Slashdot Mirror


Tim Berners-Lee Approves Web DRM, But W3C Members Have Two Weeks To Appeal (defectivebydesign.org)

Reader Atticus Rex writes: A high controversial Web standard has received a seal of approval from Tim Berners-Lee, the inventor of the Web and its chief technical decision-maker. Opponents like the Free Software Foundation and Electronic Frontier Foundation say that the standard, Encrypted Media Extensions, is a step backwards for freedom, privacy, and a host of other rights on the Web.

There's still a two-week window in which members of the W3C can appeal the decision, and the Free Software Foundation is asking people to email and encourage them to do so.
Update: The W3C has announced that it would publish its DRM standard with no protections and no compromises at all.

66 of 137 comments (clear)

  1. two weeks wasted by turkeydance · · Score: 3, Insightful

    done deal

    1. Re: two weeks wasted by Anonymous Coward · · Score: 3, Informative

      This. The corporate takeover of the internet has been unavoidable from day one. I'm amazed it lasted so long. Future historians will wonder - if they will ever be allowed to do this kind of research - how a decentralized and essentially free tool of communication that put everyone on the same level ended up centralized, subverted and locked up with just negligible and ultimately ineffective opposition. There will never be another chance, corporations and governments will be on high alert to swoop down and nip in the bud any future attempts to create anything like that. We blew it. It's over.

    2. Re: two weeks wasted by Anonymous Coward · · Score: 2, Insightful

      Ask all the people who signed up for Facebook. It appears to be what they wanted.

  2. Who died and appointed TBL God? by mellon · · Score: 3, Interesting

    Why is it just up to Tim Berners-Lee to decide yes or no on this?

    1. Re:Who died and appointed TBL God? by Desler · · Score: 1

      You mean other than the fact that he's the founder and director of the W3C?

    2. Re:Who died and appointed TBL God? by MrDoh! · · Score: 2

      !Yeah, who is he and what's HE ever done for the Web?

      --
      Waiting for an amusing sig.
    3. Re:Who died and appointed TBL God? by DRJlaw · · Score: 3, Informative

      Why is it just up to Tim Berners-Lee to decide yes or no on this?

      Who would you have decide this? A standards organization, and a standards committee, headed by a person who has the responsbility to announce the decision? With an appeals process?

      Ok. The W3C. The Advisory Committee on Encrypted Media Extensions. Tim Berners-Lee, the person who pretty much set up the the involved standards. With an appeals process and W3C member vote.

      Not that you care about any of that. Any process that doesn't produce the outcome that you want is the product of death and appointment to Godhood, it appears.

    4. Re:Who died and appointed TBL God? by mellon · · Score: 4, Insightful

      I take it that you are implying that he has a right to decide because he invented HTTP and HTML. Why would that be so?

    5. Re:Who died and appointed TBL God? by mellon · · Score: 1

      No. Neither of those is a reason. I mean an actual reason. W3C is supposedly an open standards body. Why is one person making decisions? Or is that not actually what's going on, and this was (as often seems to be the case) badly summarized? :)

    6. Re:Who died and appointed TBL God? by Dracos · · Score: 2

      The W3C is about as toothless an organization as can be found. All the respect I had for TBL evaporated when he acquiesced to WHATWG's HTML5 insanity. EME should not even be a thing.

      Yes, I would like a proper standards body (say... IEEE or ISO) to make these decisions rather than a weak consortium who only produces recommendations.

    7. Re:Who died and appointed TBL God? by mellon · · Score: 1

      No, I was literally asking why an individual gets to make the decision, because that's what the article says. If it's not the case that an individual gets to make the decision, then what is the actual process. I don't know, and the article doesn't say. The reporting on this has generally said that it was up to TBL. That doesn't make sense to me. Coming from the IETF, we do not believe in individuals making decisions, and we don't believe in voting either. We decide based on rough consensus, which is based on the technical merits, not on who can send the most people to the meeting, or who can afford to buy the most votes. I thought the W3C operated on similar principles, but if so, this article is doing a poor job of communicating that process.

