19 pointsby upofadown20 days ago2 comments
  • rwmj20 days ago
    I'm confused about how open source DRM can even be a thing. Presumably once you've obtained one of these client identity files, you can modify OpenWV to capture the decrypted / raw video to wherever you want?
    • Mindwipe20 days ago
      It isn't, it's just an open source library to talk to the closed source Widevine plugin included with Chrome, or, in this case with keys illicitly obtained from a broken Google plugin that they haven't revoked yet.

      There were some open source white box cryptography attempts fifteen or so years ago and they didn't work because of precisely what you say.

      • jervant18 days ago
        That's not true and wouldn't work on OpenBSD anyway (binaries are not compatible). The files you're copying from another device are just encryption keys.

        OpenWV is implementing the decryption itself:

        https://github.com/tchebb/openwv

        • Mindwipe11 days ago
          I did say that in the second half of the sentence.

          But it still isn't an example of someone shipping an open source DRM module - it's just software to crack DRM with a leaked key.

          (Incidentally and this is not legal advice, but if you are in one of many European territories and downloading software from Git here I would encourage people to think about the possibility you are committing an actual criminal offence by doing so, as you are "importing" it by virtue obtaining it from a US entity.)

      • rwmj20 days ago
        Thanks that makes more sense (and is also a bit disappointing!)
  • pjmlp19 days ago
    > If you want to use OpenWV, you must obtain an appropriate wvd file yourself, and copy it to /etc/openwv/widevine_device.wvd

    Ah ok then.