Most active commenters
  • zeroCalories(3)
  • tonyhart7(3)

←back to thread

2071 points K0nserv | 36 comments | | HN request time: 1.146s | source | bottom
Show context
zmmmmm ◴[] No.45088995[source]
> In this context this would mean having the ability and documentation to build or install alternative operating systems on this hardware

It doesn't work. Everything from banks to Netflix and others are slowly edging out anything where they can't fully verify the chain of control to an entity they can have a legal or contractual relationship with. To be clear, this is fundamental, not incidental. You can't run your own operating system because it's not in Netflix's financial interest for you to do so. Or your banks, or your government. They all benefit from you not having control, so you can't.

This is why it's so important to defend the real principles here not just the technical artefacts of them. Netflix shouldn't be able to insist on a particular type of DRM for me to receive their service. Governments shouldn't be able to prevent me from end to end encrypting things. I should be able to opt into all this if I want more security, but it can't be mandatory. However all of these things are not technical, they are principles and rights that we have to argue for.

replies(38): >>45089166 #>>45089202 #>>45089284 #>>45089333 #>>45089427 #>>45089429 #>>45089435 #>>45089489 #>>45089510 #>>45089540 #>>45089671 #>>45089713 #>>45089774 #>>45089807 #>>45089822 #>>45089863 #>>45089898 #>>45089923 #>>45089969 #>>45090089 #>>45090324 #>>45090433 #>>45090512 #>>45090536 #>>45090578 #>>45090671 #>>45090714 #>>45090902 #>>45090919 #>>45091186 #>>45091432 #>>45091515 #>>45091629 #>>45091710 #>>45092238 #>>45092325 #>>45092412 #>>45092773 #
1. fastaguy88 ◴[] No.45089202[source]
Really not a libertarian, but why shouldn’t Netflix have the right to choose who they distribute content to? They negotiated conditions with the creators, why shouldn’t they be able to specify the DRM? No one is forcing you to subscribe to Netflix. Or even to buy an iPad.
replies(6): >>45089227 #>>45089303 #>>45089346 #>>45089360 #>>45089420 #>>45089426 #
2. ranyume ◴[] No.45089227[source]
>why shouldn’t Netflix have the right to choose who they distribute content to?

power asymmetry

replies(2): >>45089271 #>>45089281 #
3. cm2012 ◴[] No.45089271[source]
There are dozens of sources of online streaming entertainment, and its not exactly a vital good.
replies(3): >>45089282 #>>45089296 #>>45089318 #
4. zeroCalories ◴[] No.45089281[source]
TBH I don't care if Netflix wants to abuse such an asymmetry. I don't need Netflix in my life, so I'll just cancel my subscription(already have). I honestly don't want my lawmakers to spend even a second thinking about Netflix when we have so many large issues in the world right now. If we were talking about something like financial services where I have to engage I would be more sympathetic.
replies(1): >>45089301 #
5. Gud ◴[] No.45089282{3}[source]
Yeah, there are a lot of torrent sites! Netflix doens't want my business anymore, I don't really care.
6. ranyume ◴[] No.45089296{3}[source]
There exist dozens of online services where you can store your photos, doesn't mean companies should be allowed to do whatever they want with your photos...
7. MangoToupe ◴[] No.45089301{3}[source]
Capital doesn't really care what you want, it will exert control regardless. So in this case Netflix will continue to be part of capital that normalizes the need for DRM to access videos, write IP law, and generally force you into either accepting the world they want or forcing you to become a hermit.

Edit: i mean to say this is true whether or not you've even heard of the company.

replies(1): >>45089442 #
8. pishpash ◴[] No.45089303[source]
It's sort of antitrust adjacent. They are big enough to set market rules on the manner of distribution, like DRM and hardware-software lock-in, which doesn't directly stifle competition in their field (only a little) but in another field, and the results are arguably anti-consumer. That sort of power should not be in the hands of a single company.
9. OmarAssadi ◴[] No.45089318{3}[source]
Sure, Netflix may not be as important as, say, housing, food, or whatever else, but I think there is something to be said about the cultural importance of [at the very least some] film and television.

There's a lot of media worth studying, analyzing, and preserving. And in that sense, between the constant churn of catalog items, exclusive content, and the egregious DRM, I think these sorts of streaming services are, unfortunately, kind of harmful.

replies(1): >>45089388 #
10. chairmansteve ◴[] No.45089346[source]
A non libertarian might ask: Is it good for society?
11. bfdm ◴[] No.45089360[source]
Because it's bad for consumers to lose choices, even if they don't normally exercise those choices. The choice is the distributed power we have against the consolidated corporate power. We can choose not to let them restrict those choices, for example with interoperability regulations.
12. chongli ◴[] No.45089388{4}[source]
Doesn't your second paragraph run against the grain of your first? If streaming services like Netflix are harmful then we should avoid using them. Thus it should not be important for our freedom-preserving computers to be able to access Netflix.