    8. Re: Who died and appointed TBL God? by Anonymous Coward · · Score: 2, Interesting

      Take a look at the "members", the fees it takes to gain "membership" and the complete lack of input from the community. Only corporations get a seat at W3C. Those that aren't corps are funded by one of the existing members, so the distinction is meaningless. Standards bodies can be, and are, corrupted by the profit motive.

      This is the time to start pushing a better, more secure technology that corps cannot twist to squeeze money out of.

      Gopher is a legitimate contender, but lacks a security layer. If we put together an RFC to add TLS or OpenPGP or some other security to gopher, it can completely replace the Web for everything except Javascript, which was never part of HTTP to begin with.

      Gopher servers and clients are both simple to make and simple to debug. They just require more thought to be put into file organization.

      Everything else should be native code instead of pushing the complexity into the browser.

    9. Re:Who died and appointed TBL God? by Desler · · Score: 2

      He gets to make the decision because he's the director and that's the rules.

    10. Re: Who died and appointed TBL God? by Anonymous Coward · · Score: 1

      $2,250 USD doesn't seem so bad for "Enterprises and non-profits with 10 or fewer employees, who are not also membership organizations, revenues less than 3,000,000 USD and have never been a W3C Member." It's only $953 USD for "all other organizations, including non-profit organizations and government agencies" from Haiti.

      Current members include corporations, small businesses, universities, non-profits, open source software foundations, etc. Interestingly enough, neither the FSF nor the EFF are members despite having a strong positions on W3C standards.

    11. Re: Who died and appointed TBL God? by Anonymous Coward · · Score: 1

      So you're fine with forcing people to band together, form organizations, and pay a so-called standards body for a voice at the table?

      The only thing W3C is open for is business.

    12. Re:Who died and appointed TBL God? by K.+S.+Kyosuke · · Score: 1

      and what's HE ever done for the Web?

      Screwed it?

      --
      Ezekiel 23:20
    13. Re:Who died and appointed TBL God? by mwvdlee · · Score: 4, Insightful

      It's not. It's up to Google, Microsoft, Apple and Mozilla.
      If they are on board, it'll get implemented no matter how much opposed.
      If they aren't, the standard is dead on arrival.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    14. Re:Who died and appointed TBL God? by phantomfive · · Score: 1

      Alan Kay is saying some harsh stuff there. "The web browser isn't even as good as a square wheel. It's a broken wheel."

      --
      "First they came for the slanderers and i said nothing."
    15. Re:Who died and appointed TBL God? by Anonymous Coward · · Score: 4, Informative

      ISO? you forgot how ISO ignored all of there own standards when approving the Microsoft Word data format as a standard without need for technical review and allowing thousands of Microsoft affiliated parties to become a temporary member and vote on a standard proposed by Microsoft. ISO will make any pile of shit an official ISO standard as long as someone is willing to pay for temporary memberships.

    16. Re:Who died and appointed TBL God? by Rockoon · · Score: 1

      Exactly this.

      The W3C is how these companies have chosen to organize it. Nothing more.

      The fact that Mozilla so rarely gets its way on the topic of DRM is of no surprise, because their position on DRM is wholly unreasonable.

      I actively seek out non-DRM'd content. What I dont do is actively meddle with other people on the justification that I dont like DRM. If you want DRM'd content I will not be the guy that stops you... but Mozilla wants to be that guy. Fuck Mozilla, pretending to support freedom but actually an enemy of it.

      --
      "His name was James Damore."
    17. Re:Who died and appointed TBL God? by Aighearach · · Score: 1

      Agree completely! I hate DRM and I don't touch it. Having a standard will just make it easier for my browser to refuse to display it, and to provide me with a useful error message.

    18. Re:Who died and appointed TBL God? by mellon · · Score: 1

      Yes, I'm so fucking stupid that I can't figure out the w3c concensus process by reading that web page. What a fucking maroon I am. The IETF process is buried in documents and lore, and fairly impenetrable if you don't have a day to spend on it. It looks like the w3c process is too. So I asked, figuring somebody would answer. And look, you did! Not quite the helpful answer I was hoping for, but you can't look a gift horse in the mouth, I guess.

    19. Re:Who died and appointed TBL God? by mellon · · Score: 1

      Do you kiss your mother with that mouth?

    20. Re:Who died and appointed TBL God? by Frobnicator · · Score: 1

      Of course those same orgnizations could fight it if they chose.

