-...
works pretty darn well if you want to watch YouTube in Firefox without plugins.
You might have to fiddle with the addon pref "YouTube video loading method" and possibly hit the http://youtube.com/html5/ opt-in page first, but it usually just works.
-- perl -e'print pack"H*","6e656d6f406d38792e6f7267"'
about a decade ago, IBM first wanted to implement something like Secure-Boot. They went to the open source community, wrote a FOSS Linux driver, but we told them to take a hike. They did.
Later, MS did it, with much secrecy, and it was rammed down our throats.
I don't like DRM one bit, but this seems like good damage control.
The only differences I've noticed is that they made the tabs almost impossible to distinguish, because Flat Is Cool!
I've found that it's now much easier to see the active tab.
and they appear to have moved the back and forward buttons.
They are still where they used to be, on the left side of the address bar.
Fork the code. Maybe mozilla has no qualms about fucking its users with shady blobs but as a user, i sure as hell have a problem with it.
assert ($mad as $hell);
Good people go to bed earlier.
Youtube uses EME for 1080p streams, no EME and you only get 720p or lower
Youtube uses Media Source Extensions for 1080p streams. That's completely different; it's a way to source data to a <video> element from Javascript. They use it to implement their dynamic HTTP streaming, where rather than just sucking down a file you suck down individual file segments allowing dynamic quality adjustments based on your available bandwidth. There's no DRM involved.
I've got Firefox 3 running on a 1997 era SGI...
I'm starting to think GNU is the problem with "GNU/Linux" these days.
Lotsa good Tuxedo browsers. Just sayin.
rewriting history since 2109
I thought it was only a little evil bit.
rewriting history since 2109
I've got Firefox 3 running on a 1997 era SGI...
The pink address bar... I edited .Xresources to make it pale yellow, for a while.
"Flyin' in just a sweet place,
Never been known to fail..."
Ah, that explains it; you're the Clifford Stoll of this place!
Someday, ask me about my connection to Markus Hess. We had a Fortran 77 class together, before his infamy...
"Flyin' in just a sweet place,
Never been known to fail..."
People naturally shoot the messenger and it goes in reverse as well. Not logical, but that that is how it goes.
Quote Hitler all you wish but it is not practical to cite him as the source of the quote. Same goes with any other evil person who might say something relevant, cogent, or true. (Yes, Ayn Rand IS evil and I'm one who doesn't think the sociopaths she practically idolizes are evil.)
Democracy Now! - uncensored, anti-establishment news
It's sad seeing this, but its also good to keep in mind - this standard was pushed by Microsoft, Google and others. As such its already "live" in Chrome (as of Release 25 if memory serves, current Chrome release is 29 I believe) as its in WebKit (so ad Safari and Opera as well). Microsoft will add it to IE if they haven't already - leaving Firefox and its slowly dwindling user base. Since 75% of the PC web and nearly all of the mobile web will be making use of this - it'd be a market share death sentence for Mozilla to take a stand and say we just won't implement these "standards" in Firefox - (JMHO, but most general users would notice that what they want using this cgap works with Chrome, IE etc. and not with Firefox and just stop using Firefox making the Firefox user base melt away faster). I don't like Mozilla doing this, but I can easily understand why they are.
You really think this sort of decision, complete with all the negotiations involved, was made over the course of a month?
We've tried sandboxing the plug-in process Flash runs in. It breaks all sorts of existing Flash-using stuff, unfortunately.
The benefit of having a sandbox from day 1 is that you don't have that problem.
Hmm, I wonder if that's why youtube-viewer only seems to be able to stream 720p and lower resolutions.
It's amusing to read the reports on right-leaning news sites. According to them, he was forced out by the 'gay mafia.' They use that phrase quite a lot.
Yeah, after intense pressure he was "allowed to resign". That's totally a different thing.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
I remember when Linux was good/decent too. Windows always had more stuff written for it, because it was a standard, and it was always difficult to find equivalent stuff for Linux for a lot of stuff. But nowadays Linux suffers from the same ills that plague the rest of the software world - bloat. Like Winzip 15 is 110 MB. For a friggin zipper prog. Basic Linux 3 comes on 2 floppies, and includes tar gz as a tiny fraction. What the hell is Winzip 15 doing that takes 77 floppies?
You can opt not to use DRM in the future. I for one never ever watched a DVD, because of the DRM it contains. Except a few minutes one of my friends played and I watched it by accident. But I abstain from DRM. I also bought a book on google books just to find out what I bought came with DRM. Yuckkk! Oh well, but they should have told me in advance, and then I would not have purchased. I'm also a halfass vegetarian, I don't eat meat at home all year except some Chinese takeout on like on Good Friday, or when I pass E-check emissions testing, or I get hungry at work and the vending machine if full of meat-sandwiches, and candybars don't really cut it for the price - have you seen how expensive vending machine things are compared to what you get? Vending machine stuff keeps shrinking in size and going up in price.