Now, if you want to do an in-depth study of film and television material as a whole, you're actually better off avoiding Netflix and making use of archives such as public libraries, university libraries, and the Internet Archive.

replies(1): >>45089547 #
13. jonahx ◴[] No.45089420[source]
The issue is the means of enforcement requires taking away other rights they shouldn't be able to.

What if I want to require (for anti-piracy reasons) that to use my software you must also give me complete access to your computer, all the data on it, and all your communications. You might say, "Well, if anyone is stupid enough to make that deal, let them." But it's easy to sugar coat what you're doing, especially with less technical users. I think it's better to say, "That's just not something you are allowed to do. It's trampling on rights more important than your anti-piracy rights."

In the same way, you cannot murder someone even if they agree to be murdered (an actual case in Germany).

replies(2): >>45089544 #>>45089551 #
14. ekianjo ◴[] No.45089426[source]
For Netflix sure. I don't care. But when it comes to banking and you are forced to use between two OS or this means no access to your bank digitally, this is a massive problem and restriction to citizens' freedom. Everyone needs a bank to operate, and they need to maximize the options available to use them.
replies(3): >>45089662 #>>45089739 #>>45090253 #
15. zeroCalories ◴[] No.45089442{4}[source]
Well then I will get mad when that actually happens. Until then don't care.
replies(3): >>45089741 #>>45090023 #>>45093013 #
16. vbezhenar ◴[] No.45089544[source]
> What if I want to require (for anti-piracy reasons) that to use my software you must also give me complete access to your computer, all the data on it, and all your communications.

That's exactly what happens with anti-cheat kernel modules. As one might expect, ordinary people couldn't care less, as long as it works good enough.

replies(1): >>45090043 #
17. OmarAssadi ◴[] No.45089547{5}[source]
I mean, I agree that you should be able to avoid things like Netflix and make use of libraries and other archives, but that's sort of the point; there is a ton of media that never even gets a physical release anymore; once one of these platforms goes under, or something enters licensing hell, or whatever else and gets removed, all you can do is hope someone out there with both the know-how and access went out of their way to illegally download a copy, illegally decrypt it, and illegally upload it somewhere.

I say "know-how" and "access" because, while I'd still argue decrypting, say, Widevine L3 is not exactly super common knowledge, decrypting things like 4K Netflix content, among other things, generally requires you to have something like a Widevine L1 CDM from one of the Netflix-approved devices, which typically sits in those hardware trusted execution environments, so you need an active valuable exploit or insider leaks from someone at one of the manufacturers.

But also on top of all of that, you also need to hope other people kept the upload alive by the time you decide to access it, and then you also often need to have access to various semi-elitist private trackers to consistently be able to even find some of this stuff.

The legal issues with DRM here are hardly exclusive to Netflix and other streaming services, but at least in the case of things like Blu-rays or whatever — even if it is technically illegal in most countries to actually make use of virtually any backed-up disc due to AACS — you usually don't have the same time-pressure problem nor the significant technical expertise barrier.

>If streaming services like Netflix are harmful then we should avoid using them. Thus it should not be important for our freedom-preserving computers to be able to access Netflix.

I generally do avoid them whenever possible, though, yes. And I've explicitly disabled DRM support in Firefox on my computer. But I am just one person and I don't think my behavior reflects the average person, for better or for worse.

replies(1): >>45095938 #
18. bruce511 ◴[] No.45089551[source]
Forgive me, but is Netflix asking for that?

As I understand it, Netflix wishes to authenticate the device, and DRM their content. I'm not aware of anything beyond that (but I'm also not paying attention. )

Now you may have used the example of what might happen, but then Netfix seems a strange example. Surely Apple and/or Google are more likely players in that example?

replies(1): >>45089968 #
19. tonyhart7 ◴[] No.45089662[source]
well no one to force you to do banking from smartphones

You can do manually like the old days, EXPLICTLY ALLOWING NON GOOGLE/APPLE to do banking in their own mobile phone meaning THERE ARE MILLIONS OF USERS that can fall victim to scammer+cracker

how cant you see all of that???? ITS JUST NOT ABOUT YOU

edit: please educate first, y'all need to know differences between mobile banking and internet banking

You can downvote me all you want, but I don't want to hear lecture from non-security compliant engineer about what to do about security

replies(2): >>45089720 #>>45089772 #
20. onion2k ◴[] No.45089720{3}[source]
Locking down a website to only be available to users on Apple and Windows doesn't make it safer. It just reduces the cost of building it because you don't have to bother testing it on any other platforms. Rather than tell users "Danger, we haven't tested your choice of OS" companies prefer to lock it down.