      Banning known members of the committe from their services could be quite painful and within their rights. Suddenly no support for their Apple devices includeing iPhones or iTunes. Google is blocked along with YouTube and gmail and docs. Websites may give "Service denied becuse your policies harmed us. We do not support you as a customer." Neflix and Hulu stop working if the companies don't want the extra CPU costs of encrypting all their content.

      Many companies got behind the SOPA protests, blacking out
      much of the 'useful' web to show that they may go dark because of the concerns.

      I imagine if suddenly a huge portion of the useful web were denied to the committee they'd quickly rethink their decision.

      --
      //TODO: Think of witty sig statement
    21. Re:Who died and appointed TBL God? by EETech1 · · Score: 1

      Linus would agree

    22. Re: Who died and appointed TBL God? by Uncle+Warthog · · Score: 1

      I see, and what the annual rate for a voting individual?

      I'm not sure, you'd have to ask Sir Tim how much he got for railroading this abomination through the process. Oh, wait, you're asking how much it costs to join, aren't you? No idea, I'm afraid.

    23. Re:Who died and appointed TBL God? by Rockoon · · Score: 1

      Thats not good enough for Mozilla.

      Mozilla wants to be the guy that stops you. Its rooted in the same justification as any religion, such as Christians and Liberals. Its for your own good, our our own good, etc...

      --
      "His name was James Damore."
    24. Re:Who died and appointed TBL God? by Aighearach · · Score: 1

      If I have to use an extension, I'll briefly curse mozilla and move on.

  3. Re: L0de Radio Hour is on the fucking air by aliquis · · Score: 1

    Need a href.

  4. Created the Web and yet still blind by Anonymous Coward · · Score: 5, Interesting

    This will destroy the openness of the Web if allowed to stay. The last hope will be with browser makers: no standard gets supported if code isn't written. This is corporate capture of the Web. Personally, I'm done with the Web. The layers of JS, security vulnerabilities out the wazoo, malvertising, and endless seas of "you must register (so we can track you) to proceed" walls make the Web a joke.

    Smart people will move to other protocols that aren't so profit-driven or privacy-destroying.

    1. Re:Created the Web and yet still blind by Highdude702 · · Score: 1

      Like IRC

    2. Re:Created the Web and yet still blind by Desler · · Score: 1

      The last hope will be with browser makers: no standard gets supported if code isn't written

      It is

    3. Re:Created the Web and yet still blind by Desler · · Score: 1

      EME already exists.

    4. Re:Created the Web and yet still blind by Anonymous Coward · · Score: 1

      I'm going back to telnet, thank you very much. I can type in my HTTP and POP3 commands from memory.

      Bad joke aside, will a new protocol do for us? How do we get people to use an entirely new application stack? How do you prohibit companies from pulling the same stunt over again?

      You can't.

    5. Re:Created the Web and yet still blind by alexo · · Score: 4, Insightful

      The last hope will be with browser makers: no standard gets supported if code isn't written.

      What part of "EME is supported by [...] Google, Microsoft, and Apple" you did not understand?

    6. Re:Created the Web and yet still blind by macraig · · Score: 1

      gopher: FTW!

    7. Re:Created the Web and yet still blind by Bing+Tsher+E · · Score: 2

      We don't need to move to another protocol.

      Just use a deprecated older version. I.e. run NoScript and when pages won't work, you can either whitelist them or navigate away.

      Smart web developers won't want to lose eyes. Even Slashdot will load with javascript blocked (except mobile slashdot)

    8. Re: Created the Web and yet still blind by Anonymous Coward · · Score: 2, Informative

      Your concern is well-placed. The answer will depend on how much bullshit the public will take before leaving.

      To start with, you're thinking in terms of an application stack. The Web was meant to be a series of documents linking to each other. Everything else was tacked on by one half-asser or another; Brendan Eich's Javascript, Microsoft's XmlHttpRequest object, Mozilla's plugin system, and Adobe's Flash (which worked on said plugin system) all contributed to the mess that today's Web is.