So anyway, DRM is coming, DRM lockdown is coming. Grab your downloads while you can from the web, and don't ditch XP/Win2k/Win95 because you got grandfathered rights with those. Hopefully. You might have to bury your old computers in your backyard, to hide them from gov't raids, when they become illegal because it's possible to use nonDRM stuff on them, like it used to be in the good old days.
To be fair, they both screw people in the ass.
A very real difference is that one of them only wants to do that with the consenting.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
That's precisely why I don't have any references to my employer on my social media accounts.
I am free to say that I think that "marriage equality" is a ruse. It's a trick designed to destroy the institution of marriage and use the power of the state to crush religious freedom. And since my name and my employer are so far separated, I can't be blackmailed over it.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
I don't have an issue with non-invasive DRM. Don't misunderstand me. I don't like a lot of things that are common in modern setups, and liked how simple things used to be. That doesn't mean that I won't watch a DVD. Because I do. I use Flash to watch Amazon on demand. But I agree that a lot of programs have gotten bloated, either in size or feature bloat. Plus, I don't like the current trend of removing configuration options from everything. And the methods that stay get more and more complicated.
I'm starting to think GNU is the problem with "GNU/Linux" these days.
Curious - what are you running on the SGI? I've got two Octanes here with IRIX 6.5.29 (I have the official disk set for .29 from SGI), and for a while I had an O2 with .30 and Gentoo Linux installed. I'm using one of the Octanes as a webserver right now (running a custom compiled Apache 2.4 and PHP 5.5).
I'm starting to think GNU is the problem with "GNU/Linux" these days.
I am not a Netflix customer
I do however wath some videos on Amazon (Prime)
Yeah, Youtube now only encodes 360p and 720p single-file versions of videos at this point; if you don't support DASH, that's all you get. Notably 480p doesn't seem to be on this list generally. Firefox itself won't support enough MSE to run Youtube until (I think) v31, bug here.
And... now I'm actively looking for a new casual browser.
It's open source, can't you just remove the part you don't like?
Off-topic, but I've always wondered - why on earth do people still use WinZIP when every major GUI has had transparent Zip support for years and years?
this is bigger than an open source project or even one browser
this is about the standards of the internet and openness...no DRM is just as important as Net Neutrality
the W3C are total sell-outs to corporate interests in DRM...complete and total...now it appears firefox has joined them
the WHATWG is the only reason we are stuck with 90s-era spaghetti code on websites now...they developed HTML5 and finalized CSS3...
HTML would be spyware if the W3C had its way...and HTML5 would not exist w/o the WHATWG
Thank you Dave Raggett
Are Adobe going to make a Linux version of the DRM module? Because their record with Linux versions of their PDF DRM tech is VERY POOR. We get research articles from the British Library which are DRM'd, and our Linux users can't read them. One solution is to complain to BL at which point they will often just email you a plain old unDRMd PDF. The mega-facepalm thing is that the British Library came out against DRM-content a few years ago, and have done a massive backtrack because the publishers didn't like it.
Whether DRM is a bad thing or an insanely bad thing (ok, or a good thing, whatever), I don't ever want to see "This Content Cannot Be Viewed On Your Nerdy Linux Operating System" popups ever. But if this is Adobe's shitcreek we're wading through, I think I will.
http://slashdot.org/comments.p...
Well, here you are standing on principles. :)
You wanted to watch Youtube vids, so you run Google Chrome, which has even more liberal implementation of this DRM.
You didn't boycott Youtube.
I feel no inconsistency.
I've been using computers a long time. In the old days, you would use the Gopher program to access Gopher services, you would use the FTP program to transfer files using FTP, you would use RealPlayer to listen to RealAudio streams. I think of Google Chrome as an insanely capable access client for Google services. Mozilla thinks I should be using Firefox for every web site? They're being morons.
Google's web properties are broken, like we think of IE6-ActiveX web sites as being broken. No, Youtube's HTML5 doesn't always work. Just usually doesn't cut it.
As for what Google gets from me, I use Adblock Plus, and run most of my sessions in short-lived Incognito windows. They're going to have to work for their keep.
Have a nice time.
Oh hey, you might also want to uninstall your Linux distribution because of binary blobs in the kernel. Of course they are not mandatory, neither they are loaded at all times, but EVIL PROPRIETARY BOLLOCKS.