Users on Apple and Windows are not safer because a bank has chosen to block Linux.

replies(1): >>45089844 #
21. 2rsf ◴[] No.45089739[source]
I mentioned that in another thread, but banks have a legal obligation to to assess and mitigate risks in the service they give to you- you, personally, might be tech savvy enough to understand what you are doing but most people are not and the bank is held accountable when something bad happens.

This is why they limit service to certain devices or OS versions, even when it comes at the expense of convenience.

replies(2): >>45089792 #>>45096703 #
22. makeitdouble ◴[] No.45089741{5}[source]
The whole notion of DRM and penalties if you circumvent it comes from the entertainment industry, and it's written into law/official treaties. This already affects everything from secure boot to HDMI standards.
23. hdgvhicv ◴[] No.45089772{3}[source]
My bank lets me do everything just fine on Firefox/linux.
replies(2): >>45089829 #>>45090082 #
24. beeflet ◴[] No.45089792{3}[source]
Perhaps the solution then is to invent a new bank that is more resistant to regulation and gives users more freedom to secure their own funds.
25. tonyhart7 ◴[] No.45089829{4}[source]
its not mobile banking if you use browser

its just browser/internet banking

also mobile banking has much more capabilites in forms of app than just "web page"

26. GeoAtreides ◴[] No.45089968{3}[source]
> Now you may have used the example of what might happen,

OP said "What if", it's clearly a hypothetical scenario and not something Netflix is doing or planning to do

27. MangoToupe ◴[] No.45090023{5}[source]
Which part of what I said do you think hasn't already happened and metastasized?
replies(1): >>45100128 #
28. estebarb ◴[] No.45090043{3}[source]
Except that... we have history of them not working well. For instance, the Sony rootkit https://en.m.wikipedia.org/wiki/Sony_BMG_copy_protection_roo...

We cannot expect those rootkits to be properly supported long term for any security issues they may cause. I would think that the solution is simple: nobody forces them to make their IP available in non hacked computers...

If they want a hardened computer to deliver their IP, then they should sell their own hardware. But forcing their blocking into the whole stack is not acceptable.

For instance: I cannot see any udemy or netflix content from my computer, because their IP protection blocks the lenovo docking station I use to connect my monitors to my MBP... each part is standard! And somehow nobody tested that scenario. So, no, that tech is barely tested, it must not be forced into any computer.

29. trinix912 ◴[] No.45090066{5}[source]
Until they decide to force you to use the mobile app as a 2FA for the website. My bank did that, I literally had to buy a new phone because the old one couldn't update their stupid app. It locks you in to the latest N versions of Android/iOS.

Before you ask, no, other banks aren't any better where I live. They all stopped using physical 2FA keys years ago. And no, they won't let you come in physically for things that can be done online.

replies(1): >>45091923 #
30. trinix912 ◴[] No.45090082{4}[source]
For now, until they come up with some stupid 2FA solution that requires installing and updating their Android/iOS app. Banks where I live already have and there's literally no way around it (they don't use physical 2FA keys anymore).
31. ◴[] No.45090253[source]
32. tonyhart7 ◴[] No.45091923{6}[source]
good for them to care more about security then
33. goodpoint ◴[] No.45093013{5}[source]
...and it will be too late.
34. SirMaster ◴[] No.45095938{6}[source]
>decrypting things like 4K Netflix content, among other things, generally requires you to have something like a Widevine L1 CDM from one of the Netflix-approved devices, which typically sits in those hardware trusted execution environments, so you need an active valuable exploit or insider leaks from someone at one of the manufacturers.

Or just use a cheap Chinese HDMI splitter that strips HDCP 2.2 and record the 4K video with a simple HDMI capture device.

But if you are talking about preserving media or making media accessible, then it's not like we NEED 4K.

35. ekianjo ◴[] No.45096703{3}[source]
> legal obligation to to assess and mitigate risks

It's obviously not about risks. It's about convenience on their side to only support 2 platforms and call it a day.

36. zeroCalories ◴[] No.45100128{6}[source]
> Capital doesn't really care what you want, it will exert control regardless.

Working as intended. The market doesn't care what capital wants either.

> So in this case Netflix will continue to be part of capital that normalizes the need for DRM to access videos

I can access video without DRM. If you want to access Netflix's service that's on you.

> write IP law

Netflix does not write IP law, our politicians do. Vote better.

> generally force you into either accepting the world they want or forcing you to become a hermit.

I don't accept their world, and I'm not a hermit.