      Cut away all that bloat, and you get HTML+CSS. What can replace those? ...Gopher's a good start. However, it needs a security layer on top if we want any privacy or verifiability. But it has everything it needs: text and links. A gopher client could be made to show content in any way the user wanted, because gopher is pretty much pure text. Links to MIME-types that aren't already plain-text can be opened in other programs that the user already has: image viewers, video players (even streaming!), the sky's the limit.

      This also keeps gopher clients small and clean, and leverages UNIX philosophy by allowing each program to do the job it needs to.

      Will this be for everyone? Hell no. And I don't care that it meets their needs. The public allows so much bullshit in their lives, they deserve it when the curtain falls. They were warned, and they didn't listen.

      As a developer, gopher is extremely simple and easy to validate. The tooling has been mostly untouched, so there's a ton of opportunities to make better clients, etc.

      Businesses aren't interested because there's only IP addresses to base things on. No cookies to track you with, no cross-site scripting, no ads that look like content, no bullshit at all. Just Plain Text with links. Gopher, as a community, is very anti-corporation and anti-app. You can't sell anything to those people aside from maybe hosting, so businesses will only waste their time and money by building on gopher.

    9. Re:Created the Web and yet still blind by infolation · · Score: 3, Funny

      or IRL

    10. Re:Created the Web and yet still blind by thegarbz · · Score: 1

      This will destroy the openness of the Web if allowed to stay. The last hope will be with browser makers: no standard gets supported if code isn't written.

      The code is written. The only difference is: Will the code be standard, or will the code be customised and defined by each individual media outlet pushing their own agenda.

      Notice how you can't get 4k Netflix on certain platforms? DRM baby!

    11. Re:Created the Web and yet still blind by tlhIngan · · Score: 1

      Well, you could move to apps, which do exactly that. I mean, you need to run the Netflix app to watch Netflix, or with this, you can use the web browser as another option, instead of having to have an app.

      It's curious, since people hate the proliferation and closing off of content using apps, wanting it to be on the web. Yet people also don't want these technologies on the web, wanting people that want those things to close it all off on apps, instead.

      Content's already spreading towards the app area, and if it goes further, soon the web would be like a bunch of iTunes landing pages asking you to install apps to view the content. Already annoying enough that forums start to bug you if you access them via the website on a mobile device to install the app.

    12. Re:Created the Web and yet still blind by Billly+Gates · · Score: 1

      Look it's going to be done by the corporate media companies.

      Are you going to help them make it more open or will they push Adobe and Silverlight plugins and proprietary codecs? The old 1980's phrase Money talks Shit walks is more truth than you can imagine. No one cares what a few hippies on a website think.

      Investors will pour money and demand DRM or will pull their cash. If you won't be part of the solution you are part of the problem and you can kiss the web goodbye and Linux goodbye as they push malware ridden codecs and plugins for content viewing.

    13. Re:Created the Web and yet still blind by squiggleslash · · Score: 1

      ECE is not a standardized DRM system like CSS if that's what you think. It's essentially another plug-in architecture and has all the problems associated with plug-ins, including browser, CPU, and operating system dependence, a lack of mandated security, and so on.

      Indeed, this is the fundamental problem with the W3C - this is an organization that's supposed to be standardizing the web, and it's actually unstandardizing it with proposals like this one. This proposal will force a situation where webmasters will be actively encouiraged to create websites that only work in certain browsers and on certain operating systems.

      It's totally fucked up and the only reason it's going ahead is because three of four major browser makers own their own streaming media stores. Literally, that's the only reason.

      --
      You are not alone. This is not normal. None of this is normal.
    14. Re:Created the Web and yet still blind by drinkypoo · · Score: 1

      This will destroy the openness of the Web if allowed to stay.

      Really? Then how come Flash didn't manage it?

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    15. Re:Created the Web and yet still blind by drinkypoo · · Score: 1

      It's totally fucked up and the only reason it's going ahead is because three of four major browser makers own their own streaming media stores. Literally, that's the only reason.

      That's the only reason that you can imagine, but all that proves is that you're short on imagination. The reason it's going ahead is to prevent another Adobe Flash. If we don't include this functionality in the browser, then we will just get it shoehorned into the browser by some other means, and then it will be even less compatible and it will come with all kinds of other baggage as well. This system does not try to pretend that DRM does not exist, as you are doing, but it still avoids the maximum possible annoyance for users given that the alternative is even worse.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    16. Re:Created the Web and yet still blind by squiggleslash · · Score: 1

      The reason it's going ahead is to prevent another Adobe Flash.