Unfortunately, the answer to that is why software business is so difficult. Why do people use Borland Delphi when there is Lazarus, why do they use Windows when there is ReactOS/Wine, why do people use MS DOS when there is FreeDOS, why do people use Maple when there is Maxima - this last case illustrates that software used to be not a business, when Macsyma was developed, same when Unix was developed in its early stages, and FreeBSD/Linux were maintained free competition to the commercial overpriced and gargantuan licensed Unices. This core issue is why DRM is a must from the point of view of people who put the daily bread on the table by coding. I for one used to like Adobe Acrobat 3 and 4, and even 5 was decent, but starting with 6 it was yuckkk, and my favorite version now is Foxit Reader 2.3 (as newer versions of this one suck too.) But with DRM'd pdf's you only have one choice - Adobe Digital Editions 2.0, written in dotnet, crawling painfully beyond belief on a 5 watt 7 hr battery life HP Mini 210 Intel Atom chipset netbook, compared to the same stuff without DRM read in Foxit Reader 2.3. The amount of pdf readers out there is huge, but with DRM there is only one: Adobe, whether it sucks or not.
The UI changes do not bother me that much, but the fact that it's much slower to start up does.
Admins of sites don't like themselves blamed. They will just hang a big sign saying "your browser can't support DRM, so switch to the one that does"
By the way, have there ever been open-source DRM solutions? I don't remember those.
My Indigo R4000 Elan runs 6.5.22. That was the end-of-the-line for the older, GIO MIPS machines. I got the disc set on eBay, years ago.
I have a purple Indigo2 Max Impact - I think it's on the same Irix rev. I can only run one space heater at a time. :-)
There's a funky board made, to use PS/2 peripherals for the Indigo proprietary mouse and keyboard. I have that plugged to two PS/2-USB adaptors, which each have Bluetooth adaptors, 1 for mouse, one for KB. The whole arrangement curls around the back of the enclosure.
"Flyin' in just a sweet place,
Never been known to fail..."
Might one just extract all the non-DRM stuff from an open source like FireFox to create a DRM-only browser that I could use on a dumb box with no HD or permanent OS (I'm thinking a CD-bootable linux box that held just the FireFoxDRM so it could watch DRM stuff, then I'd use my old copy of FireFox with no DRM for my real life. Or is this not just about protecting users from DRM-enabled vulnerabilities?
"There is no god but allah" - well, they got it half right.
What can firefox do with it's sandbox? DRM will be loaded as a DLL, it will have it's own resources, it doesn't even need firefox to give it access to files. IMHO, the only benefit this mess we call internet had was being open, and it's gone. No matter what you do.
this shows you're essentially taking the industry view...you're taking the label's side when they sued John Fogerty for "plaigarizing himself"
that's your position...it has been dispelled ad infinitum here on /. so just go away and never post again
this shows your ignorance
Steve Jobs was a brilliant technology *marketer* because he had whateverthefuck genius is required to let labels put their music on iTunes.
it was a snow job...the DRM on itunes purchased songs has been cicumvented and torrented all over the world
copyright is fine...the **creators** have the right to control their art (not the bullshit capital-hogging idiots biz people at labels) bottlenecking technology with "DRM" because you don't understand scalability in digital media
this is because you don't understand technology...that's the problem here...you and ignorant people like you
Thank you Dave Raggett
why does it matter if you rank DRM above Net Neutrality in importance?
that's like saying, in your humble opinion, death by hanging would be better than death by lethal injection
it's a completely and utterly pointless distinction and you waste everyone's time by making it
*both* opposing DRM'ed HTML like the W3C & firefox support AND supporting net neutrality are necessary and can both be done simultaneously
Thank you Dave Raggett
Firefox should stand for an open web. there are browsers like chrome, to support drm. The people firefox might lose, are not the people, who use firefox because they want an open web. Having the maximum of users isn't a neccessary goal for an opensource project, but only for a for-profit company. Firefox is no such company. Lets say google stops sponsoring firefox. Will it die? Of course not, it will continue to be improved by volunteers, maybe even with a better morale than now, not only regarding DRM.
If you think the institution of marriage is in danger, you should be pressing for making divorce illegal. (Way more people get divorced every year than gay people get married.) As you're not, your position is indistinguishable on every level from a homophobe who simply doesn't want gay people to have the same rights; that gay people are second-class citizens. Don't be surprised if you get confused for one, as people honestly have no way of telling you apart. Of course, if you were just hired as the CEO of a very public company, and it turns out you gave money to a fringe group who were actively trying to deny rights to people, and you didn't do anything to apologise for attempting to deny rights to people, you'd get fired. Shocker. Big surprise.
If they were a "fringe group", the majority of voters wouldn't have sided with them.
LK
"Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
Because not everyone thinks the same. Why do people drive different cars? Why do people pick different jobs? Why do some people live in the country and other in Manhattan? Welcome to the real world.
Ah yes. The old because it actually works defence...