      No, it doesn't. It replaces Flash with different-Flash.

      Again: ECE is NOT A DRM SCHEME. It is a standardized interface to a NON-STANDARD plug-in framework where the PLUG-INs implement DRM.

      Basically, after getting rid of Flash, we're now going back to a Flash equivalent - in some ways, worse, because Flash implemented video UIs slightly more efficiently than the half assed combination of HTML5 and PROPRIETARY PLATFORM AND BROWSER SPECIFIC plugins that this MORONIC proposal entails.

      As I said, the only three companies supporting it are the three with media shops. No other browsers are behind this proposal. It's pretty easy to see why, and only hard if you're stupid enough to think ECE is a DRM scheme.

      --
      You are not alone. This is not normal. None of this is normal.
    17. Re: Created the Web and yet still blind by careysub · · Score: 1

      This is an interesting idea. Adoption will be an immense problem of course, but it is not as if HTTP/HTML is a required method of Internet communication. An alternate protocol set could be run over the net to provide the same - or better - functionality. Some major player deploying it would be needed it to prevent it from being DOA I expect.

      What is that saying about the Internet routing around damage? Perhaps it could route around damaged protocols.

      But the web with all of its investment is not going away. So we still have to deal with it.

      --
      Starships were meant to fly, Hands up and touch the sky - Nicky Minaj
    18. Re:Created the Web and yet still blind by Aighearach · · Score: 1

      All you have to do to protect the openness of the web is to frequent sites that are open.

      That's all.

      You don't need to be protected from people huddling in walled gardens. The existence of walled gardens is of minimal concern to those who choose to live outside of them. If you find yourself at a wall, simply turn around and go elsewhere, and stop trying to peak over and covet whatever polished plastic you see inside.

    19. Re:Created the Web and yet still blind by Highdude702 · · Score: 2

      pfft IRL is over rated.

    20. Re:Created the Web and yet still blind by thegarbz · · Score: 1

      No that's not what I imagine. But what I imagine is an architecture that is standardised in a common way so we can eliminate the: "This content only works in Edge" direction we are moving in.

  5. Re:I was reminded of imteresting times past... by Desler · · Score: 2

    The Web is not the Internet. Hurr hurr...

  6. Easy by Anonymous Coward · · Score: 1

    Just fork the web browsers and fork the specifications. If everyone ignores him they become the new web standards de facto

    1. Re:Easy by Anonymous Coward · · Score: 2, Interesting

      Good or bad, all DRM is still technically broken since you receive the encrypted data along with the decryption keys. Sending encrypted data to a browser without the keys is just as ridicules.
      The whole standard is based around the browser promising to the server that it will decrypt the data and show it to the user, without making the decrypted data or the (encrypted data with the keys) available to the user in any other way.
      - The browser is code that runs on the hardware owned by the user, and can't be trusted to tell the truth. Advertising has made users switch to browsers that can ignore what the webserver wants, and do what the user wants instead. Once this new DRM is used for advertising (and you know it will) browsers have a legitimate reason to ignore what the webserver or the standard tell it to do.
      - The browser has no control over the encrypted data and keys, and the decryption code must run on the hardware that is owned by the client, so the user can copy and decrypt the data without the browser even knowing about this.
      - The browser has no way of knowing that the decrypted data send to the OS video or audio drivers isn't copied by the operating system or its drivers. It only takes one person with an open source OS, and that in a world where almost everything runs on Linux.
      - Analogue hole: putting a camera in front of the screen and feeding the audio into a tapedeck will result in a quality that is way better than a recording made in a cinema, and most people are only interested in an 800 MB video and youtube audio-quality. Many devices also have digital outputs for audio and video, so a digital copy can be made too with the right equipment.
      - once a copy has been made, it can be shared with everyone, modified browsers can be shared with everyone and modified drivers can be shared with everyone running an open source operating system. Maybe we will see a lot more dual-booting in the future.

  7. Re:Happy Friday from the Golden Girls! by Anonymous Coward · · Score: 1

    oy vey, it's annuda "sexconker forgot the checkbox" shoah !

  8. Re:I was reminded of imteresting times past... by Desler · · Score: 1

    You? You conflating the two as if they were the same thing.

  9. Re: L0de Radio Hour is on the fucking air by Gay+Kwanzaa+Darkie · · Score: 1

    Yessuh you can suh.

    Link example 1 and example 2.

  10. Re: Like Linus, Bjarne, etc by Anonymous Coward · · Score: 4, Insightful

    Negotiation is like alcohol: a little bit can jazz up a night. Too much, however, and the next thing you know you're waking up to a whore snorting lines off of your belly.

    Never go full retard. This decision, if maintained, is an unambiguous "fuck you" to the community that made the Web worth building to begin with. EME is no different than trusting a black box. Given its purpose, it will only gain telemetry abilities and OS lockouts. Do you want a Web that forcibly blocks functionality of your machine? That's what these businesses are willing to do to protect their "assets". They believe their rights trump all others'. Their view of the Web is toxic and cannot be anything but bad for the general public.

    So, are you advocating for a few dozen companies having remote control of millions of devices? They'll just bake it into their DRM, and bam, anyone watching a stream 'protected' by EME would be vulnerable to remote attack.

    This is the part where you no longer own the device, and bills will be written to attempt to make that legal. I'd rather not live in that world.

  11. Re:As a C++ programmer by GuB-42 · · Score: 1

    HTTP and HTML are still as free as ever.
    EME is just a Javascript API that triggers when encrypted media content arrives. And the implementation can be as simple as returning "no, I don't support DRM" and still be compliant.

  12. DRM is here by Anonymous Coward · · Score: 1

    fuck that, DRM is ere whether we like it or not. Far better to have it standards controlled so at least everything can implement equally rather than the current BS where various platforms are locked out.

  13. DRM.... by Zurkeyon3733 · · Score: 1

    You mean that thing the internet cracks within hours every time you release a new one? Yes, greedy ass media companies of the world... PLEASE waste more money on this :-)

  14. Re:I was reminded of imteresting times past... by drinkypoo · · Score: 2

    I immediately thought of one of my most popular vice presidents, Al Gore, who stated, that he "invented the internet."

    And I immediately think that you think you're smarter than Vint Cerf, in spite of voluminous counter-evidence (your posting history)

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  15. What gives W3C its power? by pedz · · Score: 2

    Is it time for a new standards organization that listens to the people rather than the corporations?

    Why not have a true free web standards committee and browsers and various entities would try to comply with it rather than W3C.

    Remember, W3C is the place that gave us XML and XHTML (two rather hideous abortions) and they sat on their hands with HTML 5 until other groups (WhatWG.org in particular) came along and started to make progress. Then W3C jealously took it back over. Why? It baffled me at the time. Who cares about W3C? They are obvious a compromised organization.

  16. I will just block or ignore this crap by gweihir · · Score: 1

    I recently moved to block all pictures from my favorite news site, as they started serving obnoxious ads (animated, blinking, flashing) from the same server so that ad-blocking became massively more difficult. Two weeks later, I find that I do not really miss the pictures. Bit of a surprise, really, but the site now loads very fast and has entirely stopped annoying me. This is the same: Use DRM, lose me as a viewer.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  17. Adobe vulnerabilities now a web standard by WaffleMonster · · Score: 4, Insightful

    If you've loved the last two decades of comically insecure Flash players and PDF readers your going to love the future where anyone's systems can now be owned by closed source adobe CDM modules.

  18. First use will be against ad-blockers by knorthern+knight · · Score: 1

    There's already a preccedent for lawsuits about cutting out content http://www.vanityfair.com/holl... A legitimate outfit that deletes x-rated content from DVD/BluRay videos *THAT YOU HAVE LEGITIMATELY PURCHASED* has been sued for merely deleting sex scenes, etc.

    This is an ugly precedent. If you circumvent DRM to block ads, that'll be yet another charge they can throw against you. This would probably include even something as simple as noscript or a hosts file.

    --

    I'm not repeating myself
    I'm an X window user; I'm an ex-Windows user
  19. Re:As a C++ programmer by EETech1 · · Score: 1

    It's not a browser fingerprint, it's your private